$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/aa8db4aa-92d1-3c01-b7ef-86cdaafff606.roa File: aa8db4aa-92d1-3c01-b7ef-86cdaafff606.roa (raw, json) Hash identifier: bhjt8soJKHSJs5j57bybWXDG4nUoN6s04RsSI6m2TQQ= Subject key identifier: 70:3B:D7:E6:77:4E:E2:B4:FA:25:CA:B7:E7:91:DE:E5:62:21:46:03 Certificate issuer: /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127 Certificate serial: 010D0C9F4328584D2644BA09A0B7C58E31DCC940 Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/aa8db4aa-92d1-3c01-b7ef-86cdaafff606.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 8070 IP address blocks: 152.228.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:ba:09:a0:b7:c5:8e:31:dc:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=72cf197e-5470-4cb1-82fa-343733cbda5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:16:7b:9e:e0:40:c5:cb:cd:ae:3c:c6:d7:4c: c8:67:b3:f0:56:86:8a:af:d4:ee:9e:2f:5b:28:15: d3:12:ad:5c:13:64:6e:2f:1e:bd:22:51:65:fa:61: e3:64:a9:66:d7:d0:4d:df:d5:77:d8:8a:06:a1:0e: 2d:1b:7f:71:e1:b0:ff:e4:9d:9c:95:56:c3:a6:67: 5f:02:60:dc:a8:f5:f8:12:b2:c9:4e:cf:84:df:78: f7:c3:54:a1:26:aa:91:74:02:80:5e:55:36:cf:0c: d7:ab:d8:24:8f:30:ac:24:ac:e3:3d:fe:47:4b:c3: 14:00:11:86:37:dc:3a:6f:da:35:66:9c:e2:70:e9: 85:62:4e:fa:ad:62:d2:b5:38:78:bf:fb:cf:e2:e3: 48:ca:84:a1:97:59:15:6d:da:ac:d2:9d:6e:e7:ad: 78:cb:a2:bf:14:f6:78:51:7a:86:4a:de:9b:1a:14: 74:17:02:4c:1a:e0:bf:c5:a0:8d:43:bb:a9:73:7b: ff:63:6b:bc:de:81:fd:a6:2f:30:44:71:b5:09:be: b2:72:94:62:a4:be:0c:7b:ed:50:93:38:0a:89:5f: ce:30:cb:20:5c:ab:c3:ca:c5:eb:36:a7:e6:04:e5: 70:32:ca:4d:bb:c3:9b:78:fd:0a:7f:e0:a7:69:00: 8f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3B:D7:E6:77:4E:E2:B4:FA:25:CA:B7:E7:91:DE:E5:62:21:46:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/aa8db4aa-92d1-3c01-b7ef-86cdaafff606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl X509v3 Authority Key Identifier: keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer sbgp-ipAddrBlock: critical IPv4: 152.228.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:a6:4a:77:7e:a1:5a:6a:3a:ac:cf:62:47:2b:80:cc:ac:06: 4f:fe:7b:1d:bf:58:c5:47:0a:4f:81:57:2b:14:38:c8:4f:e7: f7:58:15:dc:ac:a2:7e:e9:bc:9f:b8:90:d3:0d:27:86:97:3b: 10:dd:79:c3:04:92:70:d5:68:91:4d:8b:1f:4b:0c:e3:97:f9: 7b:c4:59:91:05:67:5e:b8:59:b3:05:84:86:d0:4d:59:56:75: be:36:e7:9a:74:8b:52:94:f4:fe:ee:47:02:a3:a3:a1:69:fb: 93:27:06:58:b9:ff:c7:fd:c1:b0:e4:3f:5b:3e:a5:5e:b8:9f: c6:3e:3a:07:29:e5:2c:7f:9a:64:fe:f9:58:6c:c0:53:60:7b: 88:1b:c4:13:60:e4:6f:c4:17:8f:cb:3f:22:47:13:72:5c:a3: 64:5b:f9:0c:c8:fc:e5:64:ca:34:55:db:9d:50:94:4d:71:f0: 27:17:2e:67:2a:e6:0c:f1:86:74:86:c5:93:90:76:4c:a6:5d: 1d:15:dc:ae:fe:72:96:09:72:dc:15:5e:58:fb:af:10:ba:5f: fe:62:70:75:e5:2d:07:5e:17:19:04:7d:2b:c7:22:c9:f6:f9: 0c:0a:ab:87:c7:a8:ad:3b:2e:e1:1b:33:ac:17:66:54:3a:08: 93:bb:91:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRLoJoLfFjjHcyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWUxNDkxZDYtMmFiNy00YzE0LWJlZTYtMTIyZWU0NTMx MTI3MB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk NzJjZjE5N2UtNTQ3MC00Y2IxLTgyZmEtMzQzNzMzY2JkYTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BZ7nuBAxcvNrjzG10zIZ7PwVoaKr9Tuni9b KBXTEq1cE2RuLx69IlFl+mHjZKlm19BN39V32IoGoQ4tG39x4bD/5J2clVbDpmdf AmDcqPX4ErLJTs+E33j3w1ShJqqRdAKAXlU2zwzXq9gkjzCsJKzjPf5HS8MUABGG N9w6b9o1ZpzicOmFYk76rWLStTh4v/vP4uNIyoShl1kVbdqs0p1u5614y6K/FPZ4 UXqGSt6bGhR0FwJMGuC/xaCNQ7upc3v/Y2u83oH9pi8wRHG1Cb6ycpRipL4Me+1Q kzgKiV/OMMsgXKvDysXrNqfmBOVwMspNu8ObeP0Kf+CnaQCPVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHA71+Z3TuK0+iXKt+eR3uViIUYDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0 OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJlZTQ1MzExMjcvYWE4ZGI0YWEtOTJkMS0z YzAxLWI3ZWYtODZjZGFhZmZmNjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWUxNDkxZDYtMmFiNy00YzE0LWJl ZTYtMTIyZWU0NTMxMTI3LzllMTQ5MWQ2LTJhYjctNGMxNC1iZWU2LTEyMmVlNDUz MTEyNy5jcmwwHwYDVR0jBBgwFoAUwrX75YVX4vAqQcTI2tTXBsMOm2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJl ZTQ1MzExMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmOQxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHamSnd+oVpqOqzPYkcrgMysBk/+ex2/WMVHCk+BVysUOMhP5/dYFdys on7pvJ+4kNMNJ4aXOxDdecMEknDVaJFNix9LDOOX+XvEWZEFZ164WbMFhIbQTVlW db4255p0i1KU9P7uRwKjo6Fp+5MnBli5/8f9wbDkP1s+pV64n8Y+Ogcp5Sx/mmT+ +VhswFNge4gbxBNg5G/EF4/LPyJHE3Jco2Rb+QzI/OVkyjRV251QlE1x8CcXLmcq 5gzxhnSGxZOQdkymXR0V3K7+cpYJctwVXlj7rxC6X/5icHXlLQdeFxkEfSvHIsn2 +QwKq4fHqK07LuEbM6wXZlQ6CJO7kYo= -----END CERTIFICATE-----Generated at Fri Mar 13 13:52:40 2026 by rpki-client