$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/25e92a29-750f-3de7-a50e-90a0367a48b6.roa File: 25e92a29-750f-3de7-a50e-90a0367a48b6.roa (raw, json) Hash identifier: jNhqqSikbSLj6KvXZzJ9+mO5pa/fOusnrb20jM+wcig= Subject key identifier: DF:08:33:8D:59:1C:3E:F1:15:6A:20:66:5F:16:B5:51:0A:AF:4D:26 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FA3BB75B0DD9F77F9DE00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/25e92a29-750f-3de7-a50e-90a0367a48b6.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 104.129.192.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:a3:bb:75:b0:dd:9f:77:f9:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=c65d3c3d-21b6-4d6e-b2d1-566a60862ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1e:6c:0a:da:e5:0c:e2:25:07:28:32:26:d6: 16:17:31:32:d6:f0:c3:01:e5:50:a7:85:f9:e1:af: 5e:34:66:99:c4:f6:69:2a:67:26:1a:6a:81:2d:2b: 2b:ea:69:43:0a:43:b8:00:c2:3c:5a:b5:41:e0:3c: 9d:bc:0c:bd:3a:4c:ac:a2:20:63:a9:81:c9:3c:5c: 64:81:1c:3e:53:6c:e3:de:cc:e5:d2:de:30:07:f3: 7f:6c:cf:65:26:aa:a9:98:92:36:cf:64:72:0a:29: 18:2f:1f:f8:08:cf:a4:34:bd:4d:3b:3f:c6:2a:23: ee:11:2e:f1:2d:3b:2e:61:ca:0b:eb:9f:f8:90:f9: 13:d8:8e:9f:60:ac:e9:a0:8a:6b:ef:e4:3d:9a:3e: 09:b4:34:02:e1:6a:fd:c6:36:be:48:1f:35:5b:b9: 3a:75:4b:76:f8:5a:3a:0d:72:7a:f2:77:b0:9f:5c: 8e:6f:cc:f8:3b:31:9a:aa:f1:87:81:ac:4e:c9:82: ce:47:99:07:9a:e0:a5:a5:63:8d:96:53:ec:6c:02: 13:29:f7:c2:1c:eb:bd:27:78:fe:23:95:fa:fa:55: a8:c7:45:00:f4:ab:c6:d0:73:72:db:b2:28:63:e2: a1:ec:76:42:33:03:ab:8f:b0:29:01:8d:ec:3f:6d: 82:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:08:33:8D:59:1C:3E:F1:15:6A:20:66:5F:16:B5:51:0A:AF:4D:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/25e92a29-750f-3de7-a50e-90a0367a48b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 104.129.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:cb:85:7f:e8:85:ce:59:7d:3a:c1:15:3f:ea:c9:95:12:85: 66:75:c8:fb:3d:59:b0:a5:23:1b:5b:ca:a7:ea:cf:2a:cd:f6: 15:09:fa:c6:6e:14:43:90:aa:47:b6:49:66:f2:0d:1d:f5:85: d4:86:4c:90:bf:20:7d:5f:dc:9b:98:96:de:26:dc:eb:50:d2: 4e:8c:d7:fc:84:21:0e:a7:84:64:e2:09:90:f0:b1:86:f4:89: b5:4d:31:93:db:2c:64:b5:f3:91:a3:c4:98:a6:e1:59:f2:bf: 51:7a:8c:60:6f:44:55:44:39:89:26:fd:00:44:aa:bf:41:2d: 26:c6:81:58:36:37:48:b9:87:2d:f9:cd:e7:bc:05:e2:7f:d3: f1:4a:48:a9:3c:6a:68:74:28:83:2b:c5:9e:76:40:2a:70:fd: 94:c4:c1:28:23:f6:69:47:67:c5:cd:ee:a8:2e:a2:de:a5:87: c7:8a:9c:b1:3a:cb:dc:9f:87:46:0c:3d:84:0b:14:9d:74:4c: f1:f5:46:cd:35:eb:73:b6:66:17:04:c8:24:9f:a4:3e:ab:fd: cc:31:27:e0:c9:a0:c4:20:15:19:f7:d9:6f:84:1c:fd:c1:a0: 00:d1:8a:6d:2e:59:a4:9c:47:ed:49:00:51:26:f3:bf:84:c3: fa:89:d3:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6O7dbDdn3f53gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk YzY1ZDNjM2QtMjFiNi00ZDZlLWIyZDEtNTY2YTYwODYyY2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5B5sCtrlDOIlBygyJtYWFzEy1vDDAeVQp4X5 4a9eNGaZxPZpKmcmGmqBLSsr6mlDCkO4AMI8WrVB4DydvAy9OkysoiBjqYHJPFxk gRw+U2zj3szl0t4wB/N/bM9lJqqpmJI2z2RyCikYLx/4CM+kNL1NOz/GKiPuES7x LTsuYcoL65/4kPkT2I6fYKzpoIpr7+Q9mj4JtDQC4Wr9xja+SB81W7k6dUt2+Fo6 DXJ68newn1yOb8z4OzGaqvGHgaxOyYLOR5kHmuClpWONllPsbAITKffCHOu9J3j+ I5X6+lWox0UA9KvG0HNy27IoY+Kh7HZCMwOrj7ApAY3sP22CtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8IM41ZHD7xFWogZl8WtVEKr00mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjVlOTJhMjktNzUwZi0z ZGU3LWE1MGUtOTBhMDM2N2E0OGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL3LhX/ohc5ZfTrBFT/qyZUShWZ1yPs9WbClIxtbyqfqzyrN9hUJ+sZu FEOQqke2SWbyDR31hdSGTJC/IH1f3JuYlt4m3OtQ0k6M1/yEIQ6nhGTiCZDwsYb0 ibVNMZPbLGS185GjxJim4Vnyv1F6jGBvRFVEOYkm/QBEqr9BLSbGgVg2N0i5hy35 zee8BeJ/0/FKSKk8amh0KIMrxZ52QCpw/ZTEwSgj9mlHZ8XN7qguot6lh8eKnLE6 y9yfh0YMPYQLFJ10TPH1Rs0163O2ZhcEyCSfpD6r/cwxJ+DJoMQgFRn32W+EHP3B oADRim0uWaScR+1JAFEm87+Ew/qJ0+c= -----END CERTIFICATE-----Generated at Fri Apr 17 13:23:16 2026 by rpki-client