$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa File: aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa (raw, json) Hash identifier: h0Gnahw/VtmzHuXVsbVHcE2CR9eTd9Hdr7iPhSH5rHU= Subject key identifier: 71:04:E8:6B:DD:CF:7F:D3:B0:6F:2D:F8:7C:7D:98:51:E3:DC:25:F4 Certificate issuer: /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Certificate serial: 010D0C9F4328584DAC45937B82AE33AB1C0C8B80 Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 30387 IP address blocks: 156.40.53.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:93:7b:82:ae:33:ab:1c:0c:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=5501e935-9c43-4769-b6b8-232426bb58b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:94:20:c0:7d:2c:ad:eb:e1:ff:fb:cd:07:9a: 70:79:3c:89:c2:4b:0c:5d:04:14:e9:9e:47:4b:af: fb:89:aa:7a:02:03:79:ae:eb:52:a3:dc:2e:59:78: 5f:b5:f7:68:2d:07:31:53:0f:d4:8f:04:d4:d1:b0: d8:04:b4:4f:38:68:c8:11:10:bb:f4:f4:66:f7:0c: 7a:84:cd:61:34:d9:4d:12:1c:58:99:4d:56:16:ef: 25:a4:bd:bb:57:84:a6:ee:54:b9:a2:7f:ea:59:54: 9c:d4:64:af:43:4a:f0:58:75:f8:aa:9a:34:7b:33: 26:45:8c:b6:36:d6:c2:43:74:3f:c4:66:37:7a:a4: c8:77:fc:db:93:5f:e4:b7:17:99:3c:88:f4:ba:f8: cb:e0:56:cb:4f:e6:fd:0f:9e:46:5f:a8:23:98:63: 98:50:ed:26:72:da:f0:83:d3:54:47:fd:54:3d:eb: 6e:de:a4:01:7c:97:fd:35:cf:fc:a3:76:2a:d4:8d: c1:79:39:59:6b:6e:8c:75:08:15:fd:27:40:da:32: 98:c7:2e:44:ac:ee:f5:2a:11:50:63:73:b9:90:9d: 28:d7:e4:9a:2b:3d:1d:5a:96:fc:ea:c7:1f:18:b0: af:46:e2:5c:d5:8d:1e:6d:ad:8e:95:53:df:3d:d0: 10:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:04:E8:6B:DD:CF:7F:D3:B0:6F:2D:F8:7C:7D:98:51:E3:DC:25:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl X509v3 Authority Key Identifier: keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer sbgp-ipAddrBlock: critical IPv4: 156.40.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:43:19:de:5c:fa:2d:83:e8:8f:4d:a4:46:a9:86:9a:6e:e6: ec:56:c9:42:fa:75:aa:88:87:43:15:86:a2:06:cd:b8:91:da: d3:1a:4c:5b:67:b3:87:a8:dc:10:50:44:97:ee:03:e0:5d:84: 6d:2a:2b:aa:97:4f:b2:02:53:a6:ed:92:8e:4b:46:b4:a3:71: 45:43:57:09:9e:a7:a1:b3:1d:62:2a:f0:03:27:e3:61:f8:37: bc:47:c2:bf:dd:0a:ae:6b:67:ce:50:93:3a:62:d1:db:73:b3: bc:4c:a6:78:1c:4e:cf:93:97:14:d7:54:e3:7b:6a:da:5f:bf: 74:de:a3:de:48:32:dd:9c:33:ce:b4:e2:d1:6b:9c:4d:25:78: 2a:cd:a6:30:74:fd:80:f4:ff:7b:75:33:44:65:4c:76:30:9e: 3c:9f:6e:d2:d8:0c:f3:7c:b7:a0:0f:37:22:85:2e:9a:61:73: 99:6d:2b:be:9d:84:8f:9e:47:87:38:05:04:5c:88:4e:17:3b: 51:c2:c7:63:b8:d2:26:65:6d:9e:36:8d:85:f3:55:11:ed:ab: 22:4d:93:5e:d9:a2:30:54:3c:f3:77:33:8e:cf:1a:8d:50:eb: 63:23:dc:76:c1:f4:a4:98:ea:a8:5e:fa:ec:40:cc:dc:86:3c: 33:50:ad:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRZN7gq4zqxwMi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2ZjE0YjgtM2M3ZS00ZDY4LWFjMzYtZDU5OTliM2M0 ZWE3MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk NTUwMWU5MzUtOWM0My00NzY5LWI2YjgtMjMyNDI2YmI1OGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35QgwH0srevh//vNB5pweTyJwksMXQQU6Z5H S6/7iap6AgN5rutSo9wuWXhftfdoLQcxUw/UjwTU0bDYBLRPOGjIERC79PRm9wx6 hM1hNNlNEhxYmU1WFu8lpL27V4Sm7lS5on/qWVSc1GSvQ0rwWHX4qpo0ezMmRYy2 NtbCQ3Q/xGY3eqTId/zbk1/ktxeZPIj0uvjL4FbLT+b9D55GX6gjmGOYUO0mctrw g9NUR/1UPetu3qQBfJf9Nc/8o3Yq1I3BeTlZa26MdQgV/SdA2jKYxy5ErO71KhFQ Y3O5kJ0o1+SaKz0dWpb86scfGLCvRuJc1Y0eba2OlVPfPdAQqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEE6Gvdz3/TsG8t+Hx9mFHj3CX0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZm MTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5OWIzYzRlYTcvYWVhMmVjYjEtMjQyYS0z NGEwLWEwZDItNzI0MGNhMzhhZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGY2ZjE0YjgtM2M3ZS00ZDY4LWFj MzYtZDU5OTliM2M0ZWE3L2RmNmYxNGI4LTNjN2UtNGQ2OC1hYzM2LWQ1OTk5YjNj NGVhNy5jcmwwHwYDVR0jBBgwFoAU6a+JChar8bDdsnh1bDqS4990CL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZmMTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5 OWIzYzRlYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnCg1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABDGd5c+i2D6I9NpEaphppu5uxWyUL6daqIh0MVhqIGzbiR2tMaTFtn s4eo3BBQRJfuA+BdhG0qK6qXT7ICU6btko5LRrSjcUVDVwmep6GzHWIq8AMn42H4 N7xHwr/dCq5rZ85Qkzpi0dtzs7xMpngcTs+TlxTXVON7atpfv3Teo95IMt2cM860 4tFrnE0leCrNpjB0/YD0/3t1M0RlTHYwnjyfbtLYDPN8t6APNyKFLpphc5ltK76d hI+eR4c4BQRciE4XO1HCx2O40iZlbZ42jYXzVRHtqyJNk17ZojBUPPN3M47PGo1Q 62Mj3HbB9KSY6qhe+uxAzNyGPDNQrYs= -----END CERTIFICATE-----Generated at Wed May 13 09:16:11 2026 by rpki-client