$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/533d5858-0af7-3e7a-b1c1-db204e66e5e9.roa File: 533d5858-0af7-3e7a-b1c1-db204e66e5e9.roa (raw, json) Hash identifier: WOgL0RB4yA7xbR3gL+P/H4hBq3x0qxbOUUcMvf40YZ0= Subject key identifier: 54:5A:43:E9:02:A9:6E:05:57:DC:0C:FA:E1:09:4A:A4:4B:0C:D8:C4 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584DADAAD28F2C5E60394CFB08E0 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/533d5858-0af7-3e7a-b1c1-db204e66e5e9.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 62610 IP address blocks: 128.1.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:d2:8f:2c:5e:60:39:4c:fb:08:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=21ccf458-e9c0-4923-b6da-1e345a86f76e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:32:94:b8:03:25:7c:8e:c8:c3:a7:54:0f:b3: 88:a4:ff:6d:e1:e0:93:91:2d:d2:96:c9:f4:5f:f6: 40:82:6d:7f:9a:ab:ed:51:0d:5b:47:12:ee:85:99: 67:63:49:2d:a8:fb:36:61:d2:98:87:17:9f:7c:8d: 88:d5:9d:dd:81:ac:c8:26:97:cf:94:a0:05:88:64: fb:37:50:e8:62:fe:2e:a4:1d:85:3b:68:96:0a:69: 44:c7:51:0d:aa:7b:a7:fa:0a:04:fe:02:af:7c:99: 32:fb:66:7b:88:77:7c:67:7f:7d:c2:22:b7:d7:49: 1e:bf:cf:85:b6:ed:ad:f6:ef:4c:6b:31:15:b5:35: aa:97:1a:84:1c:2e:fa:69:8d:52:ae:2a:07:13:c8: 50:33:66:02:83:18:29:34:d0:b4:d6:07:39:c0:a1: c6:f7:56:2e:5e:8b:2d:4e:ab:3d:2a:62:7b:6e:dd: ce:70:28:25:e2:a8:e5:fa:44:e4:3e:e3:f6:0e:27: 4b:13:26:ef:5d:86:56:98:be:7b:80:0e:2c:4d:27: 51:a2:27:28:6f:37:ab:cb:b8:08:c0:ad:1a:c0:b6: 1b:6a:6e:31:a0:75:07:c7:2a:f4:ce:56:18:b7:78: 61:c7:d6:b6:41:78:29:e4:7e:92:fa:6e:54:61:78: 3c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5A:43:E9:02:A9:6E:05:57:DC:0C:FA:E1:09:4A:A4:4B:0C:D8:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/533d5858-0af7-3e7a-b1c1-db204e66e5e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:8a:c6:eb:a0:32:dd:05:83:92:31:79:05:0e:57:c0:01:ca: 20:d5:2a:63:8d:02:36:1d:03:6d:2f:0f:27:46:bb:27:5c:54: e2:51:d8:d1:98:a6:c4:72:c9:da:e1:95:29:2b:f8:c2:90:96: 2a:b8:17:19:09:27:52:5b:3b:dc:37:24:d3:9b:18:e9:09:b7: 38:03:05:4a:57:f4:0b:b2:31:79:12:0f:30:21:83:3d:9c:2e: 16:dc:0d:22:dd:fe:f0:38:4f:af:f3:49:ce:5f:92:fb:8b:dc: 62:81:cb:38:43:43:da:ab:6d:9b:cf:eb:35:81:94:f6:6f:21: e3:fa:e3:6d:82:28:75:8f:0d:25:50:4c:fd:d4:84:8a:28:22: 76:02:5e:8f:56:41:fd:3f:70:12:3b:3c:75:c6:f0:d9:83:4d: 6e:15:b0:bc:79:62:5e:70:fe:73:d7:24:9b:c0:94:dc:7f:0b: 8c:b5:55:90:02:bf:44:c7:cf:15:ff:f1:41:68:cc:2b:b4:e6: 04:54:18:d9:02:af:54:b3:71:46:2e:33:db:91:9f:34:b1:53: 13:64:d5:56:20:72:2e:bf:38:64:7a:0a:a5:7d:24:7f:9c:5a: a8:83:f9:1e:17:e2:b5:13:8e:48:7e:d9:19:ad:dd:23:f8:05: bd:aa:36:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqtKPLF5gOUz7COAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk MjFjY2Y0NTgtZTljMC00OTIzLWI2ZGEtMWUzNDVhODZmNzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTKUuAMlfI7Iw6dUD7OIpP9t4eCTkS3Slsn0 X/ZAgm1/mqvtUQ1bRxLuhZlnY0ktqPs2YdKYhxeffI2I1Z3dgazIJpfPlKAFiGT7 N1DoYv4upB2FO2iWCmlEx1ENqnun+goE/gKvfJky+2Z7iHd8Z399wiK310kev8+F tu2t9u9MazEVtTWqlxqEHC76aY1SrioHE8hQM2YCgxgpNNC01gc5wKHG91YuXost Tqs9KmJ7bt3OcCgl4qjl+kTkPuP2DidLEybvXYZWmL57gA4sTSdRoicobzery7gI wK0awLYbam4xoHUHxyr0zlYYt3hhx9a2QXgp5H6S+m5UYXg8awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRaQ+kCqW4FV9wM+uEJSqRLDNjEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNTMzZDU4NTgtMGFmNy0z ZTdhLWIxYzEtZGIyMDRlNjZlNWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuKxuugMt0Fg5IxeQUOV8AByiDVKmONAjYdA20vDydGuydcVOJR2NGY psRyydrhlSkr+MKQliq4FxkJJ1JbO9w3JNObGOkJtzgDBUpX9AuyMXkSDzAhgz2c LhbcDSLd/vA4T6/zSc5fkvuL3GKByzhDQ9qrbZvP6zWBlPZvIeP6422CKHWPDSVQ TP3UhIooInYCXo9WQf0/cBI7PHXG8NmDTW4VsLx5Yl5w/nPXJJvAlNx/C4y1VZAC v0THzxX/8UFozCu05gRUGNkCr1SzcUYuM9uRnzSxUxNk1VYgci6/OGR6CqV9JH+c WqiD+R4X4rUTjkh+2Rmt3SP4Bb2qNg4= -----END CERTIFICATE-----Generated at Wed May 13 13:19:45 2026 by rpki-client