$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df6aa9a0-b32f-3d29-a147-04d62aa1e742.roa File: df6aa9a0-b32f-3d29-a147-04d62aa1e742.roa (raw, json) Hash identifier: r4hG9sWaSeppDhfdaCYBcSk35PTzOzEuH8VOn6RmANI= Subject key identifier: C3:32:7C:88:F6:0F:03:92:91:9D:04:19:98:51:23:FD:B3:9D:20:F8 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584DAC45911665266397A0B9A900 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df6aa9a0-b32f-3d29-a147-04d62aa1e742.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 54858 IP address blocks: 172.81.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:91:16:65:26:63:97:a0:b9:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=63c5b4ee-a137-4b55-b3fb-fcf141cff1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:75:19:95:f1:7a:7d:e9:d9:da:bf:90:05:b5: b6:64:36:c5:a6:12:d2:22:ad:1a:8e:f7:36:db:22: c1:5a:96:45:d1:d1:75:a0:32:65:e0:16:23:01:38: 8f:4d:f4:b1:37:3c:f0:14:ee:a7:e6:a9:92:78:a4: f7:de:62:5f:de:10:ed:1f:0d:43:50:f4:29:aa:5c: 7e:f0:ff:ef:7d:ac:c2:44:f9:9b:09:83:10:bc:7f: dd:a5:33:39:9c:6f:01:7f:f3:7e:d1:b8:4a:31:ae: 5d:0a:4e:6d:fd:87:ee:d8:a3:cf:85:8a:01:56:68: 94:31:88:66:9c:a1:64:7d:f0:e0:ee:48:7f:f1:11: ce:ea:31:d6:49:d0:1e:ef:f2:bb:a2:7b:38:40:46: c5:b3:9a:2d:b2:54:75:8c:15:44:6d:3a:03:17:81: c9:eb:9e:a7:1c:6f:9a:06:c5:e9:4c:00:62:c3:d5: c0:d7:c4:1b:6a:18:35:06:bf:d9:13:d3:db:e5:89: 80:6d:8d:a5:95:18:19:27:89:e7:67:f3:8f:bc:c6: 37:57:f7:e3:0c:6f:03:b4:3f:c5:59:01:af:0c:50: 52:ea:03:4e:41:99:cd:c8:0f:71:71:15:a5:1e:d5: 69:e2:3e:f9:94:57:d8:8f:05:4b:02:97:35:87:38: e5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:32:7C:88:F6:0F:03:92:91:9D:04:19:98:51:23:FD:B3:9D:20:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df6aa9a0-b32f-3d29-a147-04d62aa1e742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 172.81.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:9e:13:91:7a:2b:0b:e3:45:11:e8:9f:2d:fb:bb:3d:88:7b: fd:9c:28:33:d9:43:79:2e:21:f0:a9:df:bd:5c:67:4a:c4:c7: 66:90:16:f4:38:be:a1:cf:7b:bf:9d:3b:e7:19:2f:38:35:da: 60:79:a2:9b:47:7f:80:fd:be:00:fb:77:be:bb:5a:3c:2a:40: 01:8f:23:fa:5e:33:85:a6:49:ab:59:44:58:7a:37:de:72:c1: 77:c5:b8:50:cc:68:28:7d:71:8f:6e:a1:b7:57:23:cb:6c:c0: 2d:7f:ea:9b:4f:8e:84:6a:6d:85:e7:84:64:75:72:c7:c5:f6: 19:c2:05:ef:c1:61:b8:c4:de:1c:76:3c:ba:a1:d0:aa:33:5d: a7:58:9c:03:a8:70:65:c6:e5:e0:3d:27:a9:e7:dd:51:73:54: eb:e1:9e:db:5d:31:1e:e7:ff:fa:90:12:81:29:3d:19:0c:3d: 0a:0d:02:b9:4d:e8:0f:41:10:49:8c:97:bb:5d:cb:51:e6:2d: 2a:08:38:8b:fe:a9:ce:a4:df:f0:ae:c2:7c:4f:36:69:7b:66: b8:f9:d2:d7:59:b4:b8:f7:41:3f:05:c8:2b:fa:f4:71:df:8a: 5b:24:be:e9:9b:a6:e5:50:7d:f0:28:c3:f1:94:74:91:bb:13: d8:95:b8:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRZEWZSZjl6C5qQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk NjNjNWI0ZWUtYTEzNy00YjU1LWIzZmItZmNmMTQxY2ZmMWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHUZlfF6fenZ2r+QBbW2ZDbFphLSIq0ajvc2 2yLBWpZF0dF1oDJl4BYjATiPTfSxNzzwFO6n5qmSeKT33mJf3hDtHw1DUPQpqlx+ 8P/vfazCRPmbCYMQvH/dpTM5nG8Bf/N+0bhKMa5dCk5t/Yfu2KPPhYoBVmiUMYhm nKFkffDg7kh/8RHO6jHWSdAe7/K7ons4QEbFs5otslR1jBVEbToDF4HJ656nHG+a BsXpTABiw9XA18Qbahg1Br/ZE9Pb5YmAbY2llRgZJ4nnZ/OPvMY3V/fjDG8DtD/F WQGvDFBS6gNOQZnNyA9xcRWlHtVp4j75lFfYjwVLApc1hzjlHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMyfIj2DwOSkZ0EGZhRI/2znSD4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZGY2YWE5YTAtYjMyZi0z ZDI5LWExNDctMDRkNjJhYTFlNzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHueE5F6KwvjRRHony37uz2Ie/2cKDPZQ3kuIfCp371cZ0rEx2aQFvQ4 vqHPe7+dO+cZLzg12mB5optHf4D9vgD7d767WjwqQAGPI/peM4WmSatZRFh6N95y wXfFuFDMaCh9cY9uobdXI8tswC1/6ptPjoRqbYXnhGR1csfF9hnCBe/BYbjE3hx2 PLqh0KozXadYnAOocGXG5eA9J6nn3VFzVOvhnttdMR7n//qQEoEpPRkMPQoNArlN 6A9BEEmMl7tdy1HmLSoIOIv+qc6k3/CuwnxPNml7Zrj50tdZtLj3QT8FyCv69HHf ilskvumbpuVQffAow/GUdJG7E9iVuKs= -----END CERTIFICATE-----Generated at Wed May 13 04:49:15 2026 by rpki-client