$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/bb00790e-a3a2-3946-8150-be163d48b16e.roa File: bb00790e-a3a2-3946-8150-be163d48b16e.roa (raw, json) Hash identifier: L2bERx63HqOwAzvftIJl5uhjoEj2OrQSRXZh5VE/bOQ= Subject key identifier: 53:72:DF:C3:52:B8:31:E9:BA:72:60:AA:F8:12:74:D8:84:A8:16:E8 Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F4328584D9A203143503815D9C00D59A0 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/bb00790e-a3a2-3946-8150-be163d48b16e.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 26879 IP address blocks: 161.129.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:31:43:50:38:15:d9:c0:0d:59:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=974dfd62-f3f6-4666-8efe-abe277bfb29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:14:4f:ab:4e:af:bd:f2:41:19:1e:7a:6d:88: 02:dc:dc:a5:2a:0b:dc:dd:fd:2e:23:b4:09:6e:64: 31:0f:67:60:84:93:51:6d:18:79:43:2a:6b:4f:0d: 5e:1a:93:3d:df:6a:22:ee:29:7e:50:3f:e3:9d:51: 2b:4a:94:1c:55:52:ac:d9:0d:b0:34:f3:85:ac:07: bf:c2:20:0a:e3:49:06:72:ea:4d:58:00:c9:a5:ce: a5:33:09:e9:85:ad:13:d9:15:38:50:4a:f6:14:1a: 8b:60:66:5b:f1:ea:f9:0d:87:b3:cc:1e:5e:4c:8b: 87:aa:ed:cd:a1:53:5a:1b:fb:49:99:ef:67:c0:d9: eb:91:f1:6a:03:a0:cf:9f:1b:4e:84:87:73:84:e7: 48:52:8a:d0:5d:63:de:47:48:5f:f2:ef:3a:7c:6e: e2:49:03:45:35:d2:ba:48:4f:53:5c:4e:9e:ba:e3: 3d:6d:36:04:52:20:08:48:08:d7:ff:65:de:d4:8d: f4:69:ca:27:f9:5d:bb:54:d9:6c:01:c8:9f:66:f0: 10:ca:50:7a:57:93:10:af:cb:5e:72:b8:94:b4:90: 52:66:12:37:a2:67:dc:51:d8:ed:55:5a:8c:3a:d1: 5b:4c:13:4e:4e:26:ef:40:54:df:9e:31:e5:10:88: 82:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:72:DF:C3:52:B8:31:E9:BA:72:60:AA:F8:12:74:D8:84:A8:16:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/bb00790e-a3a2-3946-8150-be163d48b16e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:a9:a8:ca:6e:8f:3c:e8:eb:84:c3:25:6f:fe:80:c3:b3:47: eb:7f:e1:7c:ce:d6:dc:7e:96:df:a0:34:7b:9b:68:d7:0e:d8: cd:cc:1d:07:3e:99:76:f7:ed:16:b5:6a:66:2f:ab:95:6c:97: 3d:e5:96:bb:c6:1d:7e:bb:4d:7e:59:91:d2:e8:ae:79:05:0f: aa:8b:65:5e:b1:52:63:4f:2f:fc:14:c3:ba:4d:25:9b:e4:13: f6:f4:f7:5a:7a:0b:f1:16:4a:c4:76:65:e5:23:5b:f5:03:c8: 2a:2f:f0:71:1e:8f:67:06:60:2f:92:15:a6:c3:8f:f5:d9:48: cb:8b:b3:d9:b8:48:46:e9:13:e9:1a:07:6d:05:4d:43:6a:1e: 61:28:61:9a:ed:5f:f2:38:94:9c:eb:9f:ca:35:ab:6d:f9:9d: d0:34:ea:f7:f4:ab:d4:55:31:43:17:a4:cb:be:9f:61:cf:ff: ac:3a:18:43:b1:db:2f:cd:19:d9:66:02:e3:ba:6b:c7:ee:fa: fc:bd:8f:9b:cb:ae:94:ce:16:d4:ab:b2:0b:bf:20:69:b2:7b: 54:c1:ee:47:d3:fa:30:30:d0:4e:56:bc:db:7d:2e:80:c9:84: 17:82:63:f1:b3:7f:7b:18:d6:6b:28:19:98:19:7f:84:35:70: 8b:0c:bc:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIDFDUDgV2cANWaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk OTc0ZGZkNjItZjNmNi00NjY2LThlZmUtYWJlMjc3YmZiMjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRRPq06vvfJBGR56bYgC3NylKgvc3f0uI7QJ bmQxD2dghJNRbRh5QyprTw1eGpM932oi7il+UD/jnVErSpQcVVKs2Q2wNPOFrAe/ wiAK40kGcupNWADJpc6lMwnpha0T2RU4UEr2FBqLYGZb8er5DYezzB5eTIuHqu3N oVNaG/tJme9nwNnrkfFqA6DPnxtOhIdzhOdIUorQXWPeR0hf8u86fG7iSQNFNdK6 SE9TXE6euuM9bTYEUiAISAjX/2Xe1I30acon+V27VNlsAcifZvAQylB6V5MQr8te criUtJBSZhI3omfcUdjtVVqMOtFbTBNOTibvQFTfnjHlEIiCXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNy38NSuDHpunJgqvgSdNiEqBboMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvYmIwMDc5MGUtYTNhMi0z OTQ2LTgxNTAtYmUxNjNkNDhiMTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGpqMpujzzo64TDJW/+gMOzR+t/4XzO1tx+lt+gNHubaNcO2M3MHQc+ mXb37Ra1amYvq5Vslz3llrvGHX67TX5ZkdLornkFD6qLZV6xUmNPL/wUw7pNJZvk E/b091p6C/EWSsR2ZeUjW/UDyCov8HEej2cGYC+SFabDj/XZSMuLs9m4SEbpE+ka B20FTUNqHmEoYZrtX/I4lJzrn8o1q235ndA06vf0q9RVMUMXpMu+n2HP/6w6GEOx 2y/NGdlmAuO6a8fu+vy9j5vLrpTOFtSrsgu/IGmye1TB7kfT+jAw0E5WvNt9LoDJ hBeCY/Gzf3sY1msoGZgZf4Q1cIsMvFQ= -----END CERTIFICATE-----Generated at Wed May 13 11:27:19 2026 by rpki-client