$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22a47488-fb19-39f3-b4be-d88f3cacc3e6.roa File: 22a47488-fb19-39f3-b4be-d88f3cacc3e6.roa (raw, json) Hash identifier: JQzsJGbkVx00PFs/DhU8ItYmvEWsTbAJnIZzIPm1jUA= Subject key identifier: 39:E7:4F:EE:31:13:B0:5D:7D:E4:99:6B:A8:09:FA:DA:7E:0B:1F:C5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D80FFFDFFAF10D1E81CE18DB0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22a47488-fb19-39f3-b4be-d88f3cacc3e6.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 16625 IP address blocks: 184.25.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:fd:ff:af:10:d1:e8:1c:e1:8d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=e94af47c-ae9a-4401-b64c-742504cae03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:23:8f:5d:71:fe:54:20:b6:fb:f2:16:e8:27: 56:f0:ba:3d:99:4c:46:05:6e:1e:de:26:df:dd:ef: 45:dd:03:69:0f:04:67:88:2a:93:3f:ce:14:07:40: 23:d9:44:e9:83:a7:45:eb:0f:85:89:b6:41:ea:e5: e9:ac:7d:85:3b:36:b6:46:14:c4:98:ee:d0:a3:8e: 5d:08:e3:2c:b4:d8:30:57:40:b3:fd:00:75:2a:6c: dd:01:a2:a6:a7:8a:b2:f6:98:9d:ed:8f:d2:dd:30: 91:0b:60:dd:bf:c6:f8:d9:38:c5:1a:dc:45:ee:11: f9:db:bc:b6:bf:76:c9:18:e9:77:5e:94:e4:b7:48: 67:1c:07:c6:d7:8f:77:db:50:9d:dd:69:34:4b:ed: d2:dd:d9:dd:ea:a8:58:d8:38:4a:91:48:7d:55:8b: 5d:47:37:6a:ca:29:d3:11:20:a4:b4:77:a3:40:2b: 8b:72:10:88:3a:46:c2:aa:6c:f3:b7:82:fe:23:56: a6:af:b1:31:c4:78:c5:28:70:fc:82:22:0b:5a:58: 89:ee:87:c2:2c:29:47:bb:a8:31:44:45:43:c5:ba: db:00:bc:b3:73:21:92:70:7c:8c:ea:f1:12:da:8b: 0a:e5:d8:d6:0d:00:92:04:59:af:4a:a1:fc:2f:9c: 61:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E7:4F:EE:31:13:B0:5D:7D:E4:99:6B:A8:09:FA:DA:7E:0B:1F:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22a47488-fb19-39f3-b4be-d88f3cacc3e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.25.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:12:70:9f:d1:0e:60:b2:99:85:f3:aa:02:4f:9e:06:74:c5: d3:5e:42:8f:94:7f:c0:42:e8:9d:ee:54:2f:e7:34:a8:92:85: 52:66:bc:06:02:77:b0:0c:85:7a:34:f6:4f:ed:34:90:6f:99: 1f:7f:4b:e0:20:68:2d:37:96:1b:d5:37:a7:2d:9e:06:ee:24: 07:34:40:11:11:53:1d:18:9d:c6:08:de:22:4b:2f:cb:34:03: d1:1f:0a:3c:de:c2:76:aa:1a:4d:14:82:33:b9:60:b6:d6:8c: 33:42:c6:75:b9:03:9b:ba:38:27:b7:2d:8f:ef:5a:eb:be:be: e6:46:5e:3c:1e:09:70:77:ac:c4:cd:95:57:15:74:7e:a9:a2: 58:51:e1:a4:95:88:e7:79:72:1e:b1:c1:fa:7a:23:14:50:7b: 13:53:0d:74:d7:14:b7:40:43:35:b9:25:2f:2e:bf:b3:5d:8e: 56:fe:83:b7:09:a1:a6:1d:01:16:3d:a3:0b:af:34:b2:d5:f4: 20:81:1b:fd:80:a0:62:62:5d:e5:1f:c3:e0:8a:23:ee:52:71: e2:e2:b9:51:f8:9f:48:07:21:06:3e:7f:ac:1f:6a:38:29:5c: e1:dc:fa:c9:d4:4c:3d:4d:be:e3:0e:58:46:39:99:52:30:a0: 0a:7a:34:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A//3/rxDR6BzhjbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk ZTk0YWY0N2MtYWU5YS00NDAxLWI2NGMtNzQyNTA0Y2FlMDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziOPXXH+VCC2+/IW6CdW8Lo9mUxGBW4e3ibf 3e9F3QNpDwRniCqTP84UB0Aj2UTpg6dF6w+FibZB6uXprH2FOza2RhTEmO7Qo45d COMstNgwV0Cz/QB1KmzdAaKmp4qy9pid7Y/S3TCRC2Ddv8b42TjFGtxF7hH527y2 v3bJGOl3XpTkt0hnHAfG149321Cd3Wk0S+3S3dnd6qhY2DhKkUh9VYtdRzdqyinT ESCktHejQCuLchCIOkbCqmzzt4L+I1amr7ExxHjFKHD8giILWliJ7ofCLClHu6gx REVDxbrbALyzcyGScHyM6vES2osK5djWDQCSBFmvSqH8L5xh4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnnT+4xE7BdfeSZa6gJ+tp+Cx/FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjJhNDc0ODgtZmIxOS0z OWYzLWI0YmUtZDg4ZjNjYWNjM2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuBnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMScJ/RDmCymYXzqgJPngZ0xdNeQo+Uf8BC6J3uVC/nNKiShVJmvAYC d7AMhXo09k/tNJBvmR9/S+AgaC03lhvVN6ctngbuJAc0QBERUx0YncYI3iJLL8s0 A9EfCjzewnaqGk0UgjO5YLbWjDNCxnW5A5u6OCe3LY/vWuu+vuZGXjweCXB3rMTN lVcVdH6polhR4aSViOd5ch6xwfp6IxRQexNTDXTXFLdAQzW5JS8uv7Ndjlb+g7cJ oaYdARY9owuvNLLV9CCBG/2AoGJiXeUfw+CKI+5SceLiuVH4n0gHIQY+f6wfajgp XOHc+snUTD1NvuMOWEY5mVIwoAp6NIc= -----END CERTIFICATE-----Generated at Fri Apr 17 12:19:40 2026 by rpki-client