$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bb49121d-7647-3f34-8f02-f8d741546d3f.roa File: bb49121d-7647-3f34-8f02-f8d741546d3f.roa (raw, json) Hash identifier: MjwB8SVYBbFLPzYDwpvBAk+QHGBjUpWdTL4Vp2Ti8zc= Subject key identifier: 27:C6:17:C5:24:6C:4B:94:29:3C:9C:48:8A:0E:BC:C2:99:94:BA:58 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CAFBC75071A16AB8D39ECFAC0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bb49121d-7647-3f34-8f02-f8d741546d3f.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 144.25.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:75:07:1a:16:ab:8d:39:ec:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=a6187968-1f37-416a-820e-13d6b6a14ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e1:54:30:f0:db:fe:29:65:54:9c:b4:9f:f4: 6a:c9:66:e8:22:03:7f:8e:ea:9e:b4:09:ec:8c:aa: 12:43:30:47:98:ba:35:38:27:19:f1:95:e2:7e:cc: 8d:7b:90:0c:d7:1d:48:2b:3f:31:73:dd:7d:3c:4a: b2:8d:93:cf:fc:0b:ab:83:fd:f7:bc:e5:c6:5d:ba: 5f:a1:e5:73:1f:d1:bd:c4:dd:9d:41:b2:1d:e9:d1: 91:ae:ee:cd:ba:b7:b6:1c:b6:f8:51:27:f0:28:c5: 99:9a:5d:30:e0:83:13:8a:68:10:91:b1:fd:2b:18: 0c:7a:15:a1:30:29:c7:ae:33:af:b3:b9:d6:8a:9b: eb:bb:9f:7b:6c:ec:68:9a:4d:5f:c9:a9:11:e3:89: a7:ce:f7:5d:b2:42:0a:be:fa:ab:29:10:ca:d9:8b: 2f:1a:25:c5:2e:1b:8c:b8:e4:64:d5:de:53:dc:e0: 7d:2f:d3:94:72:15:41:9e:49:5b:99:a6:fa:db:0d: d7:90:0b:68:5c:c2:a4:26:69:ba:4c:63:0a:aa:67: e2:35:6f:c4:3d:9e:bd:79:32:19:26:df:ed:d9:3c: 0e:ea:0b:50:f2:23:40:9c:6c:9a:89:4c:a8:df:59: 74:1b:e6:91:32:c1:39:64:d5:75:e1:a1:f2:52:0f: e8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C6:17:C5:24:6C:4B:94:29:3C:9C:48:8A:0E:BC:C2:99:94:BA:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bb49121d-7647-3f34-8f02-f8d741546d3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c4:70:04:85:0c:9f:ca:f9:a9:17:66:44:09:10:83:d6:70: bc:d9:9d:af:7a:fd:ed:dd:00:05:90:58:24:12:79:a1:ef:2e: 38:6f:39:02:d3:48:51:ef:03:e1:a6:3c:b2:de:d6:7f:e8:81: f5:33:f0:98:52:35:39:fb:cb:96:82:56:0f:61:67:74:f9:6d: 98:f1:9c:cf:b0:8b:c6:a7:ad:6e:45:24:bf:17:41:ed:db:03: 18:08:14:22:3d:4d:ad:d4:8f:c9:0b:b4:35:7e:dc:e8:1d:ab: b5:d9:1c:40:18:92:27:d7:f7:ea:68:d4:53:d3:d3:01:c2:9c: 30:ec:4c:ef:48:1d:bf:56:09:2b:67:a5:2b:40:76:81:84:82: af:6f:47:f0:ca:df:7c:07:c1:07:71:fb:9d:f0:58:40:a4:bb: 65:e7:15:ac:02:72:ee:32:39:b1:0f:18:5a:b2:c8:13:9e:e9: 28:8d:4f:e2:ce:e7:24:a5:65:cd:02:d2:af:71:6a:8e:f7:2f: 9b:c1:af:c8:b0:bd:7c:51:c9:88:4a:e9:b8:12:58:8c:ee:13: 11:34:bd:2a:05:b5:82:38:69:d0:fc:2b:09:85:66:b0:74:85: 87:a4:b5:fe:9a:8c:f9:7b:23:f8:b3:ea:59:a0:64:c0:17:3a: 57:e8:2c:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvHUHGharjTns+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk YTYxODc5NjgtMWYzNy00MTZhLTgyMGUtMTNkNmI2YTE0ZWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeFUMPDb/illVJy0n/RqyWboIgN/juqetAns jKoSQzBHmLo1OCcZ8ZXifsyNe5AM1x1IKz8xc919PEqyjZPP/Aurg/33vOXGXbpf oeVzH9G9xN2dQbId6dGRru7Nure2HLb4USfwKMWZml0w4IMTimgQkbH9KxgMehWh MCnHrjOvs7nWipvru597bOxomk1fyakR44mnzvddskIKvvqrKRDK2YsvGiXFLhuM uORk1d5T3OB9L9OUchVBnklbmab62w3XkAtoXMKkJmm6TGMKqmfiNW/EPZ69eTIZ Jt/t2TwO6gtQ8iNAnGyaiUyo31l0G+aRMsE5ZNV14aHyUg/o7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfGF8UkbEuUKTycSIoOvMKZlLpYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYmI0OTEyMWQtNzY0Ny0z ZjM0LThmMDItZjhkNzQxNTQ2ZDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFkBkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHEcASFDJ/K+akXZkQJEIPWcLzZna96/e3dAAWQWCQSeaHvLjhvOQLT SFHvA+GmPLLe1n/ogfUz8JhSNTn7y5aCVg9hZ3T5bZjxnM+wi8anrW5FJL8XQe3b AxgIFCI9Ta3Uj8kLtDV+3Ogdq7XZHEAYkifX9+po1FPT0wHCnDDsTO9IHb9WCStn pStAdoGEgq9vR/DK33wHwQdx+53wWECku2XnFawCcu4yObEPGFqyyBOe6SiNT+LO 5ySlZc0C0q9xao73L5vBr8iwvXxRyYhK6bgSWIzuExE0vSoFtYI4adD8KwmFZrB0 hYektf6ajPl7I/iz6lmgZMAXOlfoLNU= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:59 2026 by rpki-client