$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bda8ce27-56e6-3d97-9663-3771032ea4e9.roa File: bda8ce27-56e6-3d97-9663-3771032ea4e9.roa (raw, json) Hash identifier: O6F1EgaKKl/WYbH6Rfh8Gq9Q9uuJDhn6+pKmFtJLCCE= Subject key identifier: A2:EA:EC:E3:60:53:5F:78:E3:9A:54:26:09:37:86:A5:AA:03:65:06 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D709C76AABF9365201F509A80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bda8ce27-56e6-3d97-9663-3771032ea4e9.roa Signing time: Wed 08 Apr 2026 16:07:22 +0000 ROA not before: Wed 08 Apr 2026 16:07:22 +0000 ROA not after: Tue 07 Jul 2026 16:07:22 +0000 asID: 812 IP address blocks: 144.225.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:9c:76:aa:bf:93:65:20:1f:50:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 8 16:07:22 2026 GMT Not After : Jul 7 16:07:22 2026 GMT Subject: CN=21de2101-aab4-4028-b43e-3a610e96bde4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:58:dd:da:ec:19:09:78:8a:95:b4:b2:48:9a: 4b:c8:70:19:0d:de:07:ae:a1:96:e8:e3:01:70:dd: 8f:b6:a1:07:51:bd:f8:c7:0e:75:de:00:25:6d:25: 9a:d5:93:69:16:5e:c6:6b:7d:94:a6:7e:9d:51:43: 76:a7:b6:ba:d5:fa:2b:4d:6c:2e:0c:4a:f3:08:cc: f8:70:2a:6d:06:c0:47:90:56:72:5a:41:73:4c:c6: 51:3d:6e:01:82:46:37:23:a8:08:bf:c4:a3:6f:48: 02:26:9d:70:e2:8f:fe:41:d5:83:67:55:bf:7d:cf: 08:a5:3b:60:81:45:d1:f3:21:92:ac:da:10:cd:93: 20:c2:ec:06:3d:99:9d:c9:fe:3f:76:29:a3:0b:c4: 21:40:c5:c4:a9:a0:d7:96:4d:cf:4d:b4:09:af:1f: 60:c5:02:8a:c2:de:e9:6e:a3:91:9e:84:51:35:b5: 38:cf:44:8e:96:f3:ba:89:a8:46:f4:c5:de:64:23: d0:5a:d1:17:00:4b:18:a3:d6:c7:83:b7:8f:27:b2: b2:93:06:7c:32:a1:b7:15:2d:13:0f:02:a2:ac:46: a9:e9:b1:a8:2b:44:17:69:4d:33:d6:9c:c7:5b:5a: 4b:a6:60:50:c7:fb:11:2f:0d:60:60:98:0c:5d:40: a6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EA:EC:E3:60:53:5F:78:E3:9A:54:26:09:37:86:A5:AA:03:65:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bda8ce27-56e6-3d97-9663-3771032ea4e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 144.225.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:09:52:04:61:1d:88:2f:71:83:74:48:74:df:e3:ce:2b:81: 09:36:c6:ef:92:85:aa:9b:49:8e:c8:c6:2a:98:e0:5f:e3:db: 88:30:11:b5:91:22:6d:b0:c7:60:0d:ab:0c:c6:87:de:e4:1d: 38:88:28:4d:ab:db:69:29:bb:35:37:97:2c:45:4c:dc:07:90: 73:82:01:7e:83:6d:99:e7:27:ab:90:d5:fe:03:7a:93:54:83: 16:97:95:ba:76:94:9d:a7:aa:72:a5:78:46:a7:9e:d3:1a:5b: c9:57:02:04:34:aa:f8:04:ee:cd:f2:88:85:7d:4a:2b:e8:17: 78:34:1c:af:2d:6c:e1:ca:8d:f0:bc:20:db:be:af:c3:98:09: 61:b8:ae:fd:89:64:49:87:e0:9d:8c:13:bd:78:7c:01:9e:9b: c1:7f:43:e1:fd:06:1f:e2:8a:7a:7a:5e:ca:c3:a8:0c:8b:ec: c6:0e:a1:6a:33:a6:f0:d2:48:d8:15:e1:8a:6d:44:2d:9b:d7: 07:9a:cc:5c:ca:9c:60:7b:d7:7f:34:a0:f2:6c:72:47:e2:fb: db:d6:d2:b0:ca:20:18:52:4e:a7:51:9b:f5:d3:b0:73:c5:c5: ad:e3:48:f7:13:e8:ad:87:36:68:da:31:77:7e:f9:4d:03:72: 51:60:ea:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wnHaqv5NlIB9QmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDQwODE2MDcyMloXDTI2MDcwNzE2MDcyMlowLzEtMCsGA1UEAxMk MjFkZTIxMDEtYWFiNC00MDI4LWI0M2UtM2E2MTBlOTZiZGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFjd2uwZCXiKlbSySJpLyHAZDd4HrqGW6OMB cN2PtqEHUb34xw513gAlbSWa1ZNpFl7Ga32Upn6dUUN2p7a61forTWwuDErzCMz4 cCptBsBHkFZyWkFzTMZRPW4BgkY3I6gIv8Sjb0gCJp1w4o/+QdWDZ1W/fc8IpTtg gUXR8yGSrNoQzZMgwuwGPZmdyf4/dimjC8QhQMXEqaDXlk3PTbQJrx9gxQKKwt7p bqORnoRRNbU4z0SOlvO6iahG9MXeZCPQWtEXAEsYo9bHg7ePJ7KykwZ8MqG3FS0T DwKirEap6bGoK0QXaU0z1pzHW1pLpmBQx/sRLw1gYJgMXUCmQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLq7ONgU19445pUJgk3hqWqA2UGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmRhOGNlMjctNTZlNi0z ZDk3LTk2NjMtMzc3MTAzMmVhNGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkOHdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoJUgRhHYgvcYN0SHTf484rgQk2xu+ShaqbSY7IxiqY4F/j24gwEbWR Im2wx2ANqwzGh97kHTiIKE2r22kpuzU3lyxFTNwHkHOCAX6DbZnnJ6uQ1f4DepNU gxaXlbp2lJ2nqnKleEanntMaW8lXAgQ0qvgE7s3yiIV9SivoF3g0HK8tbOHKjfC8 INu+r8OYCWG4rv2JZEmH4J2ME714fAGem8F/Q+H9Bh/iinp6XsrDqAyL7MYOoWoz pvDSSNgV4YptRC2b1weazFzKnGB71380oPJsckfi+9vW0rDKIBhSTqdRm/XTsHPF xa3jSPcT6K2HNmjaMXd++U0DclFg6lE= -----END CERTIFICATE-----Generated at Mon Apr 13 09:28:20 2026 by rpki-client