$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/cc509968-63d9-33f6-b60c-2664e0511e7f.roa File: cc509968-63d9-33f6-b60c-2664e0511e7f.roa (raw, json) Hash identifier: u3H3DPdDCqcAfYtloy9iE4OHHORZ13LwXr8y+1R5AWQ= Subject key identifier: 21:C1:3C:BC:28:CA:D9:18:43:1B:9A:2E:A8:84:1C:6A:C7:B3:3C:2F Certificate issuer: /CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Certificate serial: 010D0C9F4328584D44FA466DF53131E22C75AD80 Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/cc509968-63d9-33f6-b60c-2664e0511e7f.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16509 IP address blocks: 144.81.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:46:6d:f5:31:31:e2:2c:75:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=624f7c81-621c-4224-b909-f07105e1eab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:29:cd:39:85:c8:2b:c1:f3:cf:e8:71:b1:0c: 5a:ee:41:3c:f0:6d:1d:03:c4:72:90:d2:2c:b2:a8: ed:f9:70:82:3c:7b:57:b5:39:d3:cd:e5:5b:ae:fb: 47:3c:dc:b6:1a:f9:b4:3e:53:52:75:c7:ec:37:94: aa:05:04:17:25:c3:93:fe:9c:02:e4:c3:41:d9:df: 6a:90:07:18:f6:62:38:ce:6d:1e:76:a8:61:39:be: 8d:ab:59:21:78:07:91:35:e0:01:ab:7e:0d:9b:05: ff:82:97:14:38:24:a6:6f:b0:b7:f5:46:61:7a:5d: 1b:e3:0a:c1:44:76:7d:81:2f:24:a6:f4:b4:37:dd: cf:33:94:b6:52:af:45:84:b9:19:0f:06:c3:9b:1c: 4c:b2:67:55:e3:ac:00:61:d6:0c:dd:7b:40:66:2a: c8:9f:25:4d:f1:d2:b5:16:21:b9:f7:66:63:ad:13: 36:e4:54:b7:be:5f:bf:38:f4:c2:4c:b4:3d:31:21: 41:3e:a3:04:c2:77:b8:ee:2a:34:c5:95:ed:a4:f0: c2:e5:8b:0c:88:ee:e7:67:6e:b7:76:18:f9:ba:11: e6:c5:7a:06:8c:e2:44:4b:09:c2:9c:44:ad:bd:80: 40:22:24:82:b8:f6:52:f6:fa:80:4d:5d:73:c3:24: 97:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C1:3C:BC:28:CA:D9:18:43:1B:9A:2E:A8:84:1C:6A:C7:B3:3C:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/cc509968-63d9-33f6-b60c-2664e0511e7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl X509v3 Authority Key Identifier: keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer sbgp-ipAddrBlock: critical IPv4: 144.81.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:f4:f0:03:40:7d:56:af:5b:2d:c8:21:5a:93:f0:a4:a3:f3: 68:e6:8f:67:31:70:35:e2:4e:73:7d:32:61:0c:c8:71:72:1b: c0:ec:7f:e6:e7:29:a1:ef:89:c1:d5:db:83:57:99:be:96:ad: f3:cf:cc:60:b8:a8:37:4b:4a:60:66:3e:e5:23:03:75:21:d7: 52:99:a3:aa:84:18:6e:18:25:6c:c8:75:59:83:09:39:30:66: 41:35:ae:44:f4:fd:c2:ff:00:19:47:e8:b0:f1:cf:c8:ab:ce: a6:fd:f0:47:5f:0a:f8:72:86:c7:32:15:6c:95:03:55:c9:92: 3a:77:cf:30:39:49:fa:f1:cc:56:25:2b:fb:1a:1f:a4:6d:9d: d0:a6:c3:7b:5d:6e:36:1c:ee:48:04:63:01:dc:8b:d0:51:ca: 53:9e:c0:f7:b4:b6:7a:ac:48:1f:67:b1:43:70:6f:50:5a:be: 5e:25:29:69:d5:9f:47:50:49:49:80:d2:b4:16:62:59:ab:5a: ac:51:1b:47:dc:7f:69:fd:de:e6:59:06:9b:52:cf:ec:82:61: 25:a8:1c:5a:a3:9a:2f:85:d6:53:7d:91:4c:df:03:0b:4b:7a: cd:b6:08:1c:fb:1e:dd:d3:e9:7d:1c:2a:a9:50:50:97:0a:c5: cf:64:e0:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+kZt9TEx4ix1rYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI1M2Y1NmYtYTU4Ni00ZTg1LTljNjEtYzNhMjc4ZTEz MTIwMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NjI0ZjdjODEtNjIxYy00MjI0LWI5MDktZjA3MTA1ZTFlYWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsynNOYXIK8Hzz+hxsQxa7kE88G0dA8RykNIs sqjt+XCCPHtXtTnTzeVbrvtHPNy2Gvm0PlNSdcfsN5SqBQQXJcOT/pwC5MNB2d9q kAcY9mI4zm0edqhhOb6Nq1kheAeRNeABq34NmwX/gpcUOCSmb7C39UZhel0b4wrB RHZ9gS8kpvS0N93PM5S2Uq9FhLkZDwbDmxxMsmdV46wAYdYM3XtAZirInyVN8dK1 FiG592ZjrRM25FS3vl+/OPTCTLQ9MSFBPqMEwne47io0xZXtpPDC5YsMiO7nZ263 dhj5uhHmxXoGjOJESwnCnEStvYBAIiSCuPZS9vqATV1zwySX0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHBPLwoytkYQxuaLqiEHGrHszwvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YjUz ZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2EyNzhlMTMxMjAvY2M1MDk5NjgtNjNkOS0z M2Y2LWI2MGMtMjY2NGUwNTExZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGI1M2Y1NmYtYTU4Ni00ZTg1LTlj NjEtYzNhMjc4ZTEzMTIwLzhiNTNmNTZmLWE1ODYtNGU4NS05YzYxLWMzYTI3OGUx MzEyMC5jcmwwHwYDVR0jBBgwFoAUIXvTyT0gyD5zZoVktKcujUUn38YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YjUzZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2Ey NzhlMTMxMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGP08ANAfVavWy3IIVqT8KSj82jmj2cxcDXiTnN9MmEMyHFyG8Dsf+bn KaHvicHV24NXmb6WrfPPzGC4qDdLSmBmPuUjA3Uh11KZo6qEGG4YJWzIdVmDCTkw ZkE1rkT0/cL/ABlH6LDxz8irzqb98EdfCvhyhscyFWyVA1XJkjp3zzA5SfrxzFYl K/saH6RtndCmw3tdbjYc7kgEYwHci9BRylOewPe0tnqsSB9nsUNwb1Bavl4lKWnV n0dQSUmA0rQWYlmrWqxRG0fcf2n93uZZBptSz+yCYSWoHFqjmi+F1lN9kUzfAwtL es22CBz7Ht3T6X0cKqlQUJcKxc9k4NU= -----END CERTIFICATE-----Generated at Thu Mar 26 13:53:46 2026 by rpki-client