$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1bafe8b4-658b-37ef-9ba8-b6b361ebb4d9.roa File: 1bafe8b4-658b-37ef-9ba8-b6b361ebb4d9.roa (raw, json) Hash identifier: TmGUX9H5dnPRMyY81Bm6uvoEq6d4cLeA2pe5HQZ1XX0= Subject key identifier: 0A:20:17:E3:63:EF:87:CA:3D:F1:D9:68:6C:A1:52:4C:91:23:BB:5A Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7A05298128A54089D8326D00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1bafe8b4-658b-37ef-9ba8-b6b361ebb4d9.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 3949 IP address blocks: 165.254.60.176/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:29:81:28:a5:40:89:d8:32:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=c5e91f90-38e6-4427-b276-4ec92d3f7bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fe:cf:1a:0b:9a:13:1c:4d:11:22:16:04:36: 47:e5:4e:20:79:85:c4:40:ed:82:b1:59:bc:e4:b6: 26:a4:3a:0f:89:50:9d:7c:9b:5a:c4:5e:5b:80:75: 12:3b:b7:78:b7:be:ef:3d:fa:65:39:01:b0:83:35: cd:96:7c:dd:ab:b5:65:4b:19:f9:c5:a2:b9:64:fa: fa:d9:e0:b9:57:c1:dd:70:d1:83:c4:5b:df:b8:a2: 26:d7:12:a2:5a:99:3e:d0:34:81:bc:ad:b2:43:bf: f9:c7:d6:7d:de:ee:c6:35:fe:f6:f8:95:48:ed:a2: e5:d1:f9:67:47:9f:99:91:b9:86:3f:8c:4c:76:b0: 60:3a:d7:0c:f7:8a:c6:da:7d:e2:0f:d9:be:4d:2d: 47:ea:5e:e3:22:1b:29:5a:75:49:2b:0e:19:d3:4c: 9f:b6:a5:8c:fd:08:6c:95:8d:dd:f3:a6:2e:2e:d3: 5b:e3:b5:3e:70:7a:60:a0:ec:b1:61:f8:eb:78:5e: c3:d6:aa:59:c8:e3:5e:73:45:bc:8f:51:68:a8:f2: 49:b7:b3:fb:2c:09:16:2a:57:c1:30:68:ac:d1:68: b8:e0:68:7a:6b:67:d5:19:55:31:99:6f:53:f6:73: b2:ac:cc:40:40:9f:53:33:94:9e:fd:77:7e:2e:7e: 76:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:20:17:E3:63:EF:87:CA:3D:F1:D9:68:6C:A1:52:4C:91:23:BB:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1bafe8b4-658b-37ef-9ba8-b6b361ebb4d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.60.176/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:d0:e9:63:d6:c4:88:54:9d:2a:bf:f7:9c:8e:b4:d1:c5:8f: 68:85:df:13:c6:f9:1f:be:fe:ed:54:09:a7:da:04:f2:16:6f: 8e:9f:a0:ec:d8:91:ec:c0:f8:9d:ba:92:fd:41:10:5c:c7:6a: e5:d9:3f:29:f7:27:98:34:4e:16:22:61:11:4e:f4:0d:9f:06: fc:9b:c9:ab:74:b1:86:b3:4b:bf:dc:22:45:67:f0:e1:46:df: 9f:d8:d7:df:82:48:37:b6:67:e7:2a:d1:c1:95:3e:47:43:27: dd:dd:bf:51:5e:0c:a1:72:4e:2d:56:ae:cf:60:df:b5:ea:c7: f2:f7:1a:6a:7c:aa:5f:34:85:82:77:40:a5:16:42:d7:90:d3: 5d:30:07:b3:32:57:09:27:46:68:9c:fa:e1:ba:af:38:e6:31: f9:91:77:bb:6c:0e:eb:21:7e:46:d9:5d:7f:c4:ef:7d:2f:f9: 12:ed:d0:27:4c:ff:33:1f:27:18:a8:3f:08:a8:c2:52:8e:87: 4e:17:3b:26:f5:dc:51:70:59:a5:90:76:d9:e0:13:52:29:c4: f7:77:ed:3d:3e:61:e8:f0:f4:d6:29:a6:66:f5:dc:88:b2:c7: 2e:32:32:89:28:77:a4:b9:5c:4d:8d:20:20:d1:81:a7:bd:ec: aa:96:78:05 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE16BSmBKKVAidgybQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk YzVlOTFmOTAtMzhlNi00NDI3LWIyNzYtNGVjOTJkM2Y3YmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/7PGguaExxNESIWBDZH5U4geYXEQO2CsVm8 5LYmpDoPiVCdfJtaxF5bgHUSO7d4t77vPfplOQGwgzXNlnzdq7VlSxn5xaK5ZPr6 2eC5V8HdcNGDxFvfuKIm1xKiWpk+0DSBvK2yQ7/5x9Z93u7GNf72+JVI7aLl0fln R5+ZkbmGP4xMdrBgOtcM94rG2n3iD9m+TS1H6l7jIhspWnVJKw4Z00yftqWM/Qhs lY3d86YuLtNb47U+cHpgoOyxYfjreF7D1qpZyONec0W8j1FoqPJJt7P7LAkWKlfB MGis0Wi44Gh6a2fVGVUxmW9T9nOyrMxAQJ9TM5Se/Xd+Ln529QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAogF+Nj74fKPfHZaGyhUkyRI7taMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMWJhZmU4YjQtNjU4Yi0z N2VmLTliYTgtYjZiMzYxZWJiNGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEpf48sDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAP0Olj1sSIVJ0qv/ecjrTRxY9ohd8Txvkfvv7tVAmn2gTyFm+On6Ds 2JHswPidupL9QRBcx2rl2T8p9yeYNE4WImERTvQNnwb8m8mrdLGGs0u/3CJFZ/Dh Rt+f2Nffgkg3tmfnKtHBlT5HQyfd3b9RXgyhck4tVq7PYN+16sfy9xpqfKpfNIWC d0ClFkLXkNNdMAezMlcJJ0ZonPrhuq845jH5kXe7bA7rIX5G2V1/xO99L/kS7dAn TP8zHycYqD8IqMJSjodOFzsm9dxRcFmlkHbZ4BNSKcT3d+09PmHo8PTWKaZm9dyI sscuMjKJKHekuVxNjSAg0YGnveyqlngF -----END CERTIFICATE-----Generated at Fri Apr 17 11:44:58 2026 by rpki-client