$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bb49121d-7647-3f34-8f02-f8d741546d3f.roa File: bb49121d-7647-3f34-8f02-f8d741546d3f.roa (raw, json) Hash identifier: pfLsb0w3NvrqAxlH75uiJtgIdaMn23074R4jAqlrFQE= Subject key identifier: 6E:8D:E8:6C:8F:CE:BB:99:07:E0:02:BC:E3:16:89:60:64:B0:DF:57 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D905A93445D5FB6922FAA1E80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bb49121d-7647-3f34-8f02-f8d741546d3f.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 144.25.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:93:44:5d:5f:b6:92:2f:aa:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=121d997c-821b-49a2-b38d-b88da383ea6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9a:0b:05:80:35:2d:cf:2c:09:1a:17:f3:e7: e3:89:2c:2a:d3:f9:a5:01:f3:16:9c:3e:6d:56:e6: bf:e5:04:62:46:ae:0b:04:8b:4f:e6:7b:b9:bf:12: 58:94:96:f1:cd:ae:f1:f8:c4:d2:61:30:27:66:55: 1e:4a:cb:51:54:1f:87:91:66:1f:ab:ed:3b:ab:e2: 47:df:94:71:92:6a:5a:5b:44:07:1e:d4:8d:fa:4b: 08:ba:99:d9:5c:9d:16:2e:e0:4b:0f:d1:6d:1e:99: f4:69:ea:9a:86:b9:91:31:f9:d4:1f:57:9c:fd:4d: ce:25:60:8d:be:bc:1c:d8:9a:3f:48:25:38:d4:a1: 0d:e8:ed:97:48:37:df:e4:54:80:9a:86:ff:e0:40: bb:a9:db:4f:9d:86:21:0d:56:e5:10:55:b0:9a:3d: c2:ee:98:b4:1d:ce:62:91:ec:48:b0:36:5e:b4:02: 88:ea:b1:ca:57:83:78:fb:3d:87:c3:1b:0c:83:67: b1:f8:5c:1c:f7:62:e2:63:00:8e:61:91:34:a7:e0: 15:37:b9:3a:0e:d5:43:6e:a9:1a:51:a3:94:9a:00: 54:9d:6e:7e:82:8f:e4:fb:b3:da:5f:99:34:06:c5: 04:5a:ad:17:34:be:3f:69:9d:5f:3c:33:b7:81:87: 90:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8D:E8:6C:8F:CE:BB:99:07:E0:02:BC:E3:16:89:60:64:B0:DF:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bb49121d-7647-3f34-8f02-f8d741546d3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:ea:a1:48:4e:10:f2:36:19:8d:5f:52:1c:12:f4:d1:40:de: 0d:47:80:a4:f1:d5:73:98:f4:17:dd:d7:08:c6:51:a4:16:db: f8:4c:04:14:69:bd:b9:de:aa:ee:62:04:ab:34:b9:d2:b7:37: 09:03:1b:78:63:8a:96:d1:07:45:28:b1:5a:2c:60:ef:de:b3: 07:99:6c:8f:33:7a:c4:9b:e5:21:cc:3f:a4:07:ab:b9:fc:9a: 2a:a0:df:35:3e:29:c9:20:77:e6:67:5e:f6:d6:6c:0e:3e:f0: bb:16:11:21:f7:22:75:63:a2:a0:bf:13:1d:32:eb:28:d4:20: 13:63:06:c6:8e:85:7e:63:a6:14:6b:48:a8:e1:2d:91:6d:59: b7:15:1d:b0:cd:48:d3:6f:74:5b:68:8c:3d:1d:49:73:bc:7b: fc:52:d6:9e:0b:47:12:d0:31:ee:f6:bd:4e:00:bd:30:18:38: ab:90:69:b0:31:31:44:0f:33:15:d9:8a:9b:87:1e:1b:4b:e1: 18:4c:c0:31:f9:7c:4b:12:ab:e0:56:b5:98:01:d1:71:95:d3: 4f:02:46:34:04:8f:cb:2c:6b:9c:58:7e:4d:96:7e:50:19:e8: 01:71:18:fc:ec:cf:17:38:13:e6:cc:27:67:94:9b:95:ce:b0: 9e:97:03:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWpNEXV+2ki+qHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk MTIxZDk5N2MtODIxYi00OWEyLWIzOGQtYjg4ZGEzODNlYTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5oLBYA1Lc8sCRoX8+fjiSwq0/mlAfMWnD5t Vua/5QRiRq4LBItP5nu5vxJYlJbxza7x+MTSYTAnZlUeSstRVB+HkWYfq+07q+JH 35RxkmpaW0QHHtSN+ksIupnZXJ0WLuBLD9FtHpn0aeqahrmRMfnUH1ec/U3OJWCN vrwc2Jo/SCU41KEN6O2XSDff5FSAmob/4EC7qdtPnYYhDVblEFWwmj3C7pi0Hc5i kexIsDZetAKI6rHKV4N4+z2HwxsMg2ex+Fwc92LiYwCOYZE0p+AVN7k6DtVDbqka UaOUmgBUnW5+go/k+7PaX5k0BsUEWq0XNL4/aZ1fPDO3gYeQ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6N6GyPzruZB+ACvOMWiWBksN9XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYmI0OTEyMWQtNzY0Ny0z ZjM0LThmMDItZjhkNzQxNTQ2ZDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFkBkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/qoUhOEPI2GY1fUhwS9NFA3g1HgKTx1XOY9Bfd1wjGUaQW2/hMBBRp vbnequ5iBKs0udK3NwkDG3hjipbRB0UosVosYO/esweZbI8zesSb5SHMP6QHq7n8 miqg3zU+Kckgd+ZnXvbWbA4+8LsWESH3InVjoqC/Ex0y6yjUIBNjBsaOhX5jphRr SKjhLZFtWbcVHbDNSNNvdFtojD0dSXO8e/xS1p4LRxLQMe72vU4AvTAYOKuQabAx MUQPMxXZipuHHhtL4RhMwDH5fEsSq+BWtZgB0XGV008CRjQEj8ssa5xYfk2WflAZ 6AFxGPzszxc4E+bMJ2eUm5XOsJ6XA8g= -----END CERTIFICATE-----Generated at Wed May 13 12:58:14 2026 by rpki-client