$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa File: b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa (raw, json) Hash identifier: BopV6SVERI1SptyjsMhUTXrieOC+VOneT/zi1P4ZM/o= Subject key identifier: 3E:54:E1:36:A5:68:DE:A1:A2:98:70:B0:05:4B:E8:EA:2E:9B:60:FC Certificate issuer: /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Certificate serial: 010D0C9F4328584D7B6A90B861D5CF58F530F180 Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 32435 IP address blocks: 199.189.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:90:b8:61:d5:cf:58:f5:30:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=83adf04e-dec7-435a-80d0-eed4e774d5c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:28:c8:e4:13:a0:ae:34:a8:51:1d:8c:be:e2: e1:de:31:94:77:90:d4:69:7b:76:3b:60:00:86:bf: 98:88:bd:be:9d:5d:55:76:a6:a8:d6:5d:43:c1:56: 13:27:82:52:4d:36:ed:d7:82:3e:ff:b1:a7:2d:d5: f3:8e:38:63:e7:df:6b:be:c3:ce:34:f5:63:c0:79: f2:77:08:60:ca:b3:15:ac:ac:35:c6:e3:57:46:f6: 6d:32:bc:97:00:e0:eb:4c:e9:61:c0:f1:56:e1:5a: c8:56:d0:51:e7:8f:ca:7a:41:42:f8:f3:d5:d1:7c: 9d:ef:9f:77:12:dd:19:9b:5f:1d:3c:27:3f:27:6b: 10:b9:0b:ff:61:dd:6d:e1:7c:da:2b:42:d6:7a:b4: 57:40:50:d4:ec:e9:87:a5:53:a5:83:3b:cb:f8:f5: fc:79:42:00:85:80:5c:8e:23:ac:68:30:01:d0:29: 6d:92:58:b1:3e:fa:56:e1:3a:03:63:0f:53:20:ff: ab:45:de:d8:8c:cc:31:95:ee:09:e2:7d:d3:8e:96: ea:6d:f5:97:80:8b:e7:42:77:41:c7:89:ba:d0:7f: e4:3f:a7:34:63:f6:84:1f:e7:8d:48:ff:26:a0:4d: b5:30:78:8a:f3:65:45:fd:1c:2c:40:3b:1f:d5:c3: cf:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:54:E1:36:A5:68:DE:A1:A2:98:70:B0:05:4B:E8:EA:2E:9B:60:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl X509v3 Authority Key Identifier: keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer sbgp-ipAddrBlock: critical IPv4: 199.189.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:57:3e:60:ce:fd:59:7a:1a:62:05:0a:d2:41:67:96:ee:bd: 74:66:9f:40:25:6e:93:1e:b9:3f:9f:26:8f:45:19:4f:1f:17: f0:6e:47:73:2e:d7:63:0a:07:04:28:cd:37:bd:cb:b9:5e:fe: 19:a5:da:d9:9d:df:90:48:de:ba:79:37:e7:cb:b8:60:94:39: 25:8f:8a:59:86:c4:ec:4f:ac:3c:a1:dc:ba:95:67:b1:b3:94: a9:e4:87:d9:4c:1a:d9:6e:b9:a5:d1:9c:e2:52:3f:7d:8c:03: 2c:a8:bb:a6:3c:29:6c:06:5f:b1:40:46:73:07:33:f2:38:c4: 2c:e3:47:c5:f3:cf:a7:d1:8c:f8:5f:3a:7a:8f:77:dc:42:d6: d6:36:7b:1d:02:3d:06:7a:78:21:0f:3a:81:32:f1:a8:d1:c2: 24:8f:71:58:af:cf:9f:7f:f4:ae:b0:2a:41:0b:88:76:da:77: b9:1d:1a:38:e7:11:3c:63:36:9b:8e:5f:95:7a:06:ba:c1:f7: 47:86:17:0f:37:53:d3:29:92:75:96:de:6e:d8:31:c9:f9:7e: 0e:d5:27:bc:e7:c9:1a:f6:6d:67:84:aa:93:a4:41:fa:be:2a: af:32:c7:0f:35:8f:83:5a:70:87:d4:0e:bf:0e:9a:b9:5a:7f: be:1f:71:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17apC4YdXPWPUw8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhYWU3ZGItMmY1MS00NjU2LWJiYTAtNjRmMWQzZWUz MjU2MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk ODNhZGYwNGUtZGVjNy00MzVhLTgwZDAtZWVkNGU3NzRkNWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CjI5BOgrjSoUR2MvuLh3jGUd5DUaXt2O2AA hr+YiL2+nV1Vdqao1l1DwVYTJ4JSTTbt14I+/7GnLdXzjjhj599rvsPONPVjwHny dwhgyrMVrKw1xuNXRvZtMryXAODrTOlhwPFW4VrIVtBR54/KekFC+PPV0Xyd7593 Et0Zm18dPCc/J2sQuQv/Yd1t4XzaK0LWerRXQFDU7OmHpVOlgzvL+PX8eUIAhYBc jiOsaDAB0CltklixPvpW4ToDYw9TIP+rRd7YjMwxle4J4n3TjpbqbfWXgIvnQndB x4m60H/kP6c0Y/aEH+eNSP8moE21MHiK82VF/RwsQDsf1cPPnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5U4TalaN6hophwsAVL6Ooum2D8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOGFh ZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYxZDNlZTMyNTYvYjdjZmM5NGUtMzg2OC0z YzZkLWFjMDktNWJjZDEyZjBjZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjhhYWU3ZGItMmY1MS00NjU2LWJi YTAtNjRmMWQzZWUzMjU2LzI4YWFlN2RiLTJmNTEtNDY1Ni1iYmEwLTY0ZjFkM2Vl MzI1Ni5jcmwwHwYDVR0jBBgwFoAUjODPFqyPb8zkYyft39+h+edvk48wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yOGFhZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYx ZDNlZTMyNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx73LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFXPmDO/Vl6GmIFCtJBZ5buvXRmn0AlbpMeuT+fJo9FGU8fF/BuR3Mu 12MKBwQozTe9y7le/hml2tmd35BI3rp5N+fLuGCUOSWPilmGxOxPrDyh3LqVZ7Gz lKnkh9lMGtluuaXRnOJSP32MAyyou6Y8KWwGX7FARnMHM/I4xCzjR8Xzz6fRjPhf OnqPd9xC1tY2ex0CPQZ6eCEPOoEy8ajRwiSPcVivz59/9K6wKkELiHbad7kdGjjn ETxjNpuOX5V6BrrB90eGFw83U9MpknWW3m7YMcn5fg7VJ7znyRr2bWeEqpOkQfq+ Kq8yxw81j4NacIfUDr8Omrlaf74fcfs= -----END CERTIFICATE-----Generated at Fri Apr 17 07:04:04 2026 by rpki-client