$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5a7ffe7a-0375-3aa7-af20-c1fe29671927.roa File: 5a7ffe7a-0375-3aa7-af20-c1fe29671927.roa (raw, json) Hash identifier: qJMoIZH9PTkL4c1q8aFyzXEiIfEJBxWQ8UF9MLEFCA0= Subject key identifier: 2F:47:AD:A7:7E:DE:91:BE:19:52:F1:EB:85:F5:DC:73:01:7E:5A:C0 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D6AAA5DA63465D94F262776A0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5a7ffe7a-0375-3aa7-af20-c1fe29671927.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 401152 IP address blocks: 205.186.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:5d:a6:34:65:d9:4f:26:27:76:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=a8c45b26-e1c5-4bf3-b644-f6749520e6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a0:42:c2:1e:f0:f9:53:df:4a:9b:6e:36:f8: 09:40:81:24:c7:7a:af:25:da:d6:0a:98:b7:62:34: 0b:20:25:a1:e0:bd:d7:1f:ae:29:57:29:4d:cc:8e: a1:6b:6a:b1:ba:11:66:3e:4a:d6:bb:b0:b6:0d:01: 72:f8:d5:6b:df:fb:fe:9f:54:96:e7:ae:cd:56:c7: d9:b1:0e:00:07:99:a1:dd:b3:6e:ac:71:e3:60:00: d9:c2:d7:fe:e7:6e:53:7b:46:51:c9:3c:aa:48:39: 16:0c:99:90:65:c4:1a:63:f5:3b:4f:cf:4d:29:76: ad:79:b7:54:b6:f8:51:84:07:ff:58:ce:13:10:da: e6:69:f2:1d:4a:20:4d:8d:bf:da:91:dd:5f:84:42: 8c:4a:21:f5:93:7e:39:dc:17:5c:b4:6e:7f:a3:b3: d6:7f:35:d0:11:5f:c2:b7:6c:03:24:0e:4f:2b:e5: 2a:6e:9a:5b:21:f7:89:5e:10:af:78:d2:66:41:33: 7f:a9:6d:78:e0:9f:36:00:96:5f:38:c6:af:7a:08: 21:34:33:5f:d4:30:a8:0c:f7:eb:31:09:78:87:97: f1:86:e2:54:a6:47:ae:15:d4:8d:4d:5c:a0:f9:53: 80:47:c6:54:2e:c5:2f:5c:51:01:2e:00:64:3f:44: 79:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:47:AD:A7:7E:DE:91:BE:19:52:F1:EB:85:F5:DC:73:01:7E:5A:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5a7ffe7a-0375-3aa7-af20-c1fe29671927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 205.186.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:57:ce:5d:52:e5:8c:84:3c:b0:1d:a0:93:a9:9c:e4:9e:34: c5:6c:cc:b4:b6:97:77:aa:94:aa:66:a0:66:65:9b:2b:50:ec: d5:24:bd:ad:04:7b:5e:4d:77:47:4c:cd:11:7b:a2:f9:c9:c9: 19:2f:5f:d3:3d:1c:3f:d9:bb:f0:42:b4:30:a3:b5:f7:37:75: 52:f4:43:20:20:23:0e:29:09:f1:40:cd:0d:e1:a3:83:17:dc: 89:5a:3f:a3:0b:73:8e:e8:ad:fe:66:6b:88:39:ff:e1:a1:c2: 47:4d:85:55:6f:55:7a:45:46:ea:b8:46:06:a2:31:fe:cd:33: 73:5d:20:f2:38:0f:68:f6:11:5a:55:ee:c3:9f:36:b3:a1:0a: e6:0a:66:25:05:50:e7:cb:f3:8f:77:41:6e:ce:e0:08:19:6e: 46:5e:fb:f4:d4:a0:64:e3:79:a5:91:77:1b:bb:d9:77:83:ff: 98:6d:68:b1:28:d2:3c:57:12:c4:48:7e:70:fc:ba:50:f0:72: e7:dc:d4:42:7a:6f:d2:3e:32:7b:61:26:94:cb:de:20:d9:e9: 90:96:bb:ed:02:a1:69:f9:18:b9:8c:23:5d:b4:36:b6:05:06: 4e:cd:84:6b:32:d1:cd:55:32:62:bf:d4:54:f8:ef:d5:46:26: ee:3b:f8:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qql2mNGXZTyYndqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk YThjNDViMjYtZTFjNS00YmYzLWI2NDQtZjY3NDk1MjBlNmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6BCwh7w+VPfSptuNvgJQIEkx3qvJdrWCpi3 YjQLICWh4L3XH64pVylNzI6ha2qxuhFmPkrWu7C2DQFy+NVr3/v+n1SW567NVsfZ sQ4AB5mh3bNurHHjYADZwtf+525Te0ZRyTyqSDkWDJmQZcQaY/U7T89NKXatebdU tvhRhAf/WM4TENrmafIdSiBNjb/akd1fhEKMSiH1k3453BdctG5/o7PWfzXQEV/C t2wDJA5PK+UqbppbIfeJXhCveNJmQTN/qW144J82AJZfOMavegghNDNf1DCoDPfr MQl4h5fxhuJUpkeuFdSNTVyg+VOAR8ZULsUvXFEBLgBkP0R5bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9Hrad+3pG+GVLx64X13HMBflrAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNWE3ZmZlN2EtMDM3NS0z YWE3LWFmMjAtYzFmZTI5NjcxOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzbp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRXzl1S5YyEPLAdoJOpnOSeNMVszLS2l3eqlKpmoGZlmytQ7NUkva0E e15Nd0dMzRF7ovnJyRkvX9M9HD/Zu/BCtDCjtfc3dVL0QyAgIw4pCfFAzQ3ho4MX 3IlaP6MLc47orf5ma4g5/+GhwkdNhVVvVXpFRuq4RgaiMf7NM3NdIPI4D2j2EVpV 7sOfNrOhCuYKZiUFUOfL8493QW7O4AgZbkZe+/TUoGTjeaWRdxu72XeD/5htaLEo 0jxXEsRIfnD8ulDwcufc1EJ6b9I+MnthJpTL3iDZ6ZCWu+0CoWn5GLmMI120NrYF Bk7NhGsy0c1VMmK/1FT479VGJu47+LA= -----END CERTIFICATE-----Generated at Mon Apr 13 09:32:33 2026 by rpki-client