$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/fb7a217d-e822-3be1-b05d-382454b43eb4.roa File: fb7a217d-e822-3be1-b05d-382454b43eb4.roa (raw, json) Hash identifier: 9v/5yP1HZ0eVrIMxj/mTs8dqmNjnyN4u6xyX5Ytw0rg= Subject key identifier: 56:18:C5:27:BB:81:91:A0:9E:E3:72:76:1F:52:73:1F:7D:ED:D7:BB Certificate issuer: /CN=b89f752a-b36c-4af5-938d-969edb017937 Certificate serial: 010D0C9F4328584D9A200E19C2A1091C32A7B980 Authority key identifier: BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/fb7a217d-e822-3be1-b05d-382454b43eb4.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 9025 IP address blocks: 153.46.162.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:0e:19:c2:a1:09:1c:32:a7:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b89f752a-b36c-4af5-938d-969edb017937 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=5a9f5ff5-9f26-4f07-981f-3db7629d5a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:64:a4:6f:a5:2d:20:7d:15:2f:aa:9a:bf:2c: 31:26:a2:4a:e2:1e:03:6a:ae:59:b9:da:2e:2b:3a: c1:4e:18:42:4b:28:1c:4f:46:d0:85:25:24:50:c7: 07:3f:a7:85:85:b6:f3:96:b7:31:e0:2f:20:2a:88: ef:77:25:bf:49:86:04:3e:81:07:66:75:8c:0b:9b: c1:7a:0b:46:ae:00:f4:da:c4:d1:e6:4c:f4:c9:7a: a1:ed:2e:7e:ea:8c:5a:7b:7c:8e:4b:f3:f0:94:5f: da:2a:15:a3:0c:0c:51:64:06:53:33:8e:c7:6a:ea: 4c:93:f5:5a:ed:91:93:32:3d:a9:c8:1e:ee:6e:f4: 6c:88:ea:08:53:81:3d:db:9d:e1:ea:38:0c:6a:ed: da:16:6e:ba:d0:55:af:b5:4d:f3:13:e1:ec:79:d9: af:64:65:bc:c1:33:e3:42:0b:84:77:da:02:d1:ed: fb:da:3e:5f:48:51:db:0e:9c:61:d7:da:b2:ea:ef: 65:4b:a1:a5:ed:8a:f6:4d:a1:81:fb:4a:0d:c3:11: 31:d4:5c:53:5d:d1:d5:10:fd:aa:2d:47:67:30:d0: 07:2a:85:81:8b:91:12:78:70:2c:0b:6e:d2:77:38: 78:d5:75:f2:47:20:51:3d:0d:30:50:3f:fb:3c:97: 82:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:18:C5:27:BB:81:91:A0:9E:E3:72:76:1F:52:73:1F:7D:ED:D7:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/fb7a217d-e822-3be1-b05d-382454b43eb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl X509v3 Authority Key Identifier: keyid:BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer sbgp-ipAddrBlock: critical IPv4: 153.46.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:85:b9:e1:96:23:78:9d:46:e7:64:7f:77:47:bb:a2:0c:5e: f3:51:a5:16:92:01:80:d8:c1:fb:00:64:88:e2:41:79:b3:ba: 65:a9:f0:96:14:b1:01:af:a1:fc:1f:e5:6f:2a:bc:0e:37:ec: e4:2c:22:c7:63:71:28:0f:35:4e:4b:1f:d5:cb:87:56:00:48: d8:8e:f5:bb:43:ab:e4:86:48:89:2f:9e:de:6b:fa:7c:b6:3a: 33:c0:2d:a9:3e:27:61:8f:b0:36:01:96:59:72:8e:0d:a0:d5: 5d:43:1e:6f:d4:f3:4e:84:4e:c4:29:7e:2b:5c:d1:05:a6:f6: 60:83:58:9c:8f:9a:fd:b1:70:72:8d:a2:9f:46:7f:09:b4:a9: e3:15:92:5f:b7:04:2e:1b:cc:4e:b9:13:43:61:61:42:dd:65: a2:b8:81:f8:c4:77:f0:b7:d8:e4:e4:25:77:28:0b:f4:11:6a: 3d:ae:56:66:a2:fd:ab:14:51:c3:36:bd:ac:de:e0:56:11:24: 27:7e:90:9f:af:66:eb:d6:21:fd:12:e5:b3:f4:85:2f:86:58: b5:05:e0:06:4c:54:f2:d0:be:1b:0e:75:0e:eb:87:89:d8:13: c9:01:a8:3d:55:0c:5b:ff:0e:3c:cc:29:59:cd:d2:3b:5d:cd: 0c:aa:76:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIA4ZwqEJHDKnuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg5Zjc1MmEtYjM2Yy00YWY1LTkzOGQtOTY5ZWRiMDE3 OTM3MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk NWE5ZjVmZjUtOWYyNi00ZjA3LTk4MWYtM2RiNzYyOWQ1YTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02Skb6UtIH0VL6qavywxJqJK4h4Daq5Zudou KzrBThhCSygcT0bQhSUkUMcHP6eFhbbzlrcx4C8gKojvdyW/SYYEPoEHZnWMC5vB egtGrgD02sTR5kz0yXqh7S5+6oxae3yOS/PwlF/aKhWjDAxRZAZTM47HaupMk/Va 7ZGTMj2pyB7ubvRsiOoIU4E9253h6jgMau3aFm660FWvtU3zE+HsedmvZGW8wTPj QguEd9oC0e372j5fSFHbDpxh19qy6u9lS6Gl7Yr2TaGB+0oNwxEx1FxTXdHVEP2q LUdnMNAHKoWBi5ESeHAsC27Sdzh41XXyRyBRPQ0wUD/7PJeCvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYYxSe7gZGgnuNydh9Scx997de7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iODlm NzUyYS1iMzZjLTRhZjUtOTM4ZC05NjllZGIwMTc5MzcvZmI3YTIxN2QtZTgyMi0z YmUxLWIwNWQtMzgyNDU0YjQzZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjg5Zjc1MmEtYjM2Yy00YWY1LTkz OGQtOTY5ZWRiMDE3OTM3L2I4OWY3NTJhLWIzNmMtNGFmNS05MzhkLTk2OWVkYjAx NzkzNy5jcmwwHwYDVR0jBBgwFoAUuonUM4+GSs6IR1dJ8iuEb2su+c8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iODlmNzUyYS1iMzZjLTRhZjUtOTM4ZC05Njll ZGIwMTc5MzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmS6iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGFueGWI3idRudkf3dHu6IMXvNRpRaSAYDYwfsAZIjiQXmzumWp8JYU sQGvofwf5W8qvA437OQsIsdjcSgPNU5LH9XLh1YASNiO9btDq+SGSIkvnt5r+ny2 OjPALak+J2GPsDYBlllyjg2g1V1DHm/U806ETsQpfitc0QWm9mCDWJyPmv2xcHKN op9Gfwm0qeMVkl+3BC4bzE65E0NhYULdZaK4gfjEd/C32OTkJXcoC/QRaj2uVmai /asUUcM2vaze4FYRJCd+kJ+vZuvWIf0S5bP0hS+GWLUF4AZMVPLQvhsOdQ7rh4nY E8kBqD1VDFv/DjzMKVnN0jtdzQyqduo= -----END CERTIFICATE-----Generated at Mon Apr 27 23:46:12 2026 by rpki-client