$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/e4f21359-fbdd-3835-adf4-0aa226c665da.roa File: e4f21359-fbdd-3835-adf4-0aa226c665da.roa (raw, json) Hash identifier: xtrcHqZCvhj+0gGv3FiJVUhIYZbiATYviP3D/nfaAJE= Subject key identifier: 31:3C:04:4D:0A:33:EE:F4:A5:EC:93:1B:62:C1:D1:66:45:E6:08:F3 Certificate issuer: /CN=25a08492-b3b1-4aa1-b56d-01a98f7d0919 Certificate serial: 010D0C9F4328584D9FB57108E7C3CA78537F1800 Authority key identifier: 13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/e4f21359-fbdd-3835-adf4-0aa226c665da.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 202 IP address blocks: 205.233.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:71:08:e7:c3:ca:78:53:7f:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a08492-b3b1-4aa1-b56d-01a98f7d0919 Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=1d3112d9-38b5-43d5-a516-6f52d57ac653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c4:d7:c3:b5:0a:ae:06:66:b9:b7:a5:93:14: 34:ba:7e:90:1e:30:18:50:c4:f5:8b:05:a7:f6:4f: 3b:27:65:32:16:6d:58:53:bd:34:7d:7d:fe:71:23: cd:fd:04:0d:b9:c0:91:1d:f9:14:0e:e2:58:2b:58: 36:99:90:15:ec:ed:9a:3f:b0:14:26:c4:f8:d9:11: e0:cd:fc:db:72:2b:0a:e0:7b:59:bc:cf:b3:68:99: 6f:61:4f:65:25:18:d7:e6:8a:32:ad:d7:f5:24:f9: bb:9e:0d:4a:a4:55:5a:65:be:36:d5:5f:92:4e:6e: bc:a0:c5:dd:67:09:d5:25:50:db:f7:38:27:61:90: e8:31:ef:bb:57:e1:e6:6f:02:b7:67:bc:b2:49:5c: 36:60:37:bb:cd:2a:3b:21:49:72:e4:08:31:a3:2b: 33:db:cf:81:62:da:2f:d8:4a:57:2f:39:11:18:82: 80:f5:d3:2d:86:b0:0f:0a:55:af:1d:88:3b:0d:a7: 7a:a6:7a:e7:f7:37:55:a2:f3:e5:14:ea:aa:bf:90: 77:fa:d3:86:73:50:12:47:02:3d:68:79:98:8a:55: db:a9:8c:c1:a3:ad:5b:46:b6:e7:29:38:9c:5a:86: c9:4c:a2:39:1f:22:8c:cc:09:79:9f:77:45:e9:41: cf:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3C:04:4D:0A:33:EE:F4:A5:EC:93:1B:62:C1:D1:66:45:E6:08:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/e4f21359-fbdd-3835-adf4-0aa226c665da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.crl X509v3 Authority Key Identifier: keyid:13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer sbgp-ipAddrBlock: critical IPv4: 205.233.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:f7:0b:f2:96:d5:30:f1:fb:22:2a:09:fe:a5:e0:71:f9:c2: 19:1d:62:68:f4:2d:2f:a5:c6:1c:28:f9:37:d6:25:06:f4:2a: b3:2c:c3:d3:2d:a7:d0:3e:ff:85:8e:c4:98:78:35:ed:78:5f: 50:ed:0c:91:db:20:ae:f7:18:9e:06:ec:fd:be:0f:83:f0:8d: d5:1f:98:19:b7:18:42:af:7d:7d:04:d4:25:2c:77:82:b6:56: 07:2d:5f:6a:cb:93:69:89:9b:2a:6c:3e:a4:21:4b:24:74:66: 8f:9f:16:42:3b:3c:4d:9f:dc:80:b9:f2:dd:43:2c:9f:50:01: ef:4a:bc:0e:97:ea:40:f8:1b:09:52:9b:6f:54:03:99:8b:36: 73:e8:de:23:18:81:e6:fb:b4:16:a2:fa:cd:5f:d8:1c:ca:34: d7:4f:28:e0:a2:3d:e1:e3:97:49:fd:6d:b0:87:ca:46:67:c4: b1:4d:f6:fe:15:c8:a6:81:41:f8:95:e5:93:42:48:66:e8:8b: 9e:fb:cc:f4:26:08:7d:97:ea:76:0d:81:43:87:2b:7b:86:32: 31:b5:c5:80:6d:14:2a:2c:8b:de:43:d6:98:1c:cc:29:aa:c5: ab:08:fa:c6:98:e7:d0:4b:a9:c7:ac:95:2a:72:8c:f8:1b:2a: a9:07:99:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftXEI58PKeFN/GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVhMDg0OTItYjNiMS00YWExLWI1NmQtMDFhOThmN2Qw OTE5MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk MWQzMTEyZDktMzhiNS00M2Q1LWE1MTYtNmY1MmQ1N2FjNjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsTXw7UKrgZmubelkxQ0un6QHjAYUMT1iwWn 9k87J2UyFm1YU700fX3+cSPN/QQNucCRHfkUDuJYK1g2mZAV7O2aP7AUJsT42RHg zfzbcisK4HtZvM+zaJlvYU9lJRjX5ooyrdf1JPm7ng1KpFVaZb421V+STm68oMXd ZwnVJVDb9zgnYZDoMe+7V+HmbwK3Z7yySVw2YDe7zSo7IUly5Agxoysz28+BYtov 2EpXLzkRGIKA9dMthrAPClWvHYg7Dad6pnrn9zdVovPlFOqqv5B3+tOGc1ASRwI9 aHmYilXbqYzBo61bRrbnKTicWobJTKI5HyKMzAl5n3dF6UHPfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDE8BE0KM+70peyTG2LB0WZF5gjzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNWEw ODQ5Mi1iM2IxLTRhYTEtYjU2ZC0wMWE5OGY3ZDA5MTkvZTRmMjEzNTktZmJkZC0z ODM1LWFkZjQtMGFhMjI2YzY2NWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjVhMDg0OTItYjNiMS00YWExLWI1 NmQtMDFhOThmN2QwOTE5LzI1YTA4NDkyLWIzYjEtNGFhMS1iNTZkLTAxYTk4Zjdk MDkxOS5jcmwwHwYDVR0jBBgwFoAUEwn6IXzXjp6k3qQG3jOvyyTaawYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNWEwODQ5Mi1iM2IxLTRhYTEtYjU2ZC0wMWE5 OGY3ZDA5MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzen0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAX3C/KW1TDx+yIqCf6l4HH5whkdYmj0LS+lxhwo+TfWJQb0KrMsw9Mt p9A+/4WOxJh4Ne14X1DtDJHbIK73GJ4G7P2+D4PwjdUfmBm3GEKvfX0E1CUsd4K2 VgctX2rLk2mJmypsPqQhSyR0Zo+fFkI7PE2f3IC58t1DLJ9QAe9KvA6X6kD4GwlS m29UA5mLNnPo3iMYgeb7tBai+s1f2BzKNNdPKOCiPeHjl0n9bbCHykZnxLFN9v4V yKaBQfiV5ZNCSGboi577zPQmCH2X6nYNgUOHK3uGMjG1xYBtFCosi95D1pgczCmq xasI+saY59BLqceslSpyjPgbKqkHmYs= -----END CERTIFICATE-----Generated at Wed May 13 10:54:03 2026 by rpki-client