$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec/9bc1462d-2a95-321e-bfde-6152e8f83dd5.roa File: 9bc1462d-2a95-321e-bfde-6152e8f83dd5.roa (raw, json) Hash identifier: 7jQTZZfw9TP/QdZXoNF+CBf3Pg+efY8hG0OeF8Dq4vs= Subject key identifier: 58:CD:19:33:19:CA:19:BB:81:C8:F0:08:A9:4C:93:55:34:53:F9:AA Certificate issuer: /CN=a1046e21-4a33-4415-a524-c10db602b0ec Certificate serial: 010D0C9F4328584D237A70617497D0B6E5E265E0 Authority key identifier: E8:29:BE:FC:43:BB:9D:31:56:BD:62:E1:85:15:11:AF:0E:F4:A0:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec/9bc1462d-2a95-321e-bfde-6152e8f83dd5.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 27580 IP address blocks: 104.153.152.0/24 maxlen: 24 104.153.153.0/24 maxlen: 24 104.153.154.0/23 maxlen: 24 2604:f1c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec/a1046e21-4a33-4415-a524-c10db602b0ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec/a1046e21-4a33-4415-a524-c10db602b0ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:70:61:74:97:d0:b6:e5:e2:65:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1046e21-4a33-4415-a524-c10db602b0ec Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=8370a967-72ca-4959-9536-b9547175462d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:48:7b:ea:4a:48:6b:06:50:a6:ce:2f:a5:e4: 78:93:71:3d:99:c9:d0:0c:92:b0:c4:7a:1b:83:e8: 50:c7:55:c9:4e:a8:17:03:c9:6f:b8:e8:97:8b:c0: c2:5c:df:73:21:15:ca:1a:32:d1:99:99:61:ad:17: 2e:0e:21:77:02:5c:54:c1:5e:97:6f:aa:21:46:3a: a7:02:f7:87:cc:27:4c:92:71:2b:5d:22:e7:e7:17: 81:b4:9c:2d:3b:fd:de:d2:f4:f0:92:94:2f:ab:b5: cd:5d:88:86:e0:74:e1:04:b5:82:0f:b1:c6:4a:47: 5c:ba:9d:a0:b6:32:53:75:3c:bd:bc:1a:28:40:36: 64:a7:de:90:26:95:8c:87:48:50:9f:58:b9:0f:15: 5d:70:ab:f8:bc:e4:28:0d:96:0a:27:98:37:fe:35: 14:4f:ea:a6:e2:56:7e:62:32:f3:20:8a:87:a7:a2: b6:dd:5a:ad:68:08:2d:8b:9e:f7:99:d1:58:08:b4: ba:c7:2d:a5:e0:0f:73:d9:91:97:e8:86:50:92:bc: e8:d6:8c:52:28:86:c0:24:08:96:fa:8e:f0:46:55: 76:32:6a:83:6e:7c:32:96:5b:70:08:90:40:9a:5a: 63:dc:fa:c4:f3:cd:2b:81:89:46:55:d3:26:20:c6: 88:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CD:19:33:19:CA:19:BB:81:C8:F0:08:A9:4C:93:55:34:53:F9:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec/9bc1462d-2a95-321e-bfde-6152e8f83dd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec/a1046e21-4a33-4415-a524-c10db602b0ec.crl X509v3 Authority Key Identifier: keyid:E8:29:BE:FC:43:BB:9D:31:56:BD:62:E1:85:15:11:AF:0E:F4:A0:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec.cer sbgp-ipAddrBlock: critical IPv4: 104.153.152.0/22 IPv6: 2604:f1c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:64:68:ea:e9:26:af:05:ec:1d:15:e9:a2:05:ba:af:d0:94: 07:aa:b9:c7:7b:fd:62:93:c5:a2:a5:71:fd:bf:a1:ee:e1:57: 66:bf:23:98:08:b1:82:e7:cd:44:c3:f8:13:35:8e:c9:bd:a2: ba:4d:1e:65:54:c5:76:81:b4:35:54:93:7a:fd:d3:cc:2e:46: fe:18:57:b9:d2:8d:4f:de:2f:95:ea:2d:01:44:36:78:9e:43: c8:bb:bf:6d:5b:58:6c:56:c8:5a:c9:2f:f4:1d:f9:38:43:b7: bf:59:a9:f7:e3:bf:55:d4:1d:23:63:12:25:85:96:18:f2:78: 60:68:51:81:4b:44:42:c0:fa:07:57:bd:83:6a:87:cc:38:ed: 32:a3:9c:b3:8c:80:12:09:f4:07:fd:9b:52:30:33:62:95:50: d9:17:75:c6:7d:32:82:e5:20:08:e4:f4:ec:d0:ef:73:b1:6f: da:a3:fa:d6:16:d5:75:1a:bd:d4:60:af:a5:3a:b2:07:46:87: 3f:3b:5b:33:d2:c9:f3:e5:fc:36:f7:e0:ec:8a:dc:26:3a:ae: 82:63:ee:cf:be:87:43:cf:34:09:5b:6f:7a:34:dc:d8:af:f1: a4:d1:f5:44:02:e2:c5:42:d4:b1:cb:00:05:6e:c6:82:46:6b: d9:c3:7b:06 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE0jenBhdJfQtuXiZeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTEwNDZlMjEtNGEzMy00NDE1LWE1MjQtYzEwZGI2MDJi MGVjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ODM3MGE5NjctNzJjYS00OTU5LTk1MzYtYjk1NDcxNzU0NjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEh76kpIawZQps4vpeR4k3E9mcnQDJKwxHob g+hQx1XJTqgXA8lvuOiXi8DCXN9zIRXKGjLRmZlhrRcuDiF3AlxUwV6Xb6ohRjqn AveHzCdMknErXSLn5xeBtJwtO/3e0vTwkpQvq7XNXYiG4HThBLWCD7HGSkdcup2g tjJTdTy9vBooQDZkp96QJpWMh0hQn1i5DxVdcKv4vOQoDZYKJ5g3/jUUT+qm4lZ+ YjLzIIqHp6K23VqtaAgti573mdFYCLS6xy2l4A9z2ZGX6IZQkrzo1oxSKIbAJAiW +o7wRlV2MmqDbnwylltwCJBAmlpj3PrE880rgYlGVdMmIMaIAQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFFjNGTMZyhm7gcjwCKlMk1U0U/mqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMTA0 NmUyMS00YTMzLTQ0MTUtYTUyNC1jMTBkYjYwMmIwZWMvOWJjMTQ2MmQtMmE5NS0z MjFlLWJmZGUtNjE1MmU4ZjgzZGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTEwNDZlMjEtNGEzMy00NDE1LWE1 MjQtYzEwZGI2MDJiMGVjL2ExMDQ2ZTIxLTRhMzMtNDQxNS1hNTI0LWMxMGRiNjAy YjBlYy5jcmwwHwYDVR0jBBgwFoAU6Cm+/EO7nTFWvWLhhRURrw70oNgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMTA0NmUyMS00YTMzLTQ0MTUtYTUyNC1jMTBk YjYwMmIwZWMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCaJmYMA0E AgACMAcDBQAmBPHAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBABBkaOrpJq8F7B0V6aIFuq/QlAequcd7/WKT xaKlcf2/oe7hV2a/I5gIsYLnzUTD+BM1jsm9orpNHmVUxXaBtDVUk3r908wuRv4Y V7nSjU/eL5XqLQFENnieQ8i7v21bWGxWyFrJL/Qd+ThDt79Zqffjv1XUHSNjEiWF lhjyeGBoUYFLRELA+gdXvYNqh8w47TKjnLOMgBIJ9Af9m1IwM2KVUNkXdcZ9MoLl IAjk9OzQ73Oxb9qj+tYW1XUavdRgr6U6sgdGhz87WzPSyfPl/Db34OyK3CY6roJj 7s++h0PPNAlbb3o03Niv8aTR9UQC4sVC1LHLAAVuxoJGa9nDewY= -----END CERTIFICATE-----Generated at Fri Mar 27 01:56:49 2026 by rpki-client