$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0436add1-1eac-3400-9b5e-4867f21821e1.roa File: 0436add1-1eac-3400-9b5e-4867f21821e1.roa (raw, json) Hash identifier: acbnyPB6z2SKN5HO7qnp3CHegI5EX5LuaQ+h/PQfNQM= Subject key identifier: F9:9C:09:FB:CE:1D:D1:BE:6C:B9:85:2A:04:C0:23:EF:4E:1E:FD:C8 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584D65152E3FA5E3002683A4A880 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0436add1-1eac-3400-9b5e-4867f21821e1.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 16696 IP address blocks: 168.245.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:2e:3f:a5:e3:00:26:83:a4:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=d97e0d56-bf75-48aa-8cc0-2e7b815ef18e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:41:70:85:f6:46:d5:67:5e:31:32:7b:2a:24: 2a:62:d4:f1:b2:3e:7b:2a:44:91:db:a0:15:c6:97: 66:9a:6b:3d:50:da:e2:c9:15:ea:fa:c4:15:b2:70: fc:59:6b:8d:78:d2:11:57:0c:4a:e8:aa:17:e4:d2: b3:97:69:83:14:fa:f3:42:af:99:75:3f:cc:cb:6d: ee:7f:84:94:20:7f:41:6a:18:29:f6:1f:36:6f:dc: 37:26:78:58:20:32:b1:03:8d:16:e0:c9:a9:1b:6a: 93:23:13:21:cd:c1:53:a0:a0:5f:06:7b:e0:6e:0a: 45:70:ba:81:a0:27:25:38:3a:8f:b6:1d:c6:de:e1: 13:34:d1:d3:8c:d3:0f:a7:44:6d:54:56:c4:bf:84: ea:43:1e:96:73:bf:b8:26:0d:83:fb:3f:ff:41:e2: 15:45:4d:52:17:bd:8a:ba:23:6a:f5:dd:cb:54:db: b8:de:ef:f5:29:a6:a9:36:1a:44:9c:1a:9f:91:49: 1f:76:ec:f4:51:ed:1d:cd:3e:41:e5:33:c5:8a:2b: ae:93:d3:92:62:31:a1:80:8a:1a:23:33:69:0a:c3: 00:0c:06:41:b3:9c:59:e3:02:bc:ad:83:65:5b:e6: a1:30:49:92:6c:cf:86:33:79:7c:1b:b9:5a:c7:3c: c7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:9C:09:FB:CE:1D:D1:BE:6C:B9:85:2A:04:C0:23:EF:4E:1E:FD:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0436add1-1eac-3400-9b5e-4867f21821e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 168.245.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:9e:3b:70:ee:1f:da:a9:05:48:a0:d3:3c:73:93:c3:df:bf: c1:b9:f8:09:53:8b:0b:87:e5:38:6d:1f:ff:7b:c5:62:ec:e9: fd:45:58:a5:b3:5d:15:48:ac:10:99:be:33:53:bd:d2:72:cf: 9a:41:c8:50:40:94:50:13:84:42:85:9a:74:f7:fa:c7:e9:9b: d5:4d:1c:52:17:2b:85:8c:30:f0:14:05:e9:5f:3c:77:d0:55: ac:27:87:cb:0e:d3:fb:39:03:03:44:a7:7c:58:d7:0c:8f:93: 33:bc:b5:ec:86:56:51:fc:6e:4b:80:09:a2:96:c4:7c:cc:e4: cf:d8:3a:be:23:ee:0a:16:b2:11:98:b8:6f:09:0b:6e:37:8f: cb:51:4c:4b:8a:ea:81:b3:cd:2c:fe:63:b3:5a:19:c2:28:87: ae:c5:ff:49:6a:34:2d:28:41:4f:9d:4c:5f:cc:24:73:ee:36: 5f:eb:e4:62:48:e2:58:ba:3d:1e:4b:bf:c5:9b:3a:9c:ec:00: f0:64:ea:82:c4:5a:8a:dc:6a:88:ff:1f:a3:bf:9c:d2:ec:ae: 61:d7:ac:a9:a1:b7:9e:ff:2c:80:1d:db:37:ec:92:0b:69:ae: 6e:c8:0d:b1:86:17:0a:c1:45:17:ea:63:c8:f5:98:14:72:42: 90:5e:52:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFS4/peMAJoOkqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk ZDk3ZTBkNTYtYmY3NS00OGFhLThjYzAtMmU3YjgxNWVmMThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEFwhfZG1WdeMTJ7KiQqYtTxsj57KkSR26AV xpdmmms9UNriyRXq+sQVsnD8WWuNeNIRVwxK6KoX5NKzl2mDFPrzQq+ZdT/My23u f4SUIH9Bahgp9h82b9w3JnhYIDKxA40W4MmpG2qTIxMhzcFToKBfBnvgbgpFcLqB oCclODqPth3G3uETNNHTjNMPp0RtVFbEv4TqQx6Wc7+4Jg2D+z//QeIVRU1SF72K uiNq9d3LVNu43u/1KaapNhpEnBqfkUkfduz0Ue0dzT5B5TPFiiuuk9OSYjGhgIoa IzNpCsMADAZBs5xZ4wK8rYNlW+ahMEmSbM+GM3l8G7laxzzH0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmcCfvOHdG+bLmFKgTAI+9OHv3IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMDQzNmFkZDEtMWVhYy0z NDAwLTliNWUtNDg2N2YyMTgyMWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqPXGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqeO3DuH9qpBUig0zxzk8Pfv8G5+AlTiwuH5ThtH/97xWLs6f1FWKWz XRVIrBCZvjNTvdJyz5pByFBAlFAThEKFmnT3+sfpm9VNHFIXK4WMMPAUBelfPHfQ Vawnh8sO0/s5AwNEp3xY1wyPkzO8teyGVlH8bkuACaKWxHzM5M/YOr4j7goWshGY uG8JC243j8tRTEuK6oGzzSz+Y7NaGcIoh67F/0lqNC0oQU+dTF/MJHPuNl/r5GJI 4li6PR5Lv8WbOpzsAPBk6oLEWorcaoj/H6O/nNLsrmHXrKmht57/LIAd2zfskgtp rm7IDbGGFwrBRRfqY8j1mBRyQpBeUjA= -----END CERTIFICATE-----Generated at Fri Apr 17 11:29:27 2026 by rpki-client