$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/34e401f8-32c5-3231-9ba4-e330e23d0bfb.roa File: 34e401f8-32c5-3231-9ba4-e330e23d0bfb.roa (raw, json) Hash identifier: p9lsoSMEdLP+M+MHOCNcP+py6z19CmCLWHGLxTV+B2I= Subject key identifier: A8:55:63:78:78:0F:8B:D4:EA:09:7C:76:85:1E:47:D7:91:E4:6B:EA Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D7F9AA04B0B950FA9221B4200 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/34e401f8-32c5-3231-9ba4-e330e23d0bfb.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 152.69.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:a0:4b:0b:95:0f:a9:22:1b:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=bc89b438-0139-4f6d-904b-09030f5b12d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:59:58:35:af:67:92:e7:5b:f5:35:1e:66:ca: 43:cb:09:10:d1:d2:e3:c7:af:da:43:1f:3d:ca:21: 94:0d:f8:87:79:f0:d1:ad:f1:61:a5:ca:cd:6b:a2: d8:2a:c6:33:14:db:f6:0a:8c:79:2a:95:36:4c:7f: 53:ed:dc:49:f8:2f:9c:02:50:a7:63:d7:71:d7:de: 51:61:ae:75:9d:00:fa:b1:ba:f5:cb:b6:cb:a9:bb: 7f:ac:bb:be:e0:e4:67:4b:f6:90:be:09:43:1d:4a: dd:ce:a3:80:8e:15:5f:24:a0:8a:fc:74:a5:43:92: 74:93:b0:b2:64:ad:bf:bd:b4:7b:a6:ce:c9:1f:f7: be:ba:d0:45:bf:b0:d7:4c:b6:6f:8c:f8:77:cf:bf: 45:da:ab:a0:b2:fd:ae:c5:3b:b7:47:5b:2b:00:c8: 5f:be:fa:c3:c0:e3:88:aa:e7:ed:25:c2:66:61:72: 1c:8a:a6:b4:3f:12:7a:d0:dc:1e:ee:29:de:c8:20: 9e:21:43:88:de:95:59:49:35:77:f6:87:95:67:90: 53:c5:32:c6:28:4b:4d:44:6c:04:cf:e5:85:f1:42: c5:1c:cf:50:1d:e1:ea:9b:ca:79:54:78:24:e7:2f: 1b:82:2e:28:e9:a3:1e:4a:e1:e0:47:9a:a9:4e:0a: 53:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:55:63:78:78:0F:8B:D4:EA:09:7C:76:85:1E:47:D7:91:E4:6B:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/34e401f8-32c5-3231-9ba4-e330e23d0bfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 152.69.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:61:0e:1e:88:85:a0:14:2c:4b:6f:bd:18:38:03:76:95:10: 99:36:86:e5:9d:1e:75:4c:25:60:19:f2:d4:f3:49:c9:a6:76: 0d:f3:57:5d:1b:7c:60:44:5b:af:35:cd:ff:21:78:ce:fd:55: 43:b4:42:11:f8:16:90:d2:b3:4f:52:7f:09:5f:a9:4d:66:99: 47:eb:d0:84:3e:53:45:22:ba:e2:ee:cc:15:8d:da:09:96:49: 21:27:33:bd:9a:75:51:d6:d3:50:e8:60:1b:49:aa:a8:37:2b: b0:44:fd:c8:96:b5:cf:38:ce:0b:49:42:1a:4a:f7:9a:41:e1: 55:11:87:6a:16:a7:52:09:a4:da:61:95:1e:86:70:c3:ae:97: 01:40:eb:2d:03:8d:35:f8:d6:75:67:ac:73:70:85:5a:38:6c: ac:c8:fc:e9:79:b6:eb:f8:83:c4:4a:1c:47:c8:bc:e2:ef:ca: 0d:e7:8d:a6:69:9f:e6:c9:ec:fa:58:d5:85:e1:d5:ac:8c:7c: 04:96:e4:05:a3:e3:a9:6e:7b:29:30:93:e1:e3:45:88:39:1e: 6d:e5:48:7c:ad:77:7a:3d:1f:3e:36:04:3c:3d:1f:31:f6:40: 41:54:a5:44:0c:8c:7a:00:4f:62:87:53:7f:e3:4b:aa:c5:de: d1:ee:ca:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mqBLC5UPqSIbQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk YmM4OWI0MzgtMDEzOS00ZjZkLTkwNGItMDkwMzBmNWIxMmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFlYNa9nkudb9TUeZspDywkQ0dLjx6/aQx89 yiGUDfiHefDRrfFhpcrNa6LYKsYzFNv2Cox5KpU2TH9T7dxJ+C+cAlCnY9dx195R Ya51nQD6sbr1y7bLqbt/rLu+4ORnS/aQvglDHUrdzqOAjhVfJKCK/HSlQ5J0k7Cy ZK2/vbR7ps7JH/e+utBFv7DXTLZvjPh3z79F2qugsv2uxTu3R1srAMhfvvrDwOOI quftJcJmYXIciqa0PxJ60Nwe7ineyCCeIUOI3pVZSTV39oeVZ5BTxTLGKEtNRGwE z+WF8ULFHM9QHeHqm8p5VHgk5y8bgi4o6aMeSuHgR5qpTgpTewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhVY3h4D4vU6gl8doUeR9eR5GvqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMzRlNDAxZjgtMzJjNS0z MjMxLTliYTQtZTMzMGUyM2QwYmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmEXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChhDh6IhaAULEtvvRg4A3aVEJk2huWdHnVMJWAZ8tTzScmmdg3zV10b fGBEW681zf8heM79VUO0QhH4FpDSs09SfwlfqU1mmUfr0IQ+U0UiuuLuzBWN2gmW SSEnM72adVHW01DoYBtJqqg3K7BE/ciWtc84zgtJQhpK95pB4VURh2oWp1IJpNph lR6GcMOulwFA6y0DjTX41nVnrHNwhVo4bKzI/Ol5tuv4g8RKHEfIvOLvyg3njaZp n+bJ7PpY1YXh1ayMfASW5AWj46lueykwk+HjRYg5Hm3lSHytd3o9Hz42BDw9HzH2 QEFUpUQMjHoAT2KHU3/jS6rF3tHuyt0= -----END CERTIFICATE-----Generated at Fri Apr 17 21:24:08 2026 by rpki-client