$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/fa63886b-397a-3d98-acbc-150482f89826.roa File: fa63886b-397a-3d98-acbc-150482f89826.roa (raw, json) Hash identifier: tp5LouEOhguibub3q5tYu7d9lYX0S8WOkL9Kx+ndlDk= Subject key identifier: 8F:53:76:3F:75:72:52:EF:AE:8B:80:92:4B:95:7D:86:61:CE:44:99 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584DA86B0429727E834108170F00 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/fa63886b-397a-3d98-acbc-150482f89826.roa Signing time: Tue 28 Apr 2026 15:53:00 +0000 ROA not before: Tue 28 Apr 2026 15:53:00 +0000 ROA not after: Mon 27 Jul 2026 15:53:00 +0000 asID: 40948 IP address blocks: 153.75.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:6b:04:29:72:7e:83:41:08:17:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Apr 28 15:53:00 2026 GMT Not After : Jul 27 15:53:00 2026 GMT Subject: CN=2b18622d-f7fe-45b1-89cf-c702e738ac89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:89:f3:6c:b4:90:c2:34:4f:ef:de:5c:ec:21: 3b:a3:2b:21:9f:49:96:0a:25:63:ef:85:fa:d8:cb: 4d:47:b6:4b:5a:7c:9d:78:49:60:28:a9:20:65:6d: 37:5a:08:d7:84:b9:db:c4:90:05:e7:62:51:be:21: a9:ea:3e:9e:35:0f:63:ed:ce:7b:4b:27:af:e3:8e: 99:cd:7c:06:9e:5b:d6:2a:8a:43:c8:f2:08:68:2a: 98:4b:a1:92:15:b6:7e:60:bb:34:fd:94:56:6a:44: 3f:36:9b:d3:c6:59:d8:7b:75:c4:8c:8f:d7:60:a5: 2f:76:c6:84:e7:0e:b3:5e:57:c1:29:b7:bd:c2:4c: 39:7b:76:95:b9:79:4d:13:7a:da:19:59:4b:f3:65: da:c3:30:89:c6:76:20:ee:23:ac:ef:b3:49:da:60: 3f:4e:0f:9c:23:76:52:79:28:f7:03:9f:26:66:db: a2:ad:bc:36:01:d7:cc:1b:d1:98:07:30:97:53:92: 60:74:b3:44:e8:2f:4d:6f:39:f1:8c:2e:b7:5e:f8: 94:a3:9b:fc:c1:f4:6b:6f:5e:20:56:1d:6e:56:61: 52:3e:22:ac:e3:9e:6b:64:2c:de:c5:bb:21:25:2c: 2d:9f:22:f9:bf:38:01:32:32:91:4b:c8:b7:99:9f: 01:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:53:76:3F:75:72:52:EF:AE:8B:80:92:4B:95:7D:86:61:CE:44:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/fa63886b-397a-3d98-acbc-150482f89826.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 153.75.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:21:af:34:b5:57:e0:38:9f:af:91:69:ed:dd:e3:ac:93:5f: e4:19:b2:12:17:24:76:a8:12:b6:36:4e:f1:7f:84:81:d4:b2: 66:cd:7e:4b:f6:16:95:d6:a7:10:3f:c5:71:12:fd:da:a3:91: cd:65:3d:ed:47:1e:af:a9:8f:84:64:7e:41:98:6c:77:dc:45: f5:12:36:1a:bd:f0:7b:d1:53:c7:2f:b9:15:1c:ab:3a:56:b8: 22:5e:c3:7d:62:cd:1b:cd:7a:a2:7a:fd:52:d7:b0:1f:1c:e9: 18:60:d1:62:d7:fd:29:cf:27:7e:dc:a3:b3:02:0b:e5:9a:94: 68:a0:fa:b8:84:36:50:06:bd:4b:56:98:96:aa:e3:59:68:f0: 74:a0:93:5f:08:50:1b:b1:17:44:e0:e0:98:27:56:eb:89:15: 1b:32:16:e5:52:0f:51:18:dc:c4:05:58:a6:33:ce:fc:fe:10: 9b:ef:fc:96:6c:d4:68:3d:ea:bc:dd:ac:e3:09:38:c2:87:26: 69:8f:80:75:bc:04:11:0b:b7:df:48:21:ea:9b:0a:a6:46:07: 4a:93:b5:a0:de:00:9c:c9:2a:e7:64:39:5c:0e:42:08:bf:e3: 9b:4a:53:2b:ac:0f:d5:13:37:58:10:93:dd:e7:4c:d4:18:cc: 6a:1b:07:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oawQpcn6DQQgXDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MDQyODE1NTMwMFoXDTI2MDcyNzE1NTMwMFowLzEtMCsGA1UEAxMk MmIxODYyMmQtZjdmZS00NWIxLTg5Y2YtYzcwMmU3MzhhYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YnzbLSQwjRP795c7CE7oyshn0mWCiVj74X6 2MtNR7ZLWnydeElgKKkgZW03WgjXhLnbxJAF52JRviGp6j6eNQ9j7c57Syev446Z zXwGnlvWKopDyPIIaCqYS6GSFbZ+YLs0/ZRWakQ/NpvTxlnYe3XEjI/XYKUvdsaE 5w6zXlfBKbe9wkw5e3aVuXlNE3raGVlL82XawzCJxnYg7iOs77NJ2mA/Tg+cI3ZS eSj3A58mZtuirbw2AdfMG9GYBzCXU5JgdLNE6C9NbznxjC63XviUo5v8wfRrb14g Vh1uVmFSPiKs455rZCzexbshJSwtnyL5vzgBMjKRS8i3mZ8B9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9Tdj91clLvrouAkkuVfYZhzkSZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvZmE2Mzg4NmItMzk3YS0z ZDk4LWFjYmMtMTUwNDgyZjg5ODI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmUsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYhrzS1V+A4n6+Rae3d46yTX+QZshIXJHaoErY2TvF/hIHUsmbNfkv2 FpXWpxA/xXES/dqjkc1lPe1HHq+pj4RkfkGYbHfcRfUSNhq98HvRU8cvuRUcqzpW uCJew31izRvNeqJ6/VLXsB8c6Rhg0WLX/SnPJ37co7MCC+WalGig+riENlAGvUtW mJaq41lo8HSgk18IUBuxF0Tg4JgnVuuJFRsyFuVSD1EY3MQFWKYzzvz+EJvv/JZs 1Gg96rzdrOMJOMKHJmmPgHW8BBELt99IIeqbCqZGB0qTtaDeAJzJKudkOVwOQgi/ 45tKUyusD9UTN1gQk93nTNQYzGobB40= -----END CERTIFICATE-----Generated at Wed May 13 13:30:19 2026 by rpki-client