$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bb49121d-7647-3f34-8f02-f8d741546d3f.roa File: bb49121d-7647-3f34-8f02-f8d741546d3f.roa (raw, json) Hash identifier: L1eTswRLUy3bIi+iD+GFMUJtXREJTF+EyZJq1JqCfts= Subject key identifier: 33:07:20:74:43:68:73:73:1F:C8:5C:19:C1:43:1A:62:39:12:B6:22 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E709F6E3AEC622D4279EC0B00 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bb49121d-7647-3f34-8f02-f8d741546d3f.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 31898 IP address blocks: 144.25.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:6e:3a:ec:62:2d:42:79:ec:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=69f8e6a9-729a-480c-a11d-86292d855c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b5:bf:b6:ab:f3:b6:6a:9a:68:42:ff:a9:d2: 22:0a:89:b0:34:a3:cb:e8:90:9e:f6:40:2f:64:f8: 5a:f4:e0:98:6d:6b:62:ec:b4:33:28:dc:a9:50:85: 23:fb:d0:91:fd:dd:a3:6a:dc:55:97:27:d1:32:f6: 8f:54:4c:06:27:b7:97:5a:c4:df:cd:1e:ce:2e:19: 64:a8:11:8a:3c:b0:c1:20:f3:1d:9d:6e:84:df:50: 44:7b:7d:a5:ab:6c:25:ec:10:83:ab:27:b2:83:f7: 6a:a5:76:d1:bc:9d:96:cd:6f:3a:72:37:c8:b7:8f: 4e:23:81:c9:39:67:8c:56:60:2c:c1:99:ad:33:64: a1:64:1e:70:01:ad:10:df:67:55:f4:0e:bb:2d:23: a0:4c:83:58:1e:a9:b2:ed:d3:84:a1:08:32:ca:07: 89:fc:79:77:75:aa:95:e0:fd:1b:1f:81:7c:5e:1a: 79:6a:30:64:25:f6:b7:57:88:30:60:fc:e8:e2:c2: 39:03:b6:83:ef:2e:24:4a:a9:63:5b:e8:f4:b4:4f: 5e:74:e8:cd:35:da:c1:86:d3:98:7e:36:51:8a:c9: da:fb:62:38:1c:1b:ba:44:0a:f7:85:91:ee:23:b9: 95:5b:10:39:d7:88:c5:c2:ab:c3:88:f5:da:ce:55: ea:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:07:20:74:43:68:73:73:1F:C8:5C:19:C1:43:1A:62:39:12:B6:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bb49121d-7647-3f34-8f02-f8d741546d3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:a5:ae:c8:90:2a:02:8b:d7:e9:ef:56:11:b4:c5:c6:5d:ef: b4:e9:89:c7:85:bf:b8:3b:ea:ea:4b:23:5b:33:ed:30:b1:fd: 97:69:cb:0f:86:6b:e3:c6:9a:2a:82:67:26:02:85:e7:25:84: 55:bc:00:0d:ab:5f:0b:24:86:8a:c3:8a:f2:3f:ba:7b:1b:8a: 9c:6b:2b:85:e0:23:ce:bb:bf:77:6f:cd:2a:a0:7a:90:87:15: 29:05:1a:7e:96:18:ed:04:16:93:d2:63:46:32:4a:dd:bd:d3: bf:7c:e6:ca:7b:0e:9d:69:3a:32:0a:63:79:cb:c6:e0:4e:32: 6a:1e:5f:30:96:c2:f9:6d:68:0b:a9:6f:75:8f:d9:3a:2e:0b: f1:dd:7c:e7:fe:2d:f3:7b:b4:78:c9:90:15:d2:2b:4d:25:70: ff:63:e2:41:6f:60:ed:35:be:d9:16:5c:c1:bc:68:c3:ee:5f: 91:79:03:1f:8e:15:56:f6:69:49:f4:58:d4:fb:6b:a7:67:0a: 0a:6c:2d:c8:cd:16:cf:a0:ec:37:b1:05:e5:99:c6:42:53:2d: d2:c2:29:a1:fa:60:c0:b7:72:9f:ad:37:2f:7b:90:b2:f8:29: 39:70:b8:d6:06:c1:b9:cf:e7:8b:76:1c:bc:a5:ff:01:d0:0c: 20:2b:c4:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn2467GItQnnsCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk NjlmOGU2YTktNzI5YS00ODBjLWExMWQtODYyOTJkODU1YzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7W/tqvztmqaaEL/qdIiComwNKPL6JCe9kAv ZPha9OCYbWti7LQzKNypUIUj+9CR/d2jatxVlyfRMvaPVEwGJ7eXWsTfzR7OLhlk qBGKPLDBIPMdnW6E31BEe32lq2wl7BCDqyeyg/dqpXbRvJ2WzW86cjfIt49OI4HJ OWeMVmAswZmtM2ShZB5wAa0Q32dV9A67LSOgTINYHqmy7dOEoQgyygeJ/Hl3daqV 4P0bH4F8Xhp5ajBkJfa3V4gwYPzo4sI5A7aD7y4kSqljW+j0tE9edOjNNdrBhtOY fjZRisna+2I4HBu6RAr3hZHuI7mVWxA514jFwqvDiPXazlXqlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMHIHRDaHNzH8hcGcFDGmI5ErYiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYmI0OTEyMWQtNzY0Ny0z ZjM0LThmMDItZjhkNzQxNTQ2ZDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFkBkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACilrsiQKgKL1+nvVhG0xcZd77TpiceFv7g76upLI1sz7TCx/Zdpyw+G a+PGmiqCZyYCheclhFW8AA2rXwskhorDivI/unsbipxrK4XgI867v3dvzSqgepCH FSkFGn6WGO0EFpPSY0YySt2907985sp7Dp1pOjIKY3nLxuBOMmoeXzCWwvltaAup b3WP2TouC/HdfOf+LfN7tHjJkBXSK00lcP9j4kFvYO01vtkWXMG8aMPuX5F5Ax+O FVb2aUn0WNT7a6dnCgpsLcjNFs+g7DexBeWZxkJTLdLCKaH6YMC3cp+tNy97kLL4 KTlwuNYGwbnP54t2HLyl/wHQDCArxNs= -----END CERTIFICATE-----Generated at Fri Jul 24 12:28:58 2026 by rpki-client