$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/ece0e23b-b608-3d3c-9882-e3d262f9c738.roa File: ece0e23b-b608-3d3c-9882-e3d262f9c738.roa (raw, json) Hash identifier: Z8mK4VzMZNl+hjzktpfkWq55dfWv9+evf+6z+91PWUA= Subject key identifier: C1:21:C6:28:95:B2:74:81:4B:7B:B4:B5:2A:8A:C7:A8:54:B4:C8:30 Certificate issuer: /CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092 Certificate serial: 010D0C9F4328584D5E1A5C0FF2900FBB0FEE6800 Authority key identifier: E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/ece0e23b-b608-3d3c-9882-e3d262f9c738.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 29992 IP address blocks: 152.128.0.0/14 maxlen: 24 152.132.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:5c:0f:f2:90:0f:bb:0f:ee:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=37064f4e-819b-4d15-9810-b460fad38e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c9:0b:c6:c7:f8:1f:68:d9:f0:0c:2a:de:0e: 80:3a:85:ce:db:ff:b4:6a:ae:97:bf:d4:57:d4:e8: 0a:e3:68:eb:f4:1b:50:45:d4:f8:cd:b6:86:8d:23: 5c:b8:00:e1:7c:d3:17:a7:3a:2a:bc:52:a8:be:71: 92:22:74:d7:41:09:ad:90:19:23:7c:0e:fa:08:9f: 86:ed:ea:26:ef:be:58:f6:7b:82:7a:52:b9:50:f4: 61:6b:43:50:31:8a:f0:b1:4a:e7:be:a1:79:2f:8e: 34:84:24:60:64:0a:1e:75:0a:bc:36:2a:76:9f:8a: ae:fc:fc:c5:e6:a2:fb:03:54:bd:77:8e:ef:54:75: a9:b5:4b:10:1b:68:5c:88:e7:79:ea:99:dc:0c:ef: e9:31:b1:e0:de:6b:2d:37:89:d7:ff:06:56:bb:b3: f1:66:f1:90:35:8b:fb:a9:19:13:4c:e3:44:f2:4e: 14:6b:76:aa:fd:93:25:de:ea:9f:ff:06:35:28:17: a1:0b:db:52:f5:94:4b:db:e4:77:0f:64:7f:0c:39: 42:5c:a8:13:2f:f6:5b:4d:15:71:fa:3f:c6:b1:d6: ef:77:08:3d:c7:0b:4c:58:73:2c:05:71:dc:75:a4: ed:42:d7:5d:3c:c2:01:0b:7b:ad:1d:76:f2:0c:c9: ec:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:21:C6:28:95:B2:74:81:4B:7B:B4:B5:2A:8A:C7:A8:54:B4:C8:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/ece0e23b-b608-3d3c-9882-e3d262f9c738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl X509v3 Authority Key Identifier: keyid:E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer sbgp-ipAddrBlock: critical IPv4: 152.128.0.0-152.133.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b6:80:8c:99:c7:6f:a0:7a:eb:8c:c1:5f:6d:40:be:13:66: 3e:45:0c:c7:8a:10:3a:7e:e6:fe:05:e7:7f:a0:d6:01:e2:a1: 28:8a:f9:ea:6c:7b:69:74:cc:86:97:57:80:35:4b:9f:b8:b5: b6:7d:9a:2c:3a:e1:f5:7f:a3:98:b1:8e:69:c1:6f:88:b4:d5: d2:b6:b0:9c:b0:c4:74:b3:62:cc:30:22:97:bd:78:cf:11:b7: 91:bc:b0:87:1c:eb:ed:8a:50:de:60:6a:a9:fb:91:d2:d5:8e: 61:d5:49:b9:aa:a2:b0:fc:a3:46:aa:f4:13:f1:78:55:78:67: 8b:70:cd:35:37:1f:05:e8:09:ec:09:f2:3f:f6:d4:d0:22:6c: 85:9f:e8:a9:eb:3c:9d:84:18:c4:a3:48:b7:81:df:6a:a4:55: 67:a2:7a:1d:41:80:dd:c7:82:0d:21:bc:f0:7c:88:34:f7:6d: c1:e6:d4:d4:2c:09:ac:8a:05:dc:6d:1e:b0:18:b7:b2:d8:59: 69:37:68:a9:07:bc:4a:fe:ae:d1:3b:3f:47:f8:c2:93:99:53: b9:47:e3:35:cc:4d:d6:8e:9a:72:1b:43:b9:65:ed:0c:1e:24: fd:13:27:00:3a:6c:b7:f0:ed:b1:2a:1a:87:69:c0:65:6a:01: ba:97:cb:6a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1eGlwP8pAPuw/uaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY0ZmFmMmEtMTdmZi00ODI3LTliZWMtYzZmZmNiMmFk MDkyMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk MzcwNjRmNGUtODE5Yi00ZDE1LTk4MTAtYjQ2MGZhZDM4ZTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMkLxsf4H2jZ8Awq3g6AOoXO2/+0aq6Xv9RX 1OgK42jr9BtQRdT4zbaGjSNcuADhfNMXpzoqvFKovnGSInTXQQmtkBkjfA76CJ+G 7eom775Y9nuCelK5UPRha0NQMYrwsUrnvqF5L440hCRgZAoedQq8Nip2n4qu/PzF 5qL7A1S9d47vVHWptUsQG2hciOd56pncDO/pMbHg3mstN4nX/wZWu7PxZvGQNYv7 qRkTTONE8k4Ua3aq/ZMl3uqf/wY1KBehC9tS9ZRL2+R3D2R/DDlCXKgTL/ZbTRVx +j/Gsdbvdwg9xwtMWHMsBXHcdaTtQtddPMIBC3utHXbyDMns9QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMEhxiiVsnSBS3u0tSqKx6hUtMgwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjRm YWYyYS0xN2ZmLTQ4MjctOWJlYy1jNmZmY2IyYWQwOTIvZWNlMGUyM2ItYjYwOC0z ZDNjLTk4ODItZTNkMjYyZjljNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGY0ZmFmMmEtMTdmZi00ODI3LTli ZWMtYzZmZmNiMmFkMDkyLzRmNGZhZjJhLTE3ZmYtNDgyNy05YmVjLWM2ZmZjYjJh ZDA5Mi5jcmwwHwYDVR0jBBgwFoAU4BNewN3Gcqc4VJWHF5QWjm2ZcC8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjRmYWYyYS0xN2ZmLTQ4MjctOWJlYy1jNmZm Y2IyYWQwOTIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMMAoDAweYgAMD AZiEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA62gIyZx2+geuuMwV9tQL4TZj5FDMeKEDp+5v4F53+g1gHi oSiK+epse2l0zIaXV4A1S5+4tbZ9miw64fV/o5ixjmnBb4i01dK2sJywxHSzYsww Ipe9eM8Rt5G8sIcc6+2KUN5gaqn7kdLVjmHVSbmqorD8o0aq9BPxeFV4Z4twzTU3 HwXoCewJ8j/21NAibIWf6KnrPJ2EGMSjSLeB32qkVWeieh1BgN3Hgg0hvPB8iDT3 bcHm1NQsCayKBdxtHrAYt7LYWWk3aKkHvEr+rtE7P0f4wpOZU7lH4zXMTdaOmnIb Q7ll7QweJP0TJwA6bLfw7bEqGodpwGVqAbqXy2o= -----END CERTIFICATE-----Generated at Tue Apr 7 13:27:58 2026 by rpki-client