$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5cf8fa1d-c180-3677-93af-e4ff155a7924.roa File: 5cf8fa1d-c180-3677-93af-e4ff155a7924.roa (raw, json) Hash identifier: qMXvXQitN6NcqV63UUcfDhSN5SKkSB6Oib8U3XxC4DU= Subject key identifier: 9E:98:25:2F:61:FD:82:0D:C4:1C:A0:CD:BD:EF:7D:24:1F:93:1B:C9 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584D6EDA63059DBE683D605C7900 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5cf8fa1d-c180-3677-93af-e4ff155a7924.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 5511 IP address blocks: 196.27.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:63:05:9d:be:68:3d:60:5c:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=bff3a72b-aeaa-42b2-9382-7b5ac1f51790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c8:94:d1:bc:c4:6a:64:2b:d4:0f:29:53:5e: 8c:25:a3:8c:57:24:e4:21:fb:9d:9d:2d:a8:cd:d6: 24:b8:c8:ac:9f:fe:1d:c5:e6:28:ff:e0:d7:83:a4: ef:ee:71:35:1c:a7:96:eb:a3:b9:e6:d2:cb:4b:c1: 10:0e:19:90:d7:14:b0:c7:37:ad:5a:12:92:de:04: 48:3b:ff:5a:ca:20:fc:c7:e3:ed:a9:ad:bb:a3:30: ba:8d:0c:ec:a9:92:6d:17:22:94:ed:06:de:15:d8: 96:e1:66:9f:cf:f6:df:3a:bb:d6:ad:4a:4c:38:6b: 61:b0:06:62:c9:09:11:a8:f8:d1:bf:54:fe:87:0f: 36:1c:a7:9f:a2:25:6d:f1:54:2b:f2:bc:e2:62:14: 9a:0c:33:77:78:41:4c:f2:4c:71:5d:8c:c3:54:70: cd:a8:7b:51:bc:81:4e:fb:e3:d5:ea:1f:85:7c:b5: 56:d5:43:d9:b0:b9:03:a0:2e:fa:a1:1a:f2:19:96: 00:ce:48:70:17:f2:10:df:a3:ba:c0:5d:cb:a1:7c: 2a:64:8c:38:be:6c:fd:e5:66:1d:f5:12:b7:fd:31: e8:3b:30:88:d2:ac:7a:01:db:25:d7:91:b5:54:36: 4d:cc:ed:dc:aa:66:8b:62:9f:df:28:ba:65:ec:28: fa:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:98:25:2F:61:FD:82:0D:C4:1C:A0:CD:BD:EF:7D:24:1F:93:1B:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5cf8fa1d-c180-3677-93af-e4ff155a7924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 196.27.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:2a:4f:43:62:38:19:71:4a:a1:b8:86:1d:e5:38:35:0a:97: 8e:a8:01:62:6e:bf:d4:dd:07:50:b7:6a:30:16:32:67:b9:d1: 89:25:d6:83:a6:49:e7:79:ef:9b:4c:1e:f4:c0:2a:0c:1c:ab: 58:b4:94:fa:59:14:79:26:de:b7:50:81:57:c9:3b:0c:93:72: e8:ca:d9:25:bb:7d:4e:f4:32:34:51:c3:1a:10:05:ca:b7:44: 92:4a:e4:95:30:d8:7b:24:ca:15:d2:7b:10:22:82:63:85:3c: ae:96:54:7b:92:82:dd:bd:29:2e:0a:33:b9:86:71:7c:aa:8b: de:a4:d1:cb:48:6b:27:9b:ab:bc:85:e7:99:5f:7b:2c:82:c3: 92:bb:4f:52:73:2f:99:de:30:11:23:14:f1:74:11:c0:47:58: eb:68:34:28:b7:70:da:1a:8d:47:ed:0d:6e:d0:48:2e:cd:26: bb:a4:8c:6e:83:bd:13:cf:bb:b5:cf:54:05:fd:1a:cf:b1:04: 01:2e:d1:e0:0a:79:f5:1e:bd:06:69:65:31:44:39:77:a7:03: ff:d6:7b:75:7d:af:8c:fb:e3:e4:7a:ff:68:7f:c0:8d:1f:ec: 52:e5:0a:ae:cb:ca:d4:3a:7f:39:18:b5:39:48:8c:e6:e8:bc: 03:1c:25:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2mMFnb5oPWBceQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk YmZmM2E3MmItYWVhYS00MmIyLTkzODItN2I1YWMxZjUxNzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsiU0bzEamQr1A8pU16MJaOMVyTkIfudnS2o zdYkuMisn/4dxeYo/+DXg6Tv7nE1HKeW66O55tLLS8EQDhmQ1xSwxzetWhKS3gRI O/9ayiD8x+Ptqa27ozC6jQzsqZJtFyKU7QbeFdiW4Wafz/bfOrvWrUpMOGthsAZi yQkRqPjRv1T+hw82HKefoiVt8VQr8rziYhSaDDN3eEFM8kxxXYzDVHDNqHtRvIFO ++PV6h+FfLVW1UPZsLkDoC76oRryGZYAzkhwF/IQ36O6wF3LoXwqZIw4vmz95WYd 9RK3/THoOzCI0qx6Adsl15G1VDZNzO3cqmaLYp/fKLpl7Cj6bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6YJS9h/YINxBygzb3vfSQfkxvJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvNWNmOGZhMWQtYzE4MC0z Njc3LTkzYWYtZTRmZjE1NWE3OTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGxBsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgqT0NiOBlxSqG4hh3lODUKl46oAWJuv9TdB1C3ajAWMme50Ykl1oOm Sed575tMHvTAKgwcq1i0lPpZFHkm3rdQgVfJOwyTcujK2SW7fU70MjRRwxoQBcq3 RJJK5JUw2HskyhXSexAigmOFPK6WVHuSgt29KS4KM7mGcXyqi96k0ctIayebq7yF 55lfeyyCw5K7T1JzL5neMBEjFPF0EcBHWOtoNCi3cNoajUftDW7QSC7NJrukjG6D vRPPu7XPVAX9Gs+xBAEu0eAKefUevQZpZTFEOXenA//We3V9r4z74+R6/2h/wI0f 7FLlCq7LytQ6fzkYtTlIjObovAMcJbE= -----END CERTIFICATE-----Generated at Fri Apr 17 14:59:13 2026 by rpki-client