$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/db729622-f239-3542-a3b9-b05be8216524.roa File: db729622-f239-3542-a3b9-b05be8216524.roa (raw, json) Hash identifier: TmxkjiL7R6wiU3iILspLEqu9gNdIYxx/lKD4VaKYns0= Subject key identifier: 7E:40:BC:5F:43:C9:E4:29:7C:11:59:61:ED:E3:76:C1:F4:CF:0D:F6 Certificate issuer: /CN=6528c9ac-3735-430d-99f2-7ac01944d688 Certificate serial: 010D0C9F4328584D93254E846C460669FCCF86C0 Authority key identifier: 64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/db729622-f239-3542-a3b9-b05be8216524.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 54696 IP address blocks: 23.148.153.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:4e:84:6c:46:06:69:fc:cf:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6528c9ac-3735-430d-99f2-7ac01944d688 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=e1390424-2be2-4b7b-ab7c-b43ff7cf40f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:48:8c:a6:ec:cd:bf:82:d4:32:3d:f6:48:a2: b5:95:27:1a:8c:8a:95:2e:9a:63:06:76:ae:ba:68: a3:ea:50:3d:10:b4:22:5d:08:c8:d6:67:a4:05:b8: 30:08:cc:6c:9f:d8:ab:3f:d7:d1:e7:81:d9:f4:c7: f8:2c:1a:99:9d:6d:e5:66:67:f2:00:6f:dd:f3:d7: dd:49:a5:8c:34:2e:2c:e6:30:d9:2b:1b:3b:75:1e: 83:26:13:bc:a6:19:2f:d7:9c:82:78:af:b0:cf:ea: e8:af:76:ab:51:d9:05:64:d3:ad:93:30:c6:77:78: 2a:06:a1:1c:8b:bc:da:26:49:ba:74:48:17:45:4a: f5:a6:c0:93:67:18:fb:82:b5:7e:80:a6:d6:b5:7c: 18:fa:e9:b9:d3:7c:f2:d8:92:c2:30:ee:ea:a5:1b: ab:f1:85:a6:43:36:2a:f7:a5:f5:38:32:4c:f8:e2: e9:60:f1:3a:b5:3e:6e:5e:ff:ee:b9:86:ef:71:f4: 79:21:e7:0e:38:83:2c:7e:97:37:fb:84:50:09:da: f5:dd:c9:3b:80:a2:22:5f:2d:bb:8a:47:15:91:81: 5b:dc:f8:2f:0a:6a:03:86:1d:1e:92:3e:71:05:45: 04:35:97:a6:3b:27:10:5a:99:4f:64:16:78:61:8a: fe:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:40:BC:5F:43:C9:E4:29:7C:11:59:61:ED:E3:76:C1:F4:CF:0D:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/db729622-f239-3542-a3b9-b05be8216524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl X509v3 Authority Key Identifier: keyid:64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer sbgp-ipAddrBlock: critical IPv4: 23.148.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:50:c7:2b:1c:b5:78:79:38:7e:ae:6a:bd:84:51:2e:7d:ca: ba:a1:52:a2:b4:c0:d9:df:d4:4e:7c:56:fe:90:7c:1c:2c:35: b0:e1:06:be:fd:fa:20:e6:19:d3:3e:c3:b0:dc:7c:0f:63:d0: 20:5a:b3:5b:4c:65:06:4f:b6:50:65:2e:80:e1:26:5a:21:0d: 99:0a:29:f7:fb:73:fc:5c:d0:36:22:bb:2e:68:fa:dd:bc:13: 2a:5f:8c:5c:e9:ca:e9:0b:9b:47:60:aa:6d:2a:0a:b8:d7:07: 50:7e:48:9c:55:ce:4e:2b:10:af:a8:99:9d:db:96:1a:fc:c2: 1b:04:40:89:06:dc:49:76:15:22:63:3a:96:cc:30:a9:90:81: 12:34:20:96:0b:2a:f4:99:9a:85:33:80:f2:f9:d6:9d:93:1b: ce:06:4b:53:14:45:4c:b7:2e:d9:f8:9e:47:1d:2d:69:6f:73: d6:e2:8c:3d:93:56:9f:ba:db:33:85:e5:d6:d0:48:3e:b5:cf: f0:99:f1:30:66:78:12:4c:05:a5:0e:05:7c:4c:bb:c0:3c:1b: c0:a0:1a:26:59:08:6a:28:e6:bb:11:e0:f3:8d:50:36:93:75: 53:31:6e:6c:24:b3:50:4c:65:b1:d8:ff:43:8b:1b:3c:c9:be: a0:e9:ee:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJU6EbEYGafzPhsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUyOGM5YWMtMzczNS00MzBkLTk5ZjItN2FjMDE5NDRk Njg4MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk ZTEzOTA0MjQtMmJlMi00YjdiLWFiN2MtYjQzZmY3Y2Y0MGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50iMpuzNv4LUMj32SKK1lScajIqVLppjBnau umij6lA9ELQiXQjI1mekBbgwCMxsn9irP9fR54HZ9Mf4LBqZnW3lZmfyAG/d89fd SaWMNC4s5jDZKxs7dR6DJhO8phkv15yCeK+wz+ror3arUdkFZNOtkzDGd3gqBqEc i7zaJkm6dEgXRUr1psCTZxj7grV+gKbWtXwY+um503zy2JLCMO7qpRur8YWmQzYq 96X1ODJM+OLpYPE6tT5uXv/uuYbvcfR5IecOOIMsfpc3+4RQCdr13ck7gKIiXy27 ikcVkYFb3PgvCmoDhh0ekj5xBUUENZemOycQWplPZBZ4YYr+ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5AvF9DyeQpfBFZYe3jdsH0zw32MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NTI4 YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMwMTk0NGQ2ODgvZGI3Mjk2MjItZjIzOS0z NTQyLWEzYjktYjA1YmU4MjE2NTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjUyOGM5YWMtMzczNS00MzBkLTk5 ZjItN2FjMDE5NDRkNjg4LzY1MjhjOWFjLTM3MzUtNDMwZC05OWYyLTdhYzAxOTQ0 ZDY4OC5jcmwwHwYDVR0jBBgwFoAUZHlQlsmkDTSGRr0dZCAN23yduvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NTI4YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMw MTk0NGQ2ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5SZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5QxysctXh5OH6uar2EUS59yrqhUqK0wNnf1E58Vv6QfBwsNbDhBr79 +iDmGdM+w7DcfA9j0CBas1tMZQZPtlBlLoDhJlohDZkKKff7c/xc0DYiuy5o+t28 EypfjFzpyukLm0dgqm0qCrjXB1B+SJxVzk4rEK+omZ3blhr8whsEQIkG3El2FSJj OpbMMKmQgRI0IJYLKvSZmoUzgPL51p2TG84GS1MURUy3Ltn4nkcdLWlvc9bijD2T Vp+62zOF5dbQSD61z/CZ8TBmeBJMBaUOBXxMu8A8G8CgGiZZCGoo5rsR4PONUDaT dVMxbmwks1BMZbHY/0OLGzzJvqDp7gE= -----END CERTIFICATE-----Generated at Thu May 7 01:20:55 2026 by rpki-client