$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27ad11b4-e211-3ca4-a206-bd00c733729c.roa File: 27ad11b4-e211-3ca4-a206-bd00c733729c.roa (raw, json) Hash identifier: b2091eVy4OtSD4+FUtHNEeKFj79vKdm6wJRQ0gEoyg0= Subject key identifier: A2:0F:1D:81:A2:96:AD:4D:E7:4E:BC:E9:AD:6D:57:94:F6:32:11:7B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D75D521C211D9AD7CE83B9940 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27ad11b4-e211-3ca4-a206-bd00c733729c.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 213802 IP address blocks: 128.241.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:21:c2:11:d9:ad:7c:e8:3b:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=9e8ad6e7-3817-42b1-9edb-11fb43efec9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:ca:3a:62:ab:22:7c:80:97:a3:5b:19:9d: b3:03:70:1e:4b:c8:1e:82:62:3c:33:f4:2a:27:f1: 57:83:5c:3b:e6:65:bf:82:24:76:cf:76:21:fc:fe: 40:b2:4b:e7:91:3f:95:b5:4c:07:6e:5b:59:3c:12: 32:d1:6f:0e:9b:ef:5d:9c:97:27:58:ca:09:eb:d5: 56:1c:35:c8:a0:fc:63:63:23:c4:9a:9a:12:74:d3: 3e:25:2a:c7:c9:86:66:4f:02:67:87:17:69:c0:ef: b1:68:20:1b:b0:5e:7d:32:6b:c0:2e:be:98:a3:03: 32:7d:e4:e3:a2:d5:3f:54:29:62:3c:fd:c6:6e:bc: a4:ba:3b:fb:5d:0a:57:15:a4:d4:4f:67:b0:28:15: 94:44:72:44:82:69:86:d5:43:f0:20:f4:66:24:63: 3b:90:11:75:9d:5d:a2:c0:1c:7d:43:eb:94:72:06: c4:2f:66:4d:66:11:92:8b:74:60:4d:fb:7a:a4:95: d8:c3:00:2e:f6:33:40:dd:b1:2a:88:df:e6:8c:b3: f5:79:0e:42:7c:a4:cd:3d:24:cf:c1:f5:ea:a2:7b: 16:59:ec:ab:11:25:19:6a:3e:c8:d6:e3:f9:43:b7: 19:08:73:67:47:f4:6e:f2:2c:51:f3:d7:87:af:74: 32:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0F:1D:81:A2:96:AD:4D:E7:4E:BC:E9:AD:6D:57:94:F6:32:11:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27ad11b4-e211-3ca4-a206-bd00c733729c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.241.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:9e:d2:32:65:93:5e:88:7a:f9:9e:59:d3:15:b4:ec:28:58: 3a:da:df:d8:9b:0f:ba:91:01:3c:d9:f5:7d:88:49:cd:d7:29: 48:b0:69:ae:c2:3b:51:85:17:1e:8c:8a:34:50:75:7e:f6:12: 31:ac:2e:bc:f6:17:73:d4:20:e8:f4:4c:19:83:ad:ea:4e:0b: b2:42:d6:f5:de:b2:37:05:7a:b6:32:73:3f:6a:ad:3d:85:58: 0b:dc:7f:c3:1e:ae:45:51:9c:fc:34:0d:15:ef:e1:57:db:24: aa:2f:04:eb:f8:fb:ba:c3:5d:3e:3e:03:bd:5e:59:25:85:e4: 40:5e:0b:10:d9:f3:44:54:8f:31:18:c3:a6:02:3d:59:33:cb: f0:28:7b:11:02:e6:ab:cc:b8:cf:26:bb:f5:42:dd:3b:d4:64: 25:24:06:df:9f:bf:b1:78:e3:50:db:b7:55:0e:5b:4a:59:e3: a5:61:b2:a3:45:ca:03:3e:af:fb:29:fd:a4:ad:a6:80:24:9c: 29:24:d4:e9:44:da:9f:f2:3e:83:a5:8e:0d:be:ab:4f:48:8a: 05:a0:6a:c8:47:dd:f0:f0:2f:05:a5:49:02:06:48:f5:1c:84: 4d:ff:fd:bd:fd:67:bd:29:b7:a4:23:0b:7a:c3:aa:41:e5:27: 41:93:4a:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111SHCEdmtfOg7mUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk OWU4YWQ2ZTctMzgxNy00MmIxLTllZGItMTFmYjQzZWZlYzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsivKOmKrInyAl6NbGZ2zA3AeS8gegmI8M/Qq J/FXg1w75mW/giR2z3Yh/P5AskvnkT+VtUwHbltZPBIy0W8Om+9dnJcnWMoJ69VW HDXIoPxjYyPEmpoSdNM+JSrHyYZmTwJnhxdpwO+xaCAbsF59MmvALr6YowMyfeTj otU/VCliPP3Gbrykujv7XQpXFaTUT2ewKBWURHJEgmmG1UPwIPRmJGM7kBF1nV2i wBx9Q+uUcgbEL2ZNZhGSi3RgTft6pJXYwwAu9jNA3bEqiN/mjLP1eQ5CfKTNPSTP wfXqonsWWeyrESUZaj7I1uP5Q7cZCHNnR/Ru8ixR89eHr3QyGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIPHYGilq1N50686a1tV5T2MhF7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMjdhZDExYjQtZTIxMS0z Y2E0LWEyMDYtYmQwMGM3MzM3MjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgPHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6e0jJlk16IevmeWdMVtOwoWDra39ibD7qRATzZ9X2ISc3XKUiwaa7C O1GFFx6MijRQdX72EjGsLrz2F3PUIOj0TBmDrepOC7JC1vXesjcFerYycz9qrT2F WAvcf8MerkVRnPw0DRXv4VfbJKovBOv4+7rDXT4+A71eWSWF5EBeCxDZ80RUjzEY w6YCPVkzy/AoexEC5qvMuM8mu/VC3TvUZCUkBt+fv7F441Dbt1UOW0pZ46VhsqNF ygM+r/sp/aStpoAknCkk1OlE2p/yPoOljg2+q09IigWgashH3fDwLwWlSQIGSPUc hE3//b39Z70pt6QjC3rDqkHlJ0GTSvw= -----END CERTIFICATE-----Generated at Fri Apr 17 16:56:37 2026 by rpki-client