$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8a1c3af1-d9e4-3809-a071-b6ece6d98845.roa File: 8a1c3af1-d9e4-3809-a071-b6ece6d98845.roa (raw, json) Hash identifier: XVFaljAz1MIIXaxwnaixZo50ucj5qeU3wTNva2fLb1s= Subject key identifier: E3:3C:82:CC:3B:E2:F2:8C:C4:08:25:51:55:14:63:70:0D:C3:DD:A2 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D812C9B86CA862FCD4144B814 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8a1c3af1-d9e4-3809-a071-b6ece6d98845.roa Signing time: Tue 14 Apr 2026 14:30:44 +0000 ROA not before: Tue 14 Apr 2026 14:30:44 +0000 ROA not after: Mon 13 Jul 2026 14:30:44 +0000 asID: 148996 IP address blocks: 128.242.126.0/24 maxlen: 24 128.242.127.0/24 maxlen: 24 157.238.172.0/24 maxlen: 24 157.238.174.0/24 maxlen: 24 157.238.246.0/24 maxlen: 24 157.238.247.0/24 maxlen: 24 168.143.116.0/24 maxlen: 24 168.143.117.0/24 maxlen: 24 168.143.118.0/24 maxlen: 24 204.141.213.0/24 maxlen: 24 204.141.214.0/24 maxlen: 24 204.141.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:2c:9b:86:ca:86:2f:cd:41:44:b8:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 14 14:30:44 2026 GMT Not After : Jul 13 14:30:44 2026 GMT Subject: CN=c9a62a94-1455-4b32-9d90-741e85331388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d0:e2:73:79:59:42:ac:e8:71:72:d2:f1:cf: 4a:c0:56:6a:b1:b6:df:44:8b:0c:c2:2d:42:62:f6: 46:e3:fd:7e:ac:f2:f9:14:e6:a7:da:96:08:e5:0a: 47:9d:d6:be:d1:d9:9e:12:03:06:1b:98:c0:72:01: bc:32:31:44:74:f1:c9:da:7e:3b:29:c1:c6:2a:a9: 97:43:d2:d6:78:d2:2d:8e:53:7e:25:7f:81:c8:d3: 3b:c5:e8:ba:da:a5:d6:05:1f:17:f2:33:f0:50:4d: d9:4d:aa:88:46:85:1f:c6:07:47:0e:85:cc:b0:41: 1d:c8:84:52:8f:d2:05:52:4e:f0:d8:d9:b4:36:f2: 5c:9b:d4:5b:1f:fd:9a:74:08:26:72:ae:c5:d8:f1: 66:0a:52:65:44:7e:ab:d8:42:c1:31:f8:57:72:51: bc:e7:5b:e0:87:0b:1f:64:9e:9b:ba:e8:33:16:0e: a1:f9:ce:d9:f3:f6:f2:a6:94:f2:91:a3:12:3f:23: 92:d3:cf:77:e3:53:fe:0a:9f:c6:37:48:63:3c:be: 38:6b:0a:fe:34:da:c4:4e:aa:b5:a5:b6:c6:ee:0c: a8:9f:83:05:03:8b:3e:0f:77:77:ad:ab:3f:76:90: 1b:6a:2e:73:9b:ec:e0:2a:19:0f:2b:3f:1d:a6:14: 2f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3C:82:CC:3B:E2:F2:8C:C4:08:25:51:55:14:63:70:0D:C3:DD:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8a1c3af1-d9e4-3809-a071-b6ece6d98845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.126.0/23 157.238.172.0/24 157.238.174.0/24 157.238.246.0/23 168.143.116.0-168.143.118.255 204.141.213.0-204.141.215.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:52:c4:25:26:95:d6:8c:c4:ee:d3:ce:31:98:33:46:cc:3a: d4:26:69:8c:64:76:1b:1c:4f:12:d2:ff:bc:6e:e6:e4:47:f9: de:ab:2f:8b:f7:aa:79:b5:a6:5d:a1:cf:85:52:42:0f:29:e6: e7:1d:8c:64:ae:e2:97:fd:e4:61:38:ef:6a:87:86:19:76:c2: 3f:ba:6a:25:85:22:09:14:80:66:49:37:3c:e0:ab:87:18:3b: 96:05:f3:77:72:2f:5c:83:37:a2:d8:02:61:f8:91:ca:c9:8f: e4:76:05:0f:7a:dc:ed:6f:a2:78:82:56:75:06:75:e9:e9:fa: 25:58:1a:c9:2b:0f:9a:b9:40:17:dd:f4:b6:53:bf:ea:f2:f8: ee:47:ff:34:ff:10:c1:a5:4a:48:ab:4f:78:2e:23:40:7b:fc: 14:34:d8:1f:a5:e3:ae:46:5a:c1:f3:b4:99:25:36:fb:af:9f: db:8a:22:eb:05:20:9d:e4:cd:70:6b:5e:eb:0a:a3:79:ad:fa: 49:a7:8f:8f:b1:06:12:79:17:40:83:cf:db:4e:2d:24:62:3b: 85:ee:54:55:4b:95:72:11:96:0f:0d:37:5a:55:59:70:15:cd: 37:ef:3d:64:d9:e1:37:f0:0c:92:b9:78:d7:65:ec:e0:4c:92: 94:f9:2f:68 -----BEGIN CERTIFICATE----- MIIGcTCCBVmgAwIBAgIUAQ0Mn0MoWE2BLJuGyoYvzUFEuBQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxNDE0MzA0NFoXDTI2MDcxMzE0MzA0NFowLzEtMCsGA1UEAxMk YzlhNjJhOTQtMTQ1NS00YjMyLTlkOTAtNzQxZTg1MzMxMzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9Dic3lZQqzocXLS8c9KwFZqsbbfRIsMwi1C YvZG4/1+rPL5FOan2pYI5QpHnda+0dmeEgMGG5jAcgG8MjFEdPHJ2n47KcHGKqmX Q9LWeNItjlN+JX+ByNM7xei62qXWBR8X8jPwUE3ZTaqIRoUfxgdHDoXMsEEdyIRS j9IFUk7w2Nm0NvJcm9RbH/2adAgmcq7F2PFmClJlRH6r2ELBMfhXclG851vghwsf ZJ6buugzFg6h+c7Z8/byppTykaMSPyOS089341P+Cp/GN0hjPL44awr+NNrETqq1 pbbG7gyon4MFA4s+D3d3ras/dpAbai5zm+zgKhkPKz8dphQvTwIDAQABo4IDgzCC A38wHQYDVR0OBBYEFOM8gsw74vKMxAglUVUUY3ANw92iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGExYzNhZjEtZDllNC0z ODA5LWEwNzEtYjZlY2U2ZDk4ODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQBgPJ+AwQA ne6sAwQAne6uAwQBne72MAwDBAKoj3QDBACoj3YwDAMEAMyN1QMEA8yN0DBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQBuUsQlJpXWjMTu084xmDNGzDrUJmmMZHYbHE8S0v+8bubkR/neqy+L96p5 taZdoc+FUkIPKebnHYxkruKX/eRhOO9qh4YZdsI/umolhSIJFIBmSTc84KuHGDuW BfN3ci9cgzei2AJh+JHKyY/kdgUPetztb6J4glZ1BnXp6folWBrJKw+auUAX3fS2 U7/q8vjuR/80/xDBpUpIq094LiNAe/wUNNgfpeOuRlrB87SZJTb7r5/biiLrBSCd 5M1wa17rCqN5rfpJp4+PsQYSeRdAg8/bTi0kYjuF7lRVS5VyEZYPDTdaVVlwFc03 7z1k2eE38AySuXjXZezgTJKU+S9o -----END CERTIFICATE-----Generated at Fri Apr 17 11:32:18 2026 by rpki-client