$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/85f6b1e1-8345-33b2-9c2a-4c59ec9d4566.roa File: 85f6b1e1-8345-33b2-9c2a-4c59ec9d4566.roa (raw, json) Hash identifier: p92khcuiQjMNFvdF1dqNoHYpJTzx6zAgxmk43+SfbqY= Subject key identifier: FC:71:D6:A1:1A:56:DC:5E:EC:58:C2:74:CA:BE:09:9D:F1:DD:0A:07 Certificate issuer: /CN=4680d191-3a38-4cef-89dd-c84240e3a1cf Certificate serial: 010D0C9F4328584D9FB58A66C1BE657B64FA7580 Authority key identifier: 40:11:85:32:F0:2C:81:06:59:39:53:27:44:F4:29:80:68:DE:64:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/85f6b1e1-8345-33b2-9c2a-4c59ec9d4566.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 25968 IP address blocks: 147.174.0.0/16 maxlen: 16 147.174.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:8a:66:c1:be:65:7b:64:fa:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4680d191-3a38-4cef-89dd-c84240e3a1cf Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=ba688523-854f-4531-811d-0e6a97ffacdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:50:ec:75:a1:3b:23:f1:72:d1:ff:d7:fa:06: 98:c4:7e:71:06:34:c7:93:48:4c:48:87:bc:c3:14: 93:93:3a:56:8e:53:15:9a:6f:da:fc:c1:60:d9:ee: 69:0d:ba:33:5a:cd:28:46:c3:51:2e:38:72:12:9d: 12:e1:4a:5b:0f:86:44:8f:a3:d7:66:35:5f:7b:a0: 61:6b:73:f3:29:66:2d:5f:86:f2:6e:fc:48:72:a9: 69:1c:39:16:16:15:d5:22:f7:aa:f8:b1:b5:b1:a7: a4:56:f4:61:43:cd:04:de:3e:85:43:f5:65:7b:7e: d9:90:ad:d0:d7:cd:66:b4:9b:aa:d6:f1:28:3c:c3: ee:94:3d:b8:84:5c:09:96:f0:73:81:f1:d2:51:55: 22:5c:92:b1:9c:bc:1d:98:62:04:75:a4:1a:98:39: 51:9d:ea:00:f4:55:81:ca:86:56:8b:fa:eb:f2:61: d4:aa:5b:43:e1:60:41:24:04:04:fd:bb:61:48:5e: dc:af:78:22:08:8d:25:d3:4b:c7:9b:a5:29:0e:23: bc:60:45:86:99:bd:0b:9c:6a:57:26:4b:23:9c:42: 30:07:bc:75:9c:42:9e:1a:e0:6f:79:6b:8d:4a:eb: 25:de:ae:ca:ad:0b:6f:3a:29:ab:c1:5d:53:e5:69: 60:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:71:D6:A1:1A:56:DC:5E:EC:58:C2:74:CA:BE:09:9D:F1:DD:0A:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/85f6b1e1-8345-33b2-9c2a-4c59ec9d4566.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.crl X509v3 Authority Key Identifier: keyid:40:11:85:32:F0:2C:81:06:59:39:53:27:44:F4:29:80:68:DE:64:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer sbgp-ipAddrBlock: critical IPv4: 147.174.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:44:e3:31:d0:a2:be:3e:6d:51:da:9c:a7:99:be:49:6c:a2: 15:d3:3f:15:74:d6:3a:91:4e:f7:60:56:2c:9e:cd:ce:61:f6: 6a:b3:b6:26:c8:bc:10:ad:dc:c5:58:49:75:98:d1:6f:50:4a: e8:1d:08:95:43:62:f2:30:b2:57:3e:7c:bf:94:ed:8b:75:5c: dc:cf:3e:f5:98:64:4f:ba:cb:ea:f2:c5:6b:d2:2d:0a:e7:c9: 80:a1:31:8f:df:e9:07:0f:8a:a5:c2:59:f5:b1:5b:94:60:b9: e8:48:ca:a1:94:c8:29:93:f7:83:c0:68:24:98:b8:f3:e5:97: 82:cb:73:5e:12:e6:f4:ef:30:3b:74:09:19:f2:20:95:45:b5: bf:33:f6:07:8c:a2:7f:47:dd:93:3d:b5:53:12:b6:47:ad:f8: 36:18:b6:a5:cb:f2:e7:51:23:c4:a7:70:a0:ca:2a:2b:8d:08: 6e:10:19:80:1d:8a:ad:bc:53:45:70:62:36:15:47:e0:bf:1d: 0d:93:17:eb:80:c5:7e:6e:cc:37:82:4d:b1:22:87:ef:fd:c4: 0b:57:e0:ec:0a:f1:94:8d:50:82:32:3e:ae:60:d0:fd:58:3b: 8c:ac:b9:e4:7a:d5:30:58:ed:ab:ce:71:bd:3c:aa:39:b4:cf: 6f:16:8d:25 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2ftYpmwb5le2T6dYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY4MGQxOTEtM2EzOC00Y2VmLTg5ZGQtYzg0MjQwZTNh MWNmMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk YmE2ODg1MjMtODU0Zi00NTMxLTgxMWQtMGU2YTk3ZmZhY2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1DsdaE7I/Fy0f/X+gaYxH5xBjTHk0hMSIe8 wxSTkzpWjlMVmm/a/MFg2e5pDbozWs0oRsNRLjhyEp0S4UpbD4ZEj6PXZjVfe6Bh a3PzKWYtX4bybvxIcqlpHDkWFhXVIveq+LG1saekVvRhQ80E3j6FQ/Vle37ZkK3Q 181mtJuq1vEoPMPulD24hFwJlvBzgfHSUVUiXJKxnLwdmGIEdaQamDlRneoA9FWB yoZWi/rr8mHUqltD4WBBJAQE/bthSF7cr3giCI0l00vHm6UpDiO8YEWGmb0LnGpX JksjnEIwB7x1nEKeGuBveWuNSusl3q7KrQtvOimrwV1T5WlgEQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPxx1qEaVtxe7FjCdMq+CZ3x3QoHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80Njgw ZDE5MS0zYTM4LTRjZWYtODlkZC1jODQyNDBlM2ExY2YvODVmNmIxZTEtODM0NS0z M2IyLTljMmEtNGM1OWVjOWQ0NTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDY4MGQxOTEtM2EzOC00Y2VmLTg5 ZGQtYzg0MjQwZTNhMWNmLzQ2ODBkMTkxLTNhMzgtNGNlZi04OWRkLWM4NDI0MGUz YTFjZi5jcmwwHwYDVR0jBBgwFoAUQBGFMvAsgQZZOVMnRPQpgGjeZBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80NjgwZDE5MS0zYTM4LTRjZWYtODlkZC1jODQy NDBlM2ExY2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk64wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEACkTjMdCivj5tUdqcp5m+SWyiFdM/FXTWOpFO92BWLJ7NzmH2arO2Jsi8 EK3cxVhJdZjRb1BK6B0IlUNi8jCyVz58v5Tti3Vc3M8+9ZhkT7rL6vLFa9ItCufJ gKExj9/pBw+KpcJZ9bFblGC56EjKoZTIKZP3g8BoJJi48+WXgstzXhLm9O8wO3QJ GfIglUW1vzP2B4yif0fdkz21UxK2R634Nhi2pcvy51EjxKdwoMoqK40IbhAZgB2K rbxTRXBiNhVH4L8dDZMX64DFfm7MN4JNsSKH7/3EC1fg7ArxlI1QgjI+rmDQ/Vg7 jKy55HrVMFjtq85xvTyqObTPbxaNJQ== -----END CERTIFICATE-----Generated at Wed May 13 10:58:19 2026 by rpki-client