$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cea6a4db-b45f-38c8-ba93-dab3703d562c.roa File: cea6a4db-b45f-38c8-ba93-dab3703d562c.roa (raw, json) Hash identifier: 65S+zVez7ZPnOJUl4g/lltYZbxLITE4Q1jcuHDylS8E= Subject key identifier: 35:34:F5:D7:70:BC:FF:09:54:D7:51:43:26:0A:27:52:3B:98:0B:00 Certificate issuer: /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Certificate serial: 010D0C9F4328584D7CCFD361DC39A5D90D6E8800 Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cea6a4db-b45f-38c8-ba93-dab3703d562c.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 23158 IP address blocks: 192.16.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:d3:61:dc:39:a5:d9:0d:6e:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=b6686fd0-4ad2-429b-99dd-734b189141a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d6:34:68:2c:de:f2:d5:93:82:83:e6:d5:0e: 39:42:a2:2e:f2:bd:49:02:3f:08:61:bc:2d:c1:28: b7:fd:a4:69:2b:de:d5:1a:55:20:40:9f:d2:cd:e3: 70:88:9a:86:63:e1:54:7c:cd:5a:97:1b:52:00:e3: da:97:37:33:1b:8c:23:05:a6:24:37:aa:a8:68:a6: 62:81:90:ac:67:50:1c:66:d7:4a:df:e6:26:b1:e9: d8:f9:13:32:80:aa:bc:ea:09:b7:24:56:a5:7e:2c: 59:39:6d:5e:14:a2:38:5e:40:b7:02:35:ad:48:ea: bd:11:a8:57:9a:d8:1c:b6:a2:a9:57:5a:79:7c:b8: ed:f9:1f:e9:00:5d:b9:c5:28:09:8b:1f:01:72:82: ed:9e:b3:26:b0:de:98:61:a3:1e:86:d5:db:e5:2f: 7f:95:55:c9:27:ad:a2:5c:42:f0:bd:88:20:4d:6e: 57:2f:91:5f:ae:57:94:aa:a9:f9:bc:da:60:87:ec: 94:31:36:dc:b9:9c:83:78:49:d3:85:dd:fe:bb:ac: 83:08:27:31:bb:81:37:36:21:07:10:95:f0:a2:f3: 9f:39:50:ad:ed:c1:1a:17:a0:e0:47:bf:6f:44:b1: 25:46:2a:b0:a3:95:d3:ad:c1:49:f1:2e:3e:9d:bf: 56:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:34:F5:D7:70:BC:FF:09:54:D7:51:43:26:0A:27:52:3B:98:0B:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cea6a4db-b45f-38c8-ba93-dab3703d562c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl X509v3 Authority Key Identifier: keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer sbgp-ipAddrBlock: critical IPv4: 192.16.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:7c:fb:11:a7:af:13:0f:2e:c0:ac:77:97:73:16:7d:a0:a6: 55:4b:dd:36:93:f0:c9:5f:59:77:d2:5a:31:13:9a:8a:b1:b6: 76:e1:b9:2a:f7:ae:83:d1:10:d4:f8:22:33:2d:ed:8e:bf:fe: 17:1e:6a:52:31:de:50:91:26:6e:3b:a5:d6:69:0b:9b:45:e9: 10:29:bc:a7:41:db:aa:21:e1:78:02:3f:20:e3:ac:df:22:db: 77:11:7a:f0:ec:ab:ee:c3:46:46:80:11:81:f9:83:b2:0d:57: f0:24:a3:1f:36:dd:4e:c9:48:26:7f:f2:9f:e0:f1:94:56:b0: f6:a7:aa:52:f2:7f:9b:af:56:2d:d5:f5:ae:95:e1:b5:71:90: 9c:7a:b9:c6:d1:e5:f9:83:17:f2:c5:5f:49:4e:e9:85:54:40: 27:a2:b9:0f:b9:13:cf:e6:4e:a6:b7:0c:bc:d7:f8:52:81:3f: 86:5c:91:20:cc:3a:38:ac:d3:d5:62:cd:36:91:4b:51:77:c1: 38:8e:5e:c7:76:af:cf:9b:6a:38:88:fc:f2:5e:b2:1e:2c:81: a0:1d:68:9e:23:1e:7b:2d:b6:9b:7d:04:03:24:bf:eb:3e:a6: 0d:0f:42:c9:2c:49:0b:33:fb:dd:bd:02:ed:5f:3a:c7:77:24: 7f:03:d1:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z9Nh3Dml2Q1uiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwYzVkYTgtMDhhYi00MGVkLTllMjMtZGZmNDEzZmIy ZDUyMB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk YjY2ODZmZDAtNGFkMi00MjliLTk5ZGQtNzM0YjE4OTE0MWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNY0aCze8tWTgoPm1Q45QqIu8r1JAj8IYbwt wSi3/aRpK97VGlUgQJ/SzeNwiJqGY+FUfM1alxtSAOPalzczG4wjBaYkN6qoaKZi gZCsZ1AcZtdK3+YmsenY+RMygKq86gm3JFalfixZOW1eFKI4XkC3AjWtSOq9EahX mtgctqKpV1p5fLjt+R/pAF25xSgJix8BcoLtnrMmsN6YYaMehtXb5S9/lVXJJ62i XELwvYggTW5XL5FfrleUqqn5vNpgh+yUMTbcuZyDeEnThd3+u6yDCCcxu4E3NiEH EJXwovOfOVCt7cEaF6DgR79vRLElRiqwo5XTrcFJ8S4+nb9WbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDU09ddwvP8JVNdRQyYKJ1I7mAsAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MDBj NWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0MTNmYjJkNTIvY2VhNmE0ZGItYjQ1Zi0z OGM4LWJhOTMtZGFiMzcwM2Q1NjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDAwYzVkYTgtMDhhYi00MGVkLTll MjMtZGZmNDEzZmIyZDUyLzQwMGM1ZGE4LTA4YWItNDBlZC05ZTIzLWRmZjQxM2Zi MmQ1Mi5jcmwwHwYDVR0jBBgwFoAUwWSSDul8/MKHpAqCHb/qIZczf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MDBjNWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0 MTNmYjJkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwBBkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJp8+xGnrxMPLsCsd5dzFn2gplVL3TaT8MlfWXfSWjETmoqxtnbhuSr3 roPRENT4IjMt7Y6//hcealIx3lCRJm47pdZpC5tF6RApvKdB26oh4XgCPyDjrN8i 23cRevDsq+7DRkaAEYH5g7INV/Akox823U7JSCZ/8p/g8ZRWsPanqlLyf5uvVi3V 9a6V4bVxkJx6ucbR5fmDF/LFX0lO6YVUQCeiuQ+5E8/mTqa3DLzX+FKBP4ZckSDM Ojis09VizTaRS1F3wTiOXsd2r8+bajiI/PJesh4sgaAdaJ4jHnsttpt9BAMkv+s+ pg0PQsksSQsz+929Au1fOsd3JH8D0ew= -----END CERTIFICATE-----Generated at Fri Apr 17 06:49:25 2026 by rpki-client