$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5524f1db-bbd4-3775-a453-c36094677a2a.roa File: 5524f1db-bbd4-3775-a453-c36094677a2a.roa (raw, json) Hash identifier: u+6j/omQIW/Rf0r3Z6di00u7KF6+PZxb1BhkOhFf9wk= Subject key identifier: 4A:F0:3D:09:6E:5A:AB:AB:90:0F:06:55:D6:E3:50:D1:9B:EB:C1:25 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584D4A53CE62A0F08C28CA9FCE80 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5524f1db-bbd4-3775-a453-c36094677a2a.roa Signing time: Wed 25 Mar 2026 23:00:15 +0000 ROA not before: Wed 25 Mar 2026 23:00:15 +0000 ROA not after: Tue 23 Jun 2026 23:00:15 +0000 asID: 62563 IP address blocks: 216.152.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:53:ce:62:a0:f0:8c:28:ca:9f:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Mar 25 23:00:15 2026 GMT Not After : Jun 23 23:00:15 2026 GMT Subject: CN=e90fa402-a7ed-4586-b5a3-d784b3e5cefd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:67:3d:10:a1:7b:2f:be:6c:41:50:83:0a:b5: 09:30:ff:16:ec:ee:52:ea:4b:2f:64:d7:c4:c9:dd: a9:30:0d:34:c6:bb:ad:15:be:31:c1:66:c6:49:3d: 09:b6:95:04:29:27:b0:c6:86:e2:ce:84:09:a0:36: aa:6a:1e:9c:10:42:08:a5:be:dc:f8:90:f8:03:e2: 74:7c:67:09:8e:f5:46:c0:90:ae:24:d9:e2:d0:61: 44:4a:52:62:c2:11:50:8a:ad:f2:fc:15:ed:4e:89: 91:65:6a:fc:63:dd:ed:ef:18:29:5c:8a:6e:6a:5e: 10:b7:da:c0:0e:5a:6e:9c:bc:1c:0d:9e:26:2c:53: 4d:2d:cf:ed:5c:b6:40:0e:cd:ea:ad:fe:0a:70:48: f5:a5:35:6f:87:32:b6:19:22:98:ef:99:2a:44:8a: 0f:bd:b0:ca:91:a1:d2:10:ec:f5:fc:4b:28:02:a6: 83:ca:24:ed:57:9b:eb:9e:95:31:b6:70:b6:cb:f6: e0:19:53:6b:71:11:fd:61:38:0a:58:8d:46:e0:86: 05:c3:b7:a2:18:4f:b0:d5:51:1b:8b:ba:4c:46:57: 9c:b1:83:59:28:b7:1c:33:ab:64:a5:2e:c1:02:47: 3a:1d:a4:95:d5:68:1b:e5:a4:f2:44:c1:31:9c:29: 5c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F0:3D:09:6E:5A:AB:AB:90:0F:06:55:D6:E3:50:D1:9B:EB:C1:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5524f1db-bbd4-3775-a453-c36094677a2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 216.152.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:ae:d4:dc:da:1d:4c:c5:57:a5:8b:58:30:94:60:7b:4c:71: 50:1d:67:58:b6:11:c8:b3:d8:cf:2d:54:66:be:2b:6d:8a:ae: 05:f5:31:54:70:05:c8:ba:1d:00:a7:2d:1c:06:c6:1b:45:f1: 3a:30:e8:7e:d9:85:8d:57:7b:66:d9:a4:16:86:d8:e2:3d:70: 1a:84:d8:db:0b:e4:db:84:a8:26:74:d6:39:b0:9c:46:e9:0b: 41:7b:44:27:02:53:a6:49:fb:d3:f1:13:29:18:cb:d9:35:12: 10:d4:c1:a9:44:fd:a3:57:b4:65:81:57:49:80:2d:f6:6d:5f: be:89:55:17:94:c7:3b:54:2e:28:1a:fa:48:d1:4f:0e:51:f7: 89:3c:59:33:bd:6f:cd:96:1b:b4:bd:d3:49:f0:ad:0e:fe:df: 26:23:3e:52:24:d8:96:12:e5:8f:39:79:68:5e:87:08:34:54: d4:46:ca:25:27:4a:8b:1e:5e:23:7a:b9:f2:7a:37:a5:9b:08: 62:40:55:65:c5:d6:be:a0:11:11:24:9b:b2:26:65:ad:39:b8: d7:2b:62:28:90:19:08:b7:90:71:02:e7:05:67:35:80:2d:02: b6:6d:3a:15:d5:82:16:4a:d3:01:29:4a:16:bc:56:e0:cb:8c: e5:66:74:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1KU85ioPCMKMqfzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDMyNTIzMDAxNVoXDTI2MDYyMzIzMDAxNVowLzEtMCsGA1UEAxMk ZTkwZmE0MDItYTdlZC00NTg2LWI1YTMtZDc4NGIzZTVjZWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGc9EKF7L75sQVCDCrUJMP8W7O5S6ksvZNfE yd2pMA00xrutFb4xwWbGST0JtpUEKSewxobizoQJoDaqah6cEEIIpb7c+JD4A+J0 fGcJjvVGwJCuJNni0GFESlJiwhFQiq3y/BXtTomRZWr8Y93t7xgpXIpual4Qt9rA DlpunLwcDZ4mLFNNLc/tXLZADs3qrf4KcEj1pTVvhzK2GSKY75kqRIoPvbDKkaHS EOz1/EsoAqaDyiTtV5vrnpUxtnC2y/bgGVNrcRH9YTgKWI1G4IYFw7eiGE+w1VEb i7pMRlecsYNZKLccM6tkpS7BAkc6HaSV1Wgb5aTyRMExnClcqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErwPQluWqurkA8GVdbjUNGb68ElMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNTUyNGYxZGItYmJkNC0z Nzc1LWE0NTMtYzM2MDk0Njc3YTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JiTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+u1NzaHUzFV6WLWDCUYHtMcVAdZ1i2Eciz2M8tVGa+K22KrgX1MVRw Bci6HQCnLRwGxhtF8Tow6H7ZhY1Xe2bZpBaG2OI9cBqE2NsL5NuEqCZ01jmwnEbp C0F7RCcCU6ZJ+9PxEykYy9k1EhDUwalE/aNXtGWBV0mALfZtX76JVReUxztULiga +kjRTw5R94k8WTO9b82WG7S900nwrQ7+3yYjPlIk2JYS5Y85eWhehwg0VNRGyiUn SoseXiN6ufJ6N6WbCGJAVWXF1r6gEREkm7ImZa05uNcrYiiQGQi3kHEC5wVnNYAt ArZtOhXVghZK0wEpSha8VuDLjOVmdP0= -----END CERTIFICATE-----Generated at Thu Mar 26 04:38:56 2026 by rpki-client