$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a9ba5d6b-f640-3f62-9e25-31e4d313af22.roa File: a9ba5d6b-f640-3f62-9e25-31e4d313af22.roa (raw, json) Hash identifier: 7mPXROZxZgjzmNnR84LJfER7UBhH+sB0jmhy5r5ZKzw= Subject key identifier: C0:4C:AD:F7:73:74:3D:F7:EC:AF:14:CF:C0:0B:53:C5:AA:DF:CD:57 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7B6A8B7284839A597B851CF8 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a9ba5d6b-f640-3f62-9e25-31e4d313af22.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 20940 IP address blocks: 165.254.247.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:8b:72:84:83:9a:59:7b:85:1c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=a995a39e-5f5a-455e-8806-6201c692cc35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6f:6e:49:f0:e5:aa:df:5f:88:02:28:cc:b5: d9:ff:41:97:1d:a8:06:dc:c5:9a:cf:f2:e4:15:5e: b3:a8:60:c1:78:db:03:c5:a8:dc:80:4b:f8:bc:8d: 85:c2:c0:b4:32:e8:25:f5:cc:17:12:92:f4:27:4a: c0:08:29:61:5e:c6:7e:06:65:8f:4a:d1:1c:13:64: 55:32:7b:b7:60:46:75:10:04:72:47:fe:b8:57:24: fb:10:b6:7d:d2:ec:51:1f:ef:b5:70:ec:bb:2c:9b: 7a:79:47:0f:02:81:77:eb:47:20:11:4b:f1:bd:0f: 3d:cb:f5:1b:02:62:aa:13:eb:c4:dd:5b:3e:e7:33: da:c5:40:7c:80:18:2f:92:d0:21:2e:78:3d:36:84: e1:8a:84:5f:88:72:3e:1d:2f:e7:49:1f:bb:12:34: 19:eb:20:2a:da:f6:7c:35:d5:0f:64:3e:c0:2e:4d: 48:36:5e:fb:dd:3a:0a:07:07:f5:28:32:ec:5e:1e: 9d:c8:70:9b:a9:5c:08:e4:c7:30:02:d1:0c:e3:06: 30:5d:e6:ad:15:f0:e8:a3:fa:57:79:e0:73:0f:d0: 61:95:cf:3f:e3:e9:21:d2:08:39:bf:a3:84:ef:96: 80:b1:88:39:7f:3d:80:bb:da:1a:2b:d5:c9:d6:70: 0b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4C:AD:F7:73:74:3D:F7:EC:AF:14:CF:C0:0B:53:C5:AA:DF:CD:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a9ba5d6b-f640-3f62-9e25-31e4d313af22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.247.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:9f:80:2c:50:d2:07:7f:d3:b7:ea:0e:2e:ff:c7:11:f4:9e: d7:25:95:be:ff:0d:c0:96:6c:ca:ea:31:2e:19:30:9d:1f:74: ea:68:2d:fe:ff:8b:23:d0:92:04:36:0b:b8:2e:44:22:fb:2c: 25:71:4c:a8:25:2e:43:b8:c4:fb:85:b2:cc:43:a1:23:a0:a6: 7f:b2:fa:fb:21:22:08:06:04:34:28:49:3b:f1:b1:d9:19:42: e4:fd:6a:ad:e5:47:0b:a8:9c:db:96:a2:76:c3:51:d4:55:d0: de:5d:52:b7:d1:ba:55:94:6a:14:26:9c:58:04:3b:3e:83:65: 60:fa:e4:b3:c1:88:84:68:32:e8:4a:39:9a:8e:69:22:01:12: 22:66:18:44:c1:f6:c7:b0:38:4a:50:91:1d:b8:9f:5c:f2:f2: 4a:89:99:d1:b5:7e:b4:9d:ca:43:06:c1:e7:ad:90:63:fd:66: 82:a3:27:45:d9:77:ee:e6:4a:d5:24:fb:4c:9f:9b:17:81:7c: 73:7c:b7:e8:e3:b7:04:f0:cb:c7:4b:34:27:25:cb:ea:d0:44: b9:10:4b:d8:db:0f:40:1d:28:0f:74:6b:da:60:c0:7c:3f:03: 1a:d3:d9:6b:20:bb:b4:f4:42:29:1d:09:ca:87:48:1a:70:80: 4e:b1:fd:79 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE17aotyhIOaWXuFHPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk YTk5NWEzOWUtNWY1YS00NTVlLTg4MDYtNjIwMWM2OTJjYzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg29uSfDlqt9fiAIozLXZ/0GXHagG3MWaz/Lk FV6zqGDBeNsDxajcgEv4vI2FwsC0Mugl9cwXEpL0J0rACClhXsZ+BmWPStEcE2RV Mnu3YEZ1EARyR/64VyT7ELZ90uxRH++1cOy7LJt6eUcPAoF360cgEUvxvQ89y/Ub AmKqE+vE3Vs+5zPaxUB8gBgvktAhLng9NoThioRfiHI+HS/nSR+7EjQZ6yAq2vZ8 NdUPZD7ALk1INl773ToKBwf1KDLsXh6dyHCbqVwI5McwAtEM4wYwXeatFfDoo/pX eeBzD9Bhlc8/4+kh0gg5v6OE75aAsYg5fz2Au9oaK9XJ1nALpQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMBMrfdzdD337K8Uz8ALU8Wq381XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYTliYTVkNmItZjY0MC0z ZjYyLTllMjUtMzFlNGQzMTNhZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHpf73gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCXn4AsUNIHf9O36g4u/8cR9J7XJZW+/w3AlmzK6jEuGTCdH3TqaC3+ /4sj0JIENgu4LkQi+ywlcUyoJS5DuMT7hbLMQ6EjoKZ/svr7ISIIBgQ0KEk78bHZ GULk/Wqt5UcLqJzblqJ2w1HUVdDeXVK30bpVlGoUJpxYBDs+g2Vg+uSzwYiEaDLo SjmajmkiARIiZhhEwfbHsDhKUJEduJ9c8vJKiZnRtX60ncpDBsHnrZBj/WaCoydF 2Xfu5krVJPtMn5sXgXxzfLfo47cE8MvHSzQnJcvq0ES5EEvY2w9AHSgPdGvaYMB8 PwMa09lrILu09EIpHQnKh0gacIBOsf15 -----END CERTIFICATE-----Generated at Fri Apr 17 18:28:37 2026 by rpki-client