$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dd6d5920-ffeb-3cb0-9f4f-42fa6e6974f2.roa File: dd6d5920-ffeb-3cb0-9f4f-42fa6e6974f2.roa (raw, json) Hash identifier: rmPe3l3ssMw/LReU1xjmG4V2d/sS6uEq/htmX4WkfPs= Subject key identifier: 48:5E:FD:5C:BD:AD:07:B5:8B:1D:CD:E8:32:8C:8D:75:E9:BF:98:29 Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F4328584D4A8FA689653EFFC2AE238F40 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dd6d5920-ffeb-3cb0-9f4f-42fa6e6974f2.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 26512 IP address blocks: 168.245.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:a6:89:65:3e:ff:c2:ae:23:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=94d8f23c-c881-49f0-b735-0bef6c8a3f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a1:5c:3a:fa:22:81:1a:09:c7:60:77:14:3d: 6f:13:d5:a7:96:99:64:d3:98:86:e9:e5:00:ce:7c: 6f:6c:33:e7:2b:b3:be:9b:76:29:eb:5b:06:f3:86: 0d:bc:5a:8d:d6:e5:ec:e4:98:3a:6b:3a:ee:c7:25: 87:f7:b6:20:4d:0d:ce:a7:68:f2:d7:da:c4:77:d3: ca:4b:4a:64:0e:b2:21:ca:1d:6b:04:05:9b:77:13: 51:65:5b:67:1f:25:d9:26:cd:0f:b1:15:2a:a1:20: 7c:54:df:65:c8:43:b5:ae:e0:36:22:66:cd:a8:b0: 3d:a0:c0:ed:b6:fc:b3:e0:2a:c5:b8:81:7f:98:3a: 84:ee:91:6b:7b:9a:03:cd:4c:8d:41:dd:10:07:a3: a9:e0:b3:7b:62:d4:f9:5a:6e:21:93:1a:58:26:c1: e4:d2:2a:f2:48:ef:1b:ee:3d:3d:ac:e9:2f:55:ee: a9:5a:14:62:bf:1a:21:a9:c3:1b:a2:28:12:4c:44: 70:e0:75:3e:44:16:dd:23:82:90:e8:d4:9b:88:8f: 72:0a:49:48:d5:0c:6b:c5:3c:82:29:c7:4f:a6:65: 13:be:cc:39:9f:bb:19:16:9b:1e:03:c3:be:7d:1a: 84:39:56:13:91:85:16:85:30:2e:1f:2a:80:29:e4: d6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5E:FD:5C:BD:AD:07:B5:8B:1D:CD:E8:32:8C:8D:75:E9:BF:98:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dd6d5920-ffeb-3cb0-9f4f-42fa6e6974f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 168.245.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:aa:97:fb:0a:91:a1:4b:69:4c:97:d0:f6:73:89:a5:d4:98: dd:46:32:a9:ea:64:46:de:d8:dd:6e:fd:4b:c9:ed:1d:6e:bf: 73:5b:51:df:fb:ca:2f:cc:d7:bf:9e:1d:38:9b:33:a1:8f:3a: 56:ca:08:02:48:be:50:7d:38:57:a5:b8:4d:e6:39:aa:b0:88: aa:0b:65:33:f5:ce:86:e7:ef:a8:7c:23:94:bf:91:4a:90:07: 5a:a6:11:9f:d6:fb:15:fe:24:f5:b3:cb:45:02:94:88:7b:d0: a4:f0:42:3c:f9:05:00:81:0a:c4:56:75:3e:d8:c3:ae:69:2d: 8f:40:ef:a2:30:12:6e:cc:3e:63:0f:cd:77:ae:94:fe:81:cc: 5c:38:36:4c:11:20:30:71:3f:08:3b:5b:2f:67:09:97:31:76: ee:ae:d2:f7:3c:1a:d7:d9:fc:0f:ff:8a:0d:41:69:d1:d7:4f: c2:ed:7b:a2:99:24:f6:ed:8f:10:c7:e4:cb:cd:ba:da:1d:6d: 8f:ac:32:7b:ca:49:68:0f:9a:55:d7:c6:6b:d4:db:ea:d6:76: 9e:69:22:6e:d6:ad:a2:c0:46:b7:1c:05:11:1e:d8:15:56:f3: 10:7a:ba:fe:07:27:9c:6e:a2:5a:8d:34:1f:91:e6:71:87:03: f4:11:01:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj6aJZT7/wq4jj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk OTRkOGYyM2MtYzg4MS00OWYwLWI3MzUtMGJlZjZjOGEzZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqFcOvoigRoJx2B3FD1vE9Wnlplk05iG6eUA znxvbDPnK7O+m3Yp61sG84YNvFqN1uXs5Jg6azruxyWH97YgTQ3Op2jy19rEd9PK S0pkDrIhyh1rBAWbdxNRZVtnHyXZJs0PsRUqoSB8VN9lyEO1ruA2ImbNqLA9oMDt tvyz4CrFuIF/mDqE7pFre5oDzUyNQd0QB6Op4LN7YtT5Wm4hkxpYJsHk0irySO8b 7j09rOkvVe6pWhRivxohqcMboigSTERw4HU+RBbdI4KQ6NSbiI9yCklI1QxrxTyC KcdPpmUTvsw5n7sZFpseA8O+fRqEOVYTkYUWhTAuHyqAKeTWiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhe/Vy9rQe1ix3N6DKMjXXpv5gpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvZGQ2ZDU5MjAtZmZlYi0z Y2IwLTlmNGYtNDJmYTZlNjk3NGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqPWZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCql/sKkaFLaUyX0PZziaXUmN1GMqnqZEbe2N1u/UvJ7R1uv3NbUd/7 yi/M17+eHTibM6GPOlbKCAJIvlB9OFeluE3mOaqwiKoLZTP1zobn76h8I5S/kUqQ B1qmEZ/W+xX+JPWzy0UClIh70KTwQjz5BQCBCsRWdT7Yw65pLY9A76IwEm7MPmMP zXeulP6BzFw4NkwRIDBxPwg7Wy9nCZcxdu6u0vc8GtfZ/A//ig1BadHXT8Lte6KZ JPbtjxDH5MvNutodbY+sMnvKSWgPmlXXxmvU2+rWdp5pIm7WraLARrccBREe2BVW 8xB6uv4HJ5xuolqNNB+R5nGHA/QRAcM= -----END CERTIFICATE-----Generated at Thu Mar 26 14:17:51 2026 by rpki-client