$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/0d0aba99-1d23-3055-8053-ed53bc2f10a5.roa File: 0d0aba99-1d23-3055-8053-ed53bc2f10a5.roa (raw, json) Hash identifier: C8mMKHpVW/eSewgMN6yr56trn+WXLCdWW+TjYJEY1kY= Subject key identifier: 7D:EE:08:1A:F1:D8:1A:60:70:20:38:E3:AC:C2:84:E3:D1:B9:5F:0A Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Certificate serial: 010D0C9F4328584D9A200EBD79608218F071DE00 Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/0d0aba99-1d23-3055-8053-ed53bc2f10a5.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 32710 IP address blocks: 164.153.128.0/24 maxlen: 32 164.153.129.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:0e:bd:79:60:82:18:f0:71:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=cc27aab5-be4e-4d8f-8d81-605568294e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:84:64:29:9a:05:2d:ec:c9:6b:ba:b4:a5:b9: 4c:45:c3:ce:2a:e2:f0:85:9a:f4:59:b0:cd:66:f7: fc:a4:86:65:a2:4e:21:76:2e:c7:2b:42:e4:e9:a8: 34:cd:74:29:45:66:9f:78:d4:bf:e4:61:f9:00:1e: 0c:2c:ce:26:6e:91:f3:26:12:27:83:d2:b9:48:8a: f1:2f:17:d1:b1:a0:e5:c7:74:c9:30:bd:08:b0:c1: 79:71:a8:c0:9b:18:2e:e9:01:31:ac:c2:57:4e:46: 87:a3:45:7c:bb:9c:23:00:41:e9:ac:ce:b1:3c:6e: 5d:82:be:f1:81:c5:11:8c:0d:66:95:f1:6f:2a:2e: 43:72:51:cf:48:b6:aa:62:00:4e:ec:f1:86:73:f8: c1:40:65:a2:28:d4:14:82:2d:10:4c:30:7d:8a:dc: d7:51:50:e3:c8:98:cc:97:d1:1d:c8:15:df:f9:32: 46:07:17:d9:9c:66:0b:c9:fb:11:fa:34:f5:46:58: 62:b3:c7:9a:a1:1e:a0:f7:bf:b3:e6:40:d5:f2:1e: 4c:37:b5:a0:87:c6:59:46:83:2a:8e:f6:70:86:17: 30:0a:cd:ad:9f:67:b9:f0:55:c1:5e:b0:d6:2d:ed: fe:0d:cc:58:e3:13:8e:ff:84:76:59:44:cd:93:9d: eb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EE:08:1A:F1:D8:1A:60:70:20:38:E3:AC:C2:84:E3:D1:B9:5F:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/0d0aba99-1d23-3055-8053-ed53bc2f10a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl X509v3 Authority Key Identifier: keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer sbgp-ipAddrBlock: critical IPv4: 164.153.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:fa:c8:41:b8:97:2b:d0:33:08:19:ac:ee:55:7e:e4:85:3c: 12:6b:6b:66:5e:08:30:84:98:1e:eb:71:48:1c:e4:57:ca:55: a4:22:e0:c4:21:bf:34:d2:77:2a:3a:ae:31:17:85:d6:6c:34: d3:1e:fe:1f:b8:2c:08:85:45:35:cb:28:ce:21:53:31:22:bf: 97:d0:6b:ea:1c:b3:8c:50:92:95:dc:3a:c6:94:c1:8b:25:fd: cc:ea:fb:4d:d9:c3:88:92:3e:67:53:a0:ef:39:36:28:4b:2f: d3:b0:f8:6c:9c:aa:b5:57:3f:83:7b:6f:06:f4:19:4f:5e:b1: a3:c9:47:f1:28:c2:4c:65:03:e0:8d:a9:33:43:b9:02:c0:b8: 8d:50:99:88:58:79:78:2e:54:59:e0:26:54:27:f8:5a:a1:28: 11:8c:e4:28:53:71:26:ed:fa:ca:bd:94:46:84:95:dd:0c:0a: 71:9e:31:f6:47:c0:d8:76:06:1c:c7:b1:35:da:5f:fa:72:8c: f7:c1:b8:77:d4:e8:b4:a9:84:c4:36:b1:69:d5:b6:27:ae:47: d3:99:35:ab:7a:b9:17:da:3f:03:24:86:91:53:35:ea:a4:d4: 19:7b:4f:82:ed:d2:c9:c1:dc:cb:81:af:3f:f1:25:6d:64:e6: 88:f1:a8:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIA69eWCCGPBx3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk ZGEwMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk Y2MyN2FhYjUtYmU0ZS00ZDhmLThkODEtNjA1NTY4Mjk0ZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYRkKZoFLezJa7q0pblMRcPOKuLwhZr0WbDN Zvf8pIZlok4hdi7HK0Lk6ag0zXQpRWafeNS/5GH5AB4MLM4mbpHzJhIng9K5SIrx LxfRsaDlx3TJML0IsMF5cajAmxgu6QExrMJXTkaHo0V8u5wjAEHprM6xPG5dgr7x gcURjA1mlfFvKi5DclHPSLaqYgBO7PGGc/jBQGWiKNQUgi0QTDB9itzXUVDjyJjM l9EdyBXf+TJGBxfZnGYLyfsR+jT1Rlhis8eaoR6g97+z5kDV8h5MN7Wgh8ZZRoMq jvZwhhcwCs2tn2e58FXBXrDWLe3+DcxY4xOO/4R2WUTNk53rxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3uCBrx2BpgcCA446zChOPRuV8KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2 ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvMGQwYWJhOTktMWQyMy0z MDU1LTgwNTMtZWQ1M2JjMmYxMGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2 ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1 NGVmNmRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpJmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHv6yEG4lyvQMwgZrO5VfuSFPBJra2ZeCDCEmB7rcUgc5FfKVaQi4MQh vzTSdyo6rjEXhdZsNNMe/h+4LAiFRTXLKM4hUzEiv5fQa+ocs4xQkpXcOsaUwYsl /czq+03Zw4iSPmdToO85NihLL9Ow+GycqrVXP4N7bwb0GU9esaPJR/EowkxlA+CN qTNDuQLAuI1QmYhYeXguVFngJlQn+FqhKBGM5ChTcSbt+sq9lEaEld0MCnGeMfZH wNh2BhzHsTXaX/pyjPfBuHfU6LSphMQ2sWnVtieuR9OZNat6uRfaPwMkhpFTNeqk 1Bl7T4Lt0snB3MuBrz/xJW1k5ojxqCE= -----END CERTIFICATE-----Generated at Wed May 13 11:58:13 2026 by rpki-client