$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/521cdfd3-e2d0-3d53-951f-67811b5957ef.roa File: 521cdfd3-e2d0-3d53-951f-67811b5957ef.roa (raw, json) Hash identifier: 3xUQta01GeTvC+XRU6gVbzMuZPL9X/FNC0niz/I2p6Q= Subject key identifier: 64:4E:40:3A:8E:56:6D:22:22:27:9F:46:8B:6E:4E:45:29:D3:A7:F7 Certificate issuer: /CN=d2584a20-171d-406f-91e5-a70a19be13b8 Certificate serial: 010D0C9F4328584DE15083CE0CA271644BE8D590 Authority key identifier: 56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/521cdfd3-e2d0-3d53-951f-67811b5957ef.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 36517 IP address blocks: 198.148.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:83:ce:0c:a2:71:64:4b:e8:d5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2584a20-171d-406f-91e5-a70a19be13b8 Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=8a5db9d2-a270-4e27-8ee3-a4aba78f97b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e8:ea:18:8e:9b:78:08:0d:ed:7b:fa:b0:80: ce:d5:aa:39:7b:28:86:d2:9a:89:79:2a:6a:99:72: 53:45:53:51:08:db:2d:6f:9a:b4:cf:2d:f0:a6:d5: 2f:ff:1e:7b:7f:89:d7:6a:78:6a:48:41:00:4e:70: 59:c2:d8:50:ca:e3:d5:06:e3:5d:18:fd:5f:de:f3: fd:20:17:9a:63:a0:f6:bb:d0:f9:ef:f8:16:00:c9: 66:ef:b2:05:09:1f:69:5b:d9:78:07:40:f5:6e:84: 67:ad:5c:78:f4:e8:41:37:b8:c9:28:ea:be:27:d2: fd:6e:32:dd:bd:55:71:dc:74:e6:24:29:86:2b:d2: 67:f8:5d:d0:ae:98:df:6e:45:53:54:48:d4:a7:de: 48:69:a1:d5:bd:fa:52:a4:d2:bb:5d:db:77:a6:ae: 19:b6:3d:bd:d3:78:5b:ac:52:5d:86:9f:db:5d:98: 1e:85:1e:6e:b0:72:39:06:2a:c0:a1:5f:0c:fc:67: cb:29:bb:8c:25:44:d8:5c:fd:d2:bc:90:d1:57:78: 45:cb:08:14:c8:0b:55:77:15:d0:bd:ff:91:d0:e5: 4f:ea:f2:ba:3c:c2:45:d1:e3:7e:1c:37:61:6c:c7: 42:e7:f1:78:4b:cc:ef:e5:3c:ac:14:92:39:2d:78: 20:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4E:40:3A:8E:56:6D:22:22:27:9F:46:8B:6E:4E:45:29:D3:A7:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/521cdfd3-e2d0-3d53-951f-67811b5957ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl X509v3 Authority Key Identifier: keyid:56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer sbgp-ipAddrBlock: critical IPv4: 198.148.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:d6:00:7b:76:c4:88:11:4d:94:e3:aa:94:24:0b:9b:a5:b7: 26:f9:89:b8:0f:ea:e4:a0:68:07:34:35:2f:00:24:6b:b0:45: 63:d1:b3:e3:ce:9c:c4:91:ca:39:ad:93:ec:8f:05:62:cd:97: 67:39:35:79:19:5f:bf:78:0b:8c:d3:c8:2d:6a:65:74:1b:ef: fa:8c:b4:1d:83:38:f2:54:17:bf:c0:44:a2:b1:44:55:b5:db: fd:f6:d0:89:31:30:34:bb:2a:0a:9b:5e:f9:89:ea:b0:49:86: 04:bb:89:a6:14:42:33:40:c2:96:20:b5:e0:64:24:06:a1:83: b0:02:e3:07:80:ed:01:e0:5b:a1:a1:4a:07:59:5a:38:b2:c9: 71:f1:d0:3e:5d:bc:04:ca:0c:41:0b:1c:3a:0d:5c:5b:1b:36: 51:78:e8:de:23:42:bf:c8:4f:be:28:8b:0d:ba:fe:92:65:99: 8b:e0:a0:2d:9e:69:e3:e1:49:32:d7:b4:a3:f9:58:07:09:78: 34:db:93:2a:ac:bc:dd:11:9d:3a:94:c3:2f:d1:63:61:c5:13: f4:dc:79:60:7a:23:74:77:2a:f7:ba:3e:7b:01:d2:b3:dc:98: 5f:21:c2:90:3e:74:7d:41:99:be:43:c9:0a:1c:9b:8d:32:45: 54:b7:58:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUIPODKJxZEvo1ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI1ODRhMjAtMTcxZC00MDZmLTkxZTUtYTcwYTE5YmUx M2I4MB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk OGE1ZGI5ZDItYTI3MC00ZTI3LThlZTMtYTRhYmE3OGY5N2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOjqGI6beAgN7Xv6sIDO1ao5eyiG0pqJeSpq mXJTRVNRCNstb5q0zy3wptUv/x57f4nXanhqSEEATnBZwthQyuPVBuNdGP1f3vP9 IBeaY6D2u9D57/gWAMlm77IFCR9pW9l4B0D1boRnrVx49OhBN7jJKOq+J9L9bjLd vVVx3HTmJCmGK9Jn+F3QrpjfbkVTVEjUp95IaaHVvfpSpNK7Xdt3pq4Ztj2903hb rFJdhp/bXZgehR5usHI5BirAoV8M/GfLKbuMJUTYXP3SvJDRV3hFywgUyAtVdxXQ vf+R0OVP6vK6PMJF0eN+HDdhbMdC5/F4S8zv5TysFJI5LXggiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGROQDqOVm0iIiefRotuTkUp06f3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kMjU4 NGEyMC0xNzFkLTQwNmYtOTFlNS1hNzBhMTliZTEzYjgvNTIxY2RmZDMtZTJkMC0z ZDUzLTk1MWYtNjc4MTFiNTk1N2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDI1ODRhMjAtMTcxZC00MDZmLTkx ZTUtYTcwYTE5YmUxM2I4L2QyNTg0YTIwLTE3MWQtNDA2Zi05MWU1LWE3MGExOWJl MTNiOC5jcmwwHwYDVR0jBBgwFoAUVnouO6O1KdYcRt9fEH08wI/DEwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kMjU4NGEyMC0xNzFkLTQwNmYtOTFlNS1hNzBh MTliZTEzYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfWAHt2xIgRTZTjqpQkC5ultyb5ibgP6uSgaAc0NS8AJGuwRWPRs+PO nMSRyjmtk+yPBWLNl2c5NXkZX794C4zTyC1qZXQb7/qMtB2DOPJUF7/ARKKxRFW1 2/320IkxMDS7KgqbXvmJ6rBJhgS7iaYUQjNAwpYgteBkJAahg7AC4weA7QHgW6Gh SgdZWjiyyXHx0D5dvATKDEELHDoNXFsbNlF46N4jQr/IT74oiw26/pJlmYvgoC2e aePhSTLXtKP5WAcJeDTbkyqsvN0RnTqUwy/RY2HFE/TceWB6I3R3Kve6PnsB0rPc mF8hwpA+dH1Bmb5DyQocm40yRVS3WE8= -----END CERTIFICATE-----Generated at Fri Jun 12 11:50:28 2026 by rpki-client