$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/409cf6f8-483a-3c61-a454-9e18624649fa.roa File: 409cf6f8-483a-3c61-a454-9e18624649fa.roa (raw, json) Hash identifier: 6oXurARF1WOVV+3msa77tRQQ/6ucSe8HGjpQtezETyw= Subject key identifier: 92:49:90:DF:0B:DE:70:6A:9E:5A:2A:AA:25:2F:AE:5D:E3:CE:22:15 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D8EF571021D02F4944DD5E000 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/409cf6f8-483a-3c61-a454-9e18624649fa.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 393560 IP address blocks: 168.143.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:71:02:1d:02:f4:94:4d:d5:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=0da4bce7-2223-44fd-82c0-6ebbf2814d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:96:2c:4c:69:e7:3f:cb:15:ce:9b:c6:a9:7f: 62:3b:87:c8:17:b9:c7:74:9a:25:b7:d7:4c:fe:78: 37:c5:b7:4b:33:d2:ff:9d:42:c5:fa:d0:bc:76:10: 3d:35:34:e8:df:8b:eb:24:56:54:7d:a8:f6:fa:19: 46:09:1f:43:c4:bd:86:58:46:5a:ef:6e:39:ce:0f: f2:87:8c:de:73:a9:44:7c:8c:54:55:02:d0:8d:41: 64:4a:5e:cb:69:32:dd:cb:d9:25:ff:44:a0:2f:14: ee:74:f3:3e:f1:fd:60:74:d6:ed:26:78:4d:2b:62: 18:a7:7c:c3:44:0f:ad:03:6c:8a:3e:05:be:d2:91: 3e:85:fd:c9:db:c9:2d:7c:f7:7d:03:f8:62:5a:a6: d0:f1:9b:a8:02:43:ef:32:45:e9:c2:1d:92:a7:bd: c2:8b:ee:0c:43:b6:ab:a4:1a:57:1c:29:a6:da:04: 3e:27:3a:f8:39:32:24:cc:6c:23:39:ec:c3:41:34: 90:1c:8e:43:9c:c9:ee:0b:da:38:08:11:9e:9e:52: c3:74:3e:83:6e:c1:7b:e7:b4:dc:89:d7:45:bf:e9: d2:dd:92:53:62:68:b1:94:e0:e4:ee:03:4c:28:92: 73:9f:41:8c:95:1a:9c:59:b9:2e:4d:c6:ba:e9:46: 7b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:49:90:DF:0B:DE:70:6A:9E:5A:2A:AA:25:2F:AE:5D:E3:CE:22:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/409cf6f8-483a-3c61-a454-9e18624649fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 168.143.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:17:0c:59:84:89:99:d4:7b:5e:5c:ef:c9:de:a4:d4:c1:5a: 0c:a2:28:f1:92:b4:c2:22:c6:cf:3f:47:2c:6b:2b:79:08:a7: a0:bf:69:1d:a5:15:2f:dc:7e:11:b4:f0:14:b0:eb:b7:04:06: 02:bd:d4:09:35:8a:15:c2:c7:f5:36:bf:ee:4f:b2:7c:34:7b: 56:31:d9:10:58:da:d1:9e:73:9c:47:d0:66:84:74:02:60:fe: 69:6c:c9:87:b8:f5:09:c7:ac:dd:87:61:6c:d0:33:c7:70:be: fe:7c:ea:2a:ad:9a:6e:eb:65:cb:ab:51:ef:86:5e:8a:c5:ef: da:a6:82:3a:b9:6d:00:d4:cd:0e:1e:7b:1d:77:38:04:e6:db: 08:d8:f2:79:f4:b6:87:0b:70:ef:f4:7e:fc:f5:29:41:ce:94: 4f:b1:9d:5e:46:c4:02:ac:a9:1e:63:47:68:78:7e:9d:35:be: a7:f6:d9:a0:9b:dc:e2:8c:5a:ad:60:a1:7b:ff:0b:3d:e4:60: af:21:3d:e1:40:29:ff:f8:1b:6c:70:1b:f8:19:03:23:c3:10: 04:a9:7d:3c:dd:04:e1:8b:b5:a3:8d:64:49:97:be:18:4d:a6: f8:08:07:6a:6e:74:80:7f:a1:b4:b9:12:d9:10:68:b2:ed:30: 81:1f:41:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9XECHQL0lE3V4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MGRhNGJjZTctMjIyMy00NGZkLTgyYzAtNmViYmYyODE0ZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85YsTGnnP8sVzpvGqX9iO4fIF7nHdJolt9dM /ng3xbdLM9L/nULF+tC8dhA9NTTo34vrJFZUfaj2+hlGCR9DxL2GWEZa7245zg/y h4zec6lEfIxUVQLQjUFkSl7LaTLdy9kl/0SgLxTudPM+8f1gdNbtJnhNK2IYp3zD RA+tA2yKPgW+0pE+hf3J28ktfPd9A/hiWqbQ8ZuoAkPvMkXpwh2Sp73Ci+4MQ7ar pBpXHCmm2gQ+Jzr4OTIkzGwjOezDQTSQHI5DnMnuC9o4CBGenlLDdD6DbsF757Tc iddFv+nS3ZJTYmixlODk7gNMKJJzn0GMlRqcWbkuTca66UZ76QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJJkN8L3nBqnloqqiUvrl3jziIVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNDA5Y2Y2ZjgtNDgzYS0z YzYxLWE0NTQtOWUxODYyNDY0OWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqI/+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgXDFmEiZnUe15c78nepNTBWgyiKPGStMIixs8/RyxrK3kIp6C/aR2l FS/cfhG08BSw67cEBgK91Ak1ihXCx/U2v+5Psnw0e1Yx2RBY2tGec5xH0GaEdAJg /mlsyYe49QnHrN2HYWzQM8dwvv586iqtmm7rZcurUe+GXorF79qmgjq5bQDUzQ4e ex13OATm2wjY8nn0tocLcO/0fvz1KUHOlE+xnV5GxAKsqR5jR2h4fp01vqf22aCb 3OKMWq1goXv/Cz3kYK8hPeFAKf/4G2xwG/gZAyPDEASpfTzdBOGLtaONZEmXvhhN pvgIB2pudIB/obS5EtkQaLLtMIEfQfk= -----END CERTIFICATE-----Generated at Wed Apr 22 02:18:49 2026 by rpki-client