$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/4cafbfd2-35b0-3d07-8d13-11f6bdba266a.roa File: 4cafbfd2-35b0-3d07-8d13-11f6bdba266a.roa (raw, json) Hash identifier: xZ9uKgqWThMVnP8XGQA1r3fRFNwv+YT9GzjybCNGh9w= Subject key identifier: 6F:FA:7D:DD:32:16:55:D2:A4:B0:AB:B4:97:EE:65:14:35:18:B4:3C Certificate issuer: /CN=204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8 Certificate serial: 010D0C9F4328584D773A7FAF9F3FFCEBBC3608E0 Authority key identifier: 15:B2:2C:F6:31:D3:B7:CC:32:8D:89:F6:E1:EB:14:5C:B0:3D:22:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/4cafbfd2-35b0-3d07-8d13-11f6bdba266a.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 396982 IP address blocks: 199.88.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:7f:af:9f:3f:fc:eb:bc:36:08:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=dff51222-8fb5-4dac-9ae9-9dc8ba893779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:50:c8:6c:72:a3:df:0f:60:ec:5e:37:7b:c3: b1:9a:8a:36:6e:92:27:d1:78:b4:7b:57:10:fb:64: 87:fd:62:69:75:63:5e:ae:d9:e9:ab:9a:e4:f2:70: fd:8f:a4:99:16:64:68:54:49:95:42:14:b4:89:e0: a3:c5:e8:fd:2d:fc:bd:f7:0d:a4:56:dd:dc:3f:06: 46:60:4d:cd:11:07:0d:9b:40:e9:ad:8c:4b:9e:87: 70:cc:45:97:42:dc:40:3e:77:ed:7b:40:1c:a2:f4: 10:fe:47:7d:84:21:da:bc:d9:08:05:40:a1:84:d7: ad:4b:93:53:15:aa:ca:8f:1e:21:74:e3:6c:b6:40: 6e:60:bb:a0:a1:a3:17:0a:cc:c9:b9:73:5e:af:78: 22:76:69:2b:af:dd:01:94:12:63:da:b1:82:11:84: 28:39:16:fe:1b:63:66:48:b4:65:8a:e8:8a:83:8b: ec:44:cd:31:36:fd:a9:e1:9c:38:86:ea:0f:2d:c8: b8:01:5b:c9:79:50:5f:41:8f:5e:98:49:c1:42:08: b8:0a:0b:50:d8:f8:60:16:86:79:10:06:ff:60:5c: 69:e7:3f:a3:c3:26:b2:af:05:8e:f4:19:f1:53:db: b3:cd:88:7f:0b:c2:96:46:41:22:5e:61:57:17:2f: 36:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:FA:7D:DD:32:16:55:D2:A4:B0:AB:B4:97:EE:65:14:35:18:B4:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/4cafbfd2-35b0-3d07-8d13-11f6bdba266a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.crl X509v3 Authority Key Identifier: keyid:15:B2:2C:F6:31:D3:B7:CC:32:8D:89:F6:E1:EB:14:5C:B0:3D:22:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.cer sbgp-ipAddrBlock: critical IPv4: 199.88.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:54:e3:f6:43:28:0c:1a:68:de:e0:06:6e:d1:e0:e9:9c:c7: 88:12:a7:4a:7b:e9:fd:06:76:f5:9b:bd:af:a7:25:e3:27:5c: 3e:91:ed:7f:88:75:9d:88:d4:0b:e2:f4:0f:cc:f9:38:97:dc: 5f:c7:73:e4:db:30:92:74:5c:a4:fd:40:2f:21:bf:67:93:2a: 2e:18:55:a4:65:d7:39:3f:ee:c9:e2:f9:33:32:6d:90:dd:12: 56:e7:db:19:19:f7:1b:b9:ed:d3:93:b2:93:91:1d:12:6d:ac: 20:85:2a:8b:d6:6f:eb:24:c2:d4:09:6f:01:df:ba:bf:e0:f7: 63:8b:4d:e1:23:96:25:91:1b:a0:32:60:7f:6d:6f:06:5b:f7: a9:60:3c:bc:67:41:38:35:2a:65:2e:10:de:87:c3:07:f6:0e: 67:0c:be:6c:e1:7b:1f:7c:20:5e:83:97:61:53:ff:80:18:e9: 89:ec:cd:77:bf:f2:57:eb:8e:28:e1:84:62:8d:1c:c2:fe:6f: 39:f7:dd:dd:ea:b0:d2:e9:b5:66:3a:8e:51:c5:e8:ed:b7:7f: 37:86:4c:a2:5f:18:8f:a3:7b:a0:fb:e7:ef:1e:ff:e9:87:8d: 77:12:9c:d9:09:53:31:f2:44:8f:dc:9b:5b:d8:d3:21:ca:ba: ac:c2:c2:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13On+vnz/867w2COAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA0YjZlMzUtYzJiNS00MDg0LTljNzAtZGQ1ZTdjN2Q4 Y2Y4MB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk ZGZmNTEyMjItOGZiNS00ZGFjLTlhZTktOWRjOGJhODkzNzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1DIbHKj3w9g7F43e8Oxmoo2bpIn0Xi0e1cQ +2SH/WJpdWNertnpq5rk8nD9j6SZFmRoVEmVQhS0ieCjxej9Lfy99w2kVt3cPwZG YE3NEQcNm0DprYxLnodwzEWXQtxAPnfte0AcovQQ/kd9hCHavNkIBUChhNetS5NT FarKjx4hdONstkBuYLugoaMXCszJuXNer3gidmkrr90BlBJj2rGCEYQoORb+G2Nm SLRliuiKg4vsRM0xNv2p4Zw4huoPLci4AVvJeVBfQY9emEnBQgi4CgtQ2PhgFoZ5 EAb/YFxp5z+jwyayrwWO9BnxU9uzzYh/C8KWRkEiXmFXFy82aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/6fd0yFlXSpLCrtJfuZRQ1GLQ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMDRi NmUzNS1jMmI1LTQwODQtOWM3MC1kZDVlN2M3ZDhjZjgvNGNhZmJmZDItMzViMC0z ZDA3LThkMTMtMTFmNmJkYmEyNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjA0YjZlMzUtYzJiNS00MDg0LTlj NzAtZGQ1ZTdjN2Q4Y2Y4LzIwNGI2ZTM1LWMyYjUtNDA4NC05YzcwLWRkNWU3Yzdk OGNmOC5jcmwwHwYDVR0jBBgwFoAUFbIs9jHTt8wyjYn24esUXLA9Iv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMDRiNmUzNS1jMmI1LTQwODQtOWM3MC1kZDVl N2M3ZDhjZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1j8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtU4/ZDKAwaaN7gBm7R4Omcx4gSp0p76f0GdvWbva+nJeMnXD6R7X+I dZ2I1Avi9A/M+TiX3F/Hc+TbMJJ0XKT9QC8hv2eTKi4YVaRl1zk/7sni+TMybZDd Elbn2xkZ9xu57dOTspORHRJtrCCFKovWb+skwtQJbwHfur/g92OLTeEjliWRG6Ay YH9tbwZb96lgPLxnQTg1KmUuEN6Hwwf2DmcMvmzhex98IF6Dl2FT/4AY6YnszXe/ 8lfrjijhhGKNHML+bzn33d3qsNLptWY6jlHF6O23fzeGTKJfGI+je6D75+8e/+mH jXcSnNkJUzHyRI/cm1vY0yHKuqzCwqM= -----END CERTIFICATE-----Generated at Fri Apr 17 18:18:31 2026 by rpki-client