$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/91d55642-0c47-39e6-9f01-b3db6078eb51.roa File: 91d55642-0c47-39e6-9f01-b3db6078eb51.roa (raw, json) Hash identifier: j6+oS1pyJVtJuxw5QUmf01WL8sy8Xv8oIYnUoHR+OA0= Subject key identifier: 0E:CA:38:FF:08:C4:4B:07:D1:70:23:96:D7:B9:52:3F:35:75:1B:E1 Certificate issuer: /CN=be7a0cf5-d98b-4cd3-adcb-1936d1ae1059 Certificate serial: 010D0C9F4328584D75D526F833501953D291AD00 Authority key identifier: 54:69:11:A8:6B:29:6F:61:FB:5E:DE:24:20:B9:2A:11:E7:6F:7B:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/91d55642-0c47-39e6-9f01-b3db6078eb51.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 30165 IP address blocks: 147.253.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:26:f8:33:50:19:53:d2:91:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be7a0cf5-d98b-4cd3-adcb-1936d1ae1059 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=7f99c78b-4272-4b77-bd8f-ae6ccf98502d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:61:cc:ba:78:1c:40:c4:d2:c7:a6:2b:ba:77: ec:ef:7e:b8:35:dc:79:36:d6:92:f5:fe:dd:a8:bc: f5:b4:b2:6a:ff:04:97:ed:b0:50:8b:42:53:39:f8: df:6c:43:77:73:0e:c7:d5:e5:93:80:54:9a:9a:89: 36:a0:ef:af:90:9e:f7:cf:ba:5d:57:09:57:9e:f6: cb:31:6e:37:85:a9:4d:f9:45:5d:f3:f6:f1:b7:e5: e3:13:17:a7:cd:b4:66:16:21:c1:8f:87:a8:bf:b5: a7:93:69:6e:65:9f:20:c9:be:d1:9d:4d:c2:a0:cd: ae:9a:37:ac:d5:b2:e2:db:65:ce:d8:e5:46:4e:60: 36:0e:ab:c0:10:27:e9:7d:ea:26:80:22:f4:46:92: 85:cb:bf:8a:03:a2:7a:70:29:d4:16:fb:e4:04:30: e8:c5:75:b5:94:50:d5:e0:1b:62:3b:55:d7:bb:0f: 07:55:27:3a:41:27:39:bb:5d:d2:f9:e9:9f:2e:0e: 3e:4d:36:25:88:db:2a:00:69:9a:92:1c:c4:a7:18: d4:ae:84:35:d7:7e:2d:05:03:b3:91:cf:bd:de:78: 2c:98:f7:95:b7:50:32:b4:98:4a:d0:29:89:35:26: b5:5c:d0:0a:21:e1:11:0e:05:f6:4a:a0:e4:12:2d: 47:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CA:38:FF:08:C4:4B:07:D1:70:23:96:D7:B9:52:3F:35:75:1B:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/91d55642-0c47-39e6-9f01-b3db6078eb51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.crl X509v3 Authority Key Identifier: keyid:54:69:11:A8:6B:29:6F:61:FB:5E:DE:24:20:B9:2A:11:E7:6F:7B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer sbgp-ipAddrBlock: critical IPv4: 147.253.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:24:20:29:6f:b1:80:48:b0:9d:02:5b:d9:9e:b5:ca:2d:70: a2:ff:6b:8d:6a:a3:a1:b0:20:02:35:76:cc:0a:9f:6f:78:70: 63:47:fb:e7:92:1b:a3:00:ac:17:31:0c:b5:5f:d3:44:36:51: be:a9:4e:d6:b9:0a:fd:cd:46:ea:5e:a1:8f:db:89:cb:59:0d: 05:d5:f0:01:76:9d:4c:bf:60:1b:48:61:4f:62:0c:0f:33:70: b1:a0:e1:ea:3b:45:15:45:32:cb:71:96:b7:9e:4c:43:68:ac: 14:84:26:57:f1:fc:79:4c:a8:f6:ca:bb:f9:01:0d:28:08:f2: 73:b1:a8:36:6f:9d:c0:d4:ee:ba:13:0b:16:62:bf:ef:ad:de: 94:3e:77:e7:46:e6:0d:a8:b4:60:69:f9:d0:94:2f:4a:e8:a8: ed:e1:54:31:a4:fd:0d:18:93:18:a6:46:92:ea:14:71:b8:b6: 46:9b:d0:6b:25:6f:a1:a7:68:b4:67:9d:24:74:a5:a6:ab:59: e1:b9:1d:8d:8c:3c:db:d6:3a:2c:8f:87:d3:ee:1b:a3:eb:15: a1:f3:32:ca:6f:06:46:7b:28:2a:57:6d:30:67:36:f8:19:65: 88:40:6e:51:ea:ef:2a:6f:97:37:ab:ad:3b:e6:ea:8c:08:2e: 13:c4:d1:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111Sb4M1AZU9KRrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU3YTBjZjUtZDk4Yi00Y2QzLWFkY2ItMTkzNmQxYWUx MDU5MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk N2Y5OWM3OGItNDI3Mi00Yjc3LWJkOGYtYWU2Y2NmOTg1MDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGHMungcQMTSx6Yrunfs7364Ndx5NtaS9f7d qLz1tLJq/wSX7bBQi0JTOfjfbEN3cw7H1eWTgFSamok2oO+vkJ73z7pdVwlXnvbL MW43halN+UVd8/bxt+XjExenzbRmFiHBj4eov7Wnk2luZZ8gyb7RnU3CoM2umjes 1bLi22XO2OVGTmA2DqvAECfpfeomgCL0RpKFy7+KA6J6cCnUFvvkBDDoxXW1lFDV 4BtiO1XXuw8HVSc6QSc5u13S+emfLg4+TTYliNsqAGmakhzEpxjUroQ1134tBQOz kc+93ngsmPeVt1AytJhK0CmJNSa1XNAKIeERDgX2SqDkEi1HQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7KOP8IxEsH0XAjlte5Uj81dRvhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZTdh MGNmNS1kOThiLTRjZDMtYWRjYi0xOTM2ZDFhZTEwNTkvOTFkNTU2NDItMGM0Ny0z OWU2LTlmMDEtYjNkYjYwNzhlYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmU3YTBjZjUtZDk4Yi00Y2QzLWFk Y2ItMTkzNmQxYWUxMDU5L2JlN2EwY2Y1LWQ5OGItNGNkMy1hZGNiLTE5MzZkMWFl MTA1OS5jcmwwHwYDVR0jBBgwFoAUVGkRqGspb2H7Xt4kILkqEedve0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZTdhMGNmNS1kOThiLTRjZDMtYWRjYi0xOTM2 ZDFhZTEwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFk/3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUkIClvsYBIsJ0CW9metcotcKL/a41qo6GwIAI1dswKn294cGNH++eS G6MArBcxDLVf00Q2Ub6pTta5Cv3NRupeoY/bictZDQXV8AF2nUy/YBtIYU9iDA8z cLGg4eo7RRVFMstxlreeTENorBSEJlfx/HlMqPbKu/kBDSgI8nOxqDZvncDU7roT CxZiv++t3pQ+d+dG5g2otGBp+dCUL0roqO3hVDGk/Q0YkximRpLqFHG4tkab0Gsl b6GnaLRnnSR0paarWeG5HY2MPNvWOiyPh9PuG6PrFaHzMspvBkZ7KCpXbTBnNvgZ ZYhAblHq7ypvlzerrTvm6owILhPE0Xc= -----END CERTIFICATE-----Generated at Fri Apr 17 15:19:07 2026 by rpki-client