$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/df283a0e-fb95-3f9b-b7ea-4947194ab56e.roa File: df283a0e-fb95-3f9b-b7ea-4947194ab56e.roa (raw, json) Hash identifier: dEsqjMVhJHpXy5N6EfmiZt2SIdEn6NtdyYD2Yy/zT3o= Subject key identifier: D7:9C:ED:F8:E0:2E:EE:AE:9C:C1:AC:5E:1C:3B:66:51:5A:18:14:DF Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584DBA3B088BC32AAC74B3889700 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/df283a0e-fb95-3f9b-b7ea-4947194ab56e.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 22516 IP address blocks: 152.44.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3b:08:8b:c3:2a:ac:74:b3:88:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=370eb9a1-1015-4a69-ae68-12522638ce99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f6:2e:67:83:d9:aa:34:c8:28:3d:71:31:53: 8d:13:98:42:13:38:c4:4f:5a:5c:6a:a5:3f:34:a1: e3:e8:ee:bd:70:ef:84:6e:b3:5c:9b:1b:fe:5d:7d: b0:34:46:19:93:2c:8a:27:48:00:9c:92:06:bb:58: e9:14:19:a3:ca:3a:16:06:9f:ac:cd:d6:96:be:a5: e2:55:f2:ff:c5:71:e8:37:d7:8f:a2:4c:43:26:74: 27:6c:be:59:73:2c:d1:99:32:2e:3b:12:3d:e6:76: dd:41:3a:50:42:6e:4f:4e:35:38:dd:81:d9:eb:b9: 47:99:94:66:0c:8f:87:13:da:ef:ad:61:3d:55:75: fd:2e:0c:4d:be:bd:ef:b0:42:dd:65:26:dc:f5:32: c2:51:e7:88:38:eb:23:a8:01:5f:ad:ff:f4:a6:e7: ea:5b:db:7f:c4:ae:ce:96:aa:5a:b7:75:24:97:ea: 62:84:c7:5f:b3:69:90:a9:49:4e:5a:8e:0f:f1:87: e0:38:d6:1b:64:1b:09:aa:a1:ff:ac:b0:60:a3:e8: e7:f7:63:df:e1:3e:cf:a4:e3:76:32:66:89:67:5f: 92:1a:ee:d4:fd:eb:59:54:22:4c:ae:13:f3:95:51: c2:63:7b:bc:4c:f5:58:d8:df:d2:2e:9f:e9:71:57: 71:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9C:ED:F8:E0:2E:EE:AE:9C:C1:AC:5E:1C:3B:66:51:5A:18:14:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/df283a0e-fb95-3f9b-b7ea-4947194ab56e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 152.44.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:6f:0a:f0:01:3b:53:16:15:2d:c2:16:08:17:13:b6:90:81: cc:04:3f:16:06:1f:5a:1c:81:79:cc:65:e3:7b:d3:0f:89:3e: 4d:59:39:53:a6:e1:cd:0b:6e:7e:30:43:6e:88:e5:0e:d2:3e: 45:16:5f:72:27:25:14:1c:3b:1d:25:7c:ba:07:ab:34:f1:47: 74:30:a1:dc:51:46:b5:7d:ce:0b:3d:3e:7b:cd:07:de:f1:a6: 2e:23:ad:98:2b:84:ce:9f:ab:15:a5:34:6c:92:eb:f8:d8:f0: d4:db:c9:13:1f:3d:02:97:62:55:5e:36:26:c4:f4:19:f6:3d: 4c:5f:bd:1b:f5:01:2c:fc:91:cd:fa:e2:43:fb:00:45:d4:61: 47:31:56:6e:e9:ec:d2:8b:ac:a5:f4:c0:04:52:be:6a:6c:36: de:1d:4f:c4:88:ce:57:b9:c3:77:07:b7:86:1d:0c:70:c3:46: b5:e5:79:9a:73:8d:8b:26:35:be:55:6c:6c:ea:ed:49:7d:e9: 38:4e:e2:37:3e:de:55:04:d2:d0:3b:83:23:3a:2b:be:81:57: 36:41:4d:12:41:74:9c:e2:a2:66:9d:68:ff:6e:60:26:9a:ce: fc:8b:6c:b7:d3:38:0b:b9:41:44:72:79:c4:b9:d2:c4:dc:f6: 3d:87:6a:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OwiLwyqsdLOIlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk MzcwZWI5YTEtMTAxNS00YTY5LWFlNjgtMTI1MjI2MzhjZTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/YuZ4PZqjTIKD1xMVONE5hCEzjET1pcaqU/ NKHj6O69cO+EbrNcmxv+XX2wNEYZkyyKJ0gAnJIGu1jpFBmjyjoWBp+szdaWvqXi VfL/xXHoN9ePokxDJnQnbL5ZcyzRmTIuOxI95nbdQTpQQm5PTjU43YHZ67lHmZRm DI+HE9rvrWE9VXX9LgxNvr3vsELdZSbc9TLCUeeIOOsjqAFfrf/0pufqW9t/xK7O lqpat3Ukl+pihMdfs2mQqUlOWo4P8YfgONYbZBsJqqH/rLBgo+jn92Pf4T7PpON2 MmaJZ1+SGu7U/etZVCJMrhPzlVHCY3u8TPVY2N/SLp/pcVdx3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNec7fjgLu6unMGsXhw7ZlFaGBTfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZGYyODNhMGUtZmI5NS0z ZjliLWI3ZWEtNDk0NzE5NGFiNTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCxkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJvCvABO1MWFS3CFggXE7aQgcwEPxYGH1ocgXnMZeN70w+JPk1ZOVOm 4c0Lbn4wQ26I5Q7SPkUWX3InJRQcOx0lfLoHqzTxR3QwodxRRrV9zgs9PnvNB97x pi4jrZgrhM6fqxWlNGyS6/jY8NTbyRMfPQKXYlVeNibE9Bn2PUxfvRv1ASz8kc36 4kP7AEXUYUcxVm7p7NKLrKX0wARSvmpsNt4dT8SIzle5w3cHt4YdDHDDRrXleZpz jYsmNb5VbGzq7Ul96ThO4jc+3lUE0tA7gyM6K76BVzZBTRJBdJziomadaP9uYCaa zvyLbLfTOAu5QURyecS50sTc9j2Hatg= -----END CERTIFICATE-----Generated at Wed May 13 08:38:09 2026 by rpki-client