$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa File: 204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa (raw, json) Hash identifier: 37PSxRqpxl8aFOeCWQA7n6P7jvZaYzX2P3Xahng4aTM= Subject key identifier: F6:4D:4F:1C:CA:C9:B8:18:6D:81:09:24:B7:EE:A5:30:83:BD:00:27 Certificate issuer: /CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7 Certificate serial: 010D0C9F4328584C996706A25E7FA33A320CB880 Authority key identifier: F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa Signing time: Wed 21 Jan 2026 14:00:38 +0000 ROA not before: Wed 21 Jan 2026 14:00:38 +0000 ROA not after: Tue 21 Apr 2026 13:00:38 +0000 asID: 53589 IP address blocks: 199.16.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:99:67:06:a2:5e:7f:a3:3a:32:0c:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7 Validity Not Before: Jan 21 14:00:38 2026 GMT Not After : Apr 21 13:00:38 2026 GMT Subject: CN=3b81edcf-9409-4195-8d2d-730181af4c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:33:2a:dd:bd:1b:c6:d6:2d:b2:fb:5e:3a:3b: 90:e7:6d:6d:16:63:5f:36:ea:31:cf:2b:51:9b:ef: b3:36:ae:92:ca:c7:ea:66:e4:b7:17:be:9b:fe:a7: cb:25:76:89:12:4d:d5:4b:a6:fa:21:dc:e8:d1:ca: bd:63:5e:f9:c3:bf:74:f6:94:92:89:91:b4:c6:6a: 14:8b:68:80:a6:e4:da:69:e4:25:0c:af:0f:e1:e5: 5a:dd:42:c5:f1:a3:e8:2d:7d:35:05:e2:39:9d:35: 1c:48:6a:5b:7c:15:24:8e:37:ab:dd:0a:ac:8b:61: b4:45:39:69:51:ee:d0:65:cc:b3:c6:6e:80:60:0f: 29:a6:e1:29:53:aa:7e:ff:7d:2f:da:69:87:97:c9: bc:5d:d5:af:44:01:42:0b:0a:a2:1c:c2:56:07:a3: 0a:a0:12:28:c4:f1:8f:d4:0d:2c:09:60:e0:76:33: 81:c7:59:ac:aa:85:2d:03:20:26:b7:61:52:86:9e: c3:5a:af:b6:de:49:26:0c:18:d1:20:14:b0:55:4b: 94:3f:00:f8:dd:ab:30:1d:e9:f4:06:72:cd:6a:b5: de:46:d8:38:67:73:f7:43:a7:b6:8a:2b:28:7a:07: 2b:c9:1a:cb:5c:a1:1c:e7:98:c6:2b:27:67:1b:80: a6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4D:4F:1C:CA:C9:B8:18:6D:81:09:24:B7:EE:A5:30:83:BD:00:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl X509v3 Authority Key Identifier: keyid:F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer sbgp-ipAddrBlock: critical IPv4: 199.16.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ab:bf:15:1b:a7:88:7d:4d:b6:03:0d:b0:06:ed:a1:06:eb: 8f:74:ed:cf:2d:d4:38:3e:61:97:82:6d:72:2a:99:ca:7f:86: 18:fd:b0:81:09:bd:87:37:c0:9c:85:f2:26:66:da:90:91:5a: cf:41:99:ac:eb:a7:09:e8:f4:a4:ea:6e:e7:dc:6a:cd:58:15: f7:36:69:31:e6:19:6d:50:d8:93:e9:b4:c6:71:de:30:61:b5: 8e:2a:f1:aa:5f:b2:2a:e6:21:54:cb:79:b1:09:c7:94:a7:b3: ca:0c:4f:4a:d1:97:c0:3d:54:09:90:21:54:e5:af:2c:a1:83: 1b:7d:3a:2d:82:be:c0:3d:67:89:e4:ae:77:50:24:e2:f8:ea: 62:dd:f9:21:38:73:d9:57:28:ef:2a:51:67:76:b8:41:63:66: 0e:be:51:6a:7f:89:a5:be:1f:91:42:2d:47:d5:c7:41:78:76: e5:88:a8:e3:af:53:a5:29:6f:32:90:76:d4:c2:46:55:c0:29: 86:b7:2e:74:0b:79:5a:9b:77:5f:9f:33:79:a5:8f:45:f7:f8: a8:97:cb:72:9d:f0:b1:39:26:de:da:c9:dc:09:2b:11:2a:c9: d8:1f:e1:e8:59:84:ff:75:12:20:e4:e5:0f:61:c2:61:70:31: 07:54:a8:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyZZwaiXn+jOjIMuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJlNTFlODItN2NjNS00NTAwLWEwZmYtY2MzYTlkNWUz ZmI3MB4XDTI2MDEyMTE0MDAzOFoXDTI2MDQyMTEzMDAzOFowLzEtMCsGA1UEAxMk M2I4MWVkY2YtOTQwOS00MTk1LThkMmQtNzMwMTgxYWY0YzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDMq3b0bxtYtsvteOjuQ521tFmNfNuoxzytR m++zNq6SysfqZuS3F76b/qfLJXaJEk3VS6b6Idzo0cq9Y175w7909pSSiZG0xmoU i2iApuTaaeQlDK8P4eVa3ULF8aPoLX01BeI5nTUcSGpbfBUkjjer3Qqsi2G0RTlp Ue7QZcyzxm6AYA8ppuEpU6p+/30v2mmHl8m8XdWvRAFCCwqiHMJWB6MKoBIoxPGP 1A0sCWDgdjOBx1msqoUtAyAmt2FShp7DWq+23kkmDBjRIBSwVUuUPwD43aswHen0 BnLNarXeRtg4Z3P3Q6e2iisoegcryRrLXKEc55jGKydnG4CmjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZNTxzKybgYbYEJJLfupTCDvQAnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YmU1 MWU4Mi03Y2M1LTQ1MDAtYTBmZi1jYzNhOWQ1ZTNmYjcvMjA0YzFlMDMtN2VmMy0z ZjFhLWIwMWUtZDdlZTcyOWRiNDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGJlNTFlODItN2NjNS00NTAwLWEw ZmYtY2MzYTlkNWUzZmI3LzRiZTUxZTgyLTdjYzUtNDUwMC1hMGZmLWNjM2E5ZDVl M2ZiNy5jcmwwHwYDVR0jBBgwFoAU98hG8db+BGjqrEDnC0HKKPgl2lkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YmU1MWU4Mi03Y2M1LTQ1MDAtYTBmZi1jYzNh OWQ1ZTNmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+rvxUbp4h9TbYDDbAG7aEG64907c8t1Dg+YZeCbXIqmcp/hhj9sIEJ vYc3wJyF8iZm2pCRWs9Bmazrpwno9KTqbufcas1YFfc2aTHmGW1Q2JPptMZx3jBh tY4q8apfsirmIVTLebEJx5Sns8oMT0rRl8A9VAmQIVTlryyhgxt9Oi2CvsA9Z4nk rndQJOL46mLd+SE4c9lXKO8qUWd2uEFjZg6+UWp/iaW+H5FCLUfVx0F4duWIqOOv U6UpbzKQdtTCRlXAKYa3LnQLeVqbd1+fM3mlj0X3+KiXy3Kd8LE5Jt7aydwJKxEq ydgf4ehZhP91EiDk5Q9hwmFwMQdUqIw= -----END CERTIFICATE-----Generated at Mon Mar 2 07:38:57 2026 by rpki-client