$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/02f572c5-d288-32b0-91a6-8e2d4ea5a530.roa File: 02f572c5-d288-32b0-91a6-8e2d4ea5a530.roa (raw, json) Hash identifier: AOLlTyNRvmfaIGGEcJXSgJZKUg99dk/7oC2k7A5J7lc= Subject key identifier: 5D:4A:57:23:CA:1E:F4:4F:7D:EC:22:52:65:02:CF:3E:14:91:DD:F3 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D8EF990CE254A45BBD1D00700 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/02f572c5-d288-32b0-91a6-8e2d4ea5a530.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 144.25.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:90:ce:25:4a:45:bb:d1:d0:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=d5f7525b-2719-4587-b076-1a0d72755cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e3:93:69:16:45:3b:dc:17:26:ff:df:08:3b: 87:72:4c:97:1d:1e:c6:b2:dc:dc:2f:44:7d:bf:bb: c5:df:c2:2d:a0:c0:7d:87:79:fd:7a:9e:d5:4e:f2: 04:f6:85:97:ac:ee:c4:fc:8a:43:d5:cd:03:df:12: d3:b8:2d:90:b6:d4:c3:e9:3c:23:73:c9:ce:d3:ba: db:d7:5d:00:1c:26:a6:a2:9d:62:21:c8:c7:23:b1: 95:2b:62:ad:96:ec:1c:4f:34:66:57:b9:3a:d6:01: 3a:a2:0c:0a:37:d7:b3:4e:93:47:1f:a7:7a:88:74: ca:50:bb:b6:f7:bb:df:4b:14:f2:6a:06:13:ed:c7: df:4f:8c:1d:33:19:3c:4c:df:7a:f5:cd:fd:c6:66: ca:7d:02:07:ce:c1:52:d2:31:05:de:f9:51:4f:e8: 6c:80:43:24:8d:32:11:3c:79:2e:95:0f:85:0f:26: 55:8c:c0:20:1f:0d:05:76:e8:db:2d:6c:09:fe:e2: ed:9a:81:20:02:61:ab:ae:a8:ee:d4:7d:c9:73:e8: aa:df:37:95:24:ae:8c:30:b3:dd:cc:3b:5d:96:96: 02:c0:fd:6c:12:d4:0d:57:e7:e9:1d:ec:5d:92:7f: 11:f4:26:7d:7e:e5:39:a4:95:33:d2:1b:ce:7e:48: 53:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4A:57:23:CA:1E:F4:4F:7D:EC:22:52:65:02:CF:3E:14:91:DD:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/02f572c5-d288-32b0-91a6-8e2d4ea5a530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:cf:31:5b:68:10:ad:30:49:9f:64:86:29:0c:db:4b:c2:ac: c9:c7:98:a3:9a:25:89:f2:7a:04:bf:79:5e:17:e3:0d:20:96: 47:b4:64:cb:7c:85:38:4b:a1:aa:4a:e6:35:ec:a7:42:1f:0a: d9:c6:2c:3d:5d:46:3b:1d:73:82:cf:d1:6a:f4:c6:6b:f9:10: 8a:6f:bd:e4:74:a0:22:85:16:b8:d9:4a:77:2e:48:52:4b:16: c7:ce:d3:8d:e8:9c:30:e9:3a:ca:73:ec:bf:1d:f4:61:72:3f: 31:b7:cd:38:62:00:29:16:d3:19:2c:f8:cf:b6:3e:83:fc:74: 0b:3f:ac:44:a1:3a:7c:bc:51:2d:a2:fa:e8:98:65:d2:99:4b: 8e:5b:39:05:9c:06:3e:45:40:a3:d6:4d:77:99:66:60:95:64: 3b:ea:30:7c:b1:e1:0d:61:f6:e4:e9:7b:8c:bf:0b:63:11:da: ff:3c:1f:a0:a1:ae:88:50:02:4b:d9:18:ff:f2:ab:04:a3:ca: 38:9a:1f:a2:a0:f1:b3:04:d7:f9:ab:21:7c:ac:ab:e8:d8:75: b1:42:4d:52:85:57:cb:bb:e2:2b:06:39:11:db:4d:de:f8:ed: 49:9b:ac:56:d5:5d:2b:11:65:70:09:14:0b:46:94:1d:0f:44: a3:45:41:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+ZDOJUpFu9HQBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZDVmNzUyNWItMjcxOS00NTg3LWIwNzYtMWEwZDcyNzU1Y2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuOTaRZFO9wXJv/fCDuHckyXHR7GstzcL0R9 v7vF38ItoMB9h3n9ep7VTvIE9oWXrO7E/IpD1c0D3xLTuC2QttTD6Twjc8nO07rb 110AHCamop1iIcjHI7GVK2KtluwcTzRmV7k61gE6ogwKN9ezTpNHH6d6iHTKULu2 97vfSxTyagYT7cffT4wdMxk8TN969c39xmbKfQIHzsFS0jEF3vlRT+hsgEMkjTIR PHkulQ+FDyZVjMAgHw0FdujbLWwJ/uLtmoEgAmGrrqju1H3Jc+iq3zeVJK6MMLPd zDtdlpYCwP1sEtQNV+fpHexdkn8R9CZ9fuU5pJUz0hvOfkhTuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1KVyPKHvRPfewiUmUCzz4Ukd3zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMDJmNTcyYzUtZDI4OC0z MmIwLTkxYTYtOGUyZDRlYTVhNTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkBk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLPMVtoEK0wSZ9khikM20vCrMnHmKOaJYnyegS/eV4X4w0glke0ZMt8 hThLoapK5jXsp0IfCtnGLD1dRjsdc4LP0Wr0xmv5EIpvveR0oCKFFrjZSncuSFJL FsfO043onDDpOspz7L8d9GFyPzG3zThiACkW0xks+M+2PoP8dAs/rEShOny8US2i +uiYZdKZS45bOQWcBj5FQKPWTXeZZmCVZDvqMHyx4Q1h9uTpe4y/C2MR2v88H6Ch rohQAkvZGP/yqwSjyjiaH6Kg8bME1/mrIXysq+jYdbFCTVKFV8u74isGORHbTd74 7UmbrFbVXSsRZXAJFAtGlB0PRKNFQVk= -----END CERTIFICATE-----Generated at Wed May 13 10:52:27 2026 by rpki-client