$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cb12d0b8-8aba-329a-8a5d-c12e45e82aae.roa File: cb12d0b8-8aba-329a-8a5d-c12e45e82aae.roa (raw, json) Hash identifier: 5QN7rTsWsF74Pb59kHQ2O777pfg315B2jtIhmSKZ/OA= Subject key identifier: 1C:68:AE:39:83:02:52:BC:DD:95:04:9F:33:91:26:92:85:F6:5F:83 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584D4A5FEC513F5A2272F892CB80 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cb12d0b8-8aba-329a-8a5d-c12e45e82aae.roa Signing time: Wed 25 Mar 2026 23:24:40 +0000 ROA not before: Wed 25 Mar 2026 23:24:40 +0000 ROA not after: Tue 23 Jun 2026 23:24:40 +0000 asID: 63023 IP address blocks: 216.152.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:5f:ec:51:3f:5a:22:72:f8:92:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Mar 25 23:24:40 2026 GMT Not After : Jun 23 23:24:40 2026 GMT Subject: CN=53c9eeab-7069-41de-860d-44afb63da679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cf:54:73:fa:95:26:f5:c5:87:94:09:36:48: 43:74:ca:df:7a:a1:80:24:0c:3c:95:0b:76:af:c6: 3c:3b:71:3d:cb:31:3e:90:64:c1:ba:c2:2f:a1:a4: 0f:cb:3f:af:50:4f:7e:4c:c2:ce:8e:8a:bd:94:5e: 89:20:63:4c:4a:cf:62:e4:8a:10:01:d7:09:d3:ca: da:8d:67:ad:e4:e9:a2:f1:8a:72:07:a3:9e:37:26: c6:47:46:b7:7d:98:01:53:6e:58:e6:f2:1e:87:0a: 09:47:3e:5b:c5:26:46:28:d9:18:a7:87:a7:73:fd: af:76:cf:8d:3b:ad:9c:6d:2d:0e:f1:83:17:0f:88: fe:a2:2e:c4:60:1d:ba:d3:e7:6f:1e:c0:80:f6:96: 13:ab:8a:cf:49:a0:4a:42:78:01:9f:1c:71:25:1a: 58:fe:91:ed:38:ba:af:91:a6:f4:a9:62:66:63:05: 32:6f:29:52:5b:9e:06:78:69:9e:9d:69:bb:d7:9f: 77:a3:a3:cd:8e:59:6a:06:1a:d8:57:d2:0c:90:69: f3:8e:c6:e7:d9:d2:ef:f0:55:f1:10:87:39:77:08: 74:94:fc:4c:89:67:c8:51:bc:c2:47:67:eb:1e:66: 87:7b:7f:49:ea:2e:94:a4:a1:3a:92:57:f4:87:58: 5b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:68:AE:39:83:02:52:BC:DD:95:04:9F:33:91:26:92:85:F6:5F:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cb12d0b8-8aba-329a-8a5d-c12e45e82aae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 216.152.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:b4:3b:91:23:5b:93:a5:16:d3:e1:ed:c7:3d:5b:c4:24:f8: 23:65:90:7a:98:0a:9b:cb:4c:3b:ac:44:44:59:09:5b:50:25: 5d:24:02:60:4b:4d:7c:d4:c4:5d:80:e8:b4:a1:dc:05:e2:04: 2f:bc:9d:60:0c:a9:fa:a0:11:5a:a1:e8:4a:8b:15:e3:a9:4c: ba:e1:6f:66:9d:73:59:fe:2a:44:74:d8:4f:24:01:f0:af:00: 4a:d7:44:ae:1b:f0:23:e4:e7:23:57:ee:b0:d1:ce:69:02:23: 7f:31:6a:4a:52:5d:28:35:ca:f0:17:d0:f7:8c:21:ce:42:23: 1e:ad:75:8b:78:1d:b2:a0:63:86:5b:f1:e3:30:e8:34:18:cf: e7:71:5a:1d:74:2f:53:61:56:44:6d:f7:0c:1a:75:f6:f0:a7: 6f:2d:1c:de:4d:d2:f0:1c:cd:f8:ea:2c:a6:ed:82:72:3a:e8: 56:aa:ea:0b:9a:15:ad:4c:a9:aa:1f:a3:5f:f1:23:ab:41:46: 01:e1:32:f6:fd:d6:bf:a3:3f:e3:0f:f6:85:29:b0:eb:37:6a: e6:93:9c:d5:58:13:10:1d:7b:97:f0:d0:1f:99:dd:da:0e:00: b2:4c:9f:c5:62:40:6f:aa:b0:c0:3b:2a:3f:78:bb:5f:54:ad: 0e:d5:ee:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1KX+xRP1oicviSy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDMyNTIzMjQ0MFoXDTI2MDYyMzIzMjQ0MFowLzEtMCsGA1UEAxMk NTNjOWVlYWItNzA2OS00MWRlLTg2MGQtNDRhZmI2M2RhNjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic9Uc/qVJvXFh5QJNkhDdMrfeqGAJAw8lQt2 r8Y8O3E9yzE+kGTBusIvoaQPyz+vUE9+TMLOjoq9lF6JIGNMSs9i5IoQAdcJ08ra jWet5Omi8YpyB6OeNybGR0a3fZgBU25Y5vIehwoJRz5bxSZGKNkYp4enc/2vds+N O62cbS0O8YMXD4j+oi7EYB260+dvHsCA9pYTq4rPSaBKQngBnxxxJRpY/pHtOLqv kab0qWJmYwUybylSW54GeGmenWm71593o6PNjllqBhrYV9IMkGnzjsbn2dLv8FXx EIc5dwh0lPxMiWfIUbzCR2frHmaHe39J6i6UpKE6klf0h1hbjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxorjmDAlK83ZUEnzORJpKF9l+DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvY2IxMmQwYjgtOGFiYS0z MjlhLThhNWQtYzEyZTQ1ZTgyYWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JiXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACa0O5EjW5OlFtPh7cc9W8Qk+CNlkHqYCpvLTDusRERZCVtQJV0kAmBL TXzUxF2A6LSh3AXiBC+8nWAMqfqgEVqh6EqLFeOpTLrhb2adc1n+KkR02E8kAfCv AErXRK4b8CPk5yNX7rDRzmkCI38xakpSXSg1yvAX0PeMIc5CIx6tdYt4HbKgY4Zb 8eMw6DQYz+dxWh10L1NhVkRt9wwadfbwp28tHN5N0vAczfjqLKbtgnI66Faq6gua Fa1Mqaofo1/xI6tBRgHhMvb91r+jP+MP9oUpsOs3auaTnNVYExAde5fw0B+Z3doO ALJMn8ViQG+qsMA7Kj94u19UrQ7V7ss= -----END CERTIFICATE-----Generated at Thu Mar 26 05:26:51 2026 by rpki-client