$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/449623f9-262e-30d7-b092-da8a84b2a27b.roa File: 449623f9-262e-30d7-b092-da8a84b2a27b.roa (raw, json) Hash identifier: tGYINCggYaUT04qKnFTyQIKGn5W4+BVvRgcbtsylzv0= Subject key identifier: A3:BD:D6:CA:74:AA:35:5C:D0:42:18:B4:A8:CA:BD:AB:2C:47:3F:08 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584D9B855491EEA22247D4B83880 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/449623f9-262e-30d7-b092-da8a84b2a27b.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 398993 IP address blocks: 104.233.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:54:91:ee:a2:22:47:d4:b8:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=662580da-e5e2-4731-aa09-46cbc7912ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9a:5e:3e:ad:f0:54:d5:76:c3:ed:64:bd:29: 5c:69:02:fc:7d:50:89:f4:15:4f:8f:f5:95:b7:59: 9f:7d:0f:ad:e9:ed:d7:62:65:52:12:14:91:25:90: 02:80:92:c8:c3:22:e1:ba:b9:45:82:5c:da:e7:1c: 7d:4f:1f:e1:78:67:fb:4b:d0:86:73:da:48:a5:81: 2b:2e:b8:0e:9e:0c:64:2b:61:5e:7b:93:2d:e9:60: 2a:a1:94:22:80:3e:a5:33:4f:25:74:70:d6:0e:74: 5d:4e:75:88:31:da:9f:cf:ac:30:65:cc:e4:b8:b1: e9:81:02:e3:09:c3:1f:54:d7:18:98:60:73:1e:31: d7:d0:60:f4:4c:14:3a:11:45:3a:78:39:64:cf:96: b6:4f:c1:a2:5f:71:b6:d3:a4:8d:ed:5d:29:a0:ad: 58:b0:fa:6d:b4:6d:e0:78:86:55:b8:0a:28:8b:3d: 90:c4:06:39:42:b4:34:85:61:40:ba:4b:60:4e:64: 16:fa:ab:77:82:35:f5:ed:24:df:e4:11:9a:c6:e3: c8:fa:a0:8f:64:68:25:d2:e2:a1:3b:7b:b6:b8:b9: f7:e3:a9:5c:23:2c:a5:03:bf:7f:f7:45:d7:b8:5d: 06:54:1e:69:d0:9b:af:41:02:e3:fa:60:8d:25:c7: 39:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BD:D6:CA:74:AA:35:5C:D0:42:18:B4:A8:CA:BD:AB:2C:47:3F:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/449623f9-262e-30d7-b092-da8a84b2a27b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 104.233.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:eb:56:5e:74:32:eb:16:54:d6:ab:a3:2c:b6:20:f5:bf:f7: 63:19:21:0d:05:35:d2:6a:8a:28:7e:b6:e1:df:92:bd:13:0d: b5:bc:e8:80:0f:65:b5:34:94:5f:cd:95:77:d7:32:cf:c7:70: 03:f5:1e:cc:d1:d3:22:61:19:61:2f:8c:c1:48:4c:a7:86:cc: 0c:32:87:35:f4:92:fd:b2:53:d3:f8:54:3e:3c:a0:56:74:f6: 6b:06:2d:14:66:f3:fc:c4:b7:56:55:e0:b0:25:43:0b:c4:25: 07:01:4f:c5:d2:0c:7e:15:c9:4a:8d:26:04:18:69:96:26:5b: 28:75:d2:ff:13:a5:f9:8f:93:d0:71:28:e6:69:40:24:16:6d: 2c:97:8f:fb:27:40:aa:56:57:fc:40:e1:9a:03:83:bb:02:d2: 7d:3f:f7:0b:64:51:ad:40:3f:89:c7:1e:8f:a7:33:15:13:a0: 3e:59:46:27:a6:3d:13:d1:8c:2c:cc:eb:51:65:46:4b:e9:f4: fd:20:fc:53:35:0e:18:bf:7b:11:7a:b6:30:8c:61:06:ba:1a: 65:9f:dc:82:f7:43:ad:78:4e:c7:3c:a8:84:cb:b1:d5:cf:b8: b7:57:4c:dc:a6:87:0b:43:06:28:32:dc:38:b8:17:76:fb:c4: 25:a3:9c:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bhVSR7qIiR9S4OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk NjYyNTgwZGEtZTVlMi00NzMxLWFhMDktNDZjYmM3OTEyY2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5pePq3wVNV2w+1kvSlcaQL8fVCJ9BVPj/WV t1mffQ+t6e3XYmVSEhSRJZACgJLIwyLhurlFglza5xx9Tx/heGf7S9CGc9pIpYEr LrgOngxkK2Fee5Mt6WAqoZQigD6lM08ldHDWDnRdTnWIMdqfz6wwZczkuLHpgQLj CcMfVNcYmGBzHjHX0GD0TBQ6EUU6eDlkz5a2T8GiX3G206SN7V0poK1YsPpttG3g eIZVuAooiz2QxAY5QrQ0hWFAuktgTmQW+qt3gjX17STf5BGaxuPI+qCPZGgl0uKh O3u2uLn346lcIyylA79/90XXuF0GVB5p0JuvQQLj+mCNJcc5lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKO91sp0qjVc0EIYtKjKvassRz8IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNDQ5NjIzZjktMjYyZS0z MGQ3LWIwOTItZGE4YTg0YjJhMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaOmaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXrVl50MusWVNaroyy2IPW/92MZIQ0FNdJqiih+tuHfkr0TDbW86IAP ZbU0lF/NlXfXMs/HcAP1HszR0yJhGWEvjMFITKeGzAwyhzX0kv2yU9P4VD48oFZ0 9msGLRRm8/zEt1ZV4LAlQwvEJQcBT8XSDH4VyUqNJgQYaZYmWyh10v8TpfmPk9Bx KOZpQCQWbSyXj/snQKpWV/xA4ZoDg7sC0n0/9wtkUa1AP4nHHo+nMxUToD5ZRiem PRPRjCzM61FlRkvp9P0g/FM1Dhi/exF6tjCMYQa6GmWf3IL3Q614Tsc8qITLsdXP uLdXTNymhwtDBigy3Di4F3b7xCWjnNM= -----END CERTIFICATE-----Generated at Wed May 13 11:30:45 2026 by rpki-client