$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/b4ebf42e-8c6c-37f5-bf41-9a840b46d68f.roa File: b4ebf42e-8c6c-37f5-bf41-9a840b46d68f.roa (raw, json) Hash identifier: n0lzuMbcBXpGDeyQfNcoNTxxssDkjPulvuVG5ybUOaA= Subject key identifier: 20:5B:D8:51:40:5D:7F:C4:5B:78:34:B6:14:4D:6F:19:A1:B9:29:38 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F4328584DAC45790E9D164BCDBC5362C0 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/b4ebf42e-8c6c-37f5-bf41-9a840b46d68f.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 394285 IP address blocks: 174.137.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:79:0e:9d:16:4b:cd:bc:53:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=1a4f2760-d0da-4f3a-9660-3fb09d69ff5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ef:c0:d9:ec:26:45:d1:d7:26:e5:4f:6d:f0: a9:99:87:a0:7e:10:58:75:f6:fb:f9:41:94:4b:24: ce:84:2a:4b:cf:b1:27:f9:bf:b0:d5:af:ee:26:2b: b6:ed:51:b2:c7:59:ac:3a:c9:9a:20:e1:a0:c4:2c: 82:b6:3c:5d:23:a8:db:c3:e0:4a:95:b4:73:54:34: 0c:98:96:24:bc:6e:13:f1:18:21:e0:88:ba:cf:69: 9f:b5:41:90:a4:0a:4b:57:ae:97:fd:eb:ae:a1:d5: ea:dd:78:bc:1d:ff:08:67:be:9b:51:a9:6f:69:19: 75:df:d2:18:4d:59:4e:6b:80:5e:de:48:4d:94:e6: 3d:aa:95:4d:b9:1e:ac:fc:44:ff:fd:bf:3b:76:eb: 3d:f9:62:83:b3:31:62:35:62:1d:58:5f:e7:13:e3: ce:1a:da:77:24:8c:22:19:be:6c:fa:03:9a:9a:50: 41:38:06:15:1a:ff:e8:56:3b:13:c3:70:6f:70:3a: 2f:ee:db:e3:17:aa:71:66:f0:7e:91:a5:2e:63:20: de:eb:74:58:89:03:bf:28:d9:86:7e:0b:8d:6d:54: 91:af:43:d0:66:11:a6:85:65:df:cc:e1:85:9d:cb: af:dc:be:20:d0:fc:6e:34:1f:50:cd:d2:cb:92:b7: df:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5B:D8:51:40:5D:7F:C4:5B:78:34:B6:14:4D:6F:19:A1:B9:29:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/b4ebf42e-8c6c-37f5-bf41-9a840b46d68f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 174.137.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:83:8e:75:21:a8:50:70:6f:f0:1c:7c:2b:b7:b5:0c:5f:3b: 07:dd:48:45:d7:5b:87:c7:95:60:0d:a5:03:33:7b:82:73:2c: a3:e0:55:51:e8:9d:1d:4f:55:54:4f:2f:c4:e7:42:d9:b6:0d: ba:8f:7f:93:b5:79:a7:d1:4f:ae:b1:00:32:41:10:13:d1:5b: 99:40:97:eb:30:84:87:62:f8:25:93:90:b1:f4:46:87:7f:ca: fb:73:7c:d5:6c:b1:c8:52:14:29:5c:49:5f:89:08:d1:83:e2: 66:19:bb:14:eb:0c:62:89:70:f9:f3:e3:cc:36:94:94:af:7c: 16:b9:f3:4f:39:d2:0c:e0:9d:e2:4f:23:59:ea:69:b9:13:1c: 8a:22:55:c4:4e:15:85:1c:b0:27:04:bc:72:7f:c5:62:91:f3: d7:1b:a7:7e:eb:55:9a:70:e9:d2:59:87:57:ac:c4:30:21:c9: 5f:23:85:5a:c9:3a:3a:e3:50:42:0b:d8:1b:94:a2:96:b7:7d: bd:ed:92:f9:d9:19:84:41:16:e3:50:4d:19:1a:b8:04:88:94: 66:d3:b9:47:d2:e3:a7:fd:d0:fa:7a:46:62:05:3d:6c:55:fc: be:fe:96:b2:cb:1e:d9:b3:ad:d8:79:8f:cd:ed:aa:07:6e:fc: 3a:46:91:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRXkOnRZLzbxTYsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk MWE0ZjI3NjAtZDBkYS00ZjNhLTk2NjAtM2ZiMDlkNjlmZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO/A2ewmRdHXJuVPbfCpmYegfhBYdfb7+UGU SyTOhCpLz7En+b+w1a/uJiu27VGyx1msOsmaIOGgxCyCtjxdI6jbw+BKlbRzVDQM mJYkvG4T8Rgh4Ii6z2mftUGQpApLV66X/euuodXq3Xi8Hf8IZ76bUalvaRl139IY TVlOa4Be3khNlOY9qpVNuR6s/ET//b87dus9+WKDszFiNWIdWF/nE+POGtp3JIwi Gb5s+gOamlBBOAYVGv/oVjsTw3BvcDov7tvjF6pxZvB+kaUuYyDe63RYiQO/KNmG fguNbVSRr0PQZhGmhWXfzOGFncuv3L4g0PxuNB9QzdLLkrff3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBb2FFAXX/EW3g0thRNbxmhuSk4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvYjRlYmY0MmUtOGM2Yy0z N2Y1LWJmNDEtOWE4NDBiNDZkNjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBroliMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeDjnUhqFBwb/AcfCu3tQxfOwfdSEXXW4fHlWANpQMze4JzLKPgVVHo nR1PVVRPL8TnQtm2DbqPf5O1eafRT66xADJBEBPRW5lAl+swhIdi+CWTkLH0Rod/ yvtzfNVsschSFClcSV+JCNGD4mYZuxTrDGKJcPnz48w2lJSvfBa580850gzgneJP I1nqabkTHIoiVcROFYUcsCcEvHJ/xWKR89cbp37rVZpw6dJZh1esxDAhyV8jhVrJ OjrjUEIL2BuUopa3fb3tkvnZGYRBFuNQTRkauASIlGbTuUfS46f90Pp6RmIFPWxV /L7+lrLLHtmzrdh5j83tqgdu/DpGkSc= -----END CERTIFICATE-----Generated at Fri May 1 17:02:11 2026 by rpki-client