$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/a08f2739-bc57-3f01-8de6-25e8506410f0.roa File: a08f2739-bc57-3f01-8de6-25e8506410f0.roa (raw, json) Hash identifier: cJF7Y9ERd3JjE5yC0qFFtCuysa3aSeNLcxuX86xLKSo= Subject key identifier: 7A:61:E4:10:62:E3:13:62:0F:1C:66:0F:15:FA:8A:1E:E0:A5:14:B5 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584D9FB568722805706E23681000 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/a08f2739-bc57-3f01-8de6-25e8506410f0.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 15092 IP address blocks: 161.199.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:68:72:28:05:70:6e:23:68:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=8382b49d-22e8-4025-b29a-48f5935ff4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:db:59:98:a1:e0:6c:d7:e6:b2:17:43:22:28: b9:b5:32:67:95:32:ab:95:89:f6:e4:16:44:94:43: ec:1b:52:b5:89:fe:6f:28:d7:2a:c6:0b:e0:7d:b5: cd:07:7a:b8:b0:aa:e2:e0:d4:dc:b9:ff:6f:1a:0c: f6:00:0f:21:39:b1:17:88:01:9e:ba:11:6f:fe:b4: eb:17:d2:05:f3:57:51:dc:c1:11:8e:13:de:d2:91: f3:1b:e7:18:67:93:a5:66:c9:9d:29:5b:a9:d9:45: f9:3d:a2:21:19:4e:7a:e8:af:f7:e3:d3:4a:74:d8: 82:5e:f8:d1:82:76:e8:ee:0e:50:29:74:b7:51:0a: 39:b4:8c:94:74:a3:f4:ce:54:09:6d:63:1e:36:98: 81:bd:e7:a0:01:3f:6b:a2:77:0c:e6:0b:89:43:98: 47:0b:31:28:ae:70:51:15:9f:15:e4:5d:61:f0:f1: 47:26:75:5d:9c:f7:6a:23:ca:ba:c0:fb:3b:88:98: bd:88:fa:ec:15:83:2c:12:80:2d:62:16:4a:d8:c1: 3d:e4:b5:57:65:0f:d2:b2:97:11:83:ea:dc:d5:66: 18:2a:2d:88:13:59:75:7e:7d:b8:7b:ee:4e:ad:21: 6f:84:05:79:2c:e6:89:f4:0f:63:94:04:e5:2d:3e: 22:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:61:E4:10:62:E3:13:62:0F:1C:66:0F:15:FA:8A:1E:E0:A5:14:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/a08f2739-bc57-3f01-8de6-25e8506410f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 161.199.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:cc:a3:5a:29:49:2d:13:f5:0e:28:0c:cb:94:b6:7e:aa:85: e8:bf:81:c4:1c:f6:f1:07:0b:28:83:56:a2:3f:8b:72:52:b3: 40:e5:4b:6f:6e:64:bf:e6:5f:5b:89:09:85:de:6f:11:34:5d: 60:7e:ec:d9:d2:6c:e3:15:da:f4:25:e6:88:93:2a:c2:0d:03: 78:ba:4f:61:c4:5f:49:b4:69:8b:f4:6d:89:3b:5d:1c:66:c2: f4:b9:08:a7:17:24:13:42:76:2b:be:a5:84:2b:dd:44:b2:5e: 22:97:9b:4f:df:f1:d2:6f:77:10:6e:aa:43:b8:f7:b5:e8:f4: 20:c2:d6:8e:85:47:94:e1:a1:3e:2b:c4:3c:f7:af:18:e8:de: da:1a:33:e8:de:28:f4:98:a0:ec:34:2a:b6:73:9b:26:3b:24: 5d:39:f7:89:9b:df:ac:a3:36:31:e8:e8:69:d7:38:4d:68:64: 79:a6:ec:84:2a:01:13:fa:0e:09:b5:7e:a2:98:fb:1c:a3:66: cb:c1:31:88:b0:76:e4:ac:55:3b:7e:7a:94:44:33:bd:cc:a9: 5d:f3:3d:8c:a4:04:bf:a5:01:45:60:a2:2e:70:72:01:eb:50: 22:9b:89:e7:6d:be:ee:18:40:63:ed:88:f1:0d:f0:96:65:45: 02:40:7b:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftWhyKAVwbiNoEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk ODM4MmI0OWQtMjJlOC00MDI1LWIyOWEtNDhmNTkzNWZmNGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAittZmKHgbNfmshdDIii5tTJnlTKrlYn25BZE lEPsG1K1if5vKNcqxgvgfbXNB3q4sKri4NTcuf9vGgz2AA8hObEXiAGeuhFv/rTr F9IF81dR3MERjhPe0pHzG+cYZ5OlZsmdKVup2UX5PaIhGU566K/349NKdNiCXvjR gnbo7g5QKXS3UQo5tIyUdKP0zlQJbWMeNpiBveegAT9roncM5guJQ5hHCzEornBR FZ8V5F1h8PFHJnVdnPdqI8q6wPs7iJi9iPrsFYMsEoAtYhZK2ME95LVXZQ/SspcR g+rc1WYYKi2IE1l1fn24e+5OrSFvhAV5LOaJ9A9jlATlLT4irwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHph5BBi4xNiDxxmDxX6ih7gpRS1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvYTA4ZjI3MzktYmM1Ny0z ZjAxLThkZTYtMjVlODUwNjQxMGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCocd8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjMo1opSS0T9Q4oDMuUtn6qhei/gcQc9vEHCyiDVqI/i3JSs0DlS29u ZL/mX1uJCYXebxE0XWB+7NnSbOMV2vQl5oiTKsINA3i6T2HEX0m0aYv0bYk7XRxm wvS5CKcXJBNCdiu+pYQr3USyXiKXm0/f8dJvdxBuqkO497Xo9CDC1o6FR5ThoT4r xDz3rxjo3toaM+jeKPSYoOw0KrZzmyY7JF0594mb36yjNjHo6GnXOE1oZHmm7IQq ARP6Dgm1fqKY+xyjZsvBMYiwduSsVTt+epREM73MqV3zPYykBL+lAUVgoi5wcgHr UCKbiedtvu4YQGPtiPEN8JZlRQJAezc= -----END CERTIFICATE-----Generated at Wed May 13 15:53:26 2026 by rpki-client