$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/974ad0c1-c4f2-367b-8515-e37b9e343134.roa File: 974ad0c1-c4f2-367b-8515-e37b9e343134.roa (raw, json) Hash identifier: f/VadVXm6Bzw7zYDQ3APB27HWwk0egZEJbTZFNXwX/s= Subject key identifier: 17:98:40:C1:C9:77:85:82:84:A1:7D:D7:9C:3D:E5:7F:2B:C2:8C:0C Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584DF5F9D44E0BB01B7D0D7684C0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/974ad0c1-c4f2-367b-8515-e37b9e343134.roa Signing time: Tue 26 May 2026 10:38:00 +0000 ROA not before: Tue 26 May 2026 10:38:00 +0000 ROA not after: Mon 24 Aug 2026 10:38:00 +0000 asID: 20473 IP address blocks: 173.44.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f5:f9:d4:4e:0b:b0:1b:7d:0d:76:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: May 26 10:38:00 2026 GMT Not After : Aug 24 10:38:00 2026 GMT Subject: CN=1e54ac12-77cf-476d-8460-97a0b8555e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4c:95:27:b2:9b:24:e1:be:83:41:9a:9d:50: 60:be:72:c2:b8:54:9f:2a:d1:fd:65:68:3f:dc:20: 80:34:5d:67:06:71:d6:de:79:64:48:92:e7:a8:06: 84:60:2c:0f:81:d3:c7:f7:bf:fa:7a:b1:2c:5d:ce: 08:3f:54:cd:52:ca:91:95:69:d9:4e:cd:9f:1b:ea: f6:42:19:d7:cb:1f:fa:e0:e1:e9:33:33:76:3c:1c: 13:bd:90:5e:db:fc:c7:cb:fe:73:3b:a3:a9:2f:2f: 20:8b:14:19:f5:41:4d:4e:92:e6:e1:f6:b4:f7:57: 0c:d5:09:6b:57:fb:b6:84:15:ba:b4:5a:ef:a3:47: f9:e1:24:26:12:68:29:a4:cd:3a:6f:2d:6e:09:3a: 88:60:a7:f4:a6:4a:83:95:f8:06:c9:b1:9f:1c:8c: 09:fc:af:e3:e9:3e:be:c9:27:b1:30:b9:24:c1:fb: b6:fb:5e:a9:07:2c:6c:40:44:3d:c9:98:9f:85:c2: c7:d6:a4:d9:32:a7:e3:3b:ea:64:de:68:7a:ae:60: cb:ad:0b:c7:37:2f:bb:22:85:12:f6:87:9a:d2:18: ab:ab:76:aa:2b:3e:bf:c8:5a:5f:00:31:92:74:41: fc:25:85:65:bb:31:50:e8:88:29:09:6d:d0:6d:eb: aa:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:98:40:C1:C9:77:85:82:84:A1:7D:D7:9C:3D:E5:7F:2B:C2:8C:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/974ad0c1-c4f2-367b-8515-e37b9e343134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.44.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:66:ca:1c:37:44:c4:be:83:d1:fb:39:12:f0:00:dd:37:d2: f9:37:7e:60:c0:70:af:84:3f:17:53:36:fc:c3:e0:66:29:fa: 20:89:d7:01:c2:91:ed:f4:00:69:41:a4:fc:4d:98:ce:50:ac: 2e:39:87:e7:84:3c:f9:42:67:ab:58:9f:76:b7:15:b2:d7:ea: b7:59:29:1c:c3:6c:4c:22:34:e6:a2:c9:e0:58:8b:72:5e:56: 35:06:87:f2:09:fe:6b:72:99:fe:57:06:7b:60:c9:19:98:37: 5e:01:1b:80:97:de:26:28:90:00:ee:e1:47:46:63:8a:ba:4f: 40:6e:e9:9c:d2:8e:f2:60:eb:30:e6:0b:f1:45:9e:a8:1c:8b: 60:14:07:e4:dd:ba:df:cc:55:f3:23:da:90:a6:35:d6:f7:8a: 0d:af:8c:61:a6:09:0d:53:b8:2a:9f:05:ba:25:02:8a:7a:06: f8:df:d6:c5:6d:5b:a0:34:53:ec:40:70:66:8d:b6:e1:25:be: fe:dc:2a:8f:86:a3:48:e9:54:0b:b6:76:3a:10:af:43:c2:b4: 5b:0e:2f:a9:2c:3b:60:9b:01:a4:c1:b4:7f:84:8e:54:74:85: b1:4c:dd:13:47:40:0f:a4:dc:44:30:f7:03:b2:81:64:91:1a: 2c:88:e4:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE31+dROC7AbfQ12hMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDUyNjEwMzgwMFoXDTI2MDgyNDEwMzgwMFowLzEtMCsGA1UEAxMk MWU1NGFjMTItNzdjZi00NzZkLTg0NjAtOTdhMGI4NTU1ZTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEyVJ7KbJOG+g0GanVBgvnLCuFSfKtH9ZWg/ 3CCANF1nBnHW3nlkSJLnqAaEYCwPgdPH97/6erEsXc4IP1TNUsqRlWnZTs2fG+r2 QhnXyx/64OHpMzN2PBwTvZBe2/zHy/5zO6OpLy8gixQZ9UFNTpLm4fa091cM1Qlr V/u2hBW6tFrvo0f54SQmEmgppM06by1uCTqIYKf0pkqDlfgGybGfHIwJ/K/j6T6+ ySexMLkkwfu2+16pByxsQEQ9yZifhcLH1qTZMqfjO+pk3mh6rmDLrQvHNy+7IoUS 9oea0hirq3aqKz6/yFpfADGSdEH8JYVluzFQ6IgpCW3QbeuqWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeYQMHJd4WChKF915w95X8rwowMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOTc0YWQwYzEtYzRmMi0z NjdiLTg1MTUtZTM3YjllMzQzMTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArSyGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRmyhw3RMS+g9H7ORLwAN030vk3fmDAcK+EPxdTNvzD4GYp+iCJ1wHC ke30AGlBpPxNmM5QrC45h+eEPPlCZ6tYn3a3FbLX6rdZKRzDbEwiNOaiyeBYi3Je VjUGh/IJ/mtymf5XBntgyRmYN14BG4CX3iYokADu4UdGY4q6T0Bu6ZzSjvJg6zDm C/FFnqgci2AUB+Tdut/MVfMj2pCmNdb3ig2vjGGmCQ1TuCqfBbolAop6Bvjf1sVt W6A0U+xAcGaNtuElvv7cKo+Go0jpVAu2djoQr0PCtFsOL6ksO2CbAaTBtH+EjlR0 hbFM3RNHQA+k3EQw9wOygWSRGiyI5EY= -----END CERTIFICATE-----Generated at Fri May 29 17:51:41 2026 by rpki-client