$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f028686d-1605-3c7d-8ae0-cf9f013f3c62.roa File: f028686d-1605-3c7d-8ae0-cf9f013f3c62.roa (raw, json) Hash identifier: Ciur1f6bGT5aoogrzBe+ZXB/Fdl2hAgCYY03+92oaqs= Subject key identifier: BE:7D:7A:91:04:8C:B9:10:D3:E0:24:FC:EC:A5:BB:2B:A3:74:BE:BC Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D87FA989C7B5CC91605942D80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f028686d-1605-3c7d-8ae0-cf9f013f3c62.roa Signing time: Fri 17 Apr 2026 01:00:27 +0000 ROA not before: Fri 17 Apr 2026 01:00:27 +0000 ROA not after: Thu 16 Jul 2026 01:00:27 +0000 asID: 7459 IP address blocks: 161.58.0.0/16 maxlen: 24 198.65.128.0/19 maxlen: 24 207.150.0.0/17 maxlen: 24 207.153.128.0/18 maxlen: 24 207.153.192.0/18 maxlen: 24 207.196.0.0/17 maxlen: 24 207.197.128.0/17 maxlen: 24 207.199.0.0/17 maxlen: 24 207.206.0.0/17 maxlen: 24 209.69.0.0/16 maxlen: 24 209.75.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:fa:98:9c:7b:5c:c9:16:05:94:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 17 01:00:27 2026 GMT Not After : Jul 16 01:00:27 2026 GMT Subject: CN=17df4a51-82ad-433f-89a3-567c11246613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:07:bf:d3:79:cc:6f:e6:ba:70:31:5b:12:0d: 87:06:2a:ea:7e:59:e2:df:10:59:ad:36:b5:75:59: a7:e5:54:fd:3a:14:f2:94:cc:9d:f0:82:2d:61:fe: 6e:a7:43:01:8b:07:69:2a:7a:f8:cb:ff:5e:51:1f: e1:01:25:df:f0:23:0a:d7:0e:96:68:f4:a7:ba:53: 79:27:71:1f:4b:ec:25:b6:ea:49:91:3b:06:00:10: 2d:bd:29:50:20:e0:8c:4a:ec:77:6c:61:20:56:b5: bd:48:ca:37:71:a2:80:7d:b6:d5:b2:f2:da:fe:8d: 03:26:a3:b2:7d:88:78:89:d0:58:84:d8:2a:08:82: ea:c5:33:6f:f4:81:bc:aa:e8:4d:a0:e8:31:96:68: d3:d0:c1:c6:fd:1f:3f:9c:f4:f4:af:67:96:e7:de: 1f:ba:f3:b0:1c:a3:6c:2c:6a:37:1b:b5:2c:f5:26: d8:1b:24:7a:c1:04:e7:50:74:42:5b:f2:af:41:c3: 51:86:2e:15:79:61:97:14:13:4a:9a:e0:02:02:f5: 09:80:f0:6e:8a:ad:f2:ac:5d:6a:b8:1e:68:a6:12: 79:66:ac:48:fb:01:8f:a7:90:68:5d:86:10:06:ea: 2a:4e:3f:93:21:47:25:22:e6:84:93:e3:c7:e8:a7: 32:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:7D:7A:91:04:8C:B9:10:D3:E0:24:FC:EC:A5:BB:2B:A3:74:BE:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f028686d-1605-3c7d-8ae0-cf9f013f3c62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 161.58.0.0/16 198.65.128.0/19 207.150.0.0/17 207.153.128.0/17 207.196.0.0/17 207.197.128.0/17 207.199.0.0/17 207.206.0.0/17 209.69.0.0/16 209.75.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:77:1a:fc:4b:28:ab:90:22:81:38:35:fc:0d:40:66:4e:4c: 14:07:e3:18:60:66:69:3d:e7:77:a3:00:bc:b7:53:dc:b7:04: 5e:03:d4:3f:16:89:34:53:82:67:77:fa:bf:f0:43:83:28:c1: b2:f5:02:8c:47:61:32:8d:66:3a:46:c7:b6:57:a3:bf:71:c2: f8:1f:ef:53:d8:a7:6d:f5:d5:66:8a:b8:a9:58:6f:bc:bf:cf: 00:31:27:8d:e1:c6:f4:46:0e:79:65:a9:59:a1:69:cb:40:eb: c6:cb:1a:aa:88:d0:e7:08:df:4b:c6:ca:56:5a:40:e0:a0:20: 7a:8d:4f:fc:e3:0b:5f:61:26:0d:c9:91:5f:d3:cd:54:5a:e1: 55:fd:40:36:a1:2c:0a:7f:e5:c1:9a:ce:c1:f4:b9:3b:02:8c: 88:b5:89:55:d1:bc:cf:4a:b3:37:e2:af:69:27:1d:3d:51:b1: 3a:9e:b5:6f:99:4b:fe:1e:2e:33:84:80:ee:3b:49:38:48:46: f2:ba:b2:40:1e:5f:ec:b7:8b:b1:f8:07:e7:eb:81:3f:00:97: c9:85:4e:c0:ff:82:d8:40:89:80:19:95:8a:ca:14:f4:92:3f: 2c:83:1f:32:86:e3:80:f5:67:20:93:e0:41:c4:bd:5f:8a:71: 6d:6d:34:c4 -----BEGIN CERTIFICATE----- MIIGdjCCBV6gAwIBAgIUAQ0Mn0MoWE2H+pice1zJFgWULYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxNzAxMDAyN1oXDTI2MDcxNjAxMDAyN1owLzEtMCsGA1UEAxMk MTdkZjRhNTEtODJhZC00MzNmLTg5YTMtNTY3YzExMjQ2NjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkge/03nMb+a6cDFbEg2HBirqflni3xBZrTa1 dVmn5VT9OhTylMyd8IItYf5up0MBiwdpKnr4y/9eUR/hASXf8CMK1w6WaPSnulN5 J3EfS+wltupJkTsGABAtvSlQIOCMSux3bGEgVrW9SMo3caKAfbbVsvLa/o0DJqOy fYh4idBYhNgqCILqxTNv9IG8quhNoOgxlmjT0MHG/R8/nPT0r2eW594fuvOwHKNs LGo3G7Us9SbYGyR6wQTnUHRCW/KvQcNRhi4VeWGXFBNKmuACAvUJgPBuiq3yrF1q uB5ophJ5ZqxI+wGPp5BoXYYQBuoqTj+TIUclIuaEk+PH6KcynQIDAQABo4IDiDCC A4QwHQYDVR0OBBYEFL59epEEjLkQ0+Ak/OyluyujdL68MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZjAyODY4NmQtMTYwNS0z YzdkLThhZTAtY2Y5ZjAxM2YzYzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMFIGCCsGAQUFBwEHAQH/BEMwQTA/BAIAATA5AwMAoToDBAXG QYADBAfPlgADBAfPmYADBAfPxAADBAfPxYADBAfPxwADBAfPzgADAwDRRQMDANFL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFh3GvxLKKuQIoE4NfwNQGZOTBQH4xhgZmk953ejALy3U9y3BF4D 1D8WiTRTgmd3+r/wQ4MowbL1AoxHYTKNZjpGx7ZXo79xwvgf71PYp2311WaKuKlY b7y/zwAxJ43hxvRGDnllqVmhactA68bLGqqI0OcI30vGylZaQOCgIHqNT/zjC19h Jg3JkV/TzVRa4VX9QDahLAp/5cGazsH0uTsCjIi1iVXRvM9Kszfir2knHT1RsTqe tW+ZS/4eLjOEgO47SThIRvK6skAeX+y3i7H4B+frgT8Al8mFTsD/gthAiYAZlYrK FPSSPyyDHzKG44D1ZyCT4EHEvV+KcW1tNMQ= -----END CERTIFICATE-----Generated at Fri Apr 17 13:17:53 2026 by rpki-client