$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/42c5b7b7-59d1-3a83-9e76-51fad7201aaf.roa File: 42c5b7b7-59d1-3a83-9e76-51fad7201aaf.roa (raw, json) Hash identifier: NELuJm7nvw9H2uCLYiRS9WAW+2MLCob2yOy8XaNiXMk= Subject key identifier: A7:1C:33:14:E6:4E:E3:BC:7B:58:96:82:AE:56:44:AD:1C:2A:B1:BF Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7A05304A97BC8DC6850C4380 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/42c5b7b7-59d1-3a83-9e76-51fad7201aaf.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 1225 IP address blocks: 204.2.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:30:4a:97:bc:8d:c6:85:0c:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=c3aaefed-1656-4d42-8333-157d37267784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:15:22:16:29:8b:36:74:da:9e:22:06:62:97: dd:59:b0:13:de:d6:65:25:6b:cc:4d:08:2d:f2:c5: 83:ea:f6:50:b3:8d:75:a4:14:0e:14:45:4c:7c:b1: 97:ce:d8:a5:24:fe:a6:e9:d3:d2:6e:89:00:07:a3: f4:ba:b5:60:46:96:4c:d6:fe:9c:1f:19:fc:eb:00: 0a:70:3f:a6:e0:13:c3:59:74:9e:4a:48:53:9f:62: b4:0a:6a:82:09:63:45:88:02:4a:0f:2c:00:b8:ae: 86:1d:e1:d7:cf:8c:6c:db:0a:81:72:9d:27:86:0d: 6b:64:76:9b:bb:c8:ba:a4:ae:6e:0f:dc:7d:f0:e0: 21:24:f1:14:5d:d9:ca:10:91:8c:c4:1e:cd:a1:f0: 6c:39:4f:a7:3b:26:17:49:ee:fd:31:79:33:f2:29: c3:09:56:74:bd:ad:a0:e7:2a:3d:b7:79:e3:f4:59: 9c:dd:d9:aa:59:e2:f2:5a:53:b2:0b:8f:c5:94:11: 0e:72:b5:b2:0b:04:84:e0:f2:16:3b:51:e6:8e:ed: 42:29:0f:7c:92:f1:df:e4:25:0b:d9:ad:55:a8:cb: 1d:d5:78:92:61:09:cc:1c:d4:ac:e6:75:83:63:50: 0a:bd:fb:37:e2:da:aa:c7:6c:95:07:85:56:07:ba: b0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1C:33:14:E6:4E:E3:BC:7B:58:96:82:AE:56:44:AD:1C:2A:B1:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/42c5b7b7-59d1-3a83-9e76-51fad7201aaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:b3:3c:69:0b:e2:be:07:44:02:82:4e:b1:6f:ad:60:c4:93: c6:0c:5f:2a:4b:df:00:94:2a:3b:6a:94:96:72:f1:2c:5e:61: 8a:70:06:4d:19:10:bb:23:b1:d4:0f:55:9b:f6:50:f5:8b:8b: 31:c9:2f:56:de:37:17:28:39:3d:a1:32:3f:cb:d6:35:a9:22: b5:9c:f5:4d:ab:68:ef:38:49:29:cc:b9:37:45:43:91:36:f7: dc:3a:07:9a:f6:96:e7:72:76:38:bb:bd:a8:ac:c2:c2:ee:67: 9e:9c:42:78:02:62:f5:c9:cf:1a:bb:3b:62:ce:14:cf:38:ab: 8b:c7:5d:51:2c:9a:70:d0:6f:1d:72:b8:93:5a:29:71:5c:5f: dc:b2:07:37:a4:4b:0e:8f:e8:de:77:d3:22:0b:32:1f:19:fa: 7e:5a:ca:03:c6:a4:7f:ce:6b:a5:c3:0b:01:e4:69:5f:51:18: 6c:a2:94:dc:d9:77:de:d9:97:60:35:a7:85:8e:da:f4:26:0e: 60:20:f3:32:3b:81:c7:df:11:8a:11:13:0e:9a:85:54:09:4c: b0:9d:75:0f:25:84:d6:ee:46:2d:9a:a7:03:b5:ed:26:5e:c0: fc:84:d7:af:4d:85:94:c2:21:6e:b0:f5:7d:40:1c:58:2f:d7: b0:85:a9:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BTBKl7yNxoUMQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk YzNhYWVmZWQtMTY1Ni00ZDQyLTgzMzMtMTU3ZDM3MjY3Nzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BUiFimLNnTaniIGYpfdWbAT3tZlJWvMTQgt 8sWD6vZQs411pBQOFEVMfLGXztilJP6m6dPSbokAB6P0urVgRpZM1v6cHxn86wAK cD+m4BPDWXSeSkhTn2K0CmqCCWNFiAJKDywAuK6GHeHXz4xs2wqBcp0nhg1rZHab u8i6pK5uD9x98OAhJPEUXdnKEJGMxB7NofBsOU+nOyYXSe79MXkz8inDCVZ0va2g 5yo9t3nj9Fmc3dmqWeLyWlOyC4/FlBEOcrWyCwSE4PIWO1Hmju1CKQ98kvHf5CUL 2a1VqMsd1XiSYQnMHNSs5nWDY1AKvfs34tqqx2yVB4VWB7qwCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKccMxTmTuO8e1iWgq5WRK0cKrG/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNDJjNWI3YjctNTlkMS0z YTgzLTllNzYtNTFmYWQ3MjAxYWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAIiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMizPGkL4r4HRAKCTrFvrWDEk8YMXypL3wCUKjtqlJZy8SxeYYpwBk0Z ELsjsdQPVZv2UPWLizHJL1beNxcoOT2hMj/L1jWpIrWc9U2raO84SSnMuTdFQ5E2 99w6B5r2ludydji7vaiswsLuZ56cQngCYvXJzxq7O2LOFM84q4vHXVEsmnDQbx1y uJNaKXFcX9yyBzekSw6P6N530yILMh8Z+n5aygPGpH/Oa6XDCwHkaV9RGGyilNzZ d97Zl2A1p4WO2vQmDmAg8zI7gcffEYoREw6ahVQJTLCddQ8lhNbuRi2apwO17SZe wPyE169NhZTCIW6w9X1AHFgv17CFqf4= -----END CERTIFICATE-----Generated at Fri Apr 17 18:20:38 2026 by rpki-client