$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/12ad7e22-1bd4-30a0-be79-a3dcd1c56904.roa File: 12ad7e22-1bd4-30a0-be79-a3dcd1c56904.roa (raw, json) Hash identifier: V4Iddh5mHKbSHMELu90rm7edQ8HgXonPC26MnoMqA64= Subject key identifier: 2A:7B:1C:A0:54:3E:1C:66:75:AF:CC:CD:F3:FD:F9:FB:DB:7D:0E:B4 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584D2BDA18A99FC9947EDD8271C0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/12ad7e22-1bd4-30a0-be79-a3dcd1c56904.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 397630 IP address blocks: 147.53.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:18:a9:9f:c9:94:7e:dd:82:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=0cca898b-83c1-483f-80a4-9f976eccae97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7e:db:8d:4f:16:a5:f9:9d:8c:28:22:40:ac: 9e:36:5e:39:35:e6:00:7b:3c:29:ba:4a:2b:9d:17: 14:36:aa:f2:55:e1:39:36:96:39:1c:27:a2:82:24: 4d:9b:97:bd:36:7e:80:f6:be:2c:72:e4:38:81:1f: 3b:51:d9:b2:33:ac:26:1e:48:cc:9d:bc:9b:b7:9b: a9:3f:bd:74:3b:be:2c:45:d8:07:00:27:f9:3d:3b: e1:9b:3d:fe:1d:a4:0b:e2:ca:54:cb:bc:2b:8b:80: c8:13:ee:33:82:d2:f9:91:5a:80:a1:7d:7e:19:18: a8:a0:bc:40:2b:22:45:64:94:c2:12:fe:0c:5c:9a: a5:9e:c7:7f:99:40:6a:a0:95:c6:4c:22:4c:e1:c5: 21:90:5a:40:d3:1f:71:54:d9:56:7c:2a:68:70:b1: b4:77:ea:ae:de:31:fa:7c:50:c1:7d:74:eb:5e:5e: 20:36:51:5b:5d:80:37:4a:7a:38:4c:f2:cd:48:87: 96:96:36:c4:95:39:64:f3:28:88:69:23:19:46:3e: 62:48:de:73:5f:6f:fd:8a:9d:95:db:97:82:c8:f2: 58:57:a1:28:c7:9f:62:81:cf:19:af:4f:83:ab:6f: f7:5b:11:41:0c:41:e4:e4:a0:42:8e:45:bc:45:9e: 56:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7B:1C:A0:54:3E:1C:66:75:AF:CC:CD:F3:FD:F9:FB:DB:7D:0E:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/12ad7e22-1bd4-30a0-be79-a3dcd1c56904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 147.53.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:02:9d:a4:fb:65:88:ac:27:80:91:24:6f:f2:ed:49:c5:a1: 00:99:ef:2e:5f:f2:8e:8b:db:44:27:41:92:31:c1:40:73:97: 87:77:91:58:37:ec:6c:b7:ce:d9:a9:6c:96:3f:17:07:45:99: 13:fd:50:5e:c4:4d:40:aa:2c:64:23:bb:0e:93:ca:f3:e0:bb: b3:bc:ea:33:ad:7b:22:5a:df:f7:47:6d:71:69:03:83:d1:c5: 9c:d4:62:8b:19:16:b4:90:07:53:c4:6d:b6:59:d6:2b:55:ce: 2b:e2:5f:f6:8d:39:13:1b:e3:ec:e1:75:2f:e6:2d:ac:11:c2: 7b:e9:5e:e1:0a:59:b5:02:7a:eb:40:4c:89:dd:ca:10:ea:0d: 88:7b:85:b9:e1:a3:cc:eb:43:5e:dd:13:0f:53:78:49:d4:c5: f0:b5:c2:19:54:f8:23:32:42:1d:cc:50:49:da:cd:69:ad:39: 9f:1f:a9:23:32:8f:71:ad:ca:24:83:cb:31:1d:2f:63:5f:0a: e0:c5:0f:21:da:4f:75:cb:d8:b2:89:b6:6e:83:cd:ee:ed:86: 80:3b:bd:84:52:4d:31:98:22:96:11:58:d0:08:54:df:ba:ca: b7:8f:a5:38:28:f1:9c:de:91:64:b9:81:b7:1a:f1:cc:96:6e: e7:23:a2:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hipn8mUft2CccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk MGNjYTg5OGItODNjMS00ODNmLTgwYTQtOWY5NzZlY2NhZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs37bjU8WpfmdjCgiQKyeNl45NeYAezwpukor nRcUNqryVeE5NpY5HCeigiRNm5e9Nn6A9r4scuQ4gR87UdmyM6wmHkjMnbybt5up P710O74sRdgHACf5PTvhmz3+HaQL4spUy7wri4DIE+4zgtL5kVqAoX1+GRiooLxA KyJFZJTCEv4MXJqlnsd/mUBqoJXGTCJM4cUhkFpA0x9xVNlWfCpocLG0d+qu3jH6 fFDBfXTrXl4gNlFbXYA3Sno4TPLNSIeWljbElTlk8yiIaSMZRj5iSN5zX2/9ip2V 25eCyPJYV6Eox59igc8Zr0+Dq2/3WxFBDEHk5KBCjkW8RZ5WkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCp7HKBUPhxmda/MzfP9+fvbfQ60MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMTJhZDdlMjItMWJkNC0z MGEwLWJlNzktYTNkY2QxYzU2OTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkzV5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALUCnaT7ZYisJ4CRJG/y7UnFoQCZ7y5f8o6L20QnQZIxwUBzl4d3kVg3 7Gy3ztmpbJY/FwdFmRP9UF7ETUCqLGQjuw6TyvPgu7O86jOteyJa3/dHbXFpA4PR xZzUYosZFrSQB1PEbbZZ1itVziviX/aNORMb4+zhdS/mLawRwnvpXuEKWbUCeutA TIndyhDqDYh7hbnho8zrQ17dEw9TeEnUxfC1whlU+CMyQh3MUEnazWmtOZ8fqSMy j3GtyiSDyzEdL2NfCuDFDyHaT3XL2LKJtm6Dze7thoA7vYRSTTGYIpYRWNAIVN+6 yrePpTgo8ZzekWS5gbca8cyWbucjopE= -----END CERTIFICATE-----Generated at Thu Mar 26 16:07:58 2026 by rpki-client