$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98/5440638d-caff-3ff8-b2b8-aa4b9f440188.roa File: 5440638d-caff-3ff8-b2b8-aa4b9f440188.roa (raw, json) Hash identifier: GvOOlFoQM0ckJ0DDlU5GWRsZyUv1GFwt4nAywOJx/vs= Subject key identifier: 1C:F3:77:91:02:4B:1A:1B:9E:D5:23:0B:30:C5:FF:FB:F9:37:7F:8F Certificate issuer: /CN=9dd784e6-1b7b-4aa8-8457-76bb387e1d98 Certificate serial: 010D0C9F4328584DA3E55BEF7D81C99DBE94E500 Authority key identifier: 09:E8:A2:01:3A:79:5E:3E:CB:23:2C:79:AF:64:B9:6A:85:E3:A1:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98/5440638d-caff-3ff8-b2b8-aa4b9f440188.roa Signing time: Mon 27 Apr 2026 01:00:24 +0000 ROA not before: Mon 27 Apr 2026 01:00:24 +0000 ROA not after: Sun 26 Jul 2026 01:00:24 +0000 asID: 25826 IP address blocks: 137.122.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98/9dd784e6-1b7b-4aa8-8457-76bb387e1d98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98/9dd784e6-1b7b-4aa8-8457-76bb387e1d98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:e5:5b:ef:7d:81:c9:9d:be:94:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dd784e6-1b7b-4aa8-8457-76bb387e1d98 Validity Not Before: Apr 27 01:00:24 2026 GMT Not After : Jul 26 01:00:24 2026 GMT Subject: CN=60b9acb3-7a84-423f-b28b-806c0361396c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2b:6b:1c:1b:ee:2b:a6:bb:6b:dc:77:93:d6: 40:88:3a:c7:4a:bb:67:03:98:ed:88:82:17:2a:15: 33:c8:dc:13:66:53:42:4a:50:ed:b9:05:b0:c8:ea: 35:e5:c9:5b:36:97:c1:00:1b:9e:cd:90:81:77:e6: cc:5c:7c:cd:eb:bd:79:3a:fe:14:21:01:a2:ae:1f: 47:f1:f2:5f:14:34:82:57:25:f6:fd:c1:94:90:41: b2:a7:3d:ca:02:78:ad:c6:95:9e:29:87:e3:3b:69: 33:de:cd:40:74:d1:dd:e4:8d:9d:e1:ed:27:da:e5: 69:18:0e:37:4e:33:85:7e:f5:10:70:40:42:97:7c: ea:73:6b:d7:14:e1:87:49:7d:35:21:23:47:a3:b3: 8c:aa:4d:ab:46:9c:e1:a1:51:c5:a3:dd:be:16:ea: c5:32:29:a8:e6:ab:57:af:16:8d:fe:58:9c:af:f5: ea:13:9e:aa:28:28:49:16:9b:b2:ca:c9:07:fa:5c: ac:76:eb:be:4c:62:e8:09:7e:a7:f2:28:34:08:1b: 06:05:44:17:fe:2d:a3:46:3e:81:70:f4:e5:41:df: 64:20:b3:72:b5:f4:de:83:a4:63:00:97:23:6f:98: 0d:10:3d:ec:73:57:6b:06:d0:32:07:b1:88:c0:9b: fc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F3:77:91:02:4B:1A:1B:9E:D5:23:0B:30:C5:FF:FB:F9:37:7F:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98/5440638d-caff-3ff8-b2b8-aa4b9f440188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98/9dd784e6-1b7b-4aa8-8457-76bb387e1d98.crl X509v3 Authority Key Identifier: keyid:09:E8:A2:01:3A:79:5E:3E:CB:23:2C:79:AF:64:B9:6A:85:E3:A1:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98.cer sbgp-ipAddrBlock: critical IPv4: 137.122.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:5a:24:0d:dc:7e:8b:f8:94:f2:db:3a:6a:1f:a1:e0:3d:16: f9:06:61:84:08:86:a3:1d:4e:93:6c:ef:ad:c7:36:78:b3:93: 6a:c9:4b:86:81:c8:6d:82:8e:48:df:8e:af:e4:e1:75:9e:ae: 1f:73:54:f4:75:f6:68:02:5c:ea:13:fc:e6:9e:cc:51:ce:92: 8b:f6:3e:5d:e6:71:bc:6f:ab:87:fa:27:77:79:bb:7a:12:7f: 2a:2b:de:66:7d:b8:69:41:fe:2e:62:2f:63:ef:b2:01:a8:35: c9:e8:f2:3f:11:c3:24:91:bb:9a:d5:77:c7:0d:11:36:c2:35: 64:45:0d:04:a1:a4:1e:21:c1:7f:4f:7e:e5:ed:99:78:00:6d: 56:6f:18:a9:54:75:66:ac:12:62:b7:3e:1c:83:b5:aa:ee:4e: 97:5b:23:01:0c:bf:7e:fe:f9:cc:2f:41:f2:a5:01:1f:80:f5: 7b:b4:76:22:60:12:c1:0e:c7:11:5e:96:a8:48:6a:0e:d8:1b: 35:23:f4:82:1d:0a:b0:5b:fc:14:b3:88:40:f3:ed:76:36:9e: bb:11:74:8c:50:66:4f:9b:f4:f9:73:88:79:d8:b0:58:29:15: e9:14:37:56:53:ba:84:9d:96:fe:e6:82:14:52:88:89:94:f9: 6c:4b:e1:e5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2j5VvvfYHJnb6U5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRkNzg0ZTYtMWI3Yi00YWE4LTg0NTctNzZiYjM4N2Ux ZDk4MB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk NjBiOWFjYjMtN2E4NC00MjNmLWIyOGItODA2YzAzNjEzOTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCtrHBvuK6a7a9x3k9ZAiDrHSrtnA5jtiIIX KhUzyNwTZlNCSlDtuQWwyOo15clbNpfBABuezZCBd+bMXHzN6715Ov4UIQGirh9H 8fJfFDSCVyX2/cGUkEGypz3KAnitxpWeKYfjO2kz3s1AdNHd5I2d4e0n2uVpGA43 TjOFfvUQcEBCl3zqc2vXFOGHSX01ISNHo7OMqk2rRpzhoVHFo92+FurFMimo5qtX rxaN/licr/XqE56qKChJFpuyyskH+lysduu+TGLoCX6n8ig0CBsGBUQX/i2jRj6B cPTlQd9kILNytfTeg6RjAJcjb5gNED3sc1drBtAyB7GIwJv8OwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBzzd5ECSxobntUjCzDF//v5N3+PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85ZGQ3 ODRlNi0xYjdiLTRhYTgtODQ1Ny03NmJiMzg3ZTFkOTgvNTQ0MDYzOGQtY2FmZi0z ZmY4LWIyYjgtYWE0YjlmNDQwMTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOWRkNzg0ZTYtMWI3Yi00YWE4LTg0 NTctNzZiYjM4N2UxZDk4LzlkZDc4NGU2LTFiN2ItNGFhOC04NDU3LTc2YmIzODdl MWQ5OC5jcmwwHwYDVR0jBBgwFoAUCeiiATp5Xj7LIyx5r2S5aoXjoTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85ZGQ3ODRlNi0xYjdiLTRhYTgtODQ1Ny03NmJi Mzg3ZTFkOTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiXowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAKVokDdx+i/iU8ts6ah+h4D0W+QZhhAiGox1Ok2zvrcc2eLOTaslLhoHI bYKOSN+Or+ThdZ6uH3NU9HX2aAJc6hP85p7MUc6Si/Y+XeZxvG+rh/ond3m7ehJ/ KiveZn24aUH+LmIvY++yAag1yejyPxHDJJG7mtV3xw0RNsI1ZEUNBKGkHiHBf09+ 5e2ZeABtVm8YqVR1ZqwSYrc+HIO1qu5Ol1sjAQy/fv75zC9B8qUBH4D1e7R2ImAS wQ7HEV6WqEhqDtgbNSP0gh0KsFv8FLOIQPPtdjaeuxF0jFBmT5v0+XOIediwWCkV 6RQ3VlO6hJ2W/uaCFFKIiZT5bEvh5Q== -----END CERTIFICATE-----Generated at Wed Apr 29 20:28:06 2026 by rpki-client