$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/4d33ad72-cd69-3b39-af54-bb7f634a0f9c.roa File: 4d33ad72-cd69-3b39-af54-bb7f634a0f9c.roa (raw, json) Hash identifier: GPCyenJZg5enzDXfAB7jxPWvuxpZOzgiGU4BbnNTZOc= Subject key identifier: 4A:3C:12:82:44:0F:6F:F1:AC:F9:CC:3D:BE:A1:D7:17:3A:67:AF:45 Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Certificate serial: 010D0C9F4328584DCAFB0A2D6DEFC8D1DB6575C8 Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/4d33ad72-cd69-3b39-af54-bb7f634a0f9c.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 25697 IP address blocks: 209.151.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:0a:2d:6d:ef:c8:d1:db:65:75:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=ddb832bd-b8b0-47ad-953d-a6b95dd16f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9d:0e:0b:42:f5:5d:e6:ec:bc:e4:f3:38:cc: 91:e0:4d:95:75:4b:d5:cb:7a:6f:66:c7:ff:71:6e: 48:41:52:39:5c:ad:bb:04:9a:cc:bb:5b:87:e3:52: cb:ec:c2:0c:2a:8b:2e:e7:ea:cd:54:73:b5:dc:21: 25:2f:be:7a:66:d9:ab:7d:c6:39:93:e0:8b:71:e5: aa:42:74:ee:9b:c0:7d:fb:25:08:08:ce:ee:69:00: 1c:5d:ed:da:2d:60:68:05:a5:36:79:0b:a8:b0:89: 81:33:43:cd:90:64:a9:64:19:8d:0d:3a:9f:8d:81: 3a:8f:48:f9:66:99:fe:7c:3f:45:20:41:2e:54:47: 0f:9a:70:70:3b:f9:42:9b:66:db:39:9e:63:ef:a0: db:7a:0e:97:a6:d8:83:d0:1c:90:4c:2a:93:eb:7d: 4e:00:08:77:dd:1f:ac:bf:a3:17:02:ec:4b:13:20: 9e:35:5e:f0:4a:9c:9f:c7:18:36:83:df:0e:68:81: 97:da:e6:02:c0:ac:bd:5d:db:1a:40:22:7b:4a:fb: ae:50:55:b6:d9:09:21:0f:ba:aa:f6:b9:dc:54:67: 7a:9e:e5:a7:69:55:53:c4:9e:2a:ac:2a:a5:10:57: 62:3e:7d:bc:2f:6b:d8:65:90:36:62:e8:00:85:eb: 9d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3C:12:82:44:0F:6F:F1:AC:F9:CC:3D:BE:A1:D7:17:3A:67:AF:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/4d33ad72-cd69-3b39-af54-bb7f634a0f9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl X509v3 Authority Key Identifier: keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer sbgp-ipAddrBlock: critical IPv4: 209.151.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:e6:46:b3:dd:9b:45:51:de:be:3c:69:dc:65:47:a3:be:e7: 21:eb:5c:07:c3:a5:24:80:ea:32:a4:f0:aa:3a:c5:cc:80:ef: 07:82:84:4e:de:18:71:42:36:b7:16:7c:bc:5d:13:0a:ab:2f: 8f:8b:52:7f:40:d5:1e:40:eb:29:41:06:75:eb:9b:10:f9:47: ab:37:ca:a6:5a:cc:0a:e9:e7:a4:b7:c1:32:df:3a:cd:34:3f: 12:aa:3e:e8:e6:24:11:7c:2d:8b:ff:11:8d:46:c0:1e:27:b5: ba:7f:29:42:ce:70:f6:c3:d1:19:44:2b:01:1d:c8:17:39:60: 23:9c:39:5e:ea:43:9a:50:3a:9e:33:99:09:91:61:67:d2:ca: 45:5e:90:da:00:9d:18:9f:6e:e7:b5:e4:9e:26:b4:88:89:95: 89:b1:d3:44:5f:07:5d:8f:02:30:53:4c:68:c4:18:24:4b:58: 08:ea:07:5e:63:d2:f3:38:69:0c:f0:24:58:23:81:25:37:2e: a9:35:15:91:6c:32:98:c7:5b:13:12:53:bd:a6:8c:b9:3b:f4: 52:25:6d:8b:cd:60:9b:8b:e4:6c:54:ed:99:a7:57:a2:ef:f8: 2a:da:e8:5a:5e:a4:a7:8d:8b:92:bd:36:19:23:a0:7b:53:8c: 2c:eb:6d:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+wotbe/I0dtldcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVlYmFkYmItYjYzYy00ZTk1LThlNzYtZmQyMmNjODYx MzExMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZGRiODMyYmQtYjhiMC00N2FkLTk1M2QtYTZiOTVkZDE2ZjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp0OC0L1XebsvOTzOMyR4E2VdUvVy3pvZsf/ cW5IQVI5XK27BJrMu1uH41LL7MIMKosu5+rNVHO13CElL756ZtmrfcY5k+CLceWq QnTum8B9+yUICM7uaQAcXe3aLWBoBaU2eQuosImBM0PNkGSpZBmNDTqfjYE6j0j5 Zpn+fD9FIEEuVEcPmnBwO/lCm2bbOZ5j76Dbeg6XptiD0ByQTCqT631OAAh33R+s v6MXAuxLEyCeNV7wSpyfxxg2g98OaIGX2uYCwKy9XdsaQCJ7SvuuUFW22QkhD7qq 9rncVGd6nuWnaVVTxJ4qrCqlEFdiPn28L2vYZZA2YugAheudrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEo8EoJED2/xrPnMPb6h1xc6Z69FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNWVi YWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIyY2M4NjEzMTEvNGQzM2FkNzItY2Q2OS0z YjM5LWFmNTQtYmI3ZjYzNGEwZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDVlYmFkYmItYjYzYy00ZTk1LThl NzYtZmQyMmNjODYxMzExL2Q1ZWJhZGJiLWI2M2MtNGU5NS04ZTc2LWZkMjJjYzg2 MTMxMS5jcmwwHwYDVR0jBBgwFoAUCl3nOppYysWd9gW84/IezCP415QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNWViYWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIy Y2M4NjEzMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ZecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrmRrPdm0VR3r48adxlR6O+5yHrXAfDpSSA6jKk8Ko6xcyA7weChE7e GHFCNrcWfLxdEwqrL4+LUn9A1R5A6ylBBnXrmxD5R6s3yqZazArp56S3wTLfOs00 PxKqPujmJBF8LYv/EY1GwB4ntbp/KULOcPbD0RlEKwEdyBc5YCOcOV7qQ5pQOp4z mQmRYWfSykVekNoAnRifbue15J4mtIiJlYmx00RfB12PAjBTTGjEGCRLWAjqB15j 0vM4aQzwJFgjgSU3Lqk1FZFsMpjHWxMSU72mjLk79FIlbYvNYJuL5GxU7ZmnV6Lv +Cra6FpepKeNi5K9NhkjoHtTjCzrbfs= -----END CERTIFICATE-----Generated at Wed May 13 01:40:36 2026 by rpki-client