$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d0283847-bee4-35b0-b680-fdfa9b481b80.roa File: d0283847-bee4-35b0-b680-fdfa9b481b80.roa (raw, json) Hash identifier: Eiz6G7l3v6qC+5MRMnjgVSgQlVvQwKIYq0Uz4/Xu1lk= Subject key identifier: E2:76:62:EB:5D:0F:8B:B8:DF:6E:10:1D:E6:A1:D7:38:9B:1A:DC:35 Certificate issuer: /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Certificate serial: 010D0C9F4328584DB1DAC20D92B42106D271A420 Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d0283847-bee4-35b0-b680-fdfa9b481b80.roa Signing time: Sat 02 May 2026 01:00:24 +0000 ROA not before: Sat 02 May 2026 01:00:24 +0000 ROA not after: Fri 31 Jul 2026 01:00:24 +0000 asID: 14090 IP address blocks: 64.255.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b1:da:c2:0d:92:b4:21:06:d2:71:a4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Validity Not Before: May 2 01:00:24 2026 GMT Not After : Jul 31 01:00:24 2026 GMT Subject: CN=b8856dd7-9e6a-4d0f-ad95-8785ef345e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:63:17:2d:62:b8:8a:c7:4f:c9:a4:4c:64:38: 38:96:c4:9b:7d:07:cb:43:5a:3b:23:63:78:83:b6: c5:8c:b5:1e:75:c0:86:e0:e8:b1:3b:e5:1b:c2:ef: 71:c7:a4:10:f2:0e:73:b3:8a:14:33:0f:53:19:7c: 6a:14:e4:df:c9:67:01:09:64:67:b2:b4:b6:29:c8: ee:08:62:0b:9f:98:47:2c:4a:b7:af:a0:07:d1:e1: fe:d6:87:61:bc:e4:d7:27:70:e3:d6:54:69:51:55: d0:29:9f:07:dd:4f:cf:83:e5:95:fd:c4:77:5e:63: 77:7f:03:73:ea:08:e5:fc:11:b6:ac:f2:c5:99:ce: b4:64:a0:50:ae:8c:3c:86:01:ec:3f:f6:3a:ec:a8: 82:1c:a0:2b:c3:81:a8:23:c8:a4:84:00:11:46:5a: 20:df:dc:05:e8:07:d4:af:d3:ff:07:d4:82:dc:ca: 1a:29:3c:0b:5b:b0:5f:b0:da:74:c0:f9:03:f3:54: b4:55:5f:51:f2:04:18:c3:a8:41:a6:68:bc:87:ba: e9:36:43:d9:52:73:ab:6b:38:e0:8c:a0:07:e8:b4: 77:6b:00:9c:73:8e:f0:6f:fe:f2:b8:2d:8e:72:46: 36:d8:78:e4:83:f7:4d:4d:14:b9:43:f5:d5:07:3e: a8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:76:62:EB:5D:0F:8B:B8:DF:6E:10:1D:E6:A1:D7:38:9B:1A:DC:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d0283847-bee4-35b0-b680-fdfa9b481b80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl X509v3 Authority Key Identifier: keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer sbgp-ipAddrBlock: critical IPv4: 64.255.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:5a:aa:d7:8e:27:74:7a:a1:fc:9d:6f:98:13:d6:be:2b:f4: 76:15:f3:aa:0e:59:f7:b0:45:54:5f:ac:42:39:00:66:9a:b4: 9c:6b:4f:46:f0:cb:2e:40:37:94:e3:4b:51:2f:00:18:09:f8: a1:46:e6:1a:cc:23:68:36:0c:18:bf:7d:65:3b:81:44:b3:2c: fb:e7:b6:ba:2f:7f:34:2f:fa:93:28:cd:72:29:3a:4d:35:24: 9e:71:a9:82:b3:12:ec:cf:67:3e:85:29:11:27:10:43:57:14: 58:6c:7c:0a:83:b7:4a:89:be:1b:27:e9:f0:c4:bf:56:8b:f2: 47:bc:53:34:61:cd:a2:f3:5e:52:00:b3:1d:59:d4:06:47:ce: c0:69:de:fe:f8:de:02:70:4b:5d:70:1e:fe:ae:37:53:21:01: 5a:49:38:17:1d:6e:d0:ee:1f:f9:f4:18:c3:89:99:4b:b7:85: 77:37:fe:fa:27:a3:12:7e:8f:b7:16:ee:a2:8e:28:fd:49:e4: d7:25:31:5e:57:64:3e:da:28:0c:d9:24:52:cb:13:c4:f8:63: 68:29:9f:7e:9a:e0:44:56:ed:92:3a:b3:79:2a:f8:2d:a4:b7: 31:ba:66:f8:79:65:82:af:56:24:30:30:42:ac:96:76:2d:e7: d0:92:90:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2x2sINkrQhBtJxpCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk ZTYxMB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk Yjg4NTZkZDctOWU2YS00ZDBmLWFkOTUtODc4NWVmMzQ1ZTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmMXLWK4isdPyaRMZDg4lsSbfQfLQ1o7I2N4 g7bFjLUedcCG4OixO+Ubwu9xx6QQ8g5zs4oUMw9TGXxqFOTfyWcBCWRnsrS2Kcju CGILn5hHLEq3r6AH0eH+1odhvOTXJ3Dj1lRpUVXQKZ8H3U/Pg+WV/cR3XmN3fwNz 6gjl/BG2rPLFmc60ZKBQrow8hgHsP/Y67KiCHKArw4GoI8ikhAARRlog39wF6AfU r9P/B9SC3MoaKTwLW7BfsNp0wPkD81S0VV9R8gQYw6hBpmi8h7rpNkPZUnOrazjg jKAH6LR3awCcc47wb/7yuC2OckY22Hjkg/dNTRS5Q/XVBz6ouQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJ2YutdD4u4324QHeah1zibGtw1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3 ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvZDAyODM4NDctYmVlNC0z NWIwLWI2ODAtZmRmYTliNDgxYjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1 NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5 ZGQ0ZWRlNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQP+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZaqteOJ3R6ofydb5gT1r4r9HYV86oOWfewRVRfrEI5AGaatJxrT0bw yy5AN5TjS1EvABgJ+KFG5hrMI2g2DBi/fWU7gUSzLPvntrovfzQv+pMozXIpOk01 JJ5xqYKzEuzPZz6FKREnEENXFFhsfAqDt0qJvhsn6fDEv1aL8ke8UzRhzaLzXlIA sx1Z1AZHzsBp3v743gJwS11wHv6uN1MhAVpJOBcdbtDuH/n0GMOJmUu3hXc3/von oxJ+j7cW7qKOKP1J5NclMV5XZD7aKAzZJFLLE8T4Y2gpn36a4ERW7ZI6s3kq+C2k tzG6Zvh5ZYKvViQwMEKslnYt59CSkFE= -----END CERTIFICATE-----Generated at Wed May 13 12:00:45 2026 by rpki-client