$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a900bf7d-2593-31bf-a486-55b49afbdece.roa File: a900bf7d-2593-31bf-a486-55b49afbdece.roa (raw, json) Hash identifier: ckKxXLb8eqqSS41dHp7qj8nk41/NwvwuVSMTz4hIQN4= Subject key identifier: 29:9F:59:E9:88:F2:63:2F:8C:C2:C1:AE:84:04:25:32:58:F2:94:18 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584DCAFB068DE8CB13AD8BDFC4C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a900bf7d-2593-31bf-a486-55b49afbdece.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 6830 IP address blocks: 144.225.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:06:8d:e8:cb:13:ad:8b:df:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=cd7bbe62-0c3a-442f-a351-558065ca6675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4c:c4:79:95:00:f6:31:5d:e9:cf:4d:6c:be: dd:36:c0:09:6e:51:70:a8:98:23:44:4d:7a:b1:57: 7f:0e:ac:1a:1a:0f:b9:d7:8a:9c:ce:c5:14:1c:0b: 0d:e9:74:83:b4:26:7f:ef:9f:96:ad:e6:6e:5d:fa: 31:bb:fc:e9:68:56:8a:28:b5:63:2e:84:3c:0e:a9: 18:f6:c0:d8:7a:d3:ba:62:7e:07:c5:59:00:a1:d8: 4d:b4:7f:73:c9:22:ac:0e:4a:18:e2:70:52:44:66: 13:42:c0:13:b9:2f:e9:04:89:08:a4:15:12:11:60: 8a:21:b9:02:09:c2:4e:ec:81:f2:ca:ab:fc:99:49: fc:43:74:71:40:a3:3e:ab:a2:aa:f2:6f:65:fd:3c: 14:52:0f:3a:ba:8a:e2:bc:5c:f0:fc:53:63:69:95: 1d:85:2f:66:6f:f7:f2:5c:fc:f4:7f:80:ce:47:93: cb:7a:0c:70:02:f1:a4:2e:bb:12:51:1e:13:38:c0: e3:9c:9a:46:f8:0e:3b:d7:98:7d:40:4a:c5:ce:e1: a6:e0:29:e5:dc:a5:fc:15:2a:95:3c:d6:07:c8:97: 90:87:d5:0d:14:ad:92:4b:32:83:85:bd:df:c6:d3: dd:50:5e:19:86:70:7b:41:39:89:41:3c:57:60:2d: 63:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9F:59:E9:88:F2:63:2F:8C:C2:C1:AE:84:04:25:32:58:F2:94:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a900bf7d-2593-31bf-a486-55b49afbdece.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 144.225.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:18:16:a8:f7:aa:45:4a:eb:67:62:d5:45:5c:3d:a9:28:1a: 40:74:fb:b1:e2:51:86:f7:c4:42:3b:f3:0d:24:75:1e:d6:7d: 9d:3a:ae:c9:9e:6f:45:21:85:4e:a0:72:94:bf:40:9f:43:76: b2:8f:34:20:8a:db:58:4f:82:2a:a8:a8:6a:90:8a:36:4c:39: 20:96:04:bb:4b:5e:e0:08:4d:82:d1:c1:aa:f2:c1:d8:7f:d9: 73:cb:06:98:d3:8d:f0:a0:ec:ee:90:07:1c:d4:9d:22:a3:a7: 98:dd:f3:b1:6b:cb:76:b4:2a:fe:8e:c3:0d:c3:dc:bf:f6:39: 01:de:68:ad:e0:43:bd:b1:68:cf:5a:6d:99:2a:dc:fc:ee:47: 76:02:01:55:ba:a7:9a:60:7b:0a:aa:f7:0c:76:30:81:75:b8: d0:d2:11:bf:1d:3f:a8:15:a8:3c:8c:58:93:bc:af:4d:63:6e: af:bd:3c:e7:69:b1:c9:7e:76:7d:57:0e:f1:bf:92:4c:9c:da: 19:89:74:bd:57:32:97:bb:1f:71:a9:f1:8a:56:1f:93:e7:3c: 6b:ca:1b:a0:1d:5f:92:04:eb:1e:64:b4:7e:ca:f4:4a:e3:2a: af:1f:f6:33:9d:91:99:f7:d1:51:b7:7e:2b:2c:40:2b:d3:79: ab:75:3d:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+waN6MsTrYvfxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk Y2Q3YmJlNjItMGMzYS00NDJmLWEzNTEtNTU4MDY1Y2E2Njc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEzEeZUA9jFd6c9NbL7dNsAJblFwqJgjRE16 sVd/DqwaGg+514qczsUUHAsN6XSDtCZ/75+WreZuXfoxu/zpaFaKKLVjLoQ8DqkY 9sDYetO6Yn4HxVkAodhNtH9zySKsDkoY4nBSRGYTQsATuS/pBIkIpBUSEWCKIbkC CcJO7IHyyqv8mUn8Q3RxQKM+q6Kq8m9l/TwUUg86uorivFzw/FNjaZUdhS9mb/fy XPz0f4DOR5PLegxwAvGkLrsSUR4TOMDjnJpG+A4715h9QErFzuGm4Cnl3KX8FSqV PNYHyJeQh9UNFK2SSzKDhb3fxtPdUF4ZhnB7QTmJQTxXYC1jSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmfWemI8mMvjMLBroQEJTJY8pQYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTkwMGJmN2QtMjU5My0z MWJmLWE0ODYtNTViNDlhZmJkZWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkOGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsYFqj3qkVK62di1UVcPakoGkB0+7HiUYb3xEI78w0kdR7WfZ06rsme b0UhhU6gcpS/QJ9DdrKPNCCK21hPgiqoqGqQijZMOSCWBLtLXuAITYLRwarywdh/ 2XPLBpjTjfCg7O6QBxzUnSKjp5jd87Fry3a0Kv6Oww3D3L/2OQHeaK3gQ72xaM9a bZkq3PzuR3YCAVW6p5pgewqq9wx2MIF1uNDSEb8dP6gVqDyMWJO8r01jbq+9POdp scl+dn1XDvG/kkyc2hmJdL1XMpe7H3Gp8YpWH5PnPGvKG6AdX5IE6x5ktH7K9Erj Kq8f9jOdkZn30VG3fissQCvTeat1Pbk= -----END CERTIFICATE-----Generated at Tue May 12 21:23:35 2026 by rpki-client