$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/bc11be2e-a41b-3b12-8ae1-a2a2152bc5db.roa File: bc11be2e-a41b-3b12-8ae1-a2a2152bc5db.roa (raw, json) Hash identifier: YotvEiw0FMuoBRzcyV/sXsXkz8VNtKs9/4DjWohcl5Y= Subject key identifier: 60:1B:AE:DD:67:CD:72:F3:8C:BE:63:B3:EC:25:01:2E:25:B2:B6:46 Certificate issuer: /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Certificate serial: 010D0C9F4328584D86955DA8C4853C120DEA4CC0 Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/bc11be2e-a41b-3b12-8ae1-a2a2152bc5db.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 23158 IP address blocks: 204.154.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:5d:a8:c4:85:3c:12:0d:ea:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=29223a50-5527-46a3-be3f-121badaab1e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7d:6d:75:cb:17:d7:74:41:03:fe:f2:47:45: 3b:b9:36:73:95:e9:53:ad:c5:99:5a:a4:6b:3c:b9: 85:9e:42:c1:e0:85:c5:f1:92:6b:a2:f4:4c:66:6d: 78:15:f8:bc:43:7b:ab:d3:d5:97:63:91:05:25:82: 49:84:ef:c7:ee:ad:af:55:83:85:ba:fd:c1:73:35: 0f:a2:ff:be:ee:ff:e1:2f:e3:d4:57:22:f8:bb:0f: 6f:a3:2a:37:ef:43:ae:2f:28:3d:20:0c:51:31:98: 79:a1:fb:bc:10:5e:d6:16:b6:d5:cc:e6:8b:ef:75: eb:e1:a4:cc:29:f7:70:51:94:74:36:b8:4a:95:37: a7:d6:f7:4a:22:7f:df:8a:15:52:3c:1f:af:65:7d: b6:f8:84:dd:f3:ec:f0:fd:a8:43:72:11:6c:6e:03: 3e:88:cb:b1:9c:9e:54:ef:ee:44:02:d0:a7:a2:78: d8:3a:17:3a:9b:76:fd:98:b0:a3:c1:19:e5:5f:f2: 86:21:e4:71:d3:98:b1:e2:a1:96:21:68:6f:5e:34: 45:5c:50:e3:1e:99:9b:50:78:38:5e:bb:b8:56:ef: 0a:d9:0c:60:2b:9d:c3:50:54:69:93:7b:5c:e6:61: 43:1e:72:71:54:a4:02:7a:54:b7:c2:e7:0c:7e:c3: 37:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1B:AE:DD:67:CD:72:F3:8C:BE:63:B3:EC:25:01:2E:25:B2:B6:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/bc11be2e-a41b-3b12-8ae1-a2a2152bc5db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl X509v3 Authority Key Identifier: keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer sbgp-ipAddrBlock: critical IPv4: 204.154.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:91:73:bc:6e:da:c4:bd:b2:1e:ee:9a:7d:15:bb:45:bc:43: 7a:9f:ae:af:f9:7d:08:7d:5a:44:0e:34:1c:42:50:dc:3b:9a: b3:b9:4e:38:62:57:32:cf:b0:dc:3a:49:6f:36:40:bb:28:15: 31:51:99:08:5e:9a:51:1f:fc:af:24:bf:6e:c8:4d:9a:31:bf: d6:f0:27:af:be:98:ae:cf:3e:a5:c2:0e:dd:f0:38:a6:b0:16: a1:ce:c2:61:f4:75:00:0e:35:6c:ae:6f:5b:9a:af:01:1f:ec: db:86:4e:0b:56:e1:91:07:d3:1c:99:7f:aa:34:6b:9e:57:79: fc:c4:c1:7c:96:64:9f:d5:2c:bd:ea:69:0f:57:79:2e:41:f3: b7:c8:1e:b5:de:48:7f:be:57:20:be:3a:fd:66:ab:de:06:e3: d8:26:6e:70:8b:92:d7:dd:3f:95:ad:60:5e:3b:ce:4a:7d:74: d1:15:4b:5a:5c:26:dd:69:bf:33:fb:5d:41:83:15:16:07:c0: 4b:99:f3:c9:b8:86:23:80:ab:1b:c9:c3:e9:78:bb:fd:c9:88: 79:e9:c9:83:62:d3:a1:e3:8a:e3:05:a8:61:95:b5:9d:74:b3: b6:27:28:23:36:b8:12:74:49:99:bd:41:75:dc:92:87:a5:70: 10:5a:ee:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlV2oxIU8Eg3qTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwYzVkYTgtMDhhYi00MGVkLTllMjMtZGZmNDEzZmIy ZDUyMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk MjkyMjNhNTAtNTUyNy00NmEzLWJlM2YtMTIxYmFkYWFiMWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4H1tdcsX13RBA/7yR0U7uTZzlelTrcWZWqRr PLmFnkLB4IXF8ZJrovRMZm14Ffi8Q3ur09WXY5EFJYJJhO/H7q2vVYOFuv3BczUP ov++7v/hL+PUVyL4uw9voyo370OuLyg9IAxRMZh5ofu8EF7WFrbVzOaL73Xr4aTM KfdwUZR0NrhKlTen1vdKIn/fihVSPB+vZX22+ITd8+zw/ahDchFsbgM+iMuxnJ5U 7+5EAtCnonjYOhc6m3b9mLCjwRnlX/KGIeRx05ix4qGWIWhvXjRFXFDjHpmbUHg4 Xru4Vu8K2QxgK53DUFRpk3tc5mFDHnJxVKQCelS3wucMfsM3vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAbrt1nzXLzjL5js+wlAS4lsrZGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MDBj NWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0MTNmYjJkNTIvYmMxMWJlMmUtYTQxYi0z YjEyLThhZTEtYTJhMjE1MmJjNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDAwYzVkYTgtMDhhYi00MGVkLTll MjMtZGZmNDEzZmIyZDUyLzQwMGM1ZGE4LTA4YWItNDBlZC05ZTIzLWRmZjQxM2Zi MmQ1Mi5jcmwwHwYDVR0jBBgwFoAUwWSSDul8/MKHpAqCHb/qIZczf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MDBjNWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0 MTNmYjJkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzJoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+Rc7xu2sS9sh7umn0Vu0W8Q3qfrq/5fQh9WkQONBxCUNw7mrO5Tjhi VzLPsNw6SW82QLsoFTFRmQhemlEf/K8kv27ITZoxv9bwJ6++mK7PPqXCDt3wOKaw FqHOwmH0dQAONWyub1uarwEf7NuGTgtW4ZEH0xyZf6o0a55XefzEwXyWZJ/VLL3q aQ9XeS5B87fIHrXeSH++VyC+Ov1mq94G49gmbnCLktfdP5WtYF47zkp9dNEVS1pc Jt1pvzP7XUGDFRYHwEuZ88m4hiOAqxvJw+l4u/3JiHnpyYNi06HjiuMFqGGVtZ10 s7YnKCM2uBJ0SZm9QXXckoelcBBa7nQ= -----END CERTIFICATE-----Generated at Fri Apr 17 10:43:15 2026 by rpki-client