$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa File: d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa (raw, json) Hash identifier: NRPgXvN/xocaAtpWIamoYniU3xXpk35sU+kroxyTLt4= Subject key identifier: 50:AC:A1:F6:CE:57:CA:4F:BC:42:77:FE:38:DA:B5:54:C3:0F:C9:15 Certificate issuer: /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Certificate serial: 010D0C9F4328584D8EF56037CF84FCEC3A19CA80 Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 7311 IP address blocks: 96.125.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:60:37:cf:84:fc:ec:3a:19:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=12c362c7-6218-4684-97ed-bee664000189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9e:64:91:e7:52:11:0c:16:8c:c6:fb:8c:c7: 66:e0:e3:5e:8a:01:7d:d3:cd:24:68:d2:c9:57:ef: f5:17:08:d2:0f:ac:84:b0:01:52:d2:70:04:f9:c9: 2d:84:46:84:d2:82:6d:11:92:46:9e:96:93:a2:a1: 2e:6a:57:6e:a3:07:b4:ac:e7:7b:26:9b:d3:1c:c5: 62:70:69:ea:c1:88:3d:01:e3:11:0e:f4:95:c4:83: ef:78:0d:48:cd:4b:2e:7e:2e:aa:b0:ba:a0:85:f7: cf:6f:00:52:47:1f:aa:3d:3f:50:25:20:d5:1a:d0: 12:1c:4a:8e:d0:40:d2:2d:56:09:97:52:a8:9a:c6: 59:68:80:5d:89:c6:64:64:c7:e0:41:d5:e5:35:03: b3:d5:42:37:1b:59:c0:9e:36:4b:b7:99:30:3f:ed: 60:c7:d6:76:79:58:91:90:fb:28:c7:53:ad:2a:13: 52:1b:b6:58:75:08:a8:42:0c:bc:1c:95:e8:23:bb: 40:6d:1c:3a:ed:7d:40:5d:91:3c:99:4c:de:01:30: ae:49:3f:11:b6:f8:5c:4d:ea:a6:c6:08:a2:d3:42: 2a:33:4f:68:dd:d5:a8:2a:be:94:12:f1:6a:97:ac: 40:18:3b:3b:8b:c1:38:dc:88:5f:7f:8a:8c:01:f2: e2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AC:A1:F6:CE:57:CA:4F:BC:42:77:FE:38:DA:B5:54:C3:0F:C9:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl X509v3 Authority Key Identifier: keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer sbgp-ipAddrBlock: critical IPv4: 96.125.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:b9:af:cf:a3:53:c1:05:c6:0d:66:0f:26:b3:1b:fc:4c:8f: 23:01:64:09:de:c6:84:1b:28:74:75:6b:86:15:45:07:6d:c0: 1a:8a:c0:a1:59:74:9d:17:e1:c7:b7:4a:6a:1f:93:75:ba:3e: a5:b7:0b:fc:7e:46:65:f2:1d:9c:24:5f:6f:08:48:f9:1c:54: f4:53:52:63:2c:67:60:70:b4:74:5c:b3:0c:95:ca:6c:38:46: 2b:aa:d5:61:a8:c9:15:16:95:80:20:0f:89:19:47:54:b8:8e: fa:8b:aa:57:ce:de:38:c0:5f:64:13:d7:1f:1f:28:d4:b2:80: d5:fd:6e:a0:2b:20:1a:8b:90:3a:61:5d:66:15:9e:ef:9c:dd: a7:6f:e3:84:2b:b1:fe:23:02:33:82:e1:e5:91:3c:74:05:b1: 5a:9e:7d:d6:a2:f3:63:8c:af:21:4c:6b:eb:72:0e:d9:c0:73: 43:c0:76:a8:fd:8c:ff:51:4c:25:31:e8:e8:51:0c:1b:6d:a9: 56:68:d8:55:87:66:11:a2:c7:09:2a:f2:53:64:55:ca:4b:8e: 1d:a0:a2:ea:6d:42:ba:b9:d9:9b:05:55:38:a7:f8:0f:53:ce: 83:2a:a8:5f:5f:aa:14:6f:fc:79:fa:8c:02:50:38:74:cc:15: 13:96:4a:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9WA3z4T87DoZyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0Y2U1ZjQtMjhhOS00YzFmLWIwMjktY2MzNWIzZTM5 NTBlMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MTJjMzYyYzctNjIxOC00Njg0LTk3ZWQtYmVlNjY0MDAwMTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip5kkedSEQwWjMb7jMdm4ONeigF9080kaNLJ V+/1FwjSD6yEsAFS0nAE+ckthEaE0oJtEZJGnpaToqEualduowe0rOd7JpvTHMVi cGnqwYg9AeMRDvSVxIPveA1IzUsufi6qsLqghffPbwBSRx+qPT9QJSDVGtASHEqO 0EDSLVYJl1KomsZZaIBdicZkZMfgQdXlNQOz1UI3G1nAnjZLt5kwP+1gx9Z2eViR kPsox1OtKhNSG7ZYdQioQgy8HJXoI7tAbRw67X1AXZE8mUzeATCuST8RtvhcTeqm xgii00IqM09o3dWoKr6UEvFql6xAGDs7i8E43Ihff4qMAfLiAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCsofbOV8pPvEJ3/jjatVTDD8kVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRj ZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1YjNlMzk1MGUvZDM0ZWIwZDgtZmEwYy0z MGQ2LWIzMjItYzYxYWYzMDQ1YWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ0Y2U1ZjQtMjhhOS00YzFmLWIw MjktY2MzNWIzZTM5NTBlL2Q0NGNlNWY0LTI4YTktNGMxZi1iMDI5LWNjMzViM2Uz OTUwZS5jcmwwHwYDVR0jBBgwFoAU0nBTqh5BS82k/zz4vLDcHCu2DFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRjZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1 YjNlMzk1MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYH2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIy5r8+jU8EFxg1mDyazG/xMjyMBZAnexoQbKHR1a4YVRQdtwBqKwKFZ dJ0X4ce3Smofk3W6PqW3C/x+RmXyHZwkX28ISPkcVPRTUmMsZ2BwtHRcswyVymw4 Riuq1WGoyRUWlYAgD4kZR1S4jvqLqlfO3jjAX2QT1x8fKNSygNX9bqArIBqLkDph XWYVnu+c3adv44Qrsf4jAjOC4eWRPHQFsVqefdai82OMryFMa+tyDtnAc0PAdqj9 jP9RTCUx6OhRDBttqVZo2FWHZhGixwkq8lNkVcpLjh2gouptQrq52ZsFVTin+A9T zoMqqF9fqhRv/Hn6jAJQOHTMFROWStE= -----END CERTIFICATE-----Generated at Wed May 13 09:29:45 2026 by rpki-client