$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/87e248c3-d420-3fbb-ad5d-a3530f238550.roa File: 87e248c3-d420-3fbb-ad5d-a3530f238550.roa (raw, json) Hash identifier: tHnge10+HBg0cPUsLVuFix2Gr0ep47VWp+TOul4HVd8= Subject key identifier: 9D:17:7D:2D:9B:30:28:96:62:35:6E:84:C9:AE:37:8B:11:F6:CE:F4 Certificate issuer: /CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247 Certificate serial: 010D0C9F4328584D52434E2CD9DD488C40851080 Authority key identifier: 42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/87e248c3-d420-3fbb-ad5d-a3530f238550.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 17216 IP address blocks: 162.254.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:4e:2c:d9:dd:48:8c:40:85:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=f138d9d3-0d04-4d56-8bb4-56f50cf49329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:97:dd:ca:60:8e:0d:68:06:bd:bd:11:7c:c2: 94:b0:8e:6d:b8:5e:02:c5:ad:0c:e8:4c:dd:87:ee: cf:0a:f1:04:c6:43:bd:0d:19:b1:26:55:47:0b:0b: 2d:58:10:c4:1e:64:8f:29:fc:83:d8:e0:87:0c:2e: d5:ae:d3:8d:bb:bb:4e:2b:b6:3c:67:44:b9:be:b7: 76:e4:db:85:d5:6e:10:17:3a:a0:be:5a:bd:7b:13: 17:17:53:fa:14:86:2b:51:8c:b0:bd:90:84:49:52: 19:0b:74:15:cb:56:95:11:14:29:3e:76:31:35:b9: 1b:d9:b2:29:4c:48:a3:84:3f:23:91:eb:21:7a:d7: 6c:82:d4:63:1a:cb:0f:91:e0:3e:c2:7d:08:64:34: b4:1e:31:69:d6:0f:9f:1e:ae:d4:de:df:6e:ba:6c: 01:d5:64:e3:fd:03:9c:07:e9:b2:31:33:3f:ed:da: 38:ca:15:ea:bd:88:75:4b:e9:27:df:35:ce:4d:df: c8:93:46:49:7e:06:14:a0:dc:92:da:a1:3a:69:61: 4a:e3:b4:84:1b:dc:3e:55:11:21:5d:24:be:d2:be: a7:d0:e6:ea:3e:f2:30:20:fd:15:fb:7b:b3:b3:2d: 98:b1:21:1f:7d:30:c0:22:ed:f5:a0:0a:25:8c:11: c8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:17:7D:2D:9B:30:28:96:62:35:6E:84:C9:AE:37:8B:11:F6:CE:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/87e248c3-d420-3fbb-ad5d-a3530f238550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl X509v3 Authority Key Identifier: keyid:42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer sbgp-ipAddrBlock: critical IPv4: 162.254.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:0e:91:94:77:c5:c4:11:c5:19:3a:d2:2c:41:d7:57:4d:13: c1:27:49:ec:ea:ad:b3:80:ae:e2:d0:3c:35:38:50:00:43:59: 62:6b:2e:a6:29:76:f3:fe:6d:51:3f:d5:6b:1c:fa:7a:7a:ef: 16:ab:27:dc:87:57:b0:9e:41:67:b5:3b:12:d9:c3:60:4a:05: 8c:76:bc:ee:20:69:16:ac:31:40:d7:89:9d:82:da:e7:67:13: 02:4b:16:4e:c2:13:fd:48:41:f3:31:07:4a:93:be:23:d1:40: ea:6a:a5:d2:31:00:2c:c6:7d:42:62:2a:be:0a:43:bd:94:82: aa:f4:ef:da:dd:b2:e9:e7:a8:b2:04:69:8d:2f:14:7f:57:63: 79:da:c2:2c:5e:c7:b0:dd:a0:07:aa:bc:1d:52:81:27:ff:31: c3:33:05:52:8a:13:46:6d:3e:be:61:26:8b:25:73:0c:76:11: 1a:c8:e2:9a:18:89:48:b6:6f:fa:cd:58:95:b7:36:91:95:c0: 82:67:d5:1e:58:02:c0:75:a4:99:33:aa:b6:bc:f6:19:96:1b: d0:b3:ec:ba:60:69:c8:98:3a:7b:8f:aa:3a:ad:3e:99:7b:84: 34:41:3c:35:04:20:07:f0:3f:da:cc:bd:41:a9:72:d9:f7:c8: 23:2a:88:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ04s2d1IjECFEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiYjk3NzUtOTYzMS00YmU0LWE5YzYtMTFiOGRkZmU2 MjQ3MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk ZjEzOGQ5ZDMtMGQwNC00ZDU2LThiYjQtNTZmNTBjZjQ5MzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJfdymCODWgGvb0RfMKUsI5tuF4Cxa0M6Ezd h+7PCvEExkO9DRmxJlVHCwstWBDEHmSPKfyD2OCHDC7VrtONu7tOK7Y8Z0S5vrd2 5NuF1W4QFzqgvlq9exMXF1P6FIYrUYywvZCESVIZC3QVy1aVERQpPnYxNbkb2bIp TEijhD8jkeshetdsgtRjGssPkeA+wn0IZDS0HjFp1g+fHq7U3t9uumwB1WTj/QOc B+myMTM/7do4yhXqvYh1S+kn3zXOTd/Ik0ZJfgYUoNyS2qE6aWFK47SEG9w+VREh XSS+0r6n0ObqPvIwIP0V+3uzsy2YsSEffTDAIu31oAoljBHIlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0XfS2bMCiWYjVuhMmuN4sR9s70MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lN2Ji OTc3NS05NjMxLTRiZTQtYTljNi0xMWI4ZGRmZTYyNDcvODdlMjQ4YzMtZDQyMC0z ZmJiLWFkNWQtYTM1MzBmMjM4NTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTdiYjk3NzUtOTYzMS00YmU0LWE5 YzYtMTFiOGRkZmU2MjQ3L2U3YmI5Nzc1LTk2MzEtNGJlNC1hOWM2LTExYjhkZGZl NjI0Ny5jcmwwHwYDVR0jBBgwFoAUQs7CZnUe84HwJTWBQIOwBNdo65kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lN2JiOTc3NS05NjMxLTRiZTQtYTljNi0xMWI4 ZGRmZTYyNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCov4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8OkZR3xcQRxRk60ixB11dNE8EnSezqrbOAruLQPDU4UABDWWJrLqYp dvP+bVE/1Wsc+np67xarJ9yHV7CeQWe1OxLZw2BKBYx2vO4gaRasMUDXiZ2C2udn EwJLFk7CE/1IQfMxB0qTviPRQOpqpdIxACzGfUJiKr4KQ72Ugqr079rdsunnqLIE aY0vFH9XY3nawixex7DdoAeqvB1SgSf/McMzBVKKE0ZtPr5hJoslcwx2ERrI4poY iUi2b/rNWJW3NpGVwIJn1R5YAsB1pJkzqra89hmWG9Cz7LpgaciYOnuPqjqtPpl7 hDRBPDUEIAfwP9rMvUGpctn3yCMqiPk= -----END CERTIFICATE-----Generated at Fri Apr 17 16:59:33 2026 by rpki-client