$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/ad368f0a-4487-3ec5-ace1-1512fd6f37d1.roa File: ad368f0a-4487-3ec5-ace1-1512fd6f37d1.roa (raw, json) Hash identifier: J7J5rPxkgG7g1Ss5ixFOD8x59WsY2m71Bf0q1B3BcQ4= Subject key identifier: 30:4B:66:15:8A:29:6A:D1:DE:01:44:07:0C:BA:3B:2B:FE:6A:AF:73 Certificate issuer: /CN=aa27be3e-5663-4196-bb8a-966e8a6bf571 Certificate serial: 010D0C9F4328584D3F64D8B5D8FB76B6161CF5C0 Authority key identifier: 1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/ad368f0a-4487-3ec5-ace1-1512fd6f37d1.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 395516 IP address blocks: 153.65.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d8:b5:d8:fb:76:b6:16:1c:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa27be3e-5663-4196-bb8a-966e8a6bf571 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=01e2c89b-8916-4664-aa6c-af3855d26fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:30:96:80:b0:c1:94:de:e7:f3:94:0c:b4:36: 1b:4d:8d:f4:07:40:7c:5f:09:c1:7d:ac:a0:1a:9f: c6:1e:1b:43:01:d4:a1:61:29:ff:00:1c:75:b8:97: a7:70:7d:fd:77:0f:c3:6d:33:23:8c:d9:76:b6:2c: bb:4a:c3:96:80:b2:cd:21:9b:8e:e9:cc:8f:97:3a: dd:e4:1a:97:ee:3d:f5:79:78:41:57:1a:b5:99:5b: cf:99:59:78:71:90:fa:e3:54:1c:f3:59:75:2a:b0: d9:db:73:0f:76:10:98:27:ac:86:ea:6f:6f:1a:c8: 62:2b:f0:4d:fa:56:79:eb:9d:a7:f1:e1:c8:e5:e8: ac:b6:5b:09:97:d4:d6:1b:d4:b0:24:71:ae:e3:f1: 21:49:35:7c:0a:88:a9:27:ff:34:42:e4:e8:5d:ce: 75:af:dc:b8:38:a8:72:77:16:3c:91:00:58:fb:fc: c9:76:fd:24:47:27:62:ed:e6:86:6b:05:dd:0b:cb: 3a:12:78:e0:04:5f:8c:83:38:36:7e:6f:7e:a9:44: c6:97:bd:b2:be:95:a3:ba:b5:40:7a:f5:02:f0:6c: 1a:a2:88:c5:c9:01:c3:4b:97:08:5c:8a:58:02:1c: 40:6d:5c:df:a8:53:66:f1:af:42:f1:25:53:47:0b: e6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4B:66:15:8A:29:6A:D1:DE:01:44:07:0C:BA:3B:2B:FE:6A:AF:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/ad368f0a-4487-3ec5-ace1-1512fd6f37d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl X509v3 Authority Key Identifier: keyid:1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer sbgp-ipAddrBlock: critical IPv4: 153.65.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:46:82:07:4a:dc:79:cc:bd:9e:c7:99:16:b9:97:c9:d4:bf: 36:91:8d:a9:8e:dc:da:e9:f2:d6:4d:b1:ee:a6:1c:d3:8f:28: 57:19:1a:f1:2d:42:2f:88:e8:b6:ee:50:8b:ee:a3:13:78:a8: 68:51:c1:0e:23:57:b6:39:fa:fe:4e:9a:17:d1:c1:c4:f0:8a: 4c:79:3b:0c:b5:90:98:b9:89:e9:d5:45:af:d3:43:2b:94:c1: 59:87:04:1f:ad:8d:1f:20:05:22:0e:e4:45:1c:9f:22:1a:91: 9d:95:52:2b:fb:6d:bf:01:15:49:2f:65:a6:4a:48:c4:09:32: 9f:b7:34:0f:33:f6:96:c1:93:d7:8e:c3:ad:3f:0d:8e:37:ec: b3:38:f0:72:8f:ef:1c:95:a4:c6:86:ab:ff:ce:f5:68:5a:23: 44:a8:e1:73:3b:c5:24:7e:5f:19:92:88:bb:d3:4e:51:4d:61: 66:07:f4:16:81:e7:af:5c:cc:4c:a6:49:f2:06:8c:4d:ec:97: 86:8f:8c:dd:7f:35:c8:69:2a:fb:5e:d6:77:1f:de:2f:db:5d: f7:24:7f:f6:ad:6e:d2:16:30:56:b0:73:e2:4a:1a:09:a4:be: 76:57:52:88:73:71:b8:30:84:06:30:4c:1b:1f:99:67:d4:32: 01:3b:cb:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNi12Pt2thYc9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyN2JlM2UtNTY2My00MTk2LWJiOGEtOTY2ZThhNmJm NTcxMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk MDFlMmM4OWItODkxNi00NjY0LWFhNmMtYWYzODU1ZDI2ZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDCWgLDBlN7n85QMtDYbTY30B0B8XwnBfayg Gp/GHhtDAdShYSn/ABx1uJencH39dw/DbTMjjNl2tiy7SsOWgLLNIZuO6cyPlzrd 5BqX7j31eXhBVxq1mVvPmVl4cZD641Qc81l1KrDZ23MPdhCYJ6yG6m9vGshiK/BN +lZ5652n8eHI5eistlsJl9TWG9SwJHGu4/EhSTV8CoipJ/80QuToXc51r9y4OKhy dxY8kQBY+/zJdv0kRydi7eaGawXdC8s6EnjgBF+Mgzg2fm9+qUTGl72yvpWjurVA evUC8GwaoojFyQHDS5cIXIpYAhxAbVzfqFNm8a9C8SVTRwvmxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBLZhWKKWrR3gFEBwy6Oyv+aq9zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTI3 YmUzZS01NjYzLTQxOTYtYmI4YS05NjZlOGE2YmY1NzEvYWQzNjhmMGEtNDQ4Ny0z ZWM1LWFjZTEtMTUxMmZkNmYzN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEyN2JlM2UtNTY2My00MTk2LWJi OGEtOTY2ZThhNmJmNTcxL2FhMjdiZTNlLTU2NjMtNDE5Ni1iYjhhLTk2NmU4YTZi ZjU3MS5jcmwwHwYDVR0jBBgwFoAUG5CFrukXfW06zWMhpYfluAl2X+UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTI3YmUzZS01NjYzLTQxOTYtYmI4YS05NjZl OGE2YmY1NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmUFHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNGggdK3HnMvZ7HmRa5l8nUvzaRjamO3Nrp8tZNse6mHNOPKFcZGvEt Qi+I6LbuUIvuoxN4qGhRwQ4jV7Y5+v5OmhfRwcTwikx5Owy1kJi5ienVRa/TQyuU wVmHBB+tjR8gBSIO5EUcnyIakZ2VUiv7bb8BFUkvZaZKSMQJMp+3NA8z9pbBk9eO w60/DY437LM48HKP7xyVpMaGq//O9WhaI0So4XM7xSR+XxmSiLvTTlFNYWYH9BaB 569czEymSfIGjE3sl4aPjN1/NchpKvte1ncf3i/bXfckf/atbtIWMFawc+JKGgmk vnZXUohzcbgwhAYwTBsfmWfUMgE7y9o= -----END CERTIFICATE-----Generated at Thu Mar 26 11:29:05 2026 by rpki-client