$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/89ceb6c0-bf41-3b8f-aa82-33fb5a693fd8.roa File: 89ceb6c0-bf41-3b8f-aa82-33fb5a693fd8.roa (raw, json) Hash identifier: BHYt3z2X+jndaVOFjbDIWmtbV6BFWbI0LwX3sxo4jVE= Subject key identifier: 19:DB:3E:D4:DE:42:9B:C5:A5:E6:FB:1A:C4:AB:EE:86:59:D2:A1:8E Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D8EF56B6D1C71D39E867DF020 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/89ceb6c0-bf41-3b8f-aa82-33fb5a693fd8.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 144.25.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:6b:6d:1c:71:d3:9e:86:7d:f0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=509fe783-3982-4440-9676-77ca5b978b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:90:75:3e:3c:96:c3:7e:1c:3b:a1:93:d8:e5: 5f:b1:1c:94:13:8c:41:50:a8:a0:9e:7f:1b:c8:2b: 49:42:97:30:50:c6:a2:33:98:2c:8e:c5:fb:8e:f7: 86:09:b5:d3:db:1d:05:de:bc:b9:52:53:a4:f3:9b: 89:5e:c7:7b:f9:ed:23:68:26:b7:82:80:79:0b:65: 18:ea:f7:19:97:9f:14:51:39:a6:09:fa:ec:0e:dc: 20:21:38:1b:3c:2b:45:45:89:0d:9b:6e:29:10:42: 5f:52:a2:e5:76:4b:09:27:bb:71:f5:c3:9b:0a:c5: 59:ed:e1:6c:80:cc:fd:78:23:03:59:67:94:76:04: 1b:bf:7b:3b:e3:c6:42:58:25:e4:ea:99:c0:9e:03: 0f:e0:c0:6b:c1:8e:7f:33:9e:00:9e:24:c2:08:a5: 08:d1:02:68:9e:cf:f7:93:11:b3:1e:88:82:9f:55: eb:76:c6:be:73:1a:50:db:48:bb:57:c9:f7:5e:ab: b4:1b:82:4e:52:cf:a8:07:c1:b6:76:c2:65:c9:17: 90:01:97:03:36:71:54:1d:1c:a8:92:4a:dd:62:2f: 9f:e6:4e:0a:9f:25:62:67:0a:e7:07:19:f1:ad:8b: 81:73:61:3e:22:75:41:01:c5:f3:c1:6b:54:e5:0e: a1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:DB:3E:D4:DE:42:9B:C5:A5:E6:FB:1A:C4:AB:EE:86:59:D2:A1:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/89ceb6c0-bf41-3b8f-aa82-33fb5a693fd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:af:cf:c9:92:35:c6:f9:82:b5:64:82:55:07:44:2c:a8:28: e0:fc:dc:24:f4:38:ab:ab:12:8c:fa:72:38:ca:39:76:f7:a5: 43:e1:9d:44:5d:a5:45:b1:5d:0c:a8:1f:17:af:2f:7d:6e:72: ca:aa:ac:15:9d:94:63:ca:2d:90:25:4f:06:9d:78:16:9f:2a: e4:11:3c:70:59:84:08:e3:db:37:91:af:3d:52:3d:3f:0f:a0: fd:3c:d5:8f:3d:22:50:c8:52:87:ab:b6:9c:ad:84:a6:7d:87: 8d:41:08:70:ec:99:53:4d:2f:80:6a:ba:73:a7:97:df:20:11: 7e:f1:e5:aa:ea:94:52:13:3f:e6:8f:90:58:51:da:6a:3c:e1: 16:9b:c5:6d:24:ea:c2:ae:99:d0:61:83:e9:54:35:6b:ea:b7: 92:e5:a4:30:61:9e:ba:9e:9f:b2:05:12:12:d9:12:bd:88:22: 03:27:99:7c:a5:44:0f:33:82:dc:96:c2:11:65:16:c5:1c:fb: 89:bd:e9:04:73:b1:fa:c3:f4:e1:ac:47:b4:d4:de:10:8d:0e: 7c:cc:dc:74:6f:11:d3:37:a7:0f:63:66:3e:4d:68:ee:74:22: 5c:87:de:a0:f6:de:2e:4e:a1:70:dc:51:af:d4:5f:53:03:af: 3e:4d:b8:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9WttHHHTnoZ98CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NTA5ZmU3ODMtMzk4Mi00NDQwLTk2NzYtNzdjYTViOTc4YjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZB1PjyWw34cO6GT2OVfsRyUE4xBUKignn8b yCtJQpcwUMaiM5gsjsX7jveGCbXT2x0F3ry5UlOk85uJXsd7+e0jaCa3goB5C2UY 6vcZl58UUTmmCfrsDtwgITgbPCtFRYkNm24pEEJfUqLldksJJ7tx9cObCsVZ7eFs gMz9eCMDWWeUdgQbv3s748ZCWCXk6pnAngMP4MBrwY5/M54AniTCCKUI0QJons/3 kxGzHoiCn1Xrdsa+cxpQ20i7V8n3Xqu0G4JOUs+oB8G2dsJlyReQAZcDNnFUHRyo kkrdYi+f5k4KnyViZwrnBxnxrYuBc2E+InVBAcXzwWtU5Q6hwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnbPtTeQpvFpeb7GsSr7oZZ0qGOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvODljZWI2YzAtYmY0MS0z YjhmLWFhODItMzNmYjVhNjkzZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkBlEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKvz8mSNcb5grVkglUHRCyoKOD83CT0OKurEoz6cjjKOXb3pUPhnURd pUWxXQyoHxevL31ucsqqrBWdlGPKLZAlTwadeBafKuQRPHBZhAjj2zeRrz1SPT8P oP081Y89IlDIUoertpythKZ9h41BCHDsmVNNL4BqunOnl98gEX7x5arqlFITP+aP kFhR2mo84RabxW0k6sKumdBhg+lUNWvqt5LlpDBhnrqen7IFEhLZEr2IIgMnmXyl RA8zgtyWwhFlFsUc+4m96QRzsfrD9OGsR7TU3hCNDnzM3HRvEdM3pw9jZj5NaO50 IlyH3qD23i5OoXDcUa/UX1MDrz5NuKo= -----END CERTIFICATE-----Generated at Wed May 13 08:05:47 2026 by rpki-client