$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/acad1d7d-111c-3859-8be3-9dc66b4d4b4c.roa File: acad1d7d-111c-3859-8be3-9dc66b4d4b4c.roa (raw, json) Hash identifier: EItcKsIhkXZx+nlpYEJZ5urHBPJrnHjN8eqLJDB+IDo= Subject key identifier: 38:0B:8F:D9:93:C4:F6:80:6E:C9:B6:A9:10:FA:60:F1:16:8C:25:F4 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584D869541C188A8A44A25502580 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/acad1d7d-111c-3859-8be3-9dc66b4d4b4c.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 14061 IP address blocks: 198.211.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:41:c1:88:a8:a4:4a:25:50:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=3e35c409-ef6e-4414-8577-004cb6c56c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1e:ed:8e:c5:55:9c:53:3e:17:db:c6:92:f9: 51:11:31:a5:e4:f0:e8:e0:6a:4c:f4:52:c6:0f:55: 65:cd:15:19:04:54:54:09:89:6d:1d:4d:0b:43:cd: cb:a1:f2:37:70:90:b3:f3:a1:de:f1:fb:a1:8f:84: 6d:4e:91:ce:55:93:4f:ce:ec:83:f2:0a:89:bd:3a: c8:f4:43:12:e5:c0:69:62:39:ac:59:b9:d1:a0:c2: 49:a2:24:9d:a5:b7:4c:76:1e:ed:d3:4c:d8:33:41: 38:f9:84:29:2b:61:a2:ae:1f:05:1a:0d:cb:07:ba: 3d:7d:ff:d0:9a:65:fc:92:0e:67:e8:1b:47:2a:00: f6:20:64:98:6b:af:fb:67:fc:e5:0a:d3:98:1b:1f: 77:bd:ae:a4:e1:b7:ef:bf:f9:27:3b:ff:aa:40:21: 54:f8:d4:dc:1e:9f:7b:e6:47:16:9d:99:b8:64:99: 33:4a:a4:9d:99:06:6a:fb:a6:55:3a:ce:2e:43:e0: f1:d9:58:e3:1c:9a:1d:4e:70:40:49:da:d5:fa:72: 20:45:91:48:ad:ba:6f:f8:ca:21:33:d2:75:a6:1a: 7e:02:12:c3:7d:37:d5:a7:33:f1:35:9c:c4:84:54: 97:99:78:b9:26:1b:a4:77:30:28:3c:ca:7f:de:29: 22:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0B:8F:D9:93:C4:F6:80:6E:C9:B6:A9:10:FA:60:F1:16:8C:25:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/acad1d7d-111c-3859-8be3-9dc66b4d4b4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 198.211.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:91:05:da:ea:0a:f3:ef:df:3e:89:44:bd:d8:a5:76:0a:1e: b6:41:3c:49:14:35:24:1f:bb:d9:8d:56:80:88:6f:d2:ba:ed: 1d:00:74:25:12:c1:49:41:2d:c0:2a:d8:ba:b1:e5:9e:8b:42: dc:75:70:c6:1d:7e:87:79:ee:bd:e9:d4:a8:83:84:0d:11:d0: 9e:0b:03:c4:63:26:46:b6:49:c8:e3:b0:82:0f:26:06:ba:97: 53:9d:f9:44:ca:58:de:dc:9b:ad:bc:b2:67:25:12:a4:31:f1: c2:c7:13:05:ca:77:46:25:fd:9a:5d:7d:dc:c2:e6:14:c1:37: f6:90:df:c1:eb:34:9b:a9:3a:f1:ab:d7:33:1a:ba:84:b4:38: a4:72:74:05:1b:0b:8d:17:9f:af:6a:3a:7f:68:86:5d:f5:c3: 61:bc:92:09:fd:72:fb:29:53:c8:23:01:dc:72:21:36:fb:43: 69:d7:c1:6f:0e:31:fa:35:9d:13:17:80:83:df:36:af:d3:e9: c0:2c:b2:df:31:30:04:e8:a1:58:22:35:4e:d0:1e:de:8c:c4: eb:6c:6e:46:cc:69:5e:bc:15:07:ec:ff:45:e0:9a:08:c0:fc: 86:43:3d:7e:fa:f2:86:9a:61:ef:e4:1b:70:d6:13:55:9c:31: cb:81:fd:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlUHBiKikSiVQJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk M2UzNWM0MDktZWY2ZS00NDE0LTg1NzctMDA0Y2I2YzU2YzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx7tjsVVnFM+F9vGkvlRETGl5PDo4GpM9FLG D1VlzRUZBFRUCYltHU0LQ83LofI3cJCz86He8fuhj4RtTpHOVZNPzuyD8gqJvTrI 9EMS5cBpYjmsWbnRoMJJoiSdpbdMdh7t00zYM0E4+YQpK2Girh8FGg3LB7o9ff/Q mmX8kg5n6BtHKgD2IGSYa6/7Z/zlCtOYGx93va6k4bfvv/knO/+qQCFU+NTcHp97 5kcWnZm4ZJkzSqSdmQZq+6ZVOs4uQ+Dx2VjjHJodTnBASdrV+nIgRZFIrbpv+Moh M9J1php+AhLDfTfVpzPxNZzEhFSXmXi5JhukdzAoPMp/3ikieQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgLj9mTxPaAbsm2qRD6YPEWjCX0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvYWNhZDFkN2QtMTExYy0z ODU5LThiZTMtOWRjNjZiNGQ0YjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxtNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2RBdrqCvPv3z6JRL3YpXYKHrZBPEkUNSQfu9mNVoCIb9K67R0AdCUS wUlBLcAq2Lqx5Z6LQtx1cMYdfod57r3p1KiDhA0R0J4LA8RjJka2ScjjsIIPJga6 l1Od+UTKWN7cm628smclEqQx8cLHEwXKd0Yl/ZpdfdzC5hTBN/aQ38HrNJupOvGr 1zMauoS0OKRydAUbC40Xn69qOn9ohl31w2G8kgn9cvspU8gjAdxyITb7Q2nXwW8O Mfo1nRMXgIPfNq/T6cAsst8xMATooVgiNU7QHt6MxOtsbkbMaV68FQfs/0XgmgjA /IZDPX768oaaYe/kG3DWE1WcMcuB/R4= -----END CERTIFICATE-----Generated at Fri Apr 17 12:47:48 2026 by rpki-client