$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/ddf8a60d-859f-3b0b-9243-c725f1c33259.roa File: ddf8a60d-859f-3b0b-9243-c725f1c33259.roa (raw, json) Hash identifier: 8l+JwNcEK90wvFZ918RzVzpCGzZgXJgzQs2MqTHYR38= Subject key identifier: BD:9B:C0:CE:67:1C:2A:1D:85:5E:DF:40:45:0B:C2:FF:A2:BF:A4:B6 Certificate issuer: /CN=712951d4-501e-451c-a20a-59b6aff3e2d4 Certificate serial: 010D0C9F4328584DADB57E1D9615EFECEEAA2870 Authority key identifier: 52:7A:38:8E:28:41:32:8C:92:B2:70:AE:33:9C:BD:2C:75:A3:4E:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/ddf8a60d-859f-3b0b-9243-c725f1c33259.roa Signing time: Thu 30 Apr 2026 13:22:06 +0000 ROA not before: Thu 30 Apr 2026 13:22:06 +0000 ROA not after: Wed 29 Jul 2026 13:22:06 +0000 asID: 133127 IP address blocks: 155.161.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:b5:7e:1d:96:15:ef:ec:ee:aa:28:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=712951d4-501e-451c-a20a-59b6aff3e2d4 Validity Not Before: Apr 30 13:22:06 2026 GMT Not After : Jul 29 13:22:06 2026 GMT Subject: CN=513ec915-b434-4fd2-8c01-c6e106e02a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7a:fe:ce:e6:19:04:2d:f6:ee:fe:db:6a:b7: d9:4c:7d:35:f7:e3:42:cf:f8:e2:21:58:46:ff:53: 66:0c:e2:d6:c9:94:28:82:27:7d:c8:2e:f6:28:f0: ac:de:a3:00:fc:c4:00:14:ea:50:82:54:58:ab:2b: 38:6a:32:c0:b0:77:19:24:1d:9d:7f:47:40:ed:9e: 0f:ba:a3:fc:f4:3a:19:3a:ae:66:46:ce:ad:13:15: 4b:45:91:99:93:dc:21:b8:6d:8f:d7:21:00:34:f5: 24:a4:7f:59:d2:41:e7:72:72:41:c7:9c:0b:1a:bc: 26:8c:a7:07:fb:c4:18:62:71:50:d9:a9:90:07:47: f6:22:33:ce:4b:9b:ab:85:7e:f7:83:4c:ce:f0:5b: 69:0c:60:9f:95:05:c2:66:1f:8d:6e:63:8b:e8:00: 15:10:c9:c4:09:dc:6e:99:fd:30:d1:31:6e:63:33: eb:4c:81:7f:11:01:27:7a:85:ea:37:64:c7:f7:94: 44:1b:9e:38:11:70:a2:f4:59:1b:04:38:f2:b5:5a: c4:eb:15:af:24:b7:4d:49:fd:d3:99:57:fd:09:ad: ef:ff:fc:86:13:65:23:d7:b4:7b:ed:5a:13:fa:d1: 1f:a5:bc:72:e0:6b:06:a0:3b:0d:96:fe:c5:50:c6: 1c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9B:C0:CE:67:1C:2A:1D:85:5E:DF:40:45:0B:C2:FF:A2:BF:A4:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/ddf8a60d-859f-3b0b-9243-c725f1c33259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.crl X509v3 Authority Key Identifier: keyid:52:7A:38:8E:28:41:32:8C:92:B2:70:AE:33:9C:BD:2C:75:A3:4E:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer sbgp-ipAddrBlock: critical IPv4: 155.161.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:5d:54:66:4d:bf:35:a2:03:40:67:26:ec:ec:6f:73:d0:68: 3e:23:6a:39:ea:f2:d3:c6:1d:ed:0c:0d:54:5d:67:fc:f1:0a: aa:83:00:c2:e8:bd:b4:52:0d:6e:63:01:72:f9:a6:6f:34:28: 8b:f9:61:ae:9f:95:9d:6c:33:bc:c2:53:62:2f:d6:e1:b8:fb: 7b:cc:bb:dc:fd:fe:c4:ac:b1:92:ff:7b:7b:39:67:d5:98:b3: 80:9e:7c:49:9a:24:a2:83:39:ae:d0:b5:08:e9:b3:12:92:bc: 20:f1:07:12:6e:58:35:5a:cd:10:a1:9d:da:cb:67:d1:a0:14: 98:7c:e6:fe:c0:18:78:04:30:d4:8f:39:09:41:c5:54:7e:25: fc:b2:5d:01:da:92:6a:f2:05:e8:3c:3f:fe:c7:51:75:d1:a8: 06:d9:c8:78:2b:4f:3a:f8:78:4a:80:2a:d6:34:fd:9f:be:6e: bb:e2:ab:c7:e3:97:89:6d:c2:75:87:53:b7:56:40:ee:79:15: dd:1a:02:88:85:4b:92:50:83:d6:bd:83:ee:0d:aa:40:8b:1c: 76:ef:bf:48:bb:fa:dc:fd:bb:9a:39:e7:05:cc:f0:05:fa:02: 89:36:83:da:ca:e5:e3:24:ef:99:d1:e5:53:d9:7c:aa:0c:05: 79:88:11:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ttX4dlhXv7O6qKHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzEyOTUxZDQtNTAxZS00NTFjLWEyMGEtNTliNmFmZjNl MmQ0MB4XDTI2MDQzMDEzMjIwNloXDTI2MDcyOTEzMjIwNlowLzEtMCsGA1UEAxMk NTEzZWM5MTUtYjQzNC00ZmQyLThjMDEtYzZlMTA2ZTAyYTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3r+zuYZBC327v7barfZTH019+NCz/jiIVhG /1NmDOLWyZQogid9yC72KPCs3qMA/MQAFOpQglRYqys4ajLAsHcZJB2df0dA7Z4P uqP89DoZOq5mRs6tExVLRZGZk9whuG2P1yEANPUkpH9Z0kHncnJBx5wLGrwmjKcH +8QYYnFQ2amQB0f2IjPOS5urhX73g0zO8FtpDGCflQXCZh+NbmOL6AAVEMnECdxu mf0w0TFuYzPrTIF/EQEneoXqN2TH95REG544EXCi9FkbBDjytVrE6xWvJLdNSf3T mVf9Ca3v//yGE2Uj17R77VoT+tEfpbxy4GsGoDsNlv7FUMYcmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2bwM5nHCodhV7fQEULwv+iv6S2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MTI5 NTFkNC01MDFlLTQ1MWMtYTIwYS01OWI2YWZmM2UyZDQvZGRmOGE2MGQtODU5Zi0z YjBiLTkyNDMtYzcyNWYxYzMzMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzEyOTUxZDQtNTAxZS00NTFjLWEy MGEtNTliNmFmZjNlMmQ0LzcxMjk1MWQ0LTUwMWUtNDUxYy1hMjBhLTU5YjZhZmYz ZTJkNC5jcmwwHwYDVR0jBBgwFoAUUno4jihBMoySsnCuM5y9LHWjTnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MTI5NTFkNC01MDFlLTQ1MWMtYTIwYS01OWI2 YWZmM2UyZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBm6EmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVdVGZNvzWiA0BnJuzsb3PQaD4jajnq8tPGHe0MDVRdZ/zxCqqDAMLo vbRSDW5jAXL5pm80KIv5Ya6flZ1sM7zCU2Iv1uG4+3vMu9z9/sSssZL/e3s5Z9WY s4CefEmaJKKDOa7QtQjpsxKSvCDxBxJuWDVazRChndrLZ9GgFJh85v7AGHgEMNSP OQlBxVR+JfyyXQHakmryBeg8P/7HUXXRqAbZyHgrTzr4eEqAKtY0/Z++brviq8fj l4ltwnWHU7dWQO55Fd0aAoiFS5JQg9a9g+4NqkCLHHbvv0i7+tz9u5o55wXM8AX6 Aok2g9rK5eMk75nR5VPZfKoMBXmIEQM= -----END CERTIFICATE-----Generated at Wed May 13 16:15:07 2026 by rpki-client