$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f924ec45-7c4b-3c98-9c42-2cb1686db58f.roa File: f924ec45-7c4b-3c98-9c42-2cb1686db58f.roa (raw, json) Hash identifier: C2z9JDDOroVjOD12byW3Dk8yE5JWKVyV7wd27LMRw8k= Subject key identifier: 40:DA:10:98:95:A0:FB:89:FA:94:26:D8:6C:E6:25:88:E0:9B:11:0F Certificate issuer: /CN=f25c48f2-c7df-4c6b-b214-2e741959995d Certificate serial: 010D0C9F4328584DBFD05CCFC098BEBC7BF8C2C0 Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f924ec45-7c4b-3c98-9c42-2cb1686db58f.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 398427 IP address blocks: 185.172.188.0/22 maxlen: 22 2602:fd35::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:5c:cf:c0:98:be:bc:7b:f8:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=b198cfd3-26f1-4919-b1e6-d22c310600ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:66:85:1d:38:45:e7:c4:70:9b:93:bb:a7:66: bb:04:93:db:bb:68:ce:08:03:3a:e0:66:6b:bd:2b: d5:4b:2f:30:59:5b:0f:91:cd:79:38:7e:1f:53:6b: 21:c9:cf:07:f6:f0:33:8b:cb:a5:1f:6a:b9:d1:43: cf:62:49:19:b3:53:4a:93:fc:38:27:e2:69:d7:13: 32:63:59:fd:4d:32:cf:44:a9:72:bc:59:75:c4:47: ce:30:6f:f0:e0:4a:89:1e:d3:93:d0:2b:f2:57:cd: 21:03:41:21:e9:f3:9b:6e:c3:ff:42:60:28:d4:1f: 4d:92:c2:27:4a:f6:14:d9:83:39:6c:cf:34:a3:1a: fc:a1:6f:c9:d8:65:c7:2a:c6:56:4b:93:74:0d:0a: fe:7b:85:1b:6f:3e:86:ef:42:58:23:7d:06:22:3a: da:4d:44:22:19:6c:fc:5a:15:54:99:c3:cb:a3:ce: 8b:69:12:b2:2b:5e:e0:3c:0a:3c:cf:bf:08:61:a0: e6:b8:d1:5f:30:c9:c7:39:1f:bf:b4:ce:1b:4e:76: 68:6a:7a:08:fc:37:2a:9a:2f:07:6b:dd:db:b6:3c: 33:63:f9:7e:13:27:7c:83:19:0a:1b:5b:72:d7:6f: 1d:5c:c7:e1:53:4b:65:10:ff:62:46:1f:a9:bd:a5: cd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DA:10:98:95:A0:FB:89:FA:94:26:D8:6C:E6:25:88:E0:9B:11:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f924ec45-7c4b-3c98-9c42-2cb1686db58f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl X509v3 Authority Key Identifier: keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer sbgp-ipAddrBlock: critical IPv4: 185.172.188.0/22 IPv6: 2602:fd35::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:38:91:02:14:f9:bb:48:86:09:8b:32:fd:ae:88:32:21:f6: e7:4f:28:c6:6f:b5:e6:14:d2:47:ad:65:ce:9f:b5:b8:5f:9e: 62:7b:0b:2a:13:b4:64:af:18:5d:d0:2c:6e:ae:33:1a:20:be: 08:9c:5c:f0:81:c7:77:31:f4:ec:5c:1c:0c:28:fa:4a:c5:49: 9b:ef:6a:04:0f:6c:25:b3:67:7b:51:8b:56:11:16:08:f1:25: 4c:da:53:97:d9:9d:67:2f:cf:ca:98:f0:07:0d:a4:c6:98:ce: 1e:90:36:f5:3a:07:54:e1:68:f3:6b:94:33:f3:02:5c:ff:95: 8c:2f:33:11:a6:a2:c0:85:9b:97:b2:92:f8:0b:7b:ff:f2:d9: e7:6e:7a:ee:39:30:1e:90:78:bd:32:f0:d6:a2:77:11:fb:12: 29:05:51:6d:21:b0:36:da:39:b8:9c:c2:f7:b2:cc:b1:3a:45: 1c:af:84:13:62:14:f5:13:e3:26:89:59:5e:6b:d6:cb:c9:a2: bf:fe:54:d4:20:4f:b3:de:83:90:61:22:db:81:5c:60:f7:98: 55:8a:cc:56:45:4d:b1:ef:3a:e7:42:e7:23:25:55:c4:e8:90: f7:db:1e:a2:85:e0:89:03:8b:b1:9b:21:bc:1c:72:01:42:1d: dd:91:68:f7 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2/0FzPwJi+vHv4wsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI1YzQ4ZjItYzdkZi00YzZiLWIyMTQtMmU3NDE5NTk5 OTVkMB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk YjE5OGNmZDMtMjZmMS00OTE5LWIxZTYtZDIyYzMxMDYwMGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWaFHThF58Rwm5O7p2a7BJPbu2jOCAM64GZr vSvVSy8wWVsPkc15OH4fU2shyc8H9vAzi8ulH2q50UPPYkkZs1NKk/w4J+Jp1xMy Y1n9TTLPRKlyvFl1xEfOMG/w4EqJHtOT0CvyV80hA0Eh6fObbsP/QmAo1B9NksIn SvYU2YM5bM80oxr8oW/J2GXHKsZWS5N0DQr+e4Ubbz6G70JYI30GIjraTUQiGWz8 WhVUmcPLo86LaRKyK17gPAo8z78IYaDmuNFfMMnHOR+/tM4bTnZoanoI/Dcqmi8H a93btjwzY/l+Eyd8gxkKG1ty128dXMfhU0tlEP9iRh+pvaXNiQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEDaEJiVoPuJ+pQm2GzmJYjgmxEPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVj NDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0MTk1OTk5NWQvZjkyNGVjNDUtN2M0Yi0z Yzk4LTljNDItMmNiMTY4NmRiNThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjI1YzQ4ZjItYzdkZi00YzZiLWIy MTQtMmU3NDE5NTk5OTVkL2YyNWM0OGYyLWM3ZGYtNGM2Yi1iMjE0LTJlNzQxOTU5 OTk1ZC5jcmwwHwYDVR0jBBgwFoAU+sfScWviPZWQVIfGlXYdIfhQmnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVjNDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0 MTk1OTk5NWQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCuay8MA4E AgACMAgDBgQmAv01ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNOJECFPm7SIYJizL9rogyIfbnTyjGb7Xm FNJHrWXOn7W4X55iewsqE7Rkrxhd0CxurjMaIL4InFzwgcd3MfTsXBwMKPpKxUmb 72oED2wls2d7UYtWERYI8SVM2lOX2Z1nL8/KmPAHDaTGmM4ekDb1OgdU4Wjza5Qz 8wJc/5WMLzMRpqLAhZuXspL4C3v/8tnnbnruOTAekHi9MvDWoncR+xIpBVFtIbA2 2jm4nML3ssyxOkUcr4QTYhT1E+MmiVlea9bLyaK//lTUIE+z3oOQYSLbgVxg95hV isxWRU2x7zrnQucjJVXE6JD32x6iheCJA4uxmyG8HHIBQh3dkWj3 -----END CERTIFICATE-----Generated at Wed May 13 15:19:23 2026 by rpki-client