$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d8917d7a-33fa-3411-9711-85ce27454a11.roa File: d8917d7a-33fa-3411-9711-85ce27454a11.roa (raw, json) Hash identifier: sKNNCrkeC/2569BPpexyRL7kL6M71e8JKV9xUFpz0p8= Subject key identifier: D7:58:E7:02:42:63:BE:FF:7E:AA:D4:11:13:C8:C3:7E:5C:56:49:55 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D764E0DE3D957B78BB2B13C80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d8917d7a-33fa-3411-9711-85ce27454a11.roa Signing time: Fri 10 Apr 2026 17:04:14 +0000 ROA not before: Fri 10 Apr 2026 17:04:14 +0000 ROA not after: Thu 09 Jul 2026 17:04:14 +0000 asID: 14080 IP address blocks: 144.225.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:76:4e:0d:e3:d9:57:b7:8b:b2:b1:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 10 17:04:14 2026 GMT Not After : Jul 9 17:04:14 2026 GMT Subject: CN=0e480ded-85d9-4b52-8451-dac9663e1dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:30:78:a6:e2:05:93:29:a4:4f:cc:d8:54:24: 93:d3:30:36:99:80:49:59:88:c3:92:79:8f:cc:79: e2:9d:e2:f7:10:09:b9:d2:0f:08:7f:e5:2e:62:98: 97:e9:20:9f:2a:aa:73:f1:c2:44:a6:60:a0:77:02: 1d:c4:7a:10:75:04:26:75:e9:c2:17:d8:a3:d4:31: 0e:a5:6e:65:49:4b:1a:c2:0b:c6:d9:a3:62:c9:25: b0:2f:80:cc:5d:71:3f:4e:7d:18:20:86:03:d3:40: f5:97:2b:d7:a6:e0:20:a6:92:81:bb:39:5f:4b:b1: f6:0d:cc:e8:39:35:91:c0:26:f4:48:7a:c1:55:a7: 35:20:6b:33:ed:81:65:cc:ab:cf:7d:c8:ad:de:69: 47:43:ea:3d:c3:ec:c9:fc:16:41:50:86:9f:80:fd: 44:c1:ed:1c:2b:2c:7f:e0:72:e9:aa:36:c9:06:f4: fb:35:89:94:cf:10:17:38:57:3e:52:eb:bf:a1:cd: 52:7b:6c:84:ce:54:ea:2c:b6:f2:84:f4:5e:bb:32: db:90:54:84:8e:f2:68:dc:08:a7:51:5c:1c:5e:0f: 62:35:92:ba:48:9c:ab:8a:11:65:2a:0b:fc:ff:73: 97:5c:95:c9:54:93:03:65:fa:18:1f:ab:3e:d0:76: ee:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:58:E7:02:42:63:BE:FF:7E:AA:D4:11:13:C8:C3:7E:5C:56:49:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d8917d7a-33fa-3411-9711-85ce27454a11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 144.225.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:37:16:cc:d9:bb:08:5a:bb:84:af:d3:ed:70:74:8d:b2:86: f1:e5:8f:bf:cc:69:e2:f3:16:5b:6b:41:4f:6d:30:f1:83:3b: c2:01:ac:54:b3:7f:b8:87:3e:0c:8d:da:c7:83:d1:f2:a7:62: 2d:8c:12:5b:08:9b:21:af:a7:5a:cd:e7:30:86:d3:d6:46:5b: 4a:26:8f:71:82:7c:b7:63:47:24:b6:de:0a:72:66:04:0f:b6: 90:9c:06:3f:9a:1f:eb:4a:17:09:90:42:24:fa:4f:c3:41:78: a5:d1:32:7f:ad:3b:e1:43:cc:b0:13:87:d3:92:4b:96:18:9d: 5c:40:32:ef:f8:97:68:a8:93:ee:9c:34:a2:17:95:01:47:39: 86:f2:5c:dd:a9:36:35:e0:50:f1:89:56:e0:ab:44:ec:e5:f8: 8d:52:d0:54:ac:b4:43:3f:5b:b5:b9:04:60:3d:eb:c5:e4:7f: 92:40:46:08:64:a7:0b:eb:95:e2:77:3e:2a:03:65:4b:3a:24: aa:79:35:21:cb:45:7f:34:c8:f1:01:32:84:13:f6:2e:ac:52: 36:2c:4d:73:96:d2:64:67:33:73:5f:62:c1:f0:3c:e4:46:5c: 14:21:28:1c:50:a4:3d:87:a2:4f:f3:27:a9:15:ef:e3:80:db: 37:c6:90:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE12Tg3j2Ve3i7KxPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDQxMDE3MDQxNFoXDTI2MDcwOTE3MDQxNFowLzEtMCsGA1UEAxMk MGU0ODBkZWQtODVkOS00YjUyLTg0NTEtZGFjOTY2M2UxZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzB4puIFkymkT8zYVCST0zA2mYBJWYjDknmP zHnineL3EAm50g8If+UuYpiX6SCfKqpz8cJEpmCgdwIdxHoQdQQmdenCF9ij1DEO pW5lSUsawgvG2aNiySWwL4DMXXE/Tn0YIIYD00D1lyvXpuAgppKBuzlfS7H2Dczo OTWRwCb0SHrBVac1IGsz7YFlzKvPfcit3mlHQ+o9w+zJ/BZBUIafgP1Ewe0cKyx/ 4HLpqjbJBvT7NYmUzxAXOFc+Uuu/oc1Se2yEzlTqLLbyhPReuzLbkFSEjvJo3Ain UVwcXg9iNZK6SJyrihFlKgv8/3OXXJXJVJMDZfoYH6s+0HbuSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdY5wJCY77/fqrUERPIw35cVklVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDg5MTdkN2EtMzNmYS0z NDExLTk3MTEtODVjZTI3NDU0YTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkOHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABE3FszZuwhau4Sv0+1wdI2yhvHlj7/MaeLzFltrQU9tMPGDO8IBrFSz f7iHPgyN2seD0fKnYi2MElsImyGvp1rN5zCG09ZGW0omj3GCfLdjRyS23gpyZgQP tpCcBj+aH+tKFwmQQiT6T8NBeKXRMn+tO+FDzLATh9OSS5YYnVxAMu/4l2iok+6c NKIXlQFHOYbyXN2pNjXgUPGJVuCrROzl+I1S0FSstEM/W7W5BGA968Xkf5JARghk pwvrleJ3PioDZUs6JKp5NSHLRX80yPEBMoQT9i6sUjYsTXOW0mRnM3NfYsHwPORG XBQhKBxQpD2Hok/zJ6kV7+OA2zfGkE0= -----END CERTIFICATE-----Generated at Mon Apr 13 09:28:34 2026 by rpki-client