$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/21b2b489-f05c-305a-86dc-735b2518e433.roa File: 21b2b489-f05c-305a-86dc-735b2518e433.roa (raw, json) Hash identifier: VRCa8t3M4Mj7Smq48xjeKy05VfDjilaW1CI7wty+Il0= Subject key identifier: 17:05:67:C8:CB:00:7A:63:A5:C8:B3:05:45:FB:A2:D0:93:23:7D:66 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D6944FFB19C8A97372F017840 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/21b2b489-f05c-305a-86dc-735b2518e433.roa Signing time: Mon 06 Apr 2026 01:00:24 +0000 ROA not before: Mon 06 Apr 2026 01:00:24 +0000 ROA not after: Sun 05 Jul 2026 01:00:24 +0000 asID: 215728 IP address blocks: 144.225.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:69:44:ff:b1:9c:8a:97:37:2f:01:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 6 01:00:24 2026 GMT Not After : Jul 5 01:00:24 2026 GMT Subject: CN=d65ef0cc-a8a5-419f-ba0e-9a28c75d3c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7b:f2:1b:2c:1d:e3:a9:3a:0f:f8:c0:2e:90: 2e:14:ff:0e:88:c8:29:e9:e3:f9:c5:83:58:7d:4c: ac:d3:3d:61:be:61:c4:1d:6b:b2:97:2d:12:df:c9: db:5f:8a:af:f5:87:ef:0e:f0:43:07:5d:91:13:53: 18:2d:7e:c7:14:a0:01:1c:21:60:27:41:12:94:66: d2:ce:df:d1:7e:f5:82:cf:7e:61:ce:72:93:63:d0: 95:d7:44:ac:25:8b:49:bd:be:c5:87:69:05:ed:5a: 9a:28:03:e5:f3:b5:7d:a7:82:1a:2f:ec:88:c9:82: 45:44:5e:cc:fa:c9:d6:04:9e:bb:3c:55:d1:ff:bb: 82:73:08:74:3d:f9:0e:5a:8c:18:ec:a2:32:f6:3a: 56:f0:67:56:d1:bf:1f:bb:62:2a:2c:00:c1:7b:83: 94:11:c2:1b:da:3d:d0:c5:db:57:37:32:19:3e:af: c7:86:71:fe:71:b3:f0:bb:3b:c3:59:32:4d:75:30: 46:90:39:b9:ff:34:fa:af:71:83:97:1f:bc:5b:98: ce:6a:7c:1a:4d:61:0e:f5:be:6f:a6:02:46:10:50: ef:a6:c5:de:64:76:a7:c5:2e:d5:ee:78:97:d6:b1: 31:5a:6c:18:62:3f:75:ed:94:8a:bf:49:0d:84:a9: 76:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:05:67:C8:CB:00:7A:63:A5:C8:B3:05:45:FB:A2:D0:93:23:7D:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/21b2b489-f05c-305a-86dc-735b2518e433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 144.225.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:22:f4:26:d1:8b:fe:c2:02:b7:06:3e:70:d1:e6:6c:65:00: 39:76:30:cc:c5:66:6c:5b:d9:76:2c:54:2b:2d:45:70:0b:65: 0d:19:64:ed:bb:7c:be:55:06:f7:84:b3:f2:97:ab:d4:eb:de: 17:41:39:df:de:23:22:98:ba:86:5d:1c:52:65:41:c9:b3:c1: 85:b2:f1:ed:6b:55:89:e6:be:75:85:d9:84:d4:32:4b:5d:e3: fe:86:f7:43:1f:ea:a1:68:78:87:67:53:6f:65:13:3c:c5:db: 9f:09:eb:47:2b:1a:cb:03:0a:b7:5e:33:26:03:9e:ef:94:26: 7e:ee:6d:d7:05:e9:39:78:53:3f:88:4d:0b:0e:80:aa:1c:15: 22:94:49:dc:55:32:a1:0a:7e:9b:75:f2:7f:c5:e7:fa:e4:92: 2f:57:62:e0:b1:98:41:c8:ca:58:8c:eb:cd:1b:52:a1:e9:9b: 9e:95:3a:31:b3:9e:69:a8:53:a8:4a:9b:39:1e:44:c9:ca:17: 84:40:67:8e:0e:55:24:52:12:90:44:52:a0:b9:59:da:be:de: 1e:f5:ff:56:05:f1:37:ad:57:84:5c:81:35:80:ca:21:ec:e1: 84:3f:74:8a:b8:cf:c7:4b:61:3e:ac:62:3e:92:dd:e7:26:cf: be:2f:60:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1pRP+xnIqXNy8BeEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDQwNjAxMDAyNFoXDTI2MDcwNTAxMDAyNFowLzEtMCsGA1UEAxMk ZDY1ZWYwY2MtYThhNS00MTlmLWJhMGUtOWEyOGM3NWQzYzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnvyGywd46k6D/jALpAuFP8OiMgp6eP5xYNY fUys0z1hvmHEHWuyly0S38nbX4qv9YfvDvBDB12RE1MYLX7HFKABHCFgJ0ESlGbS zt/RfvWCz35hznKTY9CV10SsJYtJvb7Fh2kF7VqaKAPl87V9p4IaL+yIyYJFRF7M +snWBJ67PFXR/7uCcwh0PfkOWowY7KIy9jpW8GdW0b8fu2IqLADBe4OUEcIb2j3Q xdtXNzIZPq/HhnH+cbPwuzvDWTJNdTBGkDm5/zT6r3GDlx+8W5jOanwaTWEO9b5v pgJGEFDvpsXeZHanxS7V7niX1rExWmwYYj917ZSKv0kNhKl2RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcFZ8jLAHpjpcizBUX7otCTI31mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjFiMmI0ODktZjA1Yy0z MDVhLTg2ZGMtNzM1YjI1MThlNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkOFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADki9CbRi/7CArcGPnDR5mxlADl2MMzFZmxb2XYsVCstRXALZQ0ZZO27 fL5VBveEs/KXq9Tr3hdBOd/eIyKYuoZdHFJlQcmzwYWy8e1rVYnmvnWF2YTUMktd 4/6G90Mf6qFoeIdnU29lEzzF258J60crGssDCrdeMyYDnu+UJn7ubdcF6Tl4Uz+I TQsOgKocFSKUSdxVMqEKfpt18n/F5/rkki9XYuCxmEHIyliM680bUqHpm56VOjGz nmmoU6hKmzkeRMnKF4RAZ44OVSRSEpBEUqC5Wdq+3h71/1YF8TetV4RcgTWAyiHs 4YQ/dIq4z8dLYT6sYj6S3ecmz74vYMY= -----END CERTIFICATE-----Generated at Mon Apr 13 09:33:07 2026 by rpki-client