$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e7e6463-5b7e-4edb-9081-3d19b06067c8/0572eea3-a8e1-3e6f-bde3-12aa6303c808.roa File: 0572eea3-a8e1-3e6f-bde3-12aa6303c808.roa (raw, json) Hash identifier: twPlFpOeIOzxAXScAp78NrWi8/Ql5QhIG7/ujH6o9V4= Subject key identifier: D2:47:6C:6E:67:19:52:47:03:87:1D:63:5C:5A:C8:85:8E:51:B4:96 Certificate issuer: /CN=7e7e6463-5b7e-4edb-9081-3d19b06067c8 Certificate serial: 010D0C9F4328584DA6B023D8C83714B98000F660 Authority key identifier: D0:EB:07:9E:E2:6D:2E:5F:C0:07:2E:E1:64:FF:49:B5:84:27:3F:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e7e6463-5b7e-4edb-9081-3d19b06067c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e7e6463-5b7e-4edb-9081-3d19b06067c8/0572eea3-a8e1-3e6f-bde3-12aa6303c808.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 1638 IP address blocks: 192.153.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e7e6463-5b7e-4edb-9081-3d19b06067c8/7e7e6463-5b7e-4edb-9081-3d19b06067c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e7e6463-5b7e-4edb-9081-3d19b06067c8/7e7e6463-5b7e-4edb-9081-3d19b06067c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e7e6463-5b7e-4edb-9081-3d19b06067c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:23:d8:c8:37:14:b9:80:00:f6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e7e6463-5b7e-4edb-9081-3d19b06067c8 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=35d29b31-6e0b-4a4d-b8d5-d59aa8317675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9a:e5:f4:94:df:26:00:30:8b:2f:95:20:0c: 9a:41:ce:50:85:ec:2b:5d:ac:e0:a9:7a:f6:40:45: b8:65:65:74:44:9e:d0:a8:67:ba:9c:fa:c2:61:d2: f7:d9:3f:c2:46:f0:e3:6a:66:e6:e0:87:9b:f3:79: b6:2d:d5:0c:38:95:68:1e:b9:1b:a2:1a:1c:42:a0: 69:99:09:7c:5a:b1:6d:fb:b0:3b:c7:aa:36:97:b7: 53:e0:e1:ec:08:2c:59:36:dc:ca:f3:c4:aa:4d:70: 81:bf:f4:67:5f:49:ce:03:27:b7:c2:5e:0c:25:e2: 9a:d4:56:ef:85:da:a7:ca:59:c5:8a:b4:27:0a:e8: 1b:7c:eb:64:39:e1:c3:e8:d4:3b:9c:61:6c:16:4d: a1:23:31:67:3c:bf:aa:b0:66:a1:ee:b8:d2:a2:09: f6:8d:28:30:d9:12:6f:1b:04:64:aa:83:51:48:d9: 06:05:74:71:bc:e5:f3:8d:7a:7b:32:b6:17:9e:e2: d0:d6:ae:a6:4c:ce:4f:b0:ca:05:01:cf:06:bd:95: e6:bb:55:a3:41:8c:9f:ac:f7:dd:62:0c:bf:6e:01: 3c:c7:d2:c3:f4:24:ed:5d:ad:b3:8b:5d:2e:81:ca: 27:d9:94:8f:80:1a:0c:7c:24:1b:14:2b:70:46:64: 67:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:47:6C:6E:67:19:52:47:03:87:1D:63:5C:5A:C8:85:8E:51:B4:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e7e6463-5b7e-4edb-9081-3d19b06067c8/0572eea3-a8e1-3e6f-bde3-12aa6303c808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e7e6463-5b7e-4edb-9081-3d19b06067c8/7e7e6463-5b7e-4edb-9081-3d19b06067c8.crl X509v3 Authority Key Identifier: keyid:D0:EB:07:9E:E2:6D:2E:5F:C0:07:2E:E1:64:FF:49:B5:84:27:3F:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e7e6463-5b7e-4edb-9081-3d19b06067c8.cer sbgp-ipAddrBlock: critical IPv4: 192.153.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:8a:53:d4:5d:39:ff:d5:a8:cb:96:bb:6f:b0:95:80:d2:4e: e6:46:87:ac:e4:1a:e8:a6:8a:0c:db:de:ce:70:bd:de:3b:ad: 15:04:d2:93:d4:07:e4:0b:36:fd:ec:6c:61:fe:2f:ef:89:56: db:4a:ea:93:0b:8c:c3:a0:89:14:82:20:4c:60:cf:98:0b:f1: e6:1f:65:ec:b2:02:8e:39:da:f8:05:cf:cf:3c:fc:05:1b:3c: fd:e5:cd:93:2b:00:e5:1f:d5:de:72:1c:18:5f:5f:46:18:a5: c0:db:80:1c:a6:e4:b1:77:94:bf:87:83:cc:aa:90:9e:d5:d3: 01:ba:88:4a:d2:c7:0e:e5:e6:25:8a:44:2d:33:7d:b3:16:33: cd:9c:10:cb:81:d5:20:34:a8:c7:2c:90:de:4f:dd:f1:ae:0b: d0:18:dd:b2:eb:73:07:be:73:28:e4:18:75:bd:e7:ac:0f:3f: c6:0c:db:c1:d5:e9:2e:bc:d9:39:83:0d:1a:8f:55:82:e8:14: ac:e4:de:86:42:22:09:39:56:f3:d5:1b:bd:3a:6b:8c:40:97: fc:65:02:62:8d:b1:74:ad:fe:47:b5:3a:0f:14:9f:8a:9e:a3: e0:d8:25:0d:69:57:80:51:d4:81:97:82:53:0a:07:c8:bf:2f: 86:8a:ff:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msCPYyDcUuYAA9mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U3ZTY0NjMtNWI3ZS00ZWRiLTkwODEtM2QxOWIwNjA2 N2M4MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk MzVkMjliMzEtNmUwYi00YTRkLWI4ZDUtZDU5YWE4MzE3Njc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJrl9JTfJgAwiy+VIAyaQc5QhewrXazgqXr2 QEW4ZWV0RJ7QqGe6nPrCYdL32T/CRvDjambm4Ieb83m2LdUMOJVoHrkbohocQqBp mQl8WrFt+7A7x6o2l7dT4OHsCCxZNtzK88SqTXCBv/RnX0nOAye3wl4MJeKa1Fbv hdqnylnFirQnCugbfOtkOeHD6NQ7nGFsFk2hIzFnPL+qsGah7rjSogn2jSgw2RJv GwRkqoNRSNkGBXRxvOXzjXp7MrYXnuLQ1q6mTM5PsMoFAc8GvZXmu1WjQYyfrPfd Ygy/bgE8x9LD9CTtXa2zi10ugcon2ZSPgBoMfCQbFCtwRmRnDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJHbG5nGVJHA4cdY1xayIWOUbSWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTdl NjQ2My01YjdlLTRlZGItOTA4MS0zZDE5YjA2MDY3YzgvMDU3MmVlYTMtYThlMS0z ZTZmLWJkZTMtMTJhYTYzMDNjODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U3ZTY0NjMtNWI3ZS00ZWRiLTkw ODEtM2QxOWIwNjA2N2M4LzdlN2U2NDYzLTViN2UtNGVkYi05MDgxLTNkMTliMDYw NjdjOC5jcmwwHwYDVR0jBBgwFoAU0OsHnuJtLl/ABy7hZP9JtYQnP0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTdlNjQ2My01YjdlLTRlZGItOTA4MS0zZDE5 YjA2MDY3YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJmjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWKU9RdOf/VqMuWu2+wlYDSTuZGh6zkGuimigzb3s5wvd47rRUE0pPU B+QLNv3sbGH+L++JVttK6pMLjMOgiRSCIExgz5gL8eYfZeyyAo452vgFz888/AUb PP3lzZMrAOUf1d5yHBhfX0YYpcDbgBym5LF3lL+Hg8yqkJ7V0wG6iErSxw7l5iWK RC0zfbMWM82cEMuB1SA0qMcskN5P3fGuC9AY3bLrcwe+cyjkGHW956wPP8YM28HV 6S682TmDDRqPVYLoFKzk3oZCIgk5VvPVG706a4xAl/xlAmKNsXSt/ke1Og8Un4qe o+DYJQ1pV4BR1IGXglMKB8i/L4aK/wo= -----END CERTIFICATE-----Generated at Fri May 1 18:36:18 2026 by rpki-client