$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bdd1542b-775a-3340-8cf0-f1445ded4e2c.roa File: bdd1542b-775a-3340-8cf0-f1445ded4e2c.roa (raw, json) Hash identifier: I5RLaxwnXu0HrXkCGmrRQj3v0drHJJqJ7T7or0Q+r78= Subject key identifier: 37:00:27:93:8C:0D:4C:43:B5:92:B5:46:9E:6E:F9:52:16:39:C0:7F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7F9A8BDE7A07C354AEC88C20 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bdd1542b-775a-3340-8cf0-f1445ded4e2c.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 204.201.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:8b:de:7a:07:c3:54:ae:c8:8c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=06ccea3d-2429-4ef7-8b9a-c89c627d3270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4e:23:6f:04:d8:0c:01:5e:8b:c2:6a:7e:42: aa:20:84:eb:6d:5b:7c:a2:b9:df:8f:ff:b0:84:5e: 27:ef:27:dc:7b:8a:36:70:d4:41:5b:4f:d2:fd:3a: ed:f5:4d:b9:78:37:fa:bf:d7:be:ab:a7:62:cb:e1: fb:2b:f6:15:4b:04:b4:95:91:51:20:48:ab:04:f1: d6:c6:56:c1:b1:c6:2a:0d:e9:81:b0:86:bb:72:ed: f1:84:71:68:89:c6:b3:85:7e:50:b0:36:7b:ae:6b: e6:44:a8:ff:1a:4f:ae:4f:9b:b2:00:f5:16:c6:5e: ba:cc:76:f3:a7:b2:23:95:15:88:de:55:2c:b9:ff: 9e:50:e1:de:54:5e:6a:f0:c0:30:b6:f5:9a:f8:f5: 8a:da:6d:7f:d1:2f:fd:ef:f6:fc:76:7c:f7:85:12: c5:ce:66:2f:0e:c6:3b:ac:fd:66:e4:39:6f:7b:46: 7d:64:c9:83:47:1d:92:2b:e6:18:cb:c5:42:e7:01: 10:29:11:3d:d5:ad:83:08:66:57:a6:ea:c6:0b:d7: 9c:33:72:76:7f:e8:1e:11:a2:00:ae:cc:0a:c7:97: 86:f8:11:a2:ec:11:d1:6c:e2:d0:68:1e:9d:ab:61: 51:6f:df:b4:5d:03:74:f1:9b:75:60:0e:03:99:52: c7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:00:27:93:8C:0D:4C:43:B5:92:B5:46:9E:6E:F9:52:16:39:C0:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bdd1542b-775a-3340-8cf0-f1445ded4e2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.201.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:9f:8e:96:ea:aa:e4:d3:fb:61:2a:fb:50:7e:51:92:d2:3b: 77:60:e0:a1:79:dd:92:51:43:37:f4:84:2b:90:77:90:b0:11: c2:1d:17:9e:b5:f9:72:ea:31:d3:7d:02:d0:96:dd:04:7f:d2: df:84:6c:82:6c:17:a7:1e:17:ef:e8:7c:ca:7a:74:c8:de:ab: c4:f6:ae:c6:a6:04:09:d6:1e:c9:65:40:f1:e7:4a:d2:63:63: f6:96:29:0c:f5:f3:80:6a:6c:15:d8:7e:6d:75:bb:f9:54:9b: b6:ad:01:3d:0c:d2:82:c6:12:32:d0:ca:6c:b5:50:3f:1a:2d: 81:d3:f1:d7:e5:46:e9:82:b4:2f:78:53:db:d0:4e:df:de:7c: 3f:4d:91:68:5a:59:4e:4f:8e:46:87:27:f2:a7:f5:58:59:01: 7c:ba:6a:09:47:78:a4:f5:99:9d:d1:f6:ab:b9:ad:7b:31:e6: 5b:11:e3:a3:32:3a:5d:92:49:62:de:66:07:75:9b:ed:d8:8f: 79:b3:77:0b:21:dc:7b:5d:db:fa:83:04:a2:98:41:3c:83:83: 37:e4:64:41:e0:94:52:14:9b:b8:50:34:e0:a7:d9:ab:b7:da: 3c:fe:bf:ee:27:00:85:dd:b0:f3:9c:60:1d:8a:2f:34:f0:dd: 6c:aa:96:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/moveegfDVK7IjCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MDZjY2VhM2QtMjQyOS00ZWY3LThiOWEtYzg5YzYyN2QzMjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm04jbwTYDAFei8JqfkKqIITrbVt8ornfj/+w hF4n7yfce4o2cNRBW0/S/Trt9U25eDf6v9e+q6diy+H7K/YVSwS0lZFRIEirBPHW xlbBscYqDemBsIa7cu3xhHFoicazhX5QsDZ7rmvmRKj/Gk+uT5uyAPUWxl66zHbz p7IjlRWI3lUsuf+eUOHeVF5q8MAwtvWa+PWK2m1/0S/97/b8dnz3hRLFzmYvDsY7 rP1m5Dlve0Z9ZMmDRx2SK+YYy8VC5wEQKRE91a2DCGZXpurGC9ecM3J2f+geEaIA rswKx5eG+BGi7BHRbOLQaB6dq2FRb9+0XQN08Zt1YA4DmVLHDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcAJ5OMDUxDtZK1Rp5u+VIWOcB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmRkMTU0MmItNzc1YS0z MzQwLThjZjAtZjE0NDVkZWQ0ZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACifjpbqquTT+2Eq+1B+UZLSO3dg4KF53ZJRQzf0hCuQd5CwEcIdF561 +XLqMdN9AtCW3QR/0t+EbIJsF6ceF+/ofMp6dMjeq8T2rsamBAnWHsllQPHnStJj Y/aWKQz184BqbBXYfm11u/lUm7atAT0M0oLGEjLQymy1UD8aLYHT8dflRumCtC94 U9vQTt/efD9NkWhaWU5PjkaHJ/Kn9VhZAXy6aglHeKT1mZ3R9qu5rXsx5lsR46My Ol2SSWLeZgd1m+3Yj3mzdwsh3Htd2/qDBKKYQTyDgzfkZEHglFIUm7hQNOCn2au3 2jz+v+4nAIXdsPOcYB2KLzTw3WyqlnA= -----END CERTIFICATE-----Generated at Fri Apr 17 15:22:05 2026 by rpki-client