$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c0815d17-83a5-3543-8437-c33f765a2be5.roa File: c0815d17-83a5-3543-8437-c33f765a2be5.roa (raw, json) Hash identifier: C3M7oIVwCR3c20n7kr3LqZNMFHk4VSBTHlttGNax/h4= Subject key identifier: 14:67:CA:8E:63:A3:F8:D4:C4:E7:66:70:4D:03:F4:0F:E2:5A:5E:48 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7A052F8E743CE1DEFB77C890 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c0815d17-83a5-3543-8437-c33f765a2be5.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 1225 IP address blocks: 198.64.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:2f:8e:74:3c:e1:de:fb:77:c8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=faa765a2-e130-4c9d-9978-1c00fdd9118b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b8:9e:7f:69:f1:2d:63:ca:fc:23:e0:ba:1b: cb:f7:95:0a:d6:8e:38:f1:4b:f4:e3:5e:39:bf:25: ac:d8:99:57:12:91:8e:91:1a:8f:25:33:1e:ab:80: 13:39:a6:97:1e:62:78:7b:c7:8d:e5:d3:a3:0b:54: 89:09:ac:43:af:27:76:36:e7:43:7a:7a:d2:3e:a7: 18:f1:2c:e6:3e:f7:ce:75:6d:49:f8:18:91:18:1b: 3e:ee:1e:08:30:57:12:d8:21:7c:8e:eb:4b:43:9f: fd:e2:4e:92:bc:da:71:13:1d:33:63:41:c4:1b:10: b1:8b:c7:58:b4:48:55:a2:95:18:80:e6:0b:4f:9b: 38:7a:46:0c:84:c5:fd:07:d1:67:5b:63:14:9c:59: 47:00:94:27:bf:1a:8d:25:30:d8:74:5a:47:06:86: b1:12:b2:05:e4:96:3e:14:c7:bb:c3:79:7f:e3:81: bb:d5:9e:b1:c7:b0:91:ef:63:13:d0:67:9a:5f:87: 48:99:b4:49:bd:38:62:f3:b7:eb:b3:63:33:e8:ae: c6:c4:71:4f:1a:b6:a5:1e:5b:a0:dd:eb:e3:5e:c3: 8b:f8:07:56:61:4a:04:3b:de:7b:45:45:76:7a:3e: 05:a6:42:f3:6d:55:dc:d5:30:fb:ba:f6:65:03:2e: e1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:67:CA:8E:63:A3:F8:D4:C4:E7:66:70:4D:03:F4:0F:E2:5A:5E:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c0815d17-83a5-3543-8437-c33f765a2be5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.64.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:eb:6b:b0:a4:66:f1:d2:ce:ec:26:f4:43:f8:77:56:57:6f: 3a:18:bb:85:30:9f:f2:5e:67:12:42:d2:63:1e:37:b8:96:f6: 9b:37:25:53:d9:f8:71:c4:99:5f:e0:4a:e5:45:11:2f:54:92: 82:aa:9e:b4:f3:90:25:d4:47:1a:dc:42:5f:ca:e6:29:71:d7: 5c:f3:db:5a:53:7b:61:ef:26:12:ce:ef:8c:5a:76:57:37:fc: bf:50:00:a3:19:52:28:a4:a6:8c:61:a6:45:24:2f:0b:bf:ff: ea:08:e2:e2:22:90:87:ad:3a:2b:df:06:32:e8:4e:58:65:99: 21:0e:e0:99:59:e0:6b:56:19:4a:a2:44:e6:c5:6f:06:55:cb: 7a:48:9e:62:87:d8:b2:ca:b9:04:38:a7:c7:e8:30:53:d4:81: d8:1f:b1:cf:01:bb:c7:90:77:89:55:2f:bf:a1:ee:d0:28:cc: a4:fc:54:68:f6:01:2e:dc:1e:dd:12:aa:f4:2d:85:d2:28:87: 85:74:32:05:1e:9b:4d:d2:3b:77:ca:2d:96:26:01:9d:36:84: 68:7c:8c:88:c1:07:ac:29:d9:d7:d1:c9:cc:28:6a:66:d2:7c: 5c:b8:ce:4a:af:46:2e:e7:c1:4a:24:c8:94:60:c1:44:7c:a9: eb:b3:54:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BS+OdDzh3vt3yJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk ZmFhNzY1YTItZTEzMC00YzlkLTk5NzgtMWMwMGZkZDkxMThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbief2nxLWPK/CPguhvL95UK1o448Uv04145 vyWs2JlXEpGOkRqPJTMeq4ATOaaXHmJ4e8eN5dOjC1SJCaxDryd2NudDenrSPqcY 8SzmPvfOdW1J+BiRGBs+7h4IMFcS2CF8jutLQ5/94k6SvNpxEx0zY0HEGxCxi8dY tEhVopUYgOYLT5s4ekYMhMX9B9FnW2MUnFlHAJQnvxqNJTDYdFpHBoaxErIF5JY+ FMe7w3l/44G71Z6xx7CR72MT0GeaX4dImbRJvThi87frs2Mz6K7GxHFPGralHlug 3evjXsOL+AdWYUoEO957RUV2ej4FpkLzbVXc1TD7uvZlAy7h0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRnyo5jo/jUxOdmcE0D9A/iWl5IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzA4MTVkMTctODNhNS0z NTQzLTg0MzctYzMzZjc2NWEyYmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxkAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPra7CkZvHSzuwm9EP4d1ZXbzoYu4Uwn/JeZxJC0mMeN7iW9ps3JVPZ +HHEmV/gSuVFES9UkoKqnrTzkCXURxrcQl/K5ilx11zz21pTe2HvJhLO74xadlc3 /L9QAKMZUiikpoxhpkUkLwu//+oI4uIikIetOivfBjLoTlhlmSEO4JlZ4GtWGUqi RObFbwZVy3pInmKH2LLKuQQ4p8foMFPUgdgfsc8Bu8eQd4lVL7+h7tAozKT8VGj2 AS7cHt0SqvQthdIoh4V0MgUem03SO3fKLZYmAZ02hGh8jIjBB6wp2dfRycwoambS fFy4zkqvRi7nwUokyJRgwUR8qeuzVNE= -----END CERTIFICATE-----Generated at Fri Apr 17 15:42:41 2026 by rpki-client