$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60f833ba-8149-4ea8-a5bf-33d1da5a60d8/2ceb2125-b615-3153-9b86-635de08cef36.roa File: 2ceb2125-b615-3153-9b86-635de08cef36.roa (raw, json) Hash identifier: 0mRbteOwiPa3wR0DN2PYxCJOoUVEBm+Q0JFa/8E9sNw= Subject key identifier: 8F:FF:3E:38:AC:01:95:9B:69:1A:C5:8B:18:ED:1E:77:7E:50:42:B0 Certificate issuer: /CN=60f833ba-8149-4ea8-a5bf-33d1da5a60d8 Certificate serial: 010D0C9F4328584D4D5A366F159FFF8E04DB9B80 Authority key identifier: 6E:41:05:F1:B9:56:0B:CE:E4:F0:22:7F:B8:91:CE:12:8B:E3:F9:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60f833ba-8149-4ea8-a5bf-33d1da5a60d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60f833ba-8149-4ea8-a5bf-33d1da5a60d8/2ceb2125-b615-3153-9b86-635de08cef36.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 10490 IP address blocks: 152.55.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60f833ba-8149-4ea8-a5bf-33d1da5a60d8/60f833ba-8149-4ea8-a5bf-33d1da5a60d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60f833ba-8149-4ea8-a5bf-33d1da5a60d8/60f833ba-8149-4ea8-a5bf-33d1da5a60d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60f833ba-8149-4ea8-a5bf-33d1da5a60d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:36:6f:15:9f:ff:8e:04:db:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f833ba-8149-4ea8-a5bf-33d1da5a60d8 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=a0fd7d54-020b-4fba-ae0e-ef51da7c0582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:71:29:52:f2:99:8f:bf:6b:09:0c:95:c3:fd: c5:49:d8:7f:6e:3c:8c:38:98:7b:dc:d3:97:9f:f4: e3:9e:46:cd:16:35:4c:8d:ba:11:5d:9e:e5:f4:5d: 12:c2:97:2f:15:54:16:1c:8c:45:53:50:79:21:52: 3b:f4:cb:1c:d8:bc:1b:30:6d:63:ad:0c:86:d9:68: b5:56:02:6a:76:e6:72:5c:ac:d7:18:d7:c0:b1:01: a7:d1:bf:84:be:1f:fe:81:ee:1b:f8:2c:6c:c2:7a: 72:7e:68:f5:f7:a5:cc:50:a1:a4:6a:a5:40:3e:97: fe:0e:91:4e:54:49:0f:f3:37:42:89:60:2a:f2:21: 8b:29:47:57:b4:ab:15:01:a5:8a:69:24:31:04:0a: dd:69:81:78:e1:e2:7d:bc:95:9d:e4:23:be:8a:d2: bc:88:88:85:a5:ab:ba:df:0e:d5:51:a8:a4:65:df: ac:a7:1b:52:cd:a7:cb:23:0f:aa:4f:d8:5e:63:17: 88:78:98:22:29:5e:04:56:6a:1a:ab:7d:50:27:c4: 60:e4:21:9e:a4:2e:00:6e:5c:1d:32:ee:8d:be:e7: bf:5e:2b:76:bd:2d:8e:71:27:87:20:1d:8c:e0:51: 5e:49:c3:da:0a:e8:d4:3b:1a:18:05:c2:fb:9b:34: 17:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FF:3E:38:AC:01:95:9B:69:1A:C5:8B:18:ED:1E:77:7E:50:42:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60f833ba-8149-4ea8-a5bf-33d1da5a60d8/2ceb2125-b615-3153-9b86-635de08cef36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60f833ba-8149-4ea8-a5bf-33d1da5a60d8/60f833ba-8149-4ea8-a5bf-33d1da5a60d8.crl X509v3 Authority Key Identifier: keyid:6E:41:05:F1:B9:56:0B:CE:E4:F0:22:7F:B8:91:CE:12:8B:E3:F9:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60f833ba-8149-4ea8-a5bf-33d1da5a60d8.cer sbgp-ipAddrBlock: critical IPv4: 152.55.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:c2:3f:49:7a:d5:d1:f6:0d:ff:9b:45:a1:ac:9b:ef:79:63: fc:a6:9e:78:fe:a0:30:49:9a:e0:c1:3f:bd:53:83:a9:68:ff: 5d:20:54:97:2d:e6:ec:c8:63:a3:c7:e2:d6:a7:d3:34:82:f4: 39:61:79:eb:5b:c7:99:7d:53:76:00:50:e2:f9:38:a6:d3:d6: be:da:df:28:91:04:df:2b:48:6d:03:cb:e6:10:13:63:6b:52: d6:5a:e3:53:8e:87:32:9e:9d:dc:7b:c2:10:6e:f8:28:97:90: 98:c6:aa:cd:07:58:03:54:9c:fc:0d:36:04:52:49:9e:fc:fe: b8:ce:cf:c6:27:3f:6f:c5:f8:a2:67:16:36:08:98:f9:50:92: 50:a5:ff:dc:c6:06:e9:32:83:25:32:14:2b:20:84:69:ce:07: ff:03:d8:24:d9:aa:6a:da:9d:f6:24:c9:a3:86:c4:dd:ea:f2: 19:0d:74:93:a9:4c:de:93:10:75:fb:59:c4:b1:46:f7:44:fc: 08:dc:15:cd:33:9a:8f:cd:17:77:0b:0b:f9:65:f1:ee:f9:4d: 92:8e:79:3a:35:71:35:40:11:fd:ee:32:3f:29:08:ae:6e:bd: 08:47:7b:21:50:ad:5c:8d:71:ce:07:26:07:44:a4:fa:93:3e: 27:1b:02:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWjZvFZ//jgTbm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmODMzYmEtODE0OS00ZWE4LWE1YmYtMzNkMWRhNWE2 MGQ4MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk YTBmZDdkNTQtMDIwYi00ZmJhLWFlMGUtZWY1MWRhN2MwNTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3EpUvKZj79rCQyVw/3FSdh/bjyMOJh73NOX n/TjnkbNFjVMjboRXZ7l9F0SwpcvFVQWHIxFU1B5IVI79Msc2LwbMG1jrQyG2Wi1 VgJqduZyXKzXGNfAsQGn0b+Evh/+ge4b+Cxswnpyfmj196XMUKGkaqVAPpf+DpFO VEkP8zdCiWAq8iGLKUdXtKsVAaWKaSQxBArdaYF44eJ9vJWd5CO+itK8iIiFpau6 3w7VUaikZd+spxtSzafLIw+qT9heYxeIeJgiKV4EVmoaq31QJ8Rg5CGepC4Ablwd Mu6Nvue/Xit2vS2OcSeHIB2M4FFeScPaCujUOxoYBcL7mzQXkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI//PjisAZWbaRrFixjtHnd+UEKwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82MGY4 MzNiYS04MTQ5LTRlYTgtYTViZi0zM2QxZGE1YTYwZDgvMmNlYjIxMjUtYjYxNS0z MTUzLTliODYtNjM1ZGUwOGNlZjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNjBmODMzYmEtODE0OS00ZWE4LWE1 YmYtMzNkMWRhNWE2MGQ4LzYwZjgzM2JhLTgxNDktNGVhOC1hNWJmLTMzZDFkYTVh NjBkOC5jcmwwHwYDVR0jBBgwFoAUbkEF8blWC87k8CJ/uJHOEovj+UQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82MGY4MzNiYS04MTQ5LTRlYTgtYTViZi0zM2Qx ZGE1YTYwZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmDeYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPCP0l61dH2Df+bRaGsm+95Y/ymnnj+oDBJmuDBP71Tg6lo/10gVJct 5uzIY6PH4tan0zSC9Dlheetbx5l9U3YAUOL5OKbT1r7a3yiRBN8rSG0Dy+YQE2Nr UtZa41OOhzKendx7whBu+CiXkJjGqs0HWANUnPwNNgRSSZ78/rjOz8YnP2/F+KJn FjYImPlQklCl/9zGBukygyUyFCsghGnOB/8D2CTZqmranfYkyaOGxN3q8hkNdJOp TN6TEHX7WcSxRvdE/AjcFc0zmo/NF3cLC/ll8e75TZKOeTo1cTVAEf3uMj8pCK5u vQhHeyFQrVyNcc4HJgdEpPqTPicbAlc= -----END CERTIFICATE-----Generated at Mon Apr 13 11:59:50 2026 by rpki-client