$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aac50a8c-41ea-301c-8c39-ebf4168f53b5.roa File: aac50a8c-41ea-301c-8c39-ebf4168f53b5.roa (raw, json) Hash identifier: UUEE2FLU7/OB8jMcoMb75zjA02VjM90oA3xV4zpzhNU= Subject key identifier: 4B:52:E0:D9:56:46:FB:80:3A:48:49:6C:7E:DE:D4:A5:05:28:F4:0B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D869558C0BF19626DFAF0C580 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aac50a8c-41ea-301c-8c39-ebf4168f53b5.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 393930 IP address blocks: 165.254.53.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:58:c0:bf:19:62:6d:fa:f0:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=0fdb25db-9faf-4069-831a-ed1eb4bb847d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f9:95:4e:e5:6d:5a:10:5c:33:b0:23:7c:80: 62:d1:e0:73:b4:f1:9f:e9:6a:2c:cb:d3:5d:8f:41: 96:f7:9e:78:17:a5:28:fe:c3:5e:71:35:ff:04:55: d0:cb:6f:9a:52:73:9a:ee:84:68:fc:e2:b8:fc:64: 71:bf:5c:57:47:0c:6a:4a:33:ac:95:7a:e6:51:69: 7c:10:b7:11:d3:9a:27:73:61:a2:9c:87:7f:b5:bf: c4:9e:65:90:ba:2f:c5:98:b4:6e:67:a9:e5:f1:71: 90:67:a4:b1:f3:48:27:a2:22:c6:49:5b:59:69:b2: 26:c2:07:87:73:d5:51:f8:03:f7:e4:ec:d4:58:62: e7:fd:05:2b:d4:ef:de:63:44:33:4d:e6:e5:eb:e9: 37:c1:2c:d7:58:8a:e8:85:15:d7:41:15:1d:76:d3: 3a:10:3d:da:ba:82:be:24:cf:c4:3d:3e:3d:02:1f: ee:ea:71:56:af:3a:2b:45:96:63:bc:6d:6e:9e:d8: 35:10:07:46:6d:82:e4:2a:db:b8:a6:b7:9e:66:7d: ab:84:9e:d1:b1:81:0d:6d:a3:13:72:cf:96:41:79: 50:66:08:e2:fe:da:8d:2f:4a:9c:0c:f9:c2:e6:e4: 65:36:78:98:22:86:da:c3:86:2b:f1:73:d0:3a:33: 4e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:52:E0:D9:56:46:FB:80:3A:48:49:6C:7E:DE:D4:A5:05:28:F4:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aac50a8c-41ea-301c-8c39-ebf4168f53b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:af:bd:bc:0e:81:e2:fe:c1:36:ad:fc:6c:be:f0:5e:f3:2a: a6:a2:bd:f1:0d:06:10:70:10:32:d3:42:2d:0d:25:76:f4:4d: 56:27:13:5d:87:eb:16:43:f9:49:1e:b2:de:21:f0:92:0c:59: 47:b9:68:88:f7:f5:16:b9:d0:02:d4:b0:c1:a9:e1:32:a0:e0: b6:d4:81:aa:9b:0d:b9:55:29:6b:18:85:83:5d:54:f0:3a:40: e5:7c:2f:02:13:63:bc:c0:22:0c:3a:9f:50:24:7b:24:f7:a0: 0f:7a:a4:17:5a:9b:80:e3:30:b2:20:61:13:c0:16:36:94:e6: c4:dd:ce:a1:20:a6:40:2b:86:9d:22:8a:26:3c:98:ac:f2:4e: 0f:ce:4b:bf:a6:e4:23:67:62:66:66:07:5b:0b:1a:d7:eb:b2: 92:4a:a6:b7:5e:6d:01:1a:12:f0:0f:b3:26:b8:99:a9:19:61: 42:79:41:5d:19:41:e7:f4:0b:31:65:bb:82:44:10:87:31:de: 55:10:8d:37:dd:b0:b8:62:4c:4a:5f:6e:a2:43:c3:5f:56:b4: 2d:6a:46:1c:14:52:72:14:9b:47:51:ee:9e:88:fe:5c:1b:0f: 7e:4d:5f:80:78:f5:db:d3:8f:70:5a:41:05:e2:e6:34:31:66: e5:0a:c0:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlVjAvxlibfrwxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk MGZkYjI1ZGItOWZhZi00MDY5LTgzMWEtZWQxZWI0YmI4NDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fmVTuVtWhBcM7AjfIBi0eBztPGf6Wosy9Nd j0GW9554F6Uo/sNecTX/BFXQy2+aUnOa7oRo/OK4/GRxv1xXRwxqSjOslXrmUWl8 ELcR05onc2GinId/tb/EnmWQui/FmLRuZ6nl8XGQZ6Sx80gnoiLGSVtZabImwgeH c9VR+AP35OzUWGLn/QUr1O/eY0QzTebl6+k3wSzXWIrohRXXQRUddtM6ED3auoK+ JM/EPT49Ah/u6nFWrzorRZZjvG1untg1EAdGbYLkKtu4preeZn2rhJ7RsYENbaMT cs+WQXlQZgji/tqNL0qcDPnC5uRlNniYIobaw4Yr8XPQOjNOMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtS4NlWRvuAOkhJbH7e1KUFKPQLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYWFjNTBhOGMtNDFlYS0z MDFjLThjMzktZWJmNDE2OGY1M2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf41MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImvvbwOgeL+wTat/Gy+8F7zKqaivfENBhBwEDLTQi0NJXb0TVYnE12H 6xZD+Ukest4h8JIMWUe5aIj39Ra50ALUsMGp4TKg4LbUgaqbDblVKWsYhYNdVPA6 QOV8LwITY7zAIgw6n1AkeyT3oA96pBdam4DjMLIgYRPAFjaU5sTdzqEgpkArhp0i iiY8mKzyTg/OS7+m5CNnYmZmB1sLGtfrspJKprdebQEaEvAPsya4makZYUJ5QV0Z Qef0CzFlu4JEEIcx3lUQjTfdsLhiTEpfbqJDw19WtC1qRhwUUnIUm0dR7p6I/lwb D35NX4B49dvTj3BaQQXi5jQxZuUKwOk= -----END CERTIFICATE-----Generated at Fri Apr 17 18:28:47 2026 by rpki-client