$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/906e3684-aa68-3939-97e4-36543bf711de.roa File: 906e3684-aa68-3939-97e4-36543bf711de.roa (raw, json) Hash identifier: +VpT5iSrbTB5U9W4xZSGMv7mYe8hMM3f54fEIXim7Gk= Subject key identifier: 4B:B6:0B:F3:50:2B:06:56:9E:41:31:06:DA:DC:EC:56:96:5C:B9:27 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D8EF545424EA0083F84938900 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/906e3684-aa68-3939-97e4-36543bf711de.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 144.25.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:45:42:4e:a0:08:3f:84:93:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=8e410a0b-034e-462c-9b2e-bd2d2dddd9cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:36:1a:cb:1d:85:3d:07:ea:7e:89:06:09:37: 79:01:e4:a8:78:dc:1e:6c:08:84:42:1e:c0:69:f7: 22:12:5a:88:8e:9f:6b:a9:f9:55:7c:5e:8c:83:00: 09:b5:ba:67:a0:13:51:15:c9:1b:7a:ab:5f:ed:73: 5b:c2:ac:ee:6b:a7:eb:f1:7f:55:c2:a0:8f:c9:af: ac:eb:10:d0:24:73:0a:3b:f4:07:c7:d4:42:8d:c8: d8:51:9f:06:c4:8d:c1:09:2e:c1:28:ea:ee:bc:e2: fd:b8:d2:b6:29:73:9c:01:eb:41:d8:48:65:02:09: 22:eb:82:34:31:79:48:fe:f2:bd:5c:37:2c:65:22: a8:bc:d3:46:ab:94:6f:39:1a:78:31:6d:b6:08:56: 12:58:c4:7e:85:6e:db:de:7e:f9:97:2b:23:6d:25: f5:83:3f:ac:99:92:92:7e:f4:8b:42:a0:98:88:9c: 64:af:0f:fa:77:58:f3:0d:59:49:b9:cb:5a:55:8e: b8:52:6e:a4:4a:74:3c:88:10:31:2a:2e:3d:cb:e2: bc:8a:af:45:8f:6a:e0:fb:3a:02:e4:6e:dd:50:01: 15:2c:10:31:aa:9b:e1:67:94:de:a9:85:b7:a6:b6: 3b:0f:87:eb:08:a1:0d:a1:23:05:cf:b7:6e:aa:57: e9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B6:0B:F3:50:2B:06:56:9E:41:31:06:DA:DC:EC:56:96:5C:B9:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/906e3684-aa68-3939-97e4-36543bf711de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:0c:e6:d8:00:51:8a:77:75:1d:2f:64:08:90:a1:d6:22:4b: 77:13:86:4a:66:ba:7c:87:53:53:d9:82:39:3e:e1:0b:a9:a0: 31:29:8b:97:6a:49:44:71:fb:3e:8d:81:f4:f0:b6:ec:eb:c8: f6:62:02:e2:22:c5:f9:55:79:ca:c2:e4:23:b3:18:2b:38:bd: 5b:c6:96:54:5f:bf:e7:b4:4b:d2:d8:9d:f4:d8:69:c8:3a:aa: 73:60:f1:1c:64:00:05:79:b1:34:dd:0b:2f:84:0a:55:5f:84: 4b:62:f5:03:7d:f1:06:40:b5:54:cb:33:4a:b6:95:e5:02:7c: 76:70:9f:d6:d5:8e:52:0d:81:0a:22:31:ce:b1:1a:a0:02:17: 3c:0a:d7:2e:0c:41:4a:1b:c2:82:08:c2:79:ea:d4:fc:93:8d: 98:df:75:c6:44:71:12:8a:76:48:ad:85:e8:1d:f5:46:92:77: c2:86:1c:b1:a8:ea:34:45:05:f3:ba:95:d7:f2:e7:d8:03:90: 53:40:fd:5f:ea:58:30:f3:cf:f5:82:e2:36:72:45:4a:da:c9: 04:7b:f0:4a:a2:45:fa:cd:3a:66:c9:fb:c7:30:dd:e6:4d:2d: 39:b4:a7:8c:7d:10:70:1d:90:9a:7f:c4:1f:cc:5e:bd:0d:d7: f1:8f:58:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9UVCTqAIP4STiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OGU0MTBhMGItMDM0ZS00NjJjLTliMmUtYmQyZDJkZGRkOWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjYayx2FPQfqfokGCTd5AeSoeNwebAiEQh7A afciElqIjp9rqflVfF6MgwAJtbpnoBNRFckbeqtf7XNbwqzua6fr8X9VwqCPya+s 6xDQJHMKO/QHx9RCjcjYUZ8GxI3BCS7BKOruvOL9uNK2KXOcAetB2EhlAgki64I0 MXlI/vK9XDcsZSKovNNGq5RvORp4MW22CFYSWMR+hW7b3n75lysjbSX1gz+smZKS fvSLQqCYiJxkrw/6d1jzDVlJuctaVY64Um6kSnQ8iBAxKi49y+K8iq9Fj2rg+zoC 5G7dUAEVLBAxqpvhZ5TeqYW3prY7D4frCKENoSMFz7duqlfprwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEu2C/NQKwZWnkExBtrc7FaWXLknMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvOTA2ZTM2ODQtYWE2OC0z OTM5LTk3ZTQtMzY1NDNiZjcxMWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkBlIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIM5tgAUYp3dR0vZAiQodYiS3cThkpmunyHU1PZgjk+4QupoDEpi5dq SURx+z6NgfTwtuzryPZiAuIixflVecrC5COzGCs4vVvGllRfv+e0S9LYnfTYacg6 qnNg8RxkAAV5sTTdCy+EClVfhEti9QN98QZAtVTLM0q2leUCfHZwn9bVjlINgQoi Mc6xGqACFzwK1y4MQUobwoIIwnnq1PyTjZjfdcZEcRKKdkithegd9UaSd8KGHLGo 6jRFBfO6ldfy59gDkFNA/V/qWDDzz/WC4jZyRUrayQR78EqiRfrNOmbJ+8cw3eZN LTm0p4x9EHAdkJp/xB/MXr0N1/GPWLA= -----END CERTIFICATE-----Generated at Wed May 13 12:30:54 2026 by rpki-client