$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/73be8573-d1ea-397e-a168-f5f7d625c273.roa File: 73be8573-d1ea-397e-a168-f5f7d625c273.roa (raw, json) Hash identifier: 7cO06bJKHUvJSk/n8L/X/YqMt6BvmcMiWF1Hh2PFTd4= Subject key identifier: E0:79:E8:4F:49:2B:31:B1:2C:DF:13:97:B3:91:A8:68:4D:1C:17:6F Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584D8AC54624D558726926F9CE80 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/73be8573-d1ea-397e-a168-f5f7d625c273.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 395382 IP address blocks: 162.248.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:46:24:d5:58:72:69:26:f9:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=c242ca33-0034-4cd0-b551-0f55f8f863dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1b:5a:b2:a4:3c:c1:80:9f:1a:c2:d9:b9:40: d6:d4:69:d8:d5:66:71:fc:6a:82:ee:ba:c4:84:f1: d4:4a:b7:e3:4e:e4:6b:f2:5a:9c:cc:49:2b:be:b9: df:67:38:28:c0:08:43:ba:d6:f1:6d:15:5b:e5:fe: 0b:b7:1f:3a:cd:0b:c9:61:68:69:c9:69:d9:b8:3e: 52:c4:ac:60:1f:71:ee:1c:5d:1a:aa:ce:45:ca:99: 79:7a:de:b8:e7:72:5b:f5:6e:b2:68:7b:bd:80:5d: 3d:a5:6b:b8:82:fd:3a:f4:4b:1c:4c:e8:28:96:1e: de:85:d3:99:cb:80:d9:b5:66:06:7e:d6:49:ca:28: 79:25:7a:a2:0e:7d:44:37:43:dc:0c:97:d8:50:01: 3e:4f:35:de:73:30:1e:74:33:b5:11:f5:c1:1b:d1: f7:4a:9b:c3:85:0b:03:36:b3:93:98:b3:c8:17:3e: 45:02:fd:de:47:f9:de:ae:ac:44:24:eb:2c:5c:70: 9c:26:20:10:15:e3:4f:a7:02:33:fe:d4:a9:a1:f3: e7:88:a3:fc:0c:96:d8:7d:b4:ea:c2:42:da:bb:5f: 2a:5e:7f:87:45:01:33:30:0a:2c:1e:84:ea:4f:e6: 3e:e8:94:4e:aa:5e:3a:4f:25:82:c1:5e:52:7e:ac: e4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:79:E8:4F:49:2B:31:B1:2C:DF:13:97:B3:91:A8:68:4D:1C:17:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/73be8573-d1ea-397e-a168-f5f7d625c273.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 162.248.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:7e:d7:e9:5d:4c:2c:35:cb:9e:c6:91:cc:e1:63:ac:f7:58: 80:88:d2:c0:90:f0:40:86:29:b8:93:b8:d7:cf:f7:85:1f:f1: 90:f9:5f:bf:6b:f6:0b:d7:d7:c9:38:22:e9:62:0b:d4:44:f2: 24:09:97:36:96:62:61:21:0d:45:4d:aa:02:63:e9:fa:17:60: 2f:c8:ed:ff:15:6a:6b:68:2a:b2:c5:aa:10:b7:15:e8:47:99: 6c:e8:33:21:47:3c:a1:6c:ee:11:8c:da:21:36:4c:fb:91:8c: da:94:81:2a:d8:31:a1:c5:ef:c4:8a:5d:ad:08:a5:eb:82:00: cd:44:b9:3c:91:c4:20:fc:86:f3:12:2a:bb:ab:b9:b1:c3:b7: 88:de:fc:ba:7c:b0:be:e4:9d:54:d7:10:9d:27:eb:40:30:c3: 7f:23:e9:6e:f1:a5:93:70:9a:0e:d5:bb:bc:08:e1:03:de:9a: 84:aa:89:40:df:ec:0c:56:22:54:07:fd:d3:1b:e0:9a:e1:1b: 43:99:f1:66:75:a5:4b:2a:8f:d7:8a:05:b1:71:88:d5:36:49: a2:5d:a2:c0:49:d8:5b:84:77:82:07:5b:16:5b:5d:bb:9d:e8: f0:2c:44:6c:76:e2:bb:db:6c:1c:2a:fa:a3:cc:5c:cc:e9:f0: 33:46:e2:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxUYk1VhyaSb5zoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk YzI0MmNhMzMtMDAzNC00Y2QwLWI1NTEtMGY1NWY4Zjg2M2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhtasqQ8wYCfGsLZuUDW1GnY1WZx/GqC7rrE hPHUSrfjTuRr8lqczEkrvrnfZzgowAhDutbxbRVb5f4Ltx86zQvJYWhpyWnZuD5S xKxgH3HuHF0aqs5Fypl5et6453Jb9W6yaHu9gF09pWu4gv069EscTOgolh7ehdOZ y4DZtWYGftZJyih5JXqiDn1EN0PcDJfYUAE+TzXeczAedDO1EfXBG9H3SpvDhQsD NrOTmLPIFz5FAv3eR/nerqxEJOssXHCcJiAQFeNPpwIz/tSpofPniKP8DJbYfbTq wkLau18qXn+HRQEzMAosHoTqT+Y+6JROql46TyWCwV5SfqzkDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOB56E9JKzGxLN8Tl7ORqGhNHBdvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvNzNiZTg1NzMtZDFlYS0z OTdlLWExNjgtZjVmN2Q2MjVjMjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovj5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1+1+ldTCw1y57GkczhY6z3WICI0sCQ8ECGKbiTuNfP94Uf8ZD5X79r 9gvX18k4IuliC9RE8iQJlzaWYmEhDUVNqgJj6foXYC/I7f8VamtoKrLFqhC3FehH mWzoMyFHPKFs7hGM2iE2TPuRjNqUgSrYMaHF78SKXa0IpeuCAM1EuTyRxCD8hvMS KrurubHDt4je/Lp8sL7knVTXEJ0n60Aww38j6W7xpZNwmg7Vu7wI4QPemoSqiUDf 7AxWIlQH/dMb4JrhG0OZ8WZ1pUsqj9eKBbFxiNU2SaJdosBJ2FuEd4IHWxZbXbud 6PAsRGx24rvbbBwq+qPMXMzp8DNG4i4= -----END CERTIFICATE-----Generated at Wed Apr 22 08:34:00 2026 by rpki-client