$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/25742bec-3680-3006-9f66-dea23bf8fa9c.roa File: 25742bec-3680-3006-9f66-dea23bf8fa9c.roa (raw, json) Hash identifier: 5Jro2p29VIt6UoyG7GH2LQsV5EPO3iDt3EeTFEzGODY= Subject key identifier: F3:75:FA:02:97:D2:2A:7E:35:43:DB:B5:7A:D4:79:4F:BF:CB:7D:6A Certificate issuer: /CN=5937a29a-1b30-48a0-ad3c-37d4a97ffe18 Certificate serial: 010D0C9F4328584D8695443B39EA1BC336BFC9C0 Authority key identifier: 83:9F:E5:51:A0:D2:09:AB:21:3E:8D:4D:B5:CD:63:25:6C:B1:B4:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/25742bec-3680-3006-9f66-dea23bf8fa9c.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 16509 IP address blocks: 208.93.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:44:3b:39:ea:1b:c3:36:bf:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5937a29a-1b30-48a0-ad3c-37d4a97ffe18 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=a2a277dd-b92f-4605-8dbd-fbab2dc1cc40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:66:3c:d4:c1:e9:e7:56:1d:da:9a:63:6c:fd: 60:b8:c8:22:ca:21:01:80:ec:b4:e1:83:84:c7:67: 1a:26:c3:7e:b2:b2:46:86:18:1b:51:d8:27:ea:34: d6:50:11:52:14:48:6c:52:a1:a5:4a:ca:ee:f8:18: aa:5f:a8:16:ae:15:3c:fd:80:9a:24:f5:ea:b3:73: da:46:c5:30:a4:fe:21:80:3c:c0:51:23:5b:e2:d5: 5e:e2:0f:a0:6c:c7:62:17:5f:6b:12:ac:fd:2d:3b: d2:ec:35:c1:70:0c:99:2c:cd:a6:a2:63:1c:be:b3: 10:04:7b:11:c0:63:76:0a:df:18:15:71:12:1c:e5: 35:09:26:c7:ad:bf:4e:bd:21:a0:f2:8d:c6:9d:0b: 58:6e:3d:08:11:0c:74:96:17:a5:43:49:89:cf:b5: 75:ae:7b:9c:58:fb:25:64:87:e1:28:a0:39:04:4e: fb:04:cf:ea:54:24:cb:96:6d:47:0d:f2:df:41:8c: 82:96:08:11:71:87:da:16:7d:21:2d:dc:c1:cb:19: 45:b7:d0:01:3b:ef:42:74:61:7e:93:39:67:8b:e1: 82:1e:b4:fd:42:31:8a:27:1d:14:bd:3d:f4:9b:04: 40:0c:49:9e:db:0d:b6:05:36:39:c5:41:51:a4:19: 34:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:75:FA:02:97:D2:2A:7E:35:43:DB:B5:7A:D4:79:4F:BF:CB:7D:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/25742bec-3680-3006-9f66-dea23bf8fa9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.crl X509v3 Authority Key Identifier: keyid:83:9F:E5:51:A0:D2:09:AB:21:3E:8D:4D:B5:CD:63:25:6C:B1:B4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.cer sbgp-ipAddrBlock: critical IPv4: 208.93.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e2:ce:65:f8:01:7f:7f:3c:d7:b2:d6:54:bd:d0:64:45:cd: f7:f3:8e:98:75:a8:f2:5c:7f:ba:e4:ca:b0:5f:72:f1:93:cf: 96:37:55:83:33:bb:00:a6:78:b0:d6:74:35:d4:da:71:23:40: 29:b2:a1:73:5d:55:50:33:e4:12:d4:bd:48:d9:82:ca:f2:4c: b8:c3:c1:46:78:ef:49:38:b1:0a:10:1d:ea:b7:ce:55:7a:4f: 58:c7:99:3a:09:c2:7f:ac:76:16:ca:4e:35:59:a9:78:6f:ca: 7f:8b:2e:7f:bf:5e:27:2a:d3:83:9d:34:28:b6:19:c0:25:ab: 22:2f:b2:6f:97:69:5b:ce:33:fc:d9:78:23:d8:99:53:11:87: 9a:71:27:c2:56:7f:0f:7b:54:30:45:e3:26:0c:0b:a8:81:5f: 61:dd:bc:b4:db:e8:f6:79:b5:22:bc:f1:0a:c2:4c:b6:f9:ba: 98:d5:77:2b:f9:87:95:9c:7c:c3:8e:5c:98:52:98:39:eb:b7: ba:0d:fe:f8:e0:04:89:d2:55:05:b0:ef:ef:66:4b:f4:3d:63: ae:ab:62:dc:d8:44:e2:97:0e:3f:86:e2:38:92:50:4c:73:6f: bf:48:e9:f1:7e:e3:91:88:71:a5:64:67:95:df:e8:b3:19:cf: 97:21:29:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlUQ7Oeobwza/ycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzN2EyOWEtMWIzMC00OGEwLWFkM2MtMzdkNGE5N2Zm ZTE4MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk YTJhMjc3ZGQtYjkyZi00NjA1LThkYmQtZmJhYjJkYzFjYzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWY81MHp51Yd2ppjbP1guMgiyiEBgOy04YOE x2caJsN+srJGhhgbUdgn6jTWUBFSFEhsUqGlSsru+BiqX6gWrhU8/YCaJPXqs3Pa RsUwpP4hgDzAUSNb4tVe4g+gbMdiF19rEqz9LTvS7DXBcAyZLM2momMcvrMQBHsR wGN2Ct8YFXESHOU1CSbHrb9OvSGg8o3GnQtYbj0IEQx0lhelQ0mJz7V1rnucWPsl ZIfhKKA5BE77BM/qVCTLlm1HDfLfQYyClggRcYfaFn0hLdzByxlFt9ABO+9CdGF+ kzlni+GCHrT9QjGKJx0UvT30mwRADEme2w22BTY5xUFRpBk0PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPN1+gKX0ip+NUPbtXrUeU+/y31qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTM3 YTI5YS0xYjMwLTQ4YTAtYWQzYy0zN2Q0YTk3ZmZlMTgvMjU3NDJiZWMtMzY4MC0z MDA2LTlmNjYtZGVhMjNiZjhmYTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzN2EyOWEtMWIzMC00OGEwLWFk M2MtMzdkNGE5N2ZmZTE4LzU5MzdhMjlhLTFiMzAtNDhhMC1hZDNjLTM3ZDRhOTdm ZmUxOC5jcmwwHwYDVR0jBBgwFoAUg5/lUaDSCashPo1Ntc1jJWyxtNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTM3YTI5YS0xYjMwLTQ4YTAtYWQzYy0zN2Q0 YTk3ZmZlMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F1vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbizmX4AX9/PNey1lS90GRFzffzjph1qPJcf7rkyrBfcvGTz5Y3VYMz uwCmeLDWdDXU2nEjQCmyoXNdVVAz5BLUvUjZgsryTLjDwUZ470k4sQoQHeq3zlV6 T1jHmToJwn+sdhbKTjVZqXhvyn+LLn+/Xicq04OdNCi2GcAlqyIvsm+XaVvOM/zZ eCPYmVMRh5pxJ8JWfw97VDBF4yYMC6iBX2HdvLTb6PZ5tSK88QrCTLb5upjVdyv5 h5WcfMOOXJhSmDnrt7oN/vjgBInSVQWw7+9mS/Q9Y66rYtzYROKXDj+G4jiSUExz b79I6fF+45GIcaVkZ5Xf6LMZz5chKV8= -----END CERTIFICATE-----Generated at Fri Apr 17 16:52:04 2026 by rpki-client