$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/4837b021-f493-3c03-a601-3734117996f9.roa File: 4837b021-f493-3c03-a601-3734117996f9.roa (raw, json) Hash identifier: YyySXMIXX2rbQx4+4F+CF8HxM4Ed/25efD5wgwilax0= Subject key identifier: D7:4F:DF:24:1E:20:31:C8:38:B2:40:E5:20:28:37:5D:59:75:14:F9 Certificate issuer: /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Certificate serial: 010D0C9F4328584DC83056492BEF695159734C00 Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/4837b021-f493-3c03-a601-3734117996f9.roa Signing time: Sun 10 May 2026 01:00:24 +0000 ROA not before: Sun 10 May 2026 01:00:24 +0000 ROA not after: Sat 08 Aug 2026 01:00:24 +0000 asID: 30029 IP address blocks: 150.253.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c8:30:56:49:2b:ef:69:51:59:73:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Validity Not Before: May 10 01:00:24 2026 GMT Not After : Aug 8 01:00:24 2026 GMT Subject: CN=890f5a4f-f06c-4b80-85ec-8fda1e59d3c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c1:d5:86:8b:6c:da:a2:db:23:8d:01:6a:d4: d6:fc:9b:c4:f3:3f:6a:06:54:e3:f0:cb:19:0d:03: 86:7f:2e:ef:98:30:1d:0e:ec:e4:36:43:4e:6d:32: 07:17:ae:8f:00:08:85:db:81:0c:b4:59:ee:20:fd: f3:f7:b4:ef:5a:cb:9b:56:50:2a:e0:f7:90:47:1c: 3a:39:d4:c3:86:10:59:c7:49:24:a2:b2:32:3c:29: 17:e4:ff:69:87:51:91:ca:4e:74:79:f4:f1:14:79: 6e:f6:5e:47:9b:b7:25:43:14:9a:db:f1:77:72:86: 60:1d:4b:ee:94:eb:4e:92:e3:7b:84:98:cf:f4:bc: 62:e2:9a:af:46:29:80:21:c1:b2:f7:d3:05:a0:30: 89:31:60:8e:62:01:84:b7:35:d5:dd:e5:a6:31:c9: 85:07:d0:26:57:57:7e:d1:43:8e:5f:60:fb:d6:0b: ce:14:f7:0c:96:9d:d9:08:3c:4f:03:68:30:1d:9f: 8b:a7:5b:d7:7e:ae:d3:6a:92:9f:b6:ee:d0:91:b5: f7:e0:36:33:ca:d7:5a:3e:a3:f4:33:98:67:5f:a3: 33:cc:a9:91:56:6f:94:18:af:db:68:4f:79:be:8c: bd:76:18:36:70:c4:9f:cc:2e:ba:f9:d7:2e:f4:f4: b6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4F:DF:24:1E:20:31:C8:38:B2:40:E5:20:28:37:5D:59:75:14:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/4837b021-f493-3c03-a601-3734117996f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl X509v3 Authority Key Identifier: keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer sbgp-ipAddrBlock: critical IPv4: 150.253.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:aa:e3:3b:aa:bd:2f:e0:eb:6c:ee:18:79:6c:49:88:77:2f: 23:4f:08:3a:1a:e0:25:25:03:c4:d8:14:bb:65:28:9d:03:36: 2b:66:8c:80:72:70:e1:59:50:52:47:b2:ba:af:0d:28:a1:25: ac:5f:ed:36:17:d2:bd:0c:64:9c:16:6c:31:f0:3b:60:1e:80: 8c:24:c3:80:2a:9e:9e:53:e6:bc:a7:01:da:80:f8:fc:79:d1: 22:38:17:63:68:63:f5:39:1a:18:47:20:c5:86:61:3f:69:63: 24:3d:d2:5f:25:22:f3:9e:df:71:f2:3e:1c:ff:3f:c1:82:60: d8:f5:4f:a1:72:8a:0f:31:10:6f:94:28:34:6a:e9:33:61:84: 7f:02:cc:b9:7f:1c:4e:46:74:0b:80:68:78:b4:6d:5a:11:51: b1:80:19:2f:d4:b7:aa:7c:cb:9c:0f:00:24:75:10:63:c5:5e: e5:69:95:19:3f:6d:6d:fd:26:01:11:62:0a:10:4c:33:1c:8d: 9a:41:30:9c:2b:60:3f:67:e8:24:55:03:d5:16:6f:e8:5a:99: fa:ce:15:da:cd:b8:ca:ef:5c:5b:0f:67:bc:ba:84:5c:04:48: d5:98:09:00:0f:08:11:db:3f:e5:f5:5c:45:2f:49:8d:c9:82: 3e:f3:cb:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3IMFZJK+9pUVlzTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhMWIzODMtZjk3NS00ZmIxLTljZTYtZTQzNjExZWFm YTFhMB4XDTI2MDUxMDAxMDAyNFoXDTI2MDgwODAxMDAyNFowLzEtMCsGA1UEAxMk ODkwZjVhNGYtZjA2Yy00YjgwLTg1ZWMtOGZkYTFlNTlkM2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcHVhots2qLbI40BatTW/JvE8z9qBlTj8MsZ DQOGfy7vmDAdDuzkNkNObTIHF66PAAiF24EMtFnuIP3z97TvWsubVlAq4PeQRxw6 OdTDhhBZx0kkorIyPCkX5P9ph1GRyk50efTxFHlu9l5Hm7clQxSa2/F3coZgHUvu lOtOkuN7hJjP9Lxi4pqvRimAIcGy99MFoDCJMWCOYgGEtzXV3eWmMcmFB9AmV1d+ 0UOOX2D71gvOFPcMlp3ZCDxPA2gwHZ+Lp1vXfq7TapKftu7QkbX34DYzytdaPqP0 M5hnX6MzzKmRVm+UGK/baE95voy9dhg2cMSfzC66+dcu9PS2yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdP3yQeIDHIOLJA5SAoN11ZdRT5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZGEx YjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2MTFlYWZhMWEvNDgzN2IwMjEtZjQ5My0z YzAzLWE2MDEtMzczNDExNzk5NmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWRhMWIzODMtZjk3NS00ZmIxLTlj ZTYtZTQzNjExZWFmYTFhLzVkYTFiMzgzLWY5NzUtNGZiMS05Y2U2LWU0MzYxMWVh ZmExYS5jcmwwHwYDVR0jBBgwFoAUomwcT7YhlG/6poaO5igrec40Hx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZGExYjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2 MTFlYWZhMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGlv1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeq4zuqvS/g62zuGHlsSYh3LyNPCDoa4CUlA8TYFLtlKJ0DNitmjIBy cOFZUFJHsrqvDSihJaxf7TYX0r0MZJwWbDHwO2AegIwkw4Aqnp5T5rynAdqA+Px5 0SI4F2NoY/U5GhhHIMWGYT9pYyQ90l8lIvOe33HyPhz/P8GCYNj1T6Fyig8xEG+U KDRq6TNhhH8CzLl/HE5GdAuAaHi0bVoRUbGAGS/Ut6p8y5wPACR1EGPFXuVplRk/ bW39JgERYgoQTDMcjZpBMJwrYD9n6CRVA9UWb+hamfrOFdrNuMrvXFsPZ7y6hFwE SNWYCQAPCBHbP+X1XEUvSY3Jgj7zy3M= -----END CERTIFICATE-----Generated at Wed May 13 16:38:51 2026 by rpki-client