$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa File: ec968a43-a3bc-35cd-9cae-298d0643c351.roa (raw, json) Hash identifier: hEJ6TT6oLUpMXnCVq2BWe4Rg65Ya2v/ePPFV39l69IA= Subject key identifier: FB:8F:01:A6:04:2C:E3:BE:50:F4:5B:AF:59:26:76:71:3F:4D:D5:8D Certificate issuer: /CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1 Certificate serial: 010D0C9F4328584D6AAA8903644F05E3D6EEF000 Authority key identifier: 65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 21693 IP address blocks: 170.152.0.0/16 maxlen: 24 192.234.136.0/24 maxlen: 24 192.234.137.0/24 maxlen: 24 192.234.138.0/24 maxlen: 24 192.234.139.0/24 maxlen: 24 192.234.140.0/24 maxlen: 24 198.179.151.0/24 maxlen: 24 198.179.152.0/24 maxlen: 24 198.179.153.0/24 maxlen: 24 198.179.154.0/24 maxlen: 24 198.179.155.0/24 maxlen: 24 198.179.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:89:03:64:4f:05:e3:d6:ee:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=67f20c1b-301c-465d-a336-cdf29b73b553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:50:4e:c9:f2:a6:cc:9f:71:74:11:32:f8:02: ca:e6:54:cb:26:01:a8:cd:1d:3f:05:56:d7:0e:24: f6:01:2a:ac:d6:55:eb:24:2d:af:ab:31:d9:c7:e4: fc:b8:38:fa:ed:7a:3a:93:35:46:68:6b:d4:c5:c7: 05:7b:04:87:55:cc:b0:2e:63:90:82:ed:9a:95:65: 13:d6:14:39:28:e1:21:3a:bc:05:75:68:52:09:64: 1a:7d:7e:62:c9:a5:58:95:5c:2c:d3:44:cf:9a:2d: 7b:87:f9:04:a9:b0:5f:cc:93:28:90:3e:49:3c:16: 4e:79:50:13:51:4b:a3:18:eb:2b:4e:25:bd:c3:8b: 22:f3:b6:4b:97:ed:09:0f:ce:26:3a:07:cc:d8:08: c5:1f:f7:a6:47:f8:80:69:ae:55:0b:ca:0f:ff:b9: 05:fb:80:51:73:a8:20:e1:ac:2a:1b:19:c3:02:ce: 2f:f3:b6:a2:4a:99:39:22:cd:98:4e:01:d0:32:be: ff:be:f6:80:20:43:f8:17:61:3e:23:e1:31:fb:be: 97:a2:23:f8:35:9c:4a:29:14:7e:44:34:27:74:10: 02:72:cf:e6:f3:ff:89:df:91:da:5c:ac:d1:9b:75: 23:af:84:e8:34:66:ae:f5:f3:99:30:0e:47:61:f6: 07:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8F:01:A6:04:2C:E3:BE:50:F4:5B:AF:59:26:76:71:3F:4D:D5:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl X509v3 Authority Key Identifier: keyid:65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer sbgp-ipAddrBlock: critical IPv4: 170.152.0.0/16 192.234.136.0-192.234.140.255 198.179.151.0-198.179.156.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:7f:a3:c3:d9:52:63:f1:2b:d9:2b:1f:c9:59:fe:70:c1:1c: 04:3e:f3:28:3c:4f:6c:1b:b9:d1:b7:26:f3:02:63:fc:cd:42: 41:f8:64:0a:ba:00:94:41:d5:e5:df:22:e0:65:ce:5b:c9:25: 3e:69:14:1a:c8:19:4e:c7:3f:f4:09:a7:46:5c:fc:95:24:57: 75:d0:e7:c3:81:e0:d6:6b:33:ed:a3:2e:1f:5d:37:1f:af:e5: 64:72:2e:fe:c0:32:f2:45:1e:02:04:45:b4:35:53:ae:94:1f: 43:8b:51:50:e9:e9:b5:59:09:33:80:8c:e0:6b:6d:91:5a:9a: 36:52:71:69:c4:0f:e7:4e:26:e7:aa:ff:e0:f0:e6:37:14:68: c1:15:0f:d4:a1:58:ca:48:a6:5a:fa:d6:22:f5:60:f0:ac:16: 4a:a6:81:4a:a6:7b:23:a1:b4:88:bc:20:d9:30:05:4a:97:3b: 71:a4:c4:eb:d9:3d:78:0b:7e:21:2b:87:74:d4:19:2f:88:17: cb:c1:85:9f:4f:d0:71:3e:53:9e:90:33:8a:c0:bc:d5:d8:e4: 10:28:72:5f:ad:41:3b:35:66:b8:b8:3c:c8:a1:8b:e3:7b:ea: e3:c4:1f:80:69:0e:03:08:48:ca:87:89:aa:de:cf:50:35:9c: 30:60:91:06 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE1qqokDZE8F49bu8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk4MWY2YjgtYzMyMy00MTFkLWI2YjgtMDNiYjQ0ZDJh ZGIxMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk NjdmMjBjMWItMzAxYy00NjVkLWEzMzYtY2RmMjliNzNiNTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1BOyfKmzJ9xdBEy+ALK5lTLJgGozR0/BVbX DiT2ASqs1lXrJC2vqzHZx+T8uDj67Xo6kzVGaGvUxccFewSHVcywLmOQgu2alWUT 1hQ5KOEhOrwFdWhSCWQafX5iyaVYlVws00TPmi17h/kEqbBfzJMokD5JPBZOeVAT UUujGOsrTiW9w4si87ZLl+0JD84mOgfM2AjFH/emR/iAaa5VC8oP/7kF+4BRc6gg 4awqGxnDAs4v87aiSpk5Is2YTgHQMr7/vvaAIEP4F2E+I+Ex+76XoiP4NZxKKRR+ RDQndBACcs/m8/+J35HaXKzRm3Ujr4ToNGau9fOZMA5HYfYH5QIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFPuPAaYELOO+UPRbr1kmdnE/TdWNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zOTgx ZjZiOC1jMzIzLTQxMWQtYjZiOC0wM2JiNDRkMmFkYjEvZWM5NjhhNDMtYTNiYy0z NWNkLTljYWUtMjk4ZDA2NDNjMzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzk4MWY2YjgtYzMyMy00MTFkLWI2 YjgtMDNiYjQ0ZDJhZGIxLzM5ODFmNmI4LWMzMjMtNDExZC1iNmI4LTAzYmI0NGQy YWRiMS5jcmwwHwYDVR0jBBgwFoAUZcFvpzmgevfeykEi3I5W4/e8dL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zOTgxZjZiOC1jMzIzLTQxMWQtYjZiOC0wM2Ji NDRkMmFkYjEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAATAhAwMAqpgwDAME A8DqiAMEAMDqjDAMAwQAxrOXAwQAxrOcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBANV/o8PZUmPxK9krH8lZ /nDBHAQ+8yg8T2wbudG3JvMCY/zNQkH4ZAq6AJRB1eXfIuBlzlvJJT5pFBrIGU7H P/QJp0Zc/JUkV3XQ58OB4NZrM+2jLh9dNx+v5WRyLv7AMvJFHgIERbQ1U66UH0OL UVDp6bVZCTOAjOBrbZFamjZScWnED+dOJueq/+Dw5jcUaMEVD9ShWMpIplr61iL1 YPCsFkqmgUqmeyOhtIi8INkwBUqXO3GkxOvZPXgLfiErh3TUGS+IF8vBhZ9P0HE+ U56QM4rAvNXY5BAocl+tQTs1Zri4PMihi+N76uPEH4BpDgMISMqHiarez1A1nDBg kQY= -----END CERTIFICATE-----Generated at Fri Apr 17 12:56:23 2026 by rpki-client