$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2597be61-7dab-3bf6-9c85-234ddf818e78.roa File: 2597be61-7dab-3bf6-9c85-234ddf818e78.roa (raw, json) Hash identifier: B3AV1U39xhCFbjcyXBS9Tso46RGN2x9C+Lu9D1iL3x0= Subject key identifier: 49:DC:77:77:F6:5D:27:33:07:3A:7B:25:CD:17:B9:5A:A2:7A:9D:FF Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7F9A8BC6A464E4067E57D1C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2597be61-7dab-3bf6-9c85-234ddf818e78.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 165.254.238.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:8b:c6:a4:64:e4:06:7e:57:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=b28d3d69-eac7-4034-8bec-d1aaf7364a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:03:71:cd:8d:0e:8e:77:97:97:69:76:88:24: 30:d0:c2:ff:3f:6f:ed:3c:72:bb:fd:73:a0:7b:b3: af:9a:cc:9a:83:6c:2d:f2:76:a9:33:96:d4:b2:2e: 52:46:4e:87:14:6b:8c:91:62:29:78:9d:a3:80:5a: ef:f2:59:2e:91:6f:17:50:9f:80:bf:a7:a4:19:e5: 46:69:0d:7a:c0:e9:e6:e9:3c:97:d1:d8:45:9b:35: b5:18:c1:5b:ea:38:44:74:63:76:8b:74:84:24:3d: c4:1e:54:ae:e5:fc:71:60:4c:77:a9:90:4c:09:95: 3e:8d:91:11:fa:00:74:1f:b1:f7:d5:3e:63:0e:3f: 3b:83:07:6b:76:99:ee:37:f5:e7:b9:df:ce:0e:0a: dd:87:b4:5c:48:ef:48:8d:20:5f:de:f9:7a:dd:bd: 69:f7:3e:71:99:09:c1:45:51:e5:4e:95:11:21:62: d7:52:fd:4c:40:53:88:3f:41:ea:db:49:d8:e9:da: eb:8f:18:7b:93:4f:c0:4b:90:cc:36:ce:34:31:b8: 1c:ab:29:16:6e:ed:5b:4f:ac:61:0d:b0:20:0d:73: 83:39:30:a3:dc:3c:6b:b9:21:2c:e7:ce:49:21:24: eb:e9:71:46:cf:84:46:47:cd:b1:c7:b2:f4:e4:58: c2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DC:77:77:F6:5D:27:33:07:3A:7B:25:CD:17:B9:5A:A2:7A:9D:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2597be61-7dab-3bf6-9c85-234ddf818e78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.238.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:53:00:d8:f2:0b:d0:10:98:b1:d8:9b:57:7f:9e:80:96:b7: 5f:b5:7e:fb:2c:ce:24:90:c5:08:0d:22:f0:c5:2e:ff:a3:ea: c6:20:76:a0:4f:58:d2:e6:0c:01:09:45:ed:ee:88:37:41:35: 2f:b8:82:bb:2f:4a:84:80:db:3a:56:94:0b:a9:16:e2:5e:88: 9a:7d:06:db:2b:06:7c:97:9b:c6:cf:35:0b:29:80:25:c4:e5: 07:92:2c:f5:e0:35:9d:1b:9a:55:21:2e:34:b3:e4:a7:d5:a0: 0e:d8:92:36:d9:c9:75:d1:0d:6e:72:3e:6f:25:b4:ea:83:f1: 68:69:0d:36:1e:fb:d0:30:19:11:ef:df:1e:ce:97:25:dd:cb: d7:3a:a3:90:d3:88:54:04:fd:b5:9f:70:42:40:cb:8c:fe:f5: 14:16:b5:e4:7c:78:23:8a:ea:00:18:0a:d6:f1:87:32:05:d9: d0:eb:42:b8:71:ce:c7:45:c2:39:c1:18:aa:0f:4f:6b:e0:1f: 52:e0:81:a2:39:57:84:53:54:9f:f4:94:c6:67:25:97:a9:3c: e7:dc:ff:f8:db:71:00:03:fa:05:8f:e6:85:b0:d1:8c:e9:33: 67:88:6f:c1:81:cb:36:f4:a8:17:59:53:8c:1e:b2:06:52:be: 4a:e0:b0:18 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1/movGpGTkBn5X0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk YjI4ZDNkNjktZWFjNy00MDM0LThiZWMtZDFhYWY3MzY0YTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlANxzY0OjneXl2l2iCQw0ML/P2/tPHK7/XOg e7Ovmsyag2wt8napM5bUsi5SRk6HFGuMkWIpeJ2jgFrv8lkukW8XUJ+Av6ekGeVG aQ16wOnm6TyX0dhFmzW1GMFb6jhEdGN2i3SEJD3EHlSu5fxxYEx3qZBMCZU+jZER +gB0H7H31T5jDj87gwdrdpnuN/Xnud/ODgrdh7RcSO9IjSBf3vl63b1p9z5xmQnB RVHlTpURIWLXUv1MQFOIP0Hq20nY6drrjxh7k0/AS5DMNs40MbgcqykWbu1bT6xh DbAgDXODOTCj3DxruSEs585JISTr6XFGz4RGR82xx7L05FjCWQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEncd3f2XSczBzp7Jc0XuVqiep3/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMjU5N2JlNjEtN2RhYi0z YmY2LTljODUtMjM0ZGRmODE4ZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHpf7ugDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCbUwDY8gvQEJix2JtXf56AlrdftX77LM4kkMUIDSLwxS7/o+rGIHag T1jS5gwBCUXt7og3QTUvuIK7L0qEgNs6VpQLqRbiXoiafQbbKwZ8l5vGzzULKYAl xOUHkiz14DWdG5pVIS40s+Sn1aAO2JI22cl10Q1ucj5vJbTqg/FoaQ02HvvQMBkR 798ezpcl3cvXOqOQ04hUBP21n3BCQMuM/vUUFrXkfHgjiuoAGArW8YcyBdnQ60K4 cc7HRcI5wRiqD09r4B9S4IGiOVeEU1Sf9JTGZyWXqTzn3P/423EAA/oFj+aFsNGM 6TNniG/Bgcs29KgXWVOMHrIGUr5K4LAY -----END CERTIFICATE-----Generated at Fri Apr 17 19:39:02 2026 by rpki-client