$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2630e1ca-a903-395a-8244-fa8c41db42b9.roa File: 2630e1ca-a903-395a-8244-fa8c41db42b9.roa (raw, json) Hash identifier: vpS2FUiBWmQPJoBrkB4eEXUcN9HvExeCEUn/ro+lPUY= Subject key identifier: FB:3F:DB:14:59:13:FC:F7:35:C7:62:17:BD:C3:F2:FE:83:BA:DB:DD Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7B6A8B8131E1345D6AFE0F00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2630e1ca-a903-395a-8244-fa8c41db42b9.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 20940 IP address blocks: 204.2.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:8b:81:31:e1:34:5d:6a:fe:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=96f39cab-7007-4aa8-be9c-68bfbbe63376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:78:20:ce:c8:c3:0c:5e:3f:a4:77:bf:7c:fc: cc:31:ad:37:b4:18:42:85:c5:fc:7b:a6:21:76:97: 9a:3b:3d:fb:7c:9a:a3:34:d0:0c:e2:3d:3a:e0:49: 47:a6:1f:bc:c9:34:64:85:cc:82:8e:2a:2d:e0:9c: 4a:4f:9e:5c:ca:c9:42:95:42:21:95:80:1e:52:74: 93:15:85:0b:ed:10:d7:f0:d4:0f:49:6d:d8:6f:62: f8:4b:57:02:2d:bb:1a:d3:67:87:9d:f1:ad:e4:55: c9:d7:e4:61:92:5b:4d:0f:d5:9d:16:25:b2:64:b7: eb:4a:1e:74:a6:e7:49:e4:30:31:8e:8b:0c:8b:c1: 14:fb:49:2e:a4:96:0b:ff:47:31:d7:30:b7:a1:ac: fc:e2:16:8b:1c:bf:64:5e:c0:31:69:9b:3f:f1:16: 11:57:7b:34:5f:1c:55:0e:2e:55:b6:7d:73:ed:3c: c5:c1:7f:e4:fe:d4:1e:91:e6:e4:06:21:34:27:01: a6:bf:b9:14:2b:1d:2a:eb:8b:5f:54:2b:94:8c:b3: 44:7b:94:aa:4d:f5:f7:e6:b4:5b:1b:c2:1d:69:a9: 4e:bc:9c:ae:8d:9b:a6:c5:76:a8:25:cd:7d:2f:2d: 1b:75:43:71:1b:50:93:1e:b0:6c:62:55:64:c8:56: 12:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3F:DB:14:59:13:FC:F7:35:C7:62:17:BD:C3:F2:FE:83:BA:DB:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2630e1ca-a903-395a-8244-fa8c41db42b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:57:64:d7:14:16:45:ee:88:d1:c8:3e:b7:d0:57:d4:dc:71: 63:ab:05:a0:a5:6d:dc:b0:58:57:bd:48:65:0e:25:93:1e:20: 69:ad:7b:2a:6e:6b:0c:98:d8:fa:90:db:d0:58:45:93:3e:48: 1d:90:a7:f6:84:d6:4e:2a:88:ec:18:32:45:a5:b9:36:18:32: 31:10:4c:38:c8:7c:1f:41:4c:0a:b9:89:36:ca:40:58:3c:63: 18:17:a7:16:10:cd:a9:c5:0a:38:6c:90:ff:bf:7b:d6:8e:3a: 4e:5c:06:39:18:80:4c:d0:dc:db:b5:0a:1b:f2:22:f3:23:a5: fe:16:45:03:c0:11:ac:20:56:5f:aa:12:e2:c0:df:28:78:4c: 82:c6:06:22:09:93:1e:2f:83:54:53:47:cb:38:b7:64:69:c3: ac:65:1c:51:b6:9b:a0:10:c7:2d:6a:14:1b:94:f9:61:12:1f: 7f:62:06:a1:d5:40:da:eb:1e:75:59:22:40:d7:2c:3f:4e:4c: 6c:bd:ef:9f:4f:30:de:f1:da:a0:4f:c7:b6:01:9a:4e:30:1e: b0:7a:80:f4:38:98:29:2d:8a:76:12:f6:c1:14:21:fb:ee:b1: aa:d8:f2:28:b0:1e:76:c1:12:29:98:a0:61:a5:3f:e1:87:3f: 5f:04:66:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17aouBMeE0XWr+DwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk OTZmMzljYWItNzAwNy00YWE4LWJlOWMtNjhiZmJiZTYzMzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHggzsjDDF4/pHe/fPzMMa03tBhChcX8e6Yh dpeaOz37fJqjNNAM4j064ElHph+8yTRkhcyCjiot4JxKT55cyslClUIhlYAeUnST FYUL7RDX8NQPSW3Yb2L4S1cCLbsa02eHnfGt5FXJ1+RhkltND9WdFiWyZLfrSh50 pudJ5DAxjosMi8EU+0kupJYL/0cx1zC3oaz84haLHL9kXsAxaZs/8RYRV3s0XxxV Di5Vtn1z7TzFwX/k/tQekebkBiE0JwGmv7kUKx0q64tfVCuUjLNEe5SqTfX35rRb G8IdaalOvJyujZumxXaoJc19Ly0bdUNxG1CTHrBsYlVkyFYSawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPs/2xRZE/z3NcdiF73D8v6DutvdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMjYzMGUxY2EtYTkwMy0z OTVhLTgyNDQtZmE4YzQxZGI0MmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzAKeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlXZNcUFkXuiNHIPrfQV9TccWOrBaClbdywWFe9SGUOJZMeIGmteypu awyY2PqQ29BYRZM+SB2Qp/aE1k4qiOwYMkWluTYYMjEQTDjIfB9BTAq5iTbKQFg8 YxgXpxYQzanFCjhskP+/e9aOOk5cBjkYgEzQ3Nu1ChvyIvMjpf4WRQPAEawgVl+q EuLA3yh4TILGBiIJkx4vg1RTR8s4t2Rpw6xlHFG2m6AQxy1qFBuU+WESH39iBqHV QNrrHnVZIkDXLD9OTGy9759PMN7x2qBPx7YBmk4wHrB6gPQ4mCktinYS9sEUIfvu sarY8iiwHnbBEimYoGGlP+GHP18EZlE= -----END CERTIFICATE-----Generated at Fri Apr 17 16:22:11 2026 by rpki-client