$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/da1cc5f4-0a9d-3e07-9443-8532ccfa6403.roa File: da1cc5f4-0a9d-3e07-9443-8532ccfa6403.roa (raw, json) Hash identifier: /+DoYQrH/7F8lvsnO4N3Vk3sebiT2rdGNIXlhLO/hz8= Subject key identifier: E7:9A:4E:D6:16:F8:36:4A:C5:FE:B8:79:39:61:AC:2D:F8:55:CC:53 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7B6A8CCD77B562F522DF35C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/da1cc5f4-0a9d-3e07-9443-8532ccfa6403.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 397601 IP address blocks: 204.2.56.128/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:8c:cd:77:b5:62:f5:22:df:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=c914e5b0-e94e-4630-b642-aa85e607389f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:38:90:49:39:58:e6:d0:5a:84:92:28:32:75: d9:e1:20:98:9c:dc:74:f6:bd:d6:30:82:5b:65:5d: 6e:d4:a7:1c:5a:f9:1c:3a:5c:a3:71:e2:68:32:b3: 1e:fd:f0:dc:c9:46:f9:9b:03:72:ac:08:63:3d:c7: 16:ad:d0:e8:dc:5f:16:7a:e9:52:1f:0c:5c:f1:bf: 58:56:f4:da:49:8f:aa:12:cd:bf:ed:6b:13:ad:55: 8f:35:e8:3a:87:90:24:79:33:84:8f:fe:de:97:96: 70:a1:de:f7:dc:4b:4c:94:11:9d:79:33:21:a2:5e: bf:37:05:91:b8:02:68:d5:39:97:0e:29:c5:4d:8d: 5e:c5:b8:85:b9:d1:87:77:e1:64:83:7a:d9:de:b5: f5:59:01:6b:df:d8:4e:13:eb:a1:ae:bd:a5:15:1c: f6:49:de:da:10:7a:4c:06:da:49:1b:46:02:73:6d: 6e:43:2a:7f:b5:5f:d7:16:29:6d:69:c8:ff:3a:e9: f6:c6:3b:21:d6:0f:d5:e5:01:b7:cd:53:58:6b:1a: 14:14:2c:a7:82:55:b9:80:43:93:27:ae:3f:a7:5d: c8:c6:fa:4b:e5:a3:53:96:93:e3:3c:bb:06:a1:7c: 32:d9:7f:a6:8c:aa:26:37:4f:6d:06:39:68:33:14: 95:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9A:4E:D6:16:F8:36:4A:C5:FE:B8:79:39:61:AC:2D:F8:55:CC:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/da1cc5f4-0a9d-3e07-9443-8532ccfa6403.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.56.128/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:95:e8:a2:5a:64:ea:e7:ef:1e:7a:46:58:4f:4d:0c:9a:2e: c1:08:69:32:02:25:4e:60:9b:7e:44:38:29:d0:6e:d7:c1:fb: 39:de:c2:db:2b:19:01:0b:ae:93:13:c0:e4:b8:f5:4a:c5:7c: 75:85:40:02:5b:e4:03:b7:a3:2b:8f:62:47:35:4e:59:31:66: b1:1d:e7:7c:b6:c8:a7:0c:b4:4a:b4:9f:fb:49:2c:91:91:8b: 71:5a:f1:b5:e1:8f:e5:61:ca:e2:1f:08:17:7d:e3:c4:61:c0: af:22:82:5b:50:14:e4:ab:dc:24:94:f1:45:e9:32:8e:f5:d0: 0a:8d:60:c0:bb:1d:97:57:38:11:15:d9:3d:b9:93:53:fc:62: a2:94:c2:77:49:f4:81:d6:54:11:5b:34:b2:3e:d5:d0:75:53: 9c:90:b8:49:68:c9:e2:96:ef:62:0a:c7:71:2d:8a:ee:23:21: 03:b9:52:90:00:6b:37:e7:b7:c0:df:f9:ae:60:f0:ca:85:91: 7f:0c:1c:6e:43:db:72:41:78:67:2b:56:93:ba:d7:7d:c5:a7: 85:88:9e:74:36:b3:a2:bb:dd:50:7c:74:c4:0a:cc:3f:74:3a: 36:01:a0:32:14:bd:87:4f:e7:bb:90:fe:3a:2a:d5:2b:34:fc: 52:48:30:b8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE17aozNd7Vi9SLfNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk YzkxNGU1YjAtZTk0ZS00NjMwLWI2NDItYWE4NWU2MDczODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDiQSTlY5tBahJIoMnXZ4SCYnNx09r3WMIJb ZV1u1KccWvkcOlyjceJoMrMe/fDcyUb5mwNyrAhjPccWrdDo3F8WeulSHwxc8b9Y VvTaSY+qEs2/7WsTrVWPNeg6h5AkeTOEj/7el5Zwod733EtMlBGdeTMhol6/NwWR uAJo1TmXDinFTY1exbiFudGHd+Fkg3rZ3rX1WQFr39hOE+uhrr2lFRz2Sd7aEHpM BtpJG0YCc21uQyp/tV/XFiltacj/Oun2xjsh1g/V5QG3zVNYaxoUFCynglW5gEOT J64/p13IxvpL5aNTlpPjPLsGoXwy2X+mjKomN09tBjloMxSV6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOeaTtYW+DZKxf64eTlhrC34VcxTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZGExY2M1ZjQtMGE5ZC0z ZTA3LTk0NDMtODUzMmNjZmE2NDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEzAI4gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBSleiiWmTq5+8eekZYT00Mmi7BCGkyAiVOYJt+RDgp0G7Xwfs53sLb KxkBC66TE8DkuPVKxXx1hUACW+QDt6Mrj2JHNU5ZMWaxHed8tsinDLRKtJ/7SSyR kYtxWvG14Y/lYcriHwgXfePEYcCvIoJbUBTkq9wklPFF6TKO9dAKjWDAux2XVzgR Fdk9uZNT/GKilMJ3SfSB1lQRWzSyPtXQdVOckLhJaMnilu9iCsdxLYruIyEDuVKQ AGs357fA3/muYPDKhZF/DBxuQ9tyQXhnK1aTutd9xaeFiJ50NrOiu91QfHTECsw/ dDo2AaAyFL2HT+e7kP46KtUrNPxSSDC4 -----END CERTIFICATE-----Generated at Fri Apr 17 11:43:36 2026 by rpki-client