$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/973468d0-7226-3ff1-a216-3007302b0b90.roa File: 973468d0-7226-3ff1-a216-3007302b0b90.roa (raw, json) Hash identifier: ld8ItP0H6+7eqJCBLFKB6xd6Tbra7R9P0mwW8BZxGP8= Subject key identifier: EB:F6:85:61:58:63:5F:F9:D7:3E:E6:15:A6:45:CB:98:44:B4:FE:53 Certificate issuer: /CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Certificate serial: 010D0C9F4328584DC6CAFA897164F9DD956E5700 Authority key identifier: 0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/973468d0-7226-3ff1-a216-3007302b0b90.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 30313 IP address blocks: 152.216.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:ca:fa:89:71:64:f9:dd:95:6e:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=70e2f93c-71f2-4d87-8597-fde8341e821a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ef:0a:a7:6b:bc:65:dd:27:0a:33:72:6d:5b: c0:04:62:58:7d:03:87:d8:1d:58:8a:9d:a2:01:bc: 29:48:70:15:1f:df:9d:dc:a4:d3:d9:46:10:e0:db: 91:05:e3:2b:46:83:7f:6e:64:59:58:b1:c9:2f:22: 09:ed:69:c7:61:00:19:26:6c:04:56:d5:3e:3a:d2: 52:c6:a2:9e:a2:6f:e0:8e:e4:53:da:18:87:0b:db: 69:aa:02:9e:be:04:a3:59:5f:7d:77:33:1d:7b:c0: d5:52:7e:27:83:37:cd:6c:6c:0d:da:28:c8:bf:49: 19:93:39:e5:45:73:e1:0b:59:9a:c8:20:3b:8b:d2: 9d:b7:6c:d2:67:76:42:a4:d6:62:54:ed:a3:db:6f: 41:6c:a4:ad:c7:c8:88:3c:0b:ce:dd:39:2d:32:99: 36:f6:48:e3:22:55:17:8f:83:54:0e:ab:04:a7:34: fb:f7:a1:8a:fd:68:f8:ab:63:7d:48:5f:f4:de:a7: 25:eb:d8:dc:57:1f:c2:b3:f1:41:51:c4:36:f4:5c: 0b:2f:08:a0:81:94:1e:d7:b3:dd:72:c6:94:dd:c2: 44:ed:d9:0a:26:90:a5:4d:2c:c4:79:f5:3a:07:4c: c3:2b:95:d8:7b:ea:08:47:34:1b:99:65:7f:f4:50: cc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F6:85:61:58:63:5F:F9:D7:3E:E6:15:A6:45:CB:98:44:B4:FE:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/973468d0-7226-3ff1-a216-3007302b0b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl X509v3 Authority Key Identifier: keyid:0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer sbgp-ipAddrBlock: critical IPv4: 152.216.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:12:c0:37:93:6b:4b:db:0f:30:08:f1:c1:1b:ab:98:d8:42: ec:56:b8:a3:f5:cc:c0:ca:12:a1:2e:ad:30:d1:01:54:a1:05: dc:38:81:34:16:19:16:5a:ef:03:b8:b1:40:ad:a4:d0:c6:c5: cb:8f:cc:90:db:d2:5d:61:ee:e5:b7:16:3b:f3:81:29:44:0b: 36:71:41:8d:45:04:02:b5:e2:12:5f:72:43:a1:1b:24:ea:5f: 8f:fa:17:35:5c:56:a6:51:fc:1c:a0:8b:11:e0:79:64:cd:2e: 81:a1:d1:8f:f2:ba:95:49:88:e4:27:50:64:4b:65:7e:f6:0b: 88:10:48:0b:7c:30:62:70:c3:04:36:9c:26:e7:7c:1a:28:f0: 25:51:ba:4a:e0:95:dd:83:a4:10:4e:87:3b:5c:5a:0f:7e:ad: 8d:4a:ce:1e:ae:67:d6:66:a2:e8:fb:e5:7b:fb:6d:c6:d9:c5: 67:e4:39:d1:fd:38:94:ba:91:cb:06:53:b8:68:e0:3e:0b:59: 95:b8:53:a2:26:8f:a5:d1:ef:96:4e:8a:e3:8c:5e:5e:9b:ce: 97:69:3d:ac:c3:43:1e:6d:cb:21:7d:1c:e5:4c:ca:b4:ea:92: f0:ba:ce:8b:36:99:6f:6c:49:46:a5:2d:96:2f:00:65:37:b6: 41:06:d0:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3GyvqJcWT53ZVuVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkYmNhOWEtOTYwZS00M2ExLWE4NjUtZjBjMTAwZDBm YzdhMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk NzBlMmY5M2MtNzFmMi00ZDg3LTg1OTctZmRlODM0MWU4MjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO8Kp2u8Zd0nCjNybVvABGJYfQOH2B1Yip2i AbwpSHAVH9+d3KTT2UYQ4NuRBeMrRoN/bmRZWLHJLyIJ7WnHYQAZJmwEVtU+OtJS xqKeom/gjuRT2hiHC9tpqgKevgSjWV99dzMde8DVUn4ngzfNbGwN2ijIv0kZkznl RXPhC1mayCA7i9Kdt2zSZ3ZCpNZiVO2j229BbKStx8iIPAvO3TktMpk29kjjIlUX j4NUDqsEpzT796GK/Wj4q2N9SF/03qcl69jcVx/Cs/FBUcQ29FwLLwiggZQe17Pd csaU3cJE7dkKJpClTSzEefU6B0zDK5XYe+oIRzQbmWV/9FDMdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOv2hWFYY1/51z7mFaZFy5hEtP5TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRi Y2E5YS05NjBlLTQzYTEtYTg2NS1mMGMxMDBkMGZjN2EvOTczNDY4ZDAtNzIyNi0z ZmYxLWEyMTYtMzAwNzMwMmIwYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWRkYmNhOWEtOTYwZS00M2ExLWE4 NjUtZjBjMTAwZDBmYzdhLzVkZGJjYTlhLTk2MGUtNDNhMS1hODY1LWYwYzEwMGQw ZmM3YS5jcmwwHwYDVR0jBBgwFoAUCjtwhIgFbrvkf55M7jfij1N8voIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRiY2E5YS05NjBlLTQzYTEtYTg2NS1mMGMx MDBkMGZjN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmNgJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgSwDeTa0vbDzAI8cEbq5jYQuxWuKP1zMDKEqEurTDRAVShBdw4gTQW GRZa7wO4sUCtpNDGxcuPzJDb0l1h7uW3FjvzgSlECzZxQY1FBAK14hJfckOhGyTq X4/6FzVcVqZR/BygixHgeWTNLoGh0Y/yupVJiOQnUGRLZX72C4gQSAt8MGJwwwQ2 nCbnfBoo8CVRukrgld2DpBBOhztcWg9+rY1Kzh6uZ9Zmouj75Xv7bcbZxWfkOdH9 OJS6kcsGU7ho4D4LWZW4U6Imj6XR75ZOiuOMXl6bzpdpPazDQx5tyyF9HOVMyrTq kvC6zos2mW9sSUalLZYvAGU3tkEG0MQ= -----END CERTIFICATE-----Generated at Wed May 13 16:02:03 2026 by rpki-client