$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/4de3ff13-69a0-3064-b65a-2ac9b6b3f672.roa File: 4de3ff13-69a0-3064-b65a-2ac9b6b3f672.roa (raw, json) Hash identifier: xqFQRPw4S5zNeesJSG9u8qe4ANMo4ijHJnoArz6xBjE= Subject key identifier: D7:FA:E6:C5:73:75:A7:75:E4:CD:6C:36:15:1B:1B:C5:C4:36:81:11 Certificate issuer: /CN=a110574b-b0a8-4116-8fba-63e69eba9d92 Certificate serial: 010D0C9F4328584D98BAA653F49D9600363E8B80 Authority key identifier: 85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/4de3ff13-69a0-3064-b65a-2ac9b6b3f672.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 31942 IP address blocks: 143.223.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a6:53:f4:9d:96:00:36:3e:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a110574b-b0a8-4116-8fba-63e69eba9d92 Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=52a255d9-9c6f-49f4-8191-685f532e20a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6a:23:14:ac:50:84:22:2b:ba:c2:95:6c:1c: ba:33:d6:ac:50:af:9a:33:98:76:1c:04:45:91:59: 07:51:8f:97:1c:55:f3:c4:6f:dc:b0:d2:fc:89:e6: 18:0e:1f:a3:e9:56:bd:ae:d0:f8:13:b7:51:a9:4f: 7e:33:98:f0:19:68:9b:f3:99:f8:73:3e:ea:60:73: 3c:16:5f:43:10:62:b8:f4:0c:db:4b:dd:5f:0d:dc: fa:7d:65:54:1b:df:ae:7f:cb:26:44:f3:46:ef:78: cb:c1:ea:c7:41:51:54:d8:33:7e:fd:be:86:2d:06: c5:fc:a2:1f:94:c0:ac:a1:57:a8:71:a8:e5:b1:17: 47:22:93:aa:fc:32:57:ad:61:f0:61:09:e0:60:9d: 37:72:3b:99:94:52:df:54:aa:60:a8:fd:05:5a:03: 5f:72:4f:c9:fc:97:dc:17:00:4e:ff:b2:75:63:82: e6:3a:27:04:02:e3:81:76:5e:ca:75:5e:23:7c:a9: d9:87:94:2c:3a:78:ca:46:73:47:34:28:d0:8e:70: dc:3e:f5:bb:f3:97:db:ed:91:57:87:e3:70:1f:0b: 00:10:97:b9:7a:bb:cd:80:1f:33:b4:73:5a:66:ba: 62:c8:aa:db:dd:9c:f2:72:bb:2d:9a:e0:ae:91:1b: ff:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FA:E6:C5:73:75:A7:75:E4:CD:6C:36:15:1B:1B:C5:C4:36:81:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/4de3ff13-69a0-3064-b65a-2ac9b6b3f672.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl X509v3 Authority Key Identifier: keyid:85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer sbgp-ipAddrBlock: critical IPv4: 143.223.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:5a:dd:5b:61:44:d8:ef:49:34:a3:65:f0:8f:7e:13:ab:95: 61:76:eb:52:2b:5f:7f:85:04:d3:53:96:b8:ce:a9:b2:9d:27: 06:1a:9d:b0:ba:2f:a7:bb:c7:78:52:17:96:40:32:72:47:61: 64:98:d8:0c:2b:0e:53:24:7d:0a:41:94:5f:9f:99:6f:2d:1f: 70:01:22:f6:34:d0:d9:63:e6:42:3c:17:5f:36:48:a1:69:f3: 38:ce:04:d0:92:c7:07:13:de:24:a8:ed:2e:1a:c9:52:7f:3e: 9d:b4:91:30:a1:ef:54:12:b4:c0:29:81:3f:a5:a1:a3:f3:f1: bf:88:77:ab:a6:1e:0d:a7:30:33:13:81:50:8c:44:c5:e6:12: 1d:d4:79:44:df:a5:9c:64:e9:0a:a0:f3:e5:2f:30:d5:5c:63: 5c:eb:86:f4:03:51:af:81:8e:46:2d:c0:3d:30:e8:b7:66:8c: 0a:c3:f5:ef:89:89:7f:5e:ae:c5:e5:fb:55:cc:cb:c2:72:71: 07:d4:ae:d3:7c:d3:35:e1:01:f4:84:46:c5:0f:69:50:51:dc: 45:5c:99:76:ed:e5:0d:b1:0c:f3:d0:3b:4d:d0:da:8f:32:ab: c2:a1:35:15:8f:d5:e1:53:df:91:84:71:11:ad:73:d2:b9:ab: 65:a4:d7:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YuqZT9J2WADY+i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTExMDU3NGItYjBhOC00MTE2LThmYmEtNjNlNjllYmE5 ZDkyMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk NTJhMjU1ZDktOWM2Zi00OWY0LTgxOTEtNjg1ZjUzMmUyMGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmojFKxQhCIrusKVbBy6M9asUK+aM5h2HARF kVkHUY+XHFXzxG/csNL8ieYYDh+j6Va9rtD4E7dRqU9+M5jwGWib85n4cz7qYHM8 Fl9DEGK49AzbS91fDdz6fWVUG9+uf8smRPNG73jLwerHQVFU2DN+/b6GLQbF/KIf lMCsoVeocajlsRdHIpOq/DJXrWHwYQngYJ03cjuZlFLfVKpgqP0FWgNfck/J/Jfc FwBO/7J1Y4LmOicEAuOBdl7KdV4jfKnZh5QsOnjKRnNHNCjQjnDcPvW785fb7ZFX h+NwHwsAEJe5ervNgB8ztHNaZrpiyKrb3ZzycrstmuCukRv/swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNf65sVzdad15M1sNhUbG8XENoERMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTEw NTc0Yi1iMGE4LTQxMTYtOGZiYS02M2U2OWViYTlkOTIvNGRlM2ZmMTMtNjlhMC0z MDY0LWI2NWEtMmFjOWI2YjNmNjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTExMDU3NGItYjBhOC00MTE2LThm YmEtNjNlNjllYmE5ZDkyL2ExMTA1NzRiLWIwYTgtNDExNi04ZmJhLTYzZTY5ZWJh OWQ5Mi5jcmwwHwYDVR0jBBgwFoAUhXIn2CcZk3NA37m6vD9oxagZ474wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTEwNTc0Yi1iMGE4LTQxMTYtOGZiYS02M2U2 OWViYTlkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEj9+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJa3VthRNjvSTSjZfCPfhOrlWF261IrX3+FBNNTlrjOqbKdJwYanbC6 L6e7x3hSF5ZAMnJHYWSY2AwrDlMkfQpBlF+fmW8tH3ABIvY00Nlj5kI8F182SKFp 8zjOBNCSxwcT3iSo7S4ayVJ/Pp20kTCh71QStMApgT+loaPz8b+Id6umHg2nMDMT gVCMRMXmEh3UeUTfpZxk6Qqg8+UvMNVcY1zrhvQDUa+BjkYtwD0w6LdmjArD9e+J iX9ersXl+1XMy8JycQfUrtN80zXhAfSERsUPaVBR3EVcmXbt5Q2xDPPQO03Q2o8y q8KhNRWP1eFT35GEcRGtc9K5q2Wk15M= -----END CERTIFICATE-----Generated at Fri May 1 22:10:57 2026 by rpki-client