$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8167820f-dba9-3202-8768-7ee9b0e5f7d2.roa File: 8167820f-dba9-3202-8768-7ee9b0e5f7d2.roa (raw, json) Hash identifier: gkkZ6S7/utuYIWI8khNA5w8Cd56vSW4e1eYGF7VsMCg= Subject key identifier: E7:1B:8D:87:68:31:BD:E0:85:B5:16:5D:5A:E6:F9:6B:E7:E4:E3:48 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7F9A8C5F8830FC109BFA6780 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8167820f-dba9-3202-8768-7ee9b0e5f7d2.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 204.2.164.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:8c:5f:88:30:fc:10:9b:fa:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=35c18475-4171-45d8-bad1-68e719bd8b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6c:d4:f5:53:ca:80:8c:66:82:9d:ce:8d:b5: e2:45:be:c0:0c:06:34:ab:1a:de:ce:b0:63:dc:8d: bb:79:d3:e0:86:1d:f1:bc:23:7a:51:9b:03:20:6d: 50:f6:c3:52:31:7b:ad:1b:ba:57:cf:f8:b8:ed:02: f8:82:eb:30:48:cd:63:e7:a6:fa:fc:af:b4:df:17: 77:6a:8a:08:21:e2:ae:3d:06:42:f7:b6:ab:32:1c: ad:e4:cc:06:08:b3:96:5a:a4:3e:a1:db:c3:73:69: 96:9e:74:73:c7:72:1a:2f:c4:3c:47:82:bc:ef:2b: d3:ba:89:8e:2e:b0:f8:d7:86:ad:58:6a:41:02:e7: a2:76:a7:2c:30:a9:f3:e1:bb:1f:7a:2c:c9:e6:97: 46:f9:d3:fe:8e:4c:03:e7:eb:c4:35:e1:28:8b:6d: 57:3d:b9:ad:65:84:1b:7a:56:44:92:f4:88:77:02: 04:dc:fb:e8:71:cc:48:2f:78:9a:37:ef:55:09:de: d3:ca:0a:a6:21:71:18:c2:1b:26:5b:56:45:c6:85: 66:08:bd:74:e8:b3:7e:91:2a:d4:6c:f1:6c:67:97: b7:6f:29:a6:b0:5f:24:a3:f1:25:8f:20:0c:0b:16: d4:95:e7:74:f4:f7:60:65:37:74:8c:15:fe:e8:83: a7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1B:8D:87:68:31:BD:E0:85:B5:16:5D:5A:E6:F9:6B:E7:E4:E3:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8167820f-dba9-3202-8768-7ee9b0e5f7d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:32:02:4f:bb:14:ea:45:e0:6a:78:a0:28:4a:44:87:39:36: c3:17:1c:02:1d:7e:99:81:30:16:ea:96:64:62:bc:09:2e:48: 6d:8d:80:1b:1e:f3:0a:af:95:09:49:0a:e4:b4:f2:15:ea:7f: 36:64:5a:69:e7:65:64:e7:6d:fa:8a:31:4d:f3:6d:03:27:eb: 41:9e:1e:03:b3:fc:05:c9:0a:79:f7:6a:73:e6:73:83:80:19: f6:eb:d3:8e:75:f4:f5:82:2f:94:53:ec:46:a3:59:f3:c9:64: 37:78:3c:f9:5b:72:58:10:0a:5e:da:d7:37:4d:58:67:9c:f8: 2a:aa:79:0d:ef:c4:61:e2:48:be:3c:99:ca:7a:0e:b7:0a:f0: 57:9b:a2:d1:ef:9b:6c:c8:3d:be:31:02:67:37:51:ed:98:a3: a7:5d:e3:c1:a5:f0:12:ef:de:51:44:0e:7b:72:a1:a8:9f:f5: fe:42:bf:19:35:d8:d4:70:0d:53:cc:f4:bc:d9:a7:f0:ae:a3: 0d:a1:2c:ee:9b:5e:eb:1a:f3:99:90:6d:61:86:8e:d6:d3:d2: f7:b6:b2:df:7e:20:2d:a1:47:fa:7b:2b:12:21:0c:71:95:af: c0:ca:b1:8f:35:b1:a2:a9:81:23:ff:0a:44:99:c7:8e:28:63: 0c:fb:a2:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/moxfiDD8EJv6Z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MzVjMTg0NzUtNDE3MS00NWQ4LWJhZDEtNjhlNzE5YmQ4YjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGzU9VPKgIxmgp3OjbXiRb7ADAY0qxrezrBj 3I27edPghh3xvCN6UZsDIG1Q9sNSMXutG7pXz/i47QL4guswSM1j56b6/K+03xd3 aooIIeKuPQZC97arMhyt5MwGCLOWWqQ+odvDc2mWnnRzx3IaL8Q8R4K87yvTuomO LrD414atWGpBAueidqcsMKnz4bsfeizJ5pdG+dP+jkwD5+vENeEoi21XPbmtZYQb elZEkvSIdwIE3PvoccxIL3iaN+9VCd7TygqmIXEYwhsmW1ZFxoVmCL106LN+kSrU bPFsZ5e3bymmsF8ko/EljyAMCxbUled09PdgZTd0jBX+6IOnDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcbjYdoMb3ghbUWXVrm+Wvn5ONIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODE2NzgyMGYtZGJhOS0z MjAyLTg3NjgtN2VlOWIwZTVmN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAKkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8yAk+7FOpF4Gp4oChKRIc5NsMXHAIdfpmBMBbqlmRivAkuSG2NgBse 8wqvlQlJCuS08hXqfzZkWmnnZWTnbfqKMU3zbQMn60GeHgOz/AXJCnn3anPmc4OA Gfbr04519PWCL5RT7EajWfPJZDd4PPlbclgQCl7a1zdNWGec+CqqeQ3vxGHiSL48 mcp6DrcK8FebotHvm2zIPb4xAmc3Ue2Yo6dd48Gl8BLv3lFEDntyoaif9f5Cvxk1 2NRwDVPM9LzZp/Cuow2hLO6bXusa85mQbWGGjtbT0ve2st9+IC2hR/p7KxIhDHGV r8DKsY81saKpgSP/CkSZx44oYwz7okg= -----END CERTIFICATE-----Generated at Fri Apr 17 14:31:46 2026 by rpki-client