$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/b689c60f-db70-33f5-924b-db12bc459442.roa File: b689c60f-db70-33f5-924b-db12bc459442.roa (raw, json) Hash identifier: I9LYiHDfelDWoHrpkpQQXh0/WDqcXdWX5k6Gqa/w7PU= Subject key identifier: ED:DC:81:E9:0B:15:70:BD:E1:41:3F:54:24:36:F6:81:DE:5A:4E:D9 Certificate issuer: /CN=8df83f2e-e4b4-4953-8acc-7816b333d332 Certificate serial: 010D0C9F4328584D5E1A6AB41000678EA0D86C80 Authority key identifier: 0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/b689c60f-db70-33f5-924b-db12bc459442.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 399277 IP address blocks: 204.188.242.0/24 maxlen: 24 204.188.254.0/24 maxlen: 24 208.98.6.0/24 maxlen: 24 208.98.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:6a:b4:10:00:67:8e:a0:d8:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8df83f2e-e4b4-4953-8acc-7816b333d332 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=f6dcf89d-5a29-4404-9d32-ef9ed909d1d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6d:5b:a8:60:37:10:0c:a8:38:e4:e2:c9:46: 70:b4:71:cf:84:c5:4c:16:44:c9:d8:40:42:d5:5d: 5f:ac:80:87:e1:b0:2d:d0:d9:ff:aa:4b:a6:f6:7b: 64:f3:55:7b:3b:0e:7d:53:51:c8:be:d0:86:66:57: e2:5e:ee:34:a8:ea:1f:12:bf:f9:f6:73:72:d6:9e: 2f:0e:fb:89:7b:89:6a:78:18:1e:90:48:93:15:85: e2:81:79:71:0c:ac:87:e8:d9:0a:d6:37:50:57:db: 73:ab:31:ad:e7:e2:48:4b:1d:55:99:a4:54:d5:8c: ee:90:1d:9f:16:fc:07:78:84:c9:cf:74:f3:0b:20: 57:02:1f:bf:e4:f1:c1:47:38:28:7f:0e:19:63:8b: 6a:9d:bf:36:02:1b:8c:32:04:2b:24:62:4f:6a:2a: 98:b7:ca:3b:7e:2b:b8:b6:51:4a:14:dc:62:05:fc: da:fc:13:bf:2a:b7:c0:bb:09:ad:86:66:52:5b:43: 05:cb:9f:6a:3a:d3:61:4f:47:fd:d7:58:1c:c7:66: fc:06:c0:95:cd:d7:b9:83:ff:8a:7a:7f:23:68:1b: 1a:a1:70:5d:94:33:9a:e7:54:b7:fe:32:a7:87:bb: ad:92:21:6c:ed:c1:21:eb:01:2c:ae:cc:06:18:3e: b2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DC:81:E9:0B:15:70:BD:E1:41:3F:54:24:36:F6:81:DE:5A:4E:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/b689c60f-db70-33f5-924b-db12bc459442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl X509v3 Authority Key Identifier: keyid:0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer sbgp-ipAddrBlock: critical IPv4: 204.188.242.0/24 204.188.254.0/24 208.98.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:62:22:2d:08:03:7f:60:87:9b:7a:f1:e9:44:db:e7:f9:e4: 7c:c4:dc:60:95:c8:47:28:37:54:b0:31:d8:01:cc:8f:24:c2: 45:f9:0d:dc:5d:21:03:c9:8f:d9:4e:54:fa:5a:55:e3:09:45: df:61:7c:8e:83:0a:36:92:d3:04:db:8d:97:9f:a6:52:50:2b: 82:95:c2:ae:cc:e7:cd:f1:4f:d4:6e:96:ab:66:6c:7b:de:05: 4b:3e:9a:c0:de:8d:37:76:39:76:c1:75:e0:2a:5c:30:52:d3: a6:7d:0b:fd:7f:4e:d3:df:88:90:88:52:61:88:90:1d:69:ac: 0e:9c:18:4a:40:09:a9:2f:e3:e1:e8:19:da:48:b4:d1:97:3d: 2e:2d:25:ce:89:b7:69:b5:67:e9:f1:cb:36:8e:56:7f:07:f9: 9b:ca:63:70:40:c7:2c:36:cc:07:c1:c5:c3:0f:b6:70:2b:15: 3a:44:b5:df:95:73:db:86:3f:1d:77:31:55:be:1c:f2:38:2c: 66:93:13:10:de:9c:5f:bc:85:b8:6b:d6:08:be:1e:4b:4d:b7: ac:64:41:32:00:88:95:9a:f3:b5:62:49:a0:57:cc:d4:f1:f6: 85:0a:c1:8a:cf:42:84:52:b5:7a:a3:95:94:fb:16:41:29:3b: 29:c3:25:7c -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE1eGmq0EABnjqDYbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRmODNmMmUtZTRiNC00OTUzLThhY2MtNzgxNmIzMzNk MzMyMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk ZjZkY2Y4OWQtNWEyOS00NDA0LTlkMzItZWY5ZWQ5MDlkMWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW1bqGA3EAyoOOTiyUZwtHHPhMVMFkTJ2EBC 1V1frICH4bAt0Nn/qkum9ntk81V7Ow59U1HIvtCGZlfiXu40qOofEr/59nNy1p4v DvuJe4lqeBgekEiTFYXigXlxDKyH6NkK1jdQV9tzqzGt5+JISx1VmaRU1YzukB2f FvwHeITJz3TzCyBXAh+/5PHBRzgofw4ZY4tqnb82AhuMMgQrJGJPaiqYt8o7fiu4 tlFKFNxiBfza/BO/KrfAuwmthmZSW0MFy59qOtNhT0f911gcx2b8BsCVzde5g/+K en8jaBsaoXBdlDOa51S3/jKnh7utkiFs7cEh6wEsrswGGD6yNwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFO3cgekLFXC94UE/VCQ29oHeWk7ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZGY4 M2YyZS1lNGI0LTQ5NTMtOGFjYy03ODE2YjMzM2QzMzIvYjY4OWM2MGYtZGI3MC0z M2Y1LTkyNGItZGIxMmJjNDU5NDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGRmODNmMmUtZTRiNC00OTUzLThh Y2MtNzgxNmIzMzNkMzMyLzhkZjgzZjJlLWU0YjQtNDk1My04YWNjLTc4MTZiMzMz ZDMzMi5jcmwwHwYDVR0jBBgwFoAUDaYqxupoTrLFfVvi9T8jMGOP5uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZGY4M2YyZS1lNGI0LTQ5NTMtOGFjYy03ODE2 YjMzM2QzMzIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAzLzyAwQA zLz+AwQB0GIGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHBiIi0IA39gh5t68elE2+f55HzE3GCVyEcoN1Sw MdgBzI8kwkX5DdxdIQPJj9lOVPpaVeMJRd9hfI6DCjaS0wTbjZefplJQK4KVwq7M 583xT9RulqtmbHveBUs+msDejTd2OXbBdeAqXDBS06Z9C/1/TtPfiJCIUmGIkB1p rA6cGEpACakv4+HoGdpItNGXPS4tJc6Jt2m1Z+nxyzaOVn8H+ZvKY3BAxyw2zAfB xcMPtnArFTpEtd+Vc9uGPx13MVW+HPI4LGaTExDenF+8hbhr1gi+HktNt6xkQTIA iJWa87ViSaBXzNTx9oUKwYrPQoRStXqjlZT7FkEpOynDJXw= -----END CERTIFICATE-----Generated at Fri Apr 17 08:11:52 2026 by rpki-client