$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/06573bb1-1af4-36af-a59e-a95c42e3ede3.roa File: 06573bb1-1af4-36af-a59e-a95c42e3ede3.roa (raw, json) Hash identifier: /BR5yehV6LPx6KSfheN9X3pVy/Oln+gE0G4kxdPuzsE= Subject key identifier: FE:B2:39:AD:5E:86:49:6D:B1:40:82:3B:7B:6E:EF:F9:8B:7D:15:66 Certificate issuer: /CN=530ba529-ac94-44aa-8a24-334da5fccb1e Certificate serial: 010D0C9F4328584D39CF75E61E82016CE9B58D98 Authority key identifier: E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/06573bb1-1af4-36af-a59e-a95c42e3ede3.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 46173 IP address blocks: 204.10.137.0/24 maxlen: 24 204.10.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:75:e6:1e:82:01:6c:e9:b5:8d:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=530ba529-ac94-44aa-8a24-334da5fccb1e Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=4d6cd302-6709-4b0a-a89c-5f5fd37399f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6c:1d:18:f0:59:7c:ef:37:0c:29:9f:1f:d2: 96:6d:81:be:26:84:34:b8:36:f2:1b:a5:a2:e8:f3: 45:52:10:3e:be:4e:ac:c8:72:66:84:86:b6:63:8d: f8:bf:b9:21:d1:13:da:fc:7a:dc:cf:c0:0a:35:a5: 86:20:e4:4e:e8:c0:af:e4:e5:53:c3:1e:e9:25:9a: f5:42:06:78:a3:fc:13:9a:98:01:32:38:32:59:0e: bc:5a:4e:12:c5:59:d4:34:13:ba:69:86:72:39:84: 81:af:30:12:92:88:90:6f:16:4c:3d:ee:9b:88:f3: cd:c8:9a:30:78:ea:75:29:04:a2:4e:e9:d6:36:3c: fa:02:4e:f9:06:8d:c0:f2:43:b5:83:b2:c2:fd:f1: 5c:a2:6f:72:8c:14:83:32:b5:3c:f6:dd:3a:15:0b: 8d:f4:93:bf:b8:37:b0:d2:49:c3:4b:cc:ef:94:e9: cb:6c:44:e6:45:55:4c:bf:38:fe:f3:3f:a1:f3:f0: c8:25:a7:81:19:c6:48:7c:d4:7d:83:4f:44:f3:8c: 7a:d1:62:09:07:5b:74:39:90:10:78:40:0a:67:88: 2d:a3:96:28:65:94:42:da:6d:95:81:ca:b4:17:67: 91:6e:a0:10:2e:ca:cd:db:b3:80:b7:2d:03:08:5d: 01:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B2:39:AD:5E:86:49:6D:B1:40:82:3B:7B:6E:EF:F9:8B:7D:15:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/06573bb1-1af4-36af-a59e-a95c42e3ede3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.crl X509v3 Authority Key Identifier: keyid:E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer sbgp-ipAddrBlock: critical IPv4: 204.10.137.0-204.10.138.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:98:d5:25:d1:b0:75:d3:ee:87:28:20:ab:d0:89:70:09:80: be:80:51:f0:e5:77:6c:d3:7f:92:fd:78:da:01:b6:b4:34:94: 2c:06:30:e6:e0:5c:c7:f3:f9:86:cc:01:ff:86:35:4c:e3:b2: 38:fe:ea:e3:2d:6e:90:2a:c2:ab:8d:a5:d1:6f:ff:e6:07:07: 29:b1:fd:fd:0e:f3:7b:46:47:48:6d:d9:32:03:fd:73:a1:b8: 79:f6:b1:2e:88:2e:95:7a:e7:97:93:53:5b:7a:48:d2:32:4d: 14:5f:08:16:82:df:28:45:96:44:8f:32:cf:53:93:6e:0a:fe: 68:57:11:ac:9a:ae:95:28:c0:a9:51:73:55:a0:b1:9d:2a:bb: 54:2a:da:7b:96:f2:82:fe:45:ca:db:7d:da:65:b5:52:ee:e6: 2e:54:45:5b:f9:0d:6e:55:22:72:17:ae:97:e7:35:02:e3:85: d8:e1:8b:5b:6f:4f:5d:9b:6f:72:23:07:45:0c:7c:bc:9a:2b: ab:72:5f:7b:93:ba:47:d2:5b:94:6a:ab:ba:ae:92:1f:7a:6a: 53:37:c4:79:6d:5d:0f:d8:d0:7b:ac:e9:49:45:fd:6f:e7:98: 72:0b:42:02:6b:51:0d:4b:c0:e4:18:ed:dc:6d:6d:45:ea:56: d0:96:82:d9 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE05z3XmHoIBbOm1jZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTMwYmE1MjktYWM5NC00NGFhLThhMjQtMzM0ZGE1ZmNj YjFlMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk NGQ2Y2QzMDItNjcwOS00YjBhLWE4OWMtNWY1ZmQzNzM5OWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGwdGPBZfO83DCmfH9KWbYG+JoQ0uDbyG6Wi 6PNFUhA+vk6syHJmhIa2Y434v7kh0RPa/Hrcz8AKNaWGIORO6MCv5OVTwx7pJZr1 QgZ4o/wTmpgBMjgyWQ68Wk4SxVnUNBO6aYZyOYSBrzASkoiQbxZMPe6biPPNyJow eOp1KQSiTunWNjz6Ak75Bo3A8kO1g7LC/fFcom9yjBSDMrU89t06FQuN9JO/uDew 0knDS8zvlOnLbETmRVVMvzj+8z+h8/DIJaeBGcZIfNR9g09E84x60WIJB1t0OZAQ eEAKZ4gto5YoZZRC2m2Vgcq0F2eRbqAQLsrN27OAty0DCF0BGQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFP6yOa1ehkltsUCCO3tu7/mLfRVmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MzBi YTUyOS1hYzk0LTQ0YWEtOGEyNC0zMzRkYTVmY2NiMWUvMDY1NzNiYjEtMWFmNC0z NmFmLWE1OWUtYTk1YzQyZTNlZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTMwYmE1MjktYWM5NC00NGFhLThh MjQtMzM0ZGE1ZmNjYjFlLzUzMGJhNTI5LWFjOTQtNDRhYS04YTI0LTMzNGRhNWZj Y2IxZS5jcmwwHwYDVR0jBBgwFoAU4nCvKjLwMAkTz5GrwlUAJ/q4wTEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MzBiYTUyOS1hYzk0LTQ0YWEtOGEyNC0zMzRk YTVmY2NiMWUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADMCokD BADMCoowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAG5jVJdGwddPuhyggq9CJcAmAvoBR8OV3bNN/kv142gG2 tDSULAYw5uBcx/P5hswB/4Y1TOOyOP7q4y1ukCrCq42l0W//5gcHKbH9/Q7ze0ZH SG3ZMgP9c6G4efaxLogulXrnl5NTW3pI0jJNFF8IFoLfKEWWRI8yz1OTbgr+aFcR rJqulSjAqVFzVaCxnSq7VCrae5bygv5Fytt92mW1Uu7mLlRFW/kNblUicheul+c1 AuOF2OGLW29PXZtvciMHRQx8vJorq3Jfe5O6R9JblGqruq6SH3pqUzfEeW1dD9jQ e6zpSUX9b+eYcgtCAmtRDUvA5Bjt3G1tRepW0JaC2Q== -----END CERTIFICATE-----Generated at Thu Mar 26 06:13:06 2026 by rpki-client