$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/41c17ad6-2850-37e8-8887-ce7da61674a2.roa File: 41c17ad6-2850-37e8-8887-ce7da61674a2.roa (raw, json) Hash identifier: rleo4PVCvG2nhZGTznVctyIbORK9BF/2OKKvdCzHn9c= Subject key identifier: BF:1E:81:80:A2:80:07:49:02:39:DA:7C:E8:B2:39:0F:30:1D:E6:A5 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D98BAB1B7E7F25C540EC3A380 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/41c17ad6-2850-37e8-8887-ce7da61674a2.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 144.25.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:b1:b7:e7:f2:5c:54:0e:c3:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=86e4c8f1-7db6-44f0-9d13-d4ad48855b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d0:88:16:c1:c8:35:c6:f6:d7:de:70:d4:e8: c2:4c:5f:72:48:e3:ad:8a:b8:da:ca:62:ee:d0:91: 26:73:67:11:e0:65:91:33:7e:fe:3e:ed:9d:5e:f1: 8f:11:da:b3:4e:71:3a:d8:8b:83:71:eb:b0:50:e8: 03:12:f4:75:e0:b8:cb:6f:79:77:04:bc:3d:90:c2: 35:ba:23:2b:f4:51:fa:95:b0:b6:79:73:58:28:12: 83:a4:09:07:a0:7a:d3:43:54:92:3a:2b:ee:fb:b4: 49:47:b5:e9:9d:01:5d:50:ed:b8:4a:2b:5f:a0:49: 12:ca:6e:36:ce:5b:81:93:35:36:86:66:ff:4d:95: e8:62:c0:fc:45:04:c3:f3:1a:55:36:ed:44:ba:27: bb:d7:f2:af:2a:80:aa:08:ef:1e:6a:b4:e3:cb:14: 30:5d:33:36:14:f1:76:07:4f:2f:cf:02:87:a0:3c: 2d:c2:ab:0f:df:9b:9b:ae:73:77:bc:fb:55:5d:b1: 82:47:18:b6:62:e4:fa:61:11:c7:bc:6f:2c:27:95: da:7b:26:80:6a:cf:fe:b8:9c:b5:5f:11:96:1e:61: a0:ae:c9:10:b4:41:12:b1:eb:b9:dd:f5:a7:1d:c0: ba:20:1c:7e:fa:b0:eb:3e:c7:ba:ea:cf:0e:52:90: 5d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1E:81:80:A2:80:07:49:02:39:DA:7C:E8:B2:39:0F:30:1D:E6:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/41c17ad6-2850-37e8-8887-ce7da61674a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:0f:02:13:ee:a4:24:33:23:d7:1f:29:7b:3a:c4:9c:30:c5: b7:50:69:4f:da:6e:29:48:c2:23:3a:66:51:bc:1a:45:79:3d: e7:e3:7a:12:79:61:9b:12:ae:7c:00:0a:47:31:dd:59:ae:5e: 77:73:21:52:68:74:b2:a7:68:46:26:83:05:17:5f:11:15:46: 6e:5e:af:fd:b9:80:ad:bf:0d:d6:d2:51:32:1c:23:3b:c7:e5: 60:3f:56:66:36:7d:56:b4:85:b8:0d:3a:1d:74:0a:ed:98:a0: ac:48:3e:55:73:93:9f:dc:67:18:55:e4:06:67:50:84:25:c1: 38:cb:6e:25:f7:9f:7c:83:5f:bd:0f:8f:c0:97:87:de:0f:a5: 8e:88:c4:6f:0b:23:57:21:6b:8c:02:d5:a0:5f:97:e4:f0:c1: c0:88:06:77:dc:aa:33:e1:82:bc:b3:0c:32:f8:db:bc:5a:c9: a6:b3:7c:5e:00:a7:9b:ee:90:5a:67:1d:d6:f8:85:4d:f9:30: 00:81:dc:3e:2a:fd:a0:41:fc:78:01:86:a0:66:ad:ef:16:10: 5a:2e:b6:b7:4b:10:cb:fa:cd:44:df:34:12:43:ff:18:47:5c: 5b:84:c8:46:9f:32:5d:f5:46:16:64:1e:56:f4:e3:df:6d:e1: 4e:80:ee:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YurG35/JcVA7Do4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk ODZlNGM4ZjEtN2RiNi00NGYwLTlkMTMtZDRhZDQ4ODU1YjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdCIFsHINcb2195w1OjCTF9ySOOtirjaymLu 0JEmc2cR4GWRM37+Pu2dXvGPEdqzTnE62IuDceuwUOgDEvR14LjLb3l3BLw9kMI1 uiMr9FH6lbC2eXNYKBKDpAkHoHrTQ1SSOivu+7RJR7XpnQFdUO24SitfoEkSym42 zluBkzU2hmb/TZXoYsD8RQTD8xpVNu1Euie71/KvKoCqCO8earTjyxQwXTM2FPF2 B08vzwKHoDwtwqsP35ubrnN3vPtVXbGCRxi2YuT6YRHHvG8sJ5XaeyaAas/+uJy1 XxGWHmGgrskQtEESseu53fWnHcC6IBx++rDrPse66s8OUpBdTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8egYCigAdJAjnafOiyOQ8wHealMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNDFjMTdhZDYtMjg1MC0z N2U4LTg4ODctY2U3ZGE2MTY3NGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkBlQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwPAhPupCQzI9cfKXs6xJwwxbdQaU/abilIwiM6ZlG8GkV5PefjehJ5 YZsSrnwACkcx3VmuXndzIVJodLKnaEYmgwUXXxEVRm5er/25gK2/DdbSUTIcIzvH 5WA/VmY2fVa0hbgNOh10Cu2YoKxIPlVzk5/cZxhV5AZnUIQlwTjLbiX3n3yDX70P j8CXh94PpY6IxG8LI1cha4wC1aBfl+TwwcCIBnfcqjPhgryzDDL427xayaazfF4A p5vukFpnHdb4hU35MACB3D4q/aBB/HgBhqBmre8WEFoutrdLEMv6zUTfNBJD/xhH XFuEyEafMl31RhZkHlb0499t4U6A7vA= -----END CERTIFICATE-----Generated at Wed May 13 12:34:33 2026 by rpki-client