$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/b25ed3f3-466e-31d5-83b2-0b9782a77b54.roa File: b25ed3f3-466e-31d5-83b2-0b9782a77b54.roa (raw, json) Hash identifier: Q2raAc2VJr0+iry2SEXjQT+2OSMhrGVRJEwROS3lLLQ= Subject key identifier: 56:98:AF:58:53:33:5E:A2:4F:A5:12:02:84:95:EC:E0:12:3A:F4:B0 Certificate issuer: /CN=559253fe-8b4f-48f6-9fe1-109df6bb3251 Certificate serial: 010D0C9F4328584DD625BB45CB64C8B10E238980 Authority key identifier: F9:D3:AA:04:E7:49:4F:99:FF:61:B0:9D:59:8B:71:B9:00:F1:53:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/b25ed3f3-466e-31d5-83b2-0b9782a77b54.roa Signing time: Fri 15 May 2026 01:00:24 +0000 ROA not before: Fri 15 May 2026 01:00:24 +0000 ROA not after: Thu 13 Aug 2026 01:00:24 +0000 asID: 10122 IP address blocks: 78.138.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 19 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d6:25:bb:45:cb:64:c8:b1:0e:23:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=559253fe-8b4f-48f6-9fe1-109df6bb3251 Validity Not Before: May 15 01:00:24 2026 GMT Not After : Aug 13 01:00:24 2026 GMT Subject: CN=45e69db2-1cd5-440a-a8c8-7f526155e529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3f:84:fa:bb:8a:a3:1e:0a:e4:37:79:b9:47: b9:96:b8:44:df:b6:66:b5:39:d6:d1:7b:5c:8a:d0: 86:26:e3:ef:92:66:72:d3:77:c9:01:c0:fd:1f:b0: 35:cc:19:e2:fb:16:b2:22:2b:94:6c:d5:d3:0f:5c: 33:81:9e:fe:9b:67:38:cf:b3:65:11:ae:41:fb:d1: 39:b0:69:5d:52:4e:a4:ed:0e:19:d9:e0:2e:35:9b: 8b:96:8d:26:d1:f6:20:05:cd:f3:fd:02:f0:76:c3: 0c:f1:38:bc:2e:7a:92:18:d4:9e:2e:56:27:e1:a8: 04:af:6e:a2:1b:e9:6b:20:47:4b:de:94:b6:76:c5: 78:8a:67:68:a9:33:25:e5:f4:26:02:b7:08:2b:ba: 84:50:ae:3e:bf:85:8a:80:9b:06:03:9b:6c:d6:09: f9:12:df:7a:2f:fe:98:3a:9f:d3:e3:03:70:11:26: d7:15:51:cf:9b:53:eb:36:ef:31:25:05:a5:cb:11: ab:d1:ba:55:88:d6:bd:ef:cf:ec:69:d1:45:dd:9c: 0c:86:da:5c:be:db:bf:08:7f:fb:fc:ea:f9:e4:a5: 38:c6:47:6d:57:f3:38:f6:44:80:5f:97:e8:d6:19: bd:d3:9b:04:f9:28:66:dd:3a:94:08:c3:01:67:67: 2e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:98:AF:58:53:33:5E:A2:4F:A5:12:02:84:95:EC:E0:12:3A:F4:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/b25ed3f3-466e-31d5-83b2-0b9782a77b54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.crl X509v3 Authority Key Identifier: keyid:F9:D3:AA:04:E7:49:4F:99:FF:61:B0:9D:59:8B:71:B9:00:F1:53:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer sbgp-ipAddrBlock: critical IPv4: 78.138.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:7b:3e:83:53:b4:17:ed:aa:1e:99:8d:2f:b2:af:e9:b7:a9: 93:39:4e:3f:32:32:1d:0d:3e:45:02:10:48:97:a5:7a:50:4a: 69:d3:41:6d:47:68:82:fb:bb:09:6b:d8:28:d4:c9:af:23:91: 05:b1:d2:92:4f:32:e3:f9:67:62:ec:a4:b3:84:f4:c6:6c:98: fe:4b:5d:07:22:25:7d:dd:f0:0e:9e:f7:b5:0b:6c:93:fa:e9: 86:43:79:e5:cd:07:6e:d0:92:a4:9b:04:90:92:40:91:05:47: 22:59:b9:dd:58:d1:a2:df:ad:d9:5a:64:bc:60:8a:98:01:cf: 98:cf:7d:85:5d:45:48:1c:1e:a3:47:7d:f8:20:69:7f:1e:c0: 08:3d:c9:bb:64:04:7b:4a:a4:1d:45:95:85:5d:72:bb:0d:28: 09:85:ae:68:e1:83:58:c7:ef:83:05:9d:76:91:41:9d:dd:67: da:d3:3c:91:3a:06:67:bc:03:0b:04:ea:37:36:87:f5:03:15: 53:22:91:e7:cc:64:df:3a:21:b4:55:d5:f0:b0:3b:e4:63:53: 94:3c:b5:72:34:1c:85:9f:f4:ad:45:2f:17:fe:53:87:13:d1: e7:06:60:62:8c:7b:03:4e:8b:81:08:77:7d:9c:6f:e7:35:4e: 35:c9:cf:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3WJbtFy2TIsQ4jiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5MjUzZmUtOGI0Zi00OGY2LTlmZTEtMTA5ZGY2YmIz MjUxMB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk NDVlNjlkYjItMWNkNS00NDBhLWE4YzgtN2Y1MjYxNTVlNTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj+E+ruKox4K5Dd5uUe5lrhE37ZmtTnW0Xtc itCGJuPvkmZy03fJAcD9H7A1zBni+xayIiuUbNXTD1wzgZ7+m2c4z7NlEa5B+9E5 sGldUk6k7Q4Z2eAuNZuLlo0m0fYgBc3z/QLwdsMM8Ti8LnqSGNSeLlYn4agEr26i G+lrIEdL3pS2dsV4imdoqTMl5fQmArcIK7qEUK4+v4WKgJsGA5ts1gn5Et96L/6Y Op/T4wNwESbXFVHPm1PrNu8xJQWlyxGr0bpViNa978/sadFF3ZwMhtpcvtu/CH/7 /Or55KU4xkdtV/M49kSAX5fo1hm905sE+Shm3TqUCMMBZ2curQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaYr1hTM16iT6USAoSV7OASOvSwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NTky NTNmZS04YjRmLTQ4ZjYtOWZlMS0xMDlkZjZiYjMyNTEvYjI1ZWQzZjMtNDY2ZS0z MWQ1LTgzYjItMGI5NzgyYTc3YjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTU5MjUzZmUtOGI0Zi00OGY2LTlm ZTEtMTA5ZGY2YmIzMjUxLzU1OTI1M2ZlLThiNGYtNDhmNi05ZmUxLTEwOWRmNmJi MzI1MS5jcmwwHwYDVR0jBBgwFoAU+dOqBOdJT5n/YbCdWYtxuQDxUwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81NTkyNTNmZS04YjRmLTQ4ZjYtOWZlMS0xMDlk ZjZiYjMyNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATooxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAId7PoNTtBftqh6ZjS+yr+m3qZM5Tj8yMh0NPkUCEEiXpXpQSmnTQW1H aIL7uwlr2CjUya8jkQWx0pJPMuP5Z2LspLOE9MZsmP5LXQciJX3d8A6e97ULbJP6 6YZDeeXNB27QkqSbBJCSQJEFRyJZud1Y0aLfrdlaZLxgipgBz5jPfYVdRUgcHqNH ffggaX8ewAg9ybtkBHtKpB1FlYVdcrsNKAmFrmjhg1jH74MFnXaRQZ3dZ9rTPJE6 Bme8AwsE6jc2h/UDFVMikefMZN86IbRV1fCwO+RjU5Q8tXI0HIWf9K1FLxf+U4cT 0ecGYGKMewNOi4EId32cb+c1TjXJz/Q= -----END CERTIFICATE-----Generated at Sat May 16 19:32:10 2026 by rpki-client