$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a53ffea0-ec32-3128-9644-d66089a87ae4.roa File: a53ffea0-ec32-3128-9644-d66089a87ae4.roa (raw, json) Hash identifier: 7DNCPjcxNdRiL7etpZf8tKMfM0WPHvThsxVtIV5V9Zc= Subject key identifier: 25:2E:CD:FB:06:F3:E1:DF:8C:4E:EA:0F:71:78:E1:1F:5A:89:5E:84 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584DBA3B0743C1D8271A6F79C600 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a53ffea0-ec32-3128-9644-d66089a87ae4.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 11232 IP address blocks: 96.2.0.0/15 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3b:07:43:c1:d8:27:1a:6f:79:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=60083427-4ee9-467b-bc4c-c6e34868c87a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:51:0a:ee:dd:eb:fd:f8:91:61:b1:57:a3:77: d2:93:2c:58:23:34:5b:91:6b:a1:50:cb:ce:7f:bf: 04:1e:c8:c7:fc:85:c4:34:3d:b8:19:b2:05:0f:94: 17:9a:1f:e4:ae:c2:48:61:76:da:c7:fc:b5:88:92: bb:49:55:25:ae:5f:5f:16:ca:32:e1:b2:ff:f2:62: d5:96:06:84:17:c5:b2:29:d8:a2:01:05:d1:31:50: 5b:78:03:e7:15:77:fe:32:a0:69:49:fa:7a:97:06: 2e:eb:31:f9:75:94:21:c2:78:fd:00:b6:1e:03:e9: 4b:05:e9:10:d5:ef:32:66:ba:7d:2c:15:71:16:c1: d5:e4:3e:c5:64:e0:a0:f5:48:6e:54:a9:1a:a8:86: dc:e4:49:15:94:f9:16:ce:70:be:40:c5:56:65:d9: a9:52:23:3d:ba:0c:29:28:ba:51:56:e7:ac:f5:0c: 5d:ef:b9:11:1d:85:23:58:4c:b3:a6:00:1d:cd:87: 99:9a:33:3d:05:c0:ec:97:42:f7:f6:5f:2a:ef:81: 9e:6a:12:ee:d6:93:5f:bd:18:c2:e7:e3:cd:30:c9: 13:8f:83:e9:70:1c:f7:ce:a2:98:c8:d0:64:44:66: 4c:0b:df:83:0d:ff:82:97:6e:f6:91:ae:53:48:cd: d0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2E:CD:FB:06:F3:E1:DF:8C:4E:EA:0F:71:78:E1:1F:5A:89:5E:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a53ffea0-ec32-3128-9644-d66089a87ae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 96.2.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:7c:22:ff:c6:f5:9f:e2:93:45:35:6e:3f:97:36:24:58:e5: 35:c4:0b:07:cc:97:03:32:32:46:f9:08:35:0b:58:15:9a:0b: f0:85:8f:21:8b:46:ed:83:13:60:68:8a:b3:bb:c7:4c:f1:cf: a4:0a:59:cc:4a:91:f7:ad:36:ad:98:e4:dc:26:25:50:53:6b: bb:c3:68:e6:99:b6:bf:ab:a5:2b:4b:7b:ab:d3:2e:d9:d3:bb: d2:92:04:78:dd:60:af:96:ec:e4:cc:76:7a:78:45:17:41:b9: 26:84:b6:5b:1a:e5:f9:f6:a4:a0:7e:a6:b3:dc:27:51:14:da: 9c:c8:29:6c:e2:ff:c4:91:e2:18:60:a0:af:1d:68:d2:11:e6: 79:3a:14:e6:91:3f:14:c6:f0:d7:d5:1e:e7:46:35:75:2e:8b: 6e:07:ec:6f:df:f2:a0:ea:5e:de:ca:68:a7:67:15:75:0c:85: a9:5e:6c:f5:0a:2e:86:af:66:83:56:3b:78:e6:7d:4b:9d:72: 11:79:2c:dc:fd:5a:c8:5c:3b:e1:49:4d:0d:f5:b9:58:c0:9f: 58:f7:b9:f7:7d:5a:3d:e6:fa:a8:85:ba:6c:a1:6d:d2:1a:fc: bb:78:f9:7a:e2:19:e8:5b:18:61:f4:f6:60:ef:58:38:83:cd: 57:e6:f9:72 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE26OwdDwdgnGm95xgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk NjAwODM0MjctNGVlOS00NjdiLWJjNGMtYzZlMzQ4NjhjODdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1EK7t3r/fiRYbFXo3fSkyxYIzRbkWuhUMvO f78EHsjH/IXEND24GbIFD5QXmh/krsJIYXbax/y1iJK7SVUlrl9fFsoy4bL/8mLV lgaEF8WyKdiiAQXRMVBbeAPnFXf+MqBpSfp6lwYu6zH5dZQhwnj9ALYeA+lLBekQ 1e8yZrp9LBVxFsHV5D7FZOCg9UhuVKkaqIbc5EkVlPkWznC+QMVWZdmpUiM9ugwp KLpRVues9Qxd77kRHYUjWEyzpgAdzYeZmjM9BcDsl0L39l8q74GeahLu1pNfvRjC 5+PNMMkTj4PpcBz3zqKYyNBkRGZMC9+DDf+Cl272ka5TSM3Q6wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCUuzfsG8+HfjE7qD3F44R9aiV6EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvYTUzZmZlYTAtZWMzMi0z MTI4LTk2NDQtZDY2MDg5YTg3YWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBYAIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAi3wi/8b1n+KTRTVuP5c2JFjlNcQLB8yXAzIyRvkINQtYFZoL8IWPIYtG 7YMTYGiKs7vHTPHPpApZzEqR9602rZjk3CYlUFNru8No5pm2v6ulK0t7q9Mu2dO7 0pIEeN1gr5bs5Mx2enhFF0G5JoS2Wxrl+fakoH6ms9wnURTanMgpbOL/xJHiGGCg rx1o0hHmeToU5pE/FMbw19Ue50Y1dS6Lbgfsb9/yoOpe3spop2cVdQyFqV5s9Qou hq9mg1Y7eOZ9S51yEXks3P1ayFw74UlNDfW5WMCfWPe5931aPeb6qIW6bKFt0hr8 u3j5euIZ6FsYYfT2YO9YOIPNV+b5cg== -----END CERTIFICATE-----Generated at Wed May 13 13:10:31 2026 by rpki-client