$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/43be9e63-8f11-39b3-aff7-3b46a1d98fd6.roa File: 43be9e63-8f11-39b3-aff7-3b46a1d98fd6.roa (raw, json) Hash identifier: Y8XhCUWKvwzRRaSlMl0rB76HEkojmKn+S/2tL8tfnKI= Subject key identifier: 17:A7:B9:75:71:E8:D3:A8:37:7D:78:C2:5B:AB:61:76:DB:3C:9A:B0 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584DB4A5A8D7CCA4ABDF50A17320 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/43be9e63-8f11-39b3-aff7-3b46a1d98fd6.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 54113 IP address blocks: 151.101.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:a8:d7:cc:a4:ab:df:50:a1:73:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=a7fb8bf6-39c9-4d47-b1a8-68b0dfefa5e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:54:9a:77:37:b6:47:3a:fc:ca:6a:7f:c3:4d: 99:9f:89:f1:0c:21:2c:48:83:89:4a:7f:15:9c:54: 51:b6:fc:79:28:ed:1c:ac:71:2b:4f:7e:2a:ab:14: c4:6b:1f:30:92:35:0d:c9:1f:0e:c9:df:45:fe:0f: e5:de:7c:b9:0c:4e:f6:ae:c5:8a:e2:00:c6:bb:39: b8:a4:a4:93:60:84:90:34:79:84:b2:c6:83:95:fc: 4e:81:c1:bd:77:b7:ca:cf:8f:77:91:f8:af:19:7f: f9:07:3c:3a:3b:ef:40:17:02:7a:6e:f0:35:5e:92: a6:b2:fd:7e:d3:68:be:f7:e4:87:8c:22:89:14:77: 09:63:7d:e4:61:53:71:dc:13:27:56:0a:33:6e:c2: fd:59:a3:84:31:aa:cf:84:9b:ef:42:f6:e6:b2:62: 85:03:28:c2:e6:95:cc:a3:69:95:24:54:ad:01:bc: b2:dd:8d:f9:90:3d:c4:c9:6e:ee:3d:9e:83:07:6e: bc:25:8b:06:cc:67:38:4d:d7:96:f3:8e:5f:e2:64: bf:8b:ce:a5:da:2d:38:25:90:28:f1:f3:5e:50:8c: 8a:86:5e:41:d5:b4:8f:d6:7b:fc:7d:0b:dc:61:90: af:c9:ac:51:c3:1f:85:da:4c:ef:e8:67:2e:7f:8b: 26:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A7:B9:75:71:E8:D3:A8:37:7D:78:C2:5B:AB:61:76:DB:3C:9A:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/43be9e63-8f11-39b3-aff7-3b46a1d98fd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 151.101.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:37:32:71:e1:78:2c:c2:d2:c6:e3:0b:f9:a9:f8:d9:e0:27: 6d:26:0e:a1:d4:79:46:10:d2:c9:7f:32:ba:c3:4d:74:40:26: cc:27:bb:7d:ba:80:32:81:44:7c:d7:6f:9e:71:78:66:77:2c: 33:f9:25:1b:00:4b:08:a7:87:06:bf:05:26:d6:cc:8b:d6:32: 1c:43:ec:07:05:1a:1e:ef:97:b3:5e:f7:d8:d1:68:23:90:8c: 67:f7:06:f2:ec:d9:13:1c:bc:70:cc:61:d0:c6:0f:8b:1e:6f: 5e:a0:26:4a:bf:cc:20:26:63:14:cc:d6:02:d2:5b:fa:da:a1: d2:b0:c4:0c:84:70:a9:78:fe:c2:d5:6b:83:e8:ce:8b:8f:ab: 4c:da:74:19:76:33:51:b7:95:dc:9e:25:91:e2:16:38:b4:49: 0a:4f:72:05:3b:85:d4:02:fe:a5:94:43:98:21:ac:1a:58:af: 04:16:bc:91:62:f5:0b:92:3e:05:72:c6:68:60:f1:26:19:35: ac:23:3d:85:85:b8:bf:d8:68:df:67:68:40:62:dc:da:70:2a: de:d1:a5:28:8f:56:c9:41:6b:d1:b4:85:db:77:24:8a:5d:b1: 26:30:fe:67:09:39:83:d0:60:3b:01:3c:91:1c:cf:58:ae:40: 33:f9:6e:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pajXzKSr31ChcyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk YTdmYjhiZjYtMzljOS00ZDQ3LWIxYTgtNjhiMGRmZWZhNWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylSadze2Rzr8ymp/w02Zn4nxDCEsSIOJSn8V nFRRtvx5KO0crHErT34qqxTEax8wkjUNyR8Oyd9F/g/l3ny5DE72rsWK4gDGuzm4 pKSTYISQNHmEssaDlfxOgcG9d7fKz493kfivGX/5Bzw6O+9AFwJ6bvA1XpKmsv1+ 02i+9+SHjCKJFHcJY33kYVNx3BMnVgozbsL9WaOEMarPhJvvQvbmsmKFAyjC5pXM o2mVJFStAbyy3Y35kD3EyW7uPZ6DB268JYsGzGc4TdeW845f4mS/i86l2i04JZAo 8fNeUIyKhl5B1bSP1nv8fQvcYZCvyaxRwx+F2kzv6Gcuf4smrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBenuXVx6NOoN314wlurYXbbPJqwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNDNiZTllNjMtOGYxMS0z OWIzLWFmZjctM2I0NmExZDk4ZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl2WQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGc3MnHheCzC0sbjC/mp+NngJ20mDqHUeUYQ0sl/MrrDTXRAJswnu326 gDKBRHzXb55xeGZ3LDP5JRsASwinhwa/BSbWzIvWMhxD7AcFGh7vl7Ne99jRaCOQ jGf3BvLs2RMcvHDMYdDGD4seb16gJkq/zCAmYxTM1gLSW/raodKwxAyEcKl4/sLV a4PozouPq0zadBl2M1G3ldyeJZHiFji0SQpPcgU7hdQC/qWUQ5ghrBpYrwQWvJFi 9QuSPgVyxmhg8SYZNawjPYWFuL/YaN9naEBi3NpwKt7RpSiPVslBa9G0hdt3JIpd sSYw/mcJOYPQYDsBPJEcz1iuQDP5bpA= -----END CERTIFICATE-----Generated at Sun May 3 17:54:24 2026 by rpki-client