$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d3e4fab3-726b-3ca4-9fc6-d9fce1a0a95a.roa File: d3e4fab3-726b-3ca4-9fc6-d9fce1a0a95a.roa (raw, json) Hash identifier: oJVZjOBfyYk+cbeHNi1JW7NkmmZ85swKZ9Yox6U1o+8= Subject key identifier: 88:57:37:E5:EF:EC:6D:0F:19:5D:18:42:FE:DB:13:3C:DF:3C:E3:77 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584DB4A5A7799F73A6BC8B9DADC0 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d3e4fab3-726b-3ca4-9fc6-d9fce1a0a95a.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 54113 IP address blocks: 151.101.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:a7:79:9f:73:a6:bc:8b:9d:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=af62264c-c76e-4f5c-b46e-02c483b14e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:48:42:7d:ba:76:2e:f4:9a:f6:f5:f9:20:c2: 02:4a:e8:ad:34:e0:68:4d:bb:43:9e:9a:28:ca:e3: 0d:6e:18:26:46:77:46:03:37:76:11:5a:e4:18:ec: f9:5f:b1:0c:2f:66:f3:c7:c9:02:6c:bc:af:82:35: 5e:b9:b9:cb:18:f5:e8:14:8b:1b:3b:77:44:21:4b: e0:49:76:17:69:eb:61:dd:f8:25:33:4e:04:24:d4: 48:60:9c:79:1a:14:90:fb:db:df:41:85:5a:14:7a: b5:be:cb:c6:da:07:e9:00:70:4f:1e:bf:de:2b:8e: 2c:ab:b7:dd:ed:52:7a:4b:81:b0:8c:2f:4e:d5:f7: 60:bf:cc:8e:c6:e0:d5:ae:fd:10:37:1a:98:db:c4: 04:d6:bc:85:8b:a3:59:8f:95:e0:e3:b4:78:cc:c1: fc:9a:73:36:f9:62:0a:ff:06:98:ee:d6:a9:33:3a: be:ee:6d:7f:65:74:83:32:c5:45:df:b5:da:b3:8f: eb:3b:29:54:93:35:18:25:b4:d3:b0:c0:74:d6:e8: b3:43:01:a0:24:43:08:e0:9f:95:33:aa:c1:f6:bd: 39:03:0e:75:4a:de:34:7f:d1:65:a2:64:e3:a3:31: 3f:50:1b:4d:c6:72:d1:e0:9e:27:d0:10:7c:fa:04: 8d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:57:37:E5:EF:EC:6D:0F:19:5D:18:42:FE:DB:13:3C:DF:3C:E3:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d3e4fab3-726b-3ca4-9fc6-d9fce1a0a95a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 151.101.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:9b:50:c4:95:49:87:8c:e6:42:3f:9f:76:03:bf:52:1b:69: c6:47:b9:db:b5:2c:4a:e2:d9:7f:83:39:0b:45:02:69:8c:ca: eb:29:95:7d:42:76:47:5b:d5:d8:f4:b8:35:c5:ff:6d:e4:e0: 4d:68:90:00:80:88:5a:43:ce:a0:2e:c1:67:86:0f:55:9f:54: 6b:2f:40:cf:8c:2c:94:35:52:c0:37:be:d4:42:76:ef:0c:52: 06:29:30:df:04:82:d3:01:55:ee:98:e3:b8:29:47:f6:90:b7: f3:38:2c:04:16:ff:c8:a3:e1:6b:dc:9d:a8:0b:f8:61:71:3f: 4d:23:b8:a0:4f:f2:b4:c4:9c:be:b0:eb:fe:26:7d:7a:d9:8e: 53:02:81:29:e6:12:6d:6e:ff:93:e0:cc:44:39:5d:06:da:90: b6:b1:95:43:7d:c7:c0:01:3b:1a:45:32:d6:20:c4:40:ad:7d: 66:82:35:91:03:89:52:57:ad:59:cb:5d:bd:83:8c:71:64:c9: 8d:dc:35:d9:6e:d7:95:9f:b2:d1:c9:aa:63:06:72:9c:a2:59: 1c:ff:9e:ff:bf:db:50:80:77:7e:4b:1b:c7:05:34:46:3f:ac: 22:ee:32:94:16:c4:9e:38:03:56:52:ce:4e:54:79:94:8a:16: f2:6c:6d:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pad5n3OmvIudrcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk YWY2MjI2NGMtYzc2ZS00ZjVjLWI0NmUtMDJjNDgzYjE0ZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkhCfbp2LvSa9vX5IMICSuitNOBoTbtDnpoo yuMNbhgmRndGAzd2EVrkGOz5X7EML2bzx8kCbLyvgjVeubnLGPXoFIsbO3dEIUvg SXYXaeth3fglM04EJNRIYJx5GhSQ+9vfQYVaFHq1vsvG2gfpAHBPHr/eK44sq7fd 7VJ6S4GwjC9O1fdgv8yOxuDVrv0QNxqY28QE1ryFi6NZj5Xg47R4zMH8mnM2+WIK /waY7tapMzq+7m1/ZXSDMsVF37Xas4/rOylUkzUYJbTTsMB01uizQwGgJEMI4J+V M6rB9r05Aw51St40f9FlomTjozE/UBtNxnLR4J4n0BB8+gSNHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhXN+Xv7G0PGV0YQv7bEzzfPON3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZDNlNGZhYjMtNzI2Yi0z Y2E0LTlmYzYtZDlmY2UxYTBhOTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl2UUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6bUMSVSYeM5kI/n3YDv1IbacZHudu1LEri2X+DOQtFAmmMyusplX1C dkdb1dj0uDXF/23k4E1okACAiFpDzqAuwWeGD1WfVGsvQM+MLJQ1UsA3vtRCdu8M UgYpMN8EgtMBVe6Y47gpR/aQt/M4LAQW/8ij4WvcnagL+GFxP00juKBP8rTEnL6w 6/4mfXrZjlMCgSnmEm1u/5PgzEQ5XQbakLaxlUN9x8ABOxpFMtYgxECtfWaCNZED iVJXrVnLXb2DjHFkyY3cNdlu15WfstHJqmMGcpyiWRz/nv+/21CAd35LG8cFNEY/ rCLuMpQWxJ44A1ZSzk5UeZSKFvJsbVk= -----END CERTIFICATE-----Generated at Sun May 3 17:53:33 2026 by rpki-client