$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/7d49b6f5-a2e5-373d-978f-b5f0c121cc09.roa File: 7d49b6f5-a2e5-373d-978f-b5f0c121cc09.roa (raw, json) Hash identifier: DeTRlm8mDZbrNyfkSSUYazau6id1nvi36nEXEKjbSAk= Subject key identifier: 5A:5C:F7:70:40:8E:3A:66:45:92:DD:76:E7:EB:A9:70:03:F0:6F:6C Certificate issuer: /CN=03b51393-7784-45a0-9621-168719782436 Certificate serial: 010D0C9F4328584D237A61A5855412D6259D7780 Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/7d49b6f5-a2e5-373d-978f-b5f0c121cc09.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 10384 IP address blocks: 152.87.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:61:a5:85:54:12:d6:25:9d:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b51393-7784-45a0-9621-168719782436 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=88760605-95fe-41fb-aefd-9c20a04b392d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:48:41:36:2b:48:3d:df:dc:b7:40:bb:d6:d8: a1:c3:c9:f1:43:92:f9:19:b2:cf:5a:3c:05:f5:ce: 06:d2:fa:78:98:26:3e:a4:ce:87:31:b6:6f:07:9a: b4:5b:63:e9:d7:01:cf:3c:46:16:8b:2d:10:d0:03: 14:ea:8e:32:0b:b7:5b:47:35:d4:11:b9:67:d5:13: b0:dd:6c:e9:75:8a:83:a8:22:9e:9f:5c:98:47:95: 51:cf:1a:f3:49:33:5f:ad:93:c9:ac:30:c1:89:c1: 22:30:e5:38:82:08:c1:83:eb:cf:83:67:e5:31:74: d6:4d:c9:d3:a4:91:b4:1e:69:3c:e6:ba:09:f8:39: d6:f0:f9:71:bd:df:8b:a5:db:1b:57:9e:b2:5d:e6: 60:9d:a2:03:2b:14:db:d7:af:a3:b8:19:75:87:3a: f2:0e:88:d7:d7:46:52:98:5c:3a:5a:ba:80:39:59: c5:50:52:d5:d2:f3:dc:e0:9e:70:76:a4:53:18:89: 2d:f2:ea:b8:f9:a6:e0:fb:0c:44:18:7c:6d:9b:36: 2b:29:e3:21:4d:08:4f:5e:c4:79:66:40:ff:0b:ef: a7:02:e1:5b:2b:cc:00:c0:1a:92:7f:60:be:1c:84: c5:7a:2e:b6:ee:68:62:f1:73:f1:c0:64:fb:51:fe: 1f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5C:F7:70:40:8E:3A:66:45:92:DD:76:E7:EB:A9:70:03:F0:6F:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/7d49b6f5-a2e5-373d-978f-b5f0c121cc09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl X509v3 Authority Key Identifier: keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer sbgp-ipAddrBlock: critical IPv4: 152.87.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:c6:98:ea:0c:e7:0e:5e:a1:f7:0a:bc:4d:20:25:35:75:84: 87:12:7f:66:7a:0c:0e:4b:31:95:66:e1:1c:63:54:a8:45:7f: 60:01:eb:2f:2d:9f:61:6f:ca:39:77:72:74:e9:01:3c:35:3a: 82:59:81:29:55:5f:b4:e5:4a:26:2d:40:d7:af:45:58:28:fb: 62:28:82:12:b7:a9:88:83:d7:23:d7:08:59:7e:b6:05:17:f3: 5c:86:5b:3d:5d:27:d2:a0:c0:a6:c9:2e:dd:6c:86:06:67:2f: 25:a6:4a:96:aa:69:bf:27:56:f3:c5:ab:d6:f7:24:6d:6f:68: b4:9e:84:74:20:af:6d:4f:8a:6c:42:e2:77:04:06:b7:e2:8b: 29:f5:c5:3d:e8:32:8b:ee:c1:4c:37:17:ef:7a:21:16:c3:26: 2d:9e:c2:e7:79:03:ab:b1:55:60:d7:fe:18:fb:8f:19:5d:f9: 85:a9:61:92:8b:f3:a5:ef:52:bb:53:ac:e3:ac:e5:66:6c:f2: 3e:9e:6a:93:17:c9:da:4c:f2:28:dc:bf:eb:75:a0:26:ab:9b: be:d8:cb:82:0d:ce:62:55:e2:75:c4:c7:1c:76:c0:6e:0d:d3: 71:88:0e:b4:ac:b8:e3:d2:fc:e2:33:9d:16:1c:ac:64:61:91: d3:f0:e6:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jemGlhVQS1iWdd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiNTEzOTMtNzc4NC00NWEwLTk2MjEtMTY4NzE5Nzgy NDM2MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ODg3NjA2MDUtOTVmZS00MWZiLWFlZmQtOWMyMGEwNGIzOTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUhBNitIPd/ct0C71tihw8nxQ5L5GbLPWjwF 9c4G0vp4mCY+pM6HMbZvB5q0W2Pp1wHPPEYWiy0Q0AMU6o4yC7dbRzXUEbln1ROw 3WzpdYqDqCKen1yYR5VRzxrzSTNfrZPJrDDBicEiMOU4ggjBg+vPg2flMXTWTcnT pJG0Hmk85roJ+DnW8Plxvd+LpdsbV56yXeZgnaIDKxTb16+juBl1hzryDojX10ZS mFw6WrqAOVnFUFLV0vPc4J5wdqRTGIkt8uq4+abg+wxEGHxtmzYrKeMhTQhPXsR5 ZkD/C++nAuFbK8wAwBqSf2C+HITFei627mhi8XPxwGT7Uf4f7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpc93BAjjpmRZLddufrqXAD8G9sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1 MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3MTk3ODI0MzYvN2Q0OWI2ZjUtYTJlNS0z NzNkLTk3OGYtYjVmMGMxMjFjYzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDNiNTEzOTMtNzc4NC00NWEwLTk2 MjEtMTY4NzE5NzgyNDM2LzAzYjUxMzkzLTc3ODQtNDVhMC05NjIxLTE2ODcxOTc4 MjQzNi5jcmwwHwYDVR0jBBgwFoAU7JlLmZuUJgV0wzFS7LnS+o4/BSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3 MTk3ODI0MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmFcWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADGmOoM5w5eofcKvE0gJTV1hIcSf2Z6DA5LMZVm4RxjVKhFf2AB6y8t n2Fvyjl3cnTpATw1OoJZgSlVX7TlSiYtQNevRVgo+2IoghK3qYiD1yPXCFl+tgUX 81yGWz1dJ9KgwKbJLt1shgZnLyWmSpaqab8nVvPFq9b3JG1vaLSehHQgr21PimxC 4ncEBrfiiyn1xT3oMovuwUw3F+96IRbDJi2ewud5A6uxVWDX/hj7jxld+YWpYZKL 86XvUrtTrOOs5WZs8j6eapMXydpM8ijcv+t1oCarm77Yy4INzmJV4nXExxx2wG4N 03GIDrSsuOPS/OIznRYcrGRhkdPw5og= -----END CERTIFICATE-----Generated at Fri Mar 27 05:29:29 2026 by rpki-client