$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f5553891-9155-44bb-b927-2892241b2484/9f7ba92a-7852-3e74-ad4e-3fa5ba3a3df9.roa File: 9f7ba92a-7852-3e74-ad4e-3fa5ba3a3df9.roa (raw, json) Hash identifier: na1oeAbHVW8EWaofQ+ZRYM6JhfvJa58hQpxae8K7b3c= Subject key identifier: DA:D0:F5:C6:6F:5A:BB:F0:C9:EF:D5:90:05:D5:C9:31:52:35:E3:B5 Certificate issuer: /CN=f5553891-9155-44bb-b927-2892241b2484 Certificate serial: 010D0C9F4328584D905AA33DF5FFD9565725CC00 Authority key identifier: C2:A0:47:92:25:D3:5A:E6:9E:3B:9B:BA:F0:F2:5E:3E:D7:CA:DD:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f5553891-9155-44bb-b927-2892241b2484.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f5553891-9155-44bb-b927-2892241b2484/9f7ba92a-7852-3e74-ad4e-3fa5ba3a3df9.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 56786 IP address blocks: 142.249.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f5553891-9155-44bb-b927-2892241b2484/f5553891-9155-44bb-b927-2892241b2484.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f5553891-9155-44bb-b927-2892241b2484/f5553891-9155-44bb-b927-2892241b2484.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f5553891-9155-44bb-b927-2892241b2484.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:a3:3d:f5:ff:d9:56:57:25:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5553891-9155-44bb-b927-2892241b2484 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=d2c7df63-24cf-41f9-88d7-d8f08a6b84d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:02:93:1c:ca:aa:64:5c:51:15:0e:d9:d8:b7: af:14:48:58:6d:cb:15:3f:88:0c:81:62:68:e7:97: ce:4f:48:5b:b7:a5:d9:aa:a5:c9:22:19:90:15:3f: 56:9a:a1:03:9d:44:99:9b:8e:f7:65:2d:8f:57:17: 33:b6:da:f8:69:61:d1:12:88:c8:45:e2:dc:eb:14: 3e:1e:0b:87:0e:52:52:4c:89:13:b3:bc:75:39:67: 94:d9:ee:fd:b2:89:8a:79:60:32:02:b9:f0:23:c6: 99:d8:8f:41:93:b9:75:10:2b:43:a1:2d:0a:14:fe: f6:46:52:15:0e:6b:e7:95:c2:bd:ae:09:ed:cc:90: a6:ab:4f:89:d2:27:db:21:78:79:b3:e8:30:df:19: 76:44:c5:a1:fd:79:f8:47:18:8e:a5:bc:84:ee:60: f7:61:c7:25:96:17:8b:25:c1:43:ea:d1:b3:ab:43: 13:59:e4:1a:83:b5:20:0b:10:8c:6a:65:bb:d9:8d: 03:2e:64:f2:6f:9a:9d:11:dd:ab:89:29:21:3b:a8: 5b:ec:af:51:0b:ad:ac:21:1e:8c:ce:72:39:4c:bd: b6:99:4a:6e:85:29:81:ee:68:9c:17:4c:00:b7:43: 30:c7:bb:e2:0c:be:23:2d:d7:41:1e:d9:2f:7c:4e: 40:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D0:F5:C6:6F:5A:BB:F0:C9:EF:D5:90:05:D5:C9:31:52:35:E3:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f5553891-9155-44bb-b927-2892241b2484/9f7ba92a-7852-3e74-ad4e-3fa5ba3a3df9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f5553891-9155-44bb-b927-2892241b2484/f5553891-9155-44bb-b927-2892241b2484.crl X509v3 Authority Key Identifier: keyid:C2:A0:47:92:25:D3:5A:E6:9E:3B:9B:BA:F0:F2:5E:3E:D7:CA:DD:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f5553891-9155-44bb-b927-2892241b2484.cer sbgp-ipAddrBlock: critical IPv4: 142.249.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:6c:73:0f:d3:12:80:2f:ed:dd:4a:f5:30:89:a9:43:92:95: f5:a8:06:d0:31:f9:cc:a7:49:cd:2c:ec:a0:a1:4d:0f:ef:6a: f3:91:04:97:10:0d:ec:45:37:96:f4:ed:8b:41:71:68:1c:0e: a7:1f:e9:e0:2d:f5:d6:e6:3c:9a:38:93:ae:9d:34:28:d1:eb: 6c:2b:30:62:97:1e:f1:9a:15:5a:17:00:26:54:1b:a6:c2:20: 5b:9c:6f:d9:a9:83:25:a5:ec:7b:40:0f:57:52:30:cc:73:35: c7:c3:65:0b:b7:8a:63:8d:88:97:b4:27:3e:81:db:d1:ee:03: b4:f7:3d:e7:f4:23:d8:9b:d5:a7:3f:8c:c0:c9:8a:f8:fe:f9: e7:84:2a:c9:97:eb:15:e0:ca:65:1c:c3:9b:7b:10:5b:8a:46: 8e:9c:a7:79:6b:7e:88:e3:4b:da:85:11:52:0d:c8:48:73:4c: 17:ad:7f:87:1a:56:b8:bd:0a:54:05:43:f5:a3:2e:72:72:95: 9e:ca:a0:74:75:02:03:d9:8d:02:5a:db:6e:6e:ba:b4:90:95: 74:a4:2f:41:11:a3:fa:93:05:c2:11:51:67:6a:49:db:04:ce: 5f:32:38:14:88:cf:ad:fc:72:0c:e3:24:e4:35:a3:9e:b9:07: a7:ea:38:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWqM99f/ZVlclzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjU1NTM4OTEtOTE1NS00NGJiLWI5MjctMjg5MjI0MWIy NDg0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk ZDJjN2RmNjMtMjRjZi00MWY5LTg4ZDctZDhmMDhhNmI4NGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wKTHMqqZFxRFQ7Z2LevFEhYbcsVP4gMgWJo 55fOT0hbt6XZqqXJIhmQFT9WmqEDnUSZm473ZS2PVxczttr4aWHREojIReLc6xQ+ HguHDlJSTIkTs7x1OWeU2e79somKeWAyArnwI8aZ2I9Bk7l1ECtDoS0KFP72RlIV DmvnlcK9rgntzJCmq0+J0ifbIXh5s+gw3xl2RMWh/Xn4RxiOpbyE7mD3YccllheL JcFD6tGzq0MTWeQag7UgCxCMamW72Y0DLmTyb5qdEd2riSkhO6hb7K9RC62sIR6M znI5TL22mUpuhSmB7micF0wAt0Mwx7viDL4jLddBHtkvfE5AnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrQ9cZvWrvwye/VkAXVyTFSNeO1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mNTU1 Mzg5MS05MTU1LTQ0YmItYjkyNy0yODkyMjQxYjI0ODQvOWY3YmE5MmEtNzg1Mi0z ZTc0LWFkNGUtM2ZhNWJhM2EzZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjU1NTM4OTEtOTE1NS00NGJiLWI5 MjctMjg5MjI0MWIyNDg0L2Y1NTUzODkxLTkxNTUtNDRiYi1iOTI3LTI4OTIyNDFi MjQ4NC5jcmwwHwYDVR0jBBgwFoAUwqBHkiXTWuaeO5u68PJePtfK3VkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mNTU1Mzg5MS05MTU1LTQ0YmItYjkyNy0yODky MjQxYjI0ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxscw/TEoAv7d1K9TCJqUOSlfWoBtAx+cynSc0s7KChTQ/vavORBJcQ DexFN5b07YtBcWgcDqcf6eAt9dbmPJo4k66dNCjR62wrMGKXHvGaFVoXACZUG6bC IFucb9mpgyWl7HtAD1dSMMxzNcfDZQu3imONiJe0Jz6B29HuA7T3Pef0I9ib1ac/ jMDJivj++eeEKsmX6xXgymUcw5t7EFuKRo6cp3lrfojjS9qFEVINyEhzTBetf4ca Vri9ClQFQ/WjLnJylZ7KoHR1AgPZjQJa225uurSQlXSkL0ERo/qTBcIRUWdqSdsE zl8yOBSIz638cgzjJOQ1o565B6fqOJk= -----END CERTIFICATE-----Generated at Wed May 13 09:25:37 2026 by rpki-client