$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/2656da8b-db8f-33e1-a001-aa8e24f8d6b5.roa File: 2656da8b-db8f-33e1-a001-aa8e24f8d6b5.roa (raw, json) Hash identifier: d5Rq2hBxbnGp7320aubvAz1UeojGM2fSEuStD+/haeY= Subject key identifier: 2F:C8:F2:56:60:3A:A6:EC:49:56:80:1C:15:5A:44:63:18:59:89:0B Certificate issuer: /CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be Certificate serial: 010D0C9F4328584D746FB8D4DB49FC91224F2900 Authority key identifier: 88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/2656da8b-db8f-33e1-a001-aa8e24f8d6b5.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 199.165.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:b8:d4:db:49:fc:91:22:4f:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=cb5cab86-7854-4185-8360-3893aea1b9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:42:7e:9e:7e:19:1d:f4:a7:d4:6f:03:c6:9b: 88:03:20:e4:aa:fc:6b:cc:f7:71:4d:ca:7c:c0:ff: bf:85:7f:14:17:56:65:21:2e:13:5e:90:0c:b1:13: 13:3a:d7:54:38:0f:bb:51:ba:ac:c4:23:12:be:81: 9e:f9:c1:05:81:76:5e:5c:f0:b4:70:68:c5:7c:c0: 9e:d3:ed:54:fb:af:6e:b9:31:34:29:7a:4b:bc:75: 72:22:23:1d:ca:ea:a6:56:2e:4c:a9:ee:21:d6:98: f9:5e:03:d5:00:1e:07:7d:33:e2:8a:3f:08:b5:34: 36:1a:f3:3c:f1:fc:25:b3:2d:65:94:76:e7:35:43: 8f:76:f6:fa:c7:86:2e:05:b4:f3:a0:10:25:f7:fc: ea:44:40:71:e3:5e:89:17:59:72:da:d9:fb:f5:7a: 68:88:cb:df:3d:c3:aa:59:22:4b:31:a1:3a:44:74: c2:be:4e:e3:04:f0:ab:82:04:12:aa:bf:3d:dd:b2: 0b:7c:39:78:ed:41:f7:3a:7b:4b:06:d3:81:f3:b7: ef:cb:51:e5:a1:52:89:7c:8f:05:a7:2a:57:d7:26: 1c:75:b9:e6:72:85:90:f8:f4:4c:05:be:b4:25:c7: c7:ea:cc:5e:b0:ec:6f:e6:bb:1e:af:cc:ad:b1:1f: d0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C8:F2:56:60:3A:A6:EC:49:56:80:1C:15:5A:44:63:18:59:89:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/2656da8b-db8f-33e1-a001-aa8e24f8d6b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl X509v3 Authority Key Identifier: keyid:88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer sbgp-ipAddrBlock: critical IPv4: 199.165.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:e8:ad:fb:77:c3:dc:f6:a7:bb:e5:11:04:11:42:4e:98:70: 69:dd:f7:77:e7:26:78:fe:23:a4:e0:79:dc:98:83:fc:d6:74: 38:4d:0a:ce:8c:1a:f5:4f:fd:08:e9:e5:a6:01:af:fc:3f:6b: 7a:98:c3:2b:7f:e3:1f:79:fc:1e:37:c1:ab:23:85:62:7e:92: c3:e8:06:bb:65:c7:a0:4b:a3:29:d1:b6:36:69:5b:55:c9:be: 35:3f:59:3f:1b:6e:c4:66:3e:9b:f2:1e:fc:43:f8:39:5a:4e: 4e:f0:d7:f2:16:58:c1:0d:86:5a:b9:d9:19:d6:b5:f1:d8:4f: 1a:bf:75:3f:9a:93:ee:68:bd:64:60:90:31:0d:6e:99:f7:64: b7:5d:fb:50:1a:84:a6:5e:c2:89:4b:6b:4a:99:10:55:98:c3: e6:da:17:96:de:7a:ff:07:b6:3f:2a:fe:86:84:2a:5c:58:f4: 62:69:83:f8:20:54:21:17:1f:59:af:0f:9d:73:10:6c:1a:58: 01:d7:20:7a:7a:3f:bc:19:4d:21:35:c8:99:ce:46:97:19:89: a4:e4:01:e8:8b:18:a5:ed:9d:fb:35:74:a3:b0:5f:39:29:51: 38:3d:c1:dd:e9:9d:7b:e0:e4:c6:fb:31:64:1c:62:ca:bb:16: bd:8d:1b:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b7jU20n8kSJPKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM0NDBlZWItM2Q3YS00M2UzLWEwYTQtZmE5YTk5Mzc5 OGJlMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk Y2I1Y2FiODYtNzg1NC00MTg1LTgzNjAtMzg5M2FlYTFiOWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0J+nn4ZHfSn1G8DxpuIAyDkqvxrzPdxTcp8 wP+/hX8UF1ZlIS4TXpAMsRMTOtdUOA+7UbqsxCMSvoGe+cEFgXZeXPC0cGjFfMCe 0+1U+69uuTE0KXpLvHVyIiMdyuqmVi5Mqe4h1pj5XgPVAB4HfTPiij8ItTQ2GvM8 8fwlsy1llHbnNUOPdvb6x4YuBbTzoBAl9/zqREBx416JF1ly2tn79XpoiMvfPcOq WSJLMaE6RHTCvk7jBPCrggQSqr893bILfDl47UH3OntLBtOB87fvy1HloVKJfI8F pypX1yYcdbnmcoWQ+PRMBb60JcfH6sxesOxv5rser8ytsR/QSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/I8lZgOqbsSVaAHBVaRGMYWYkLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jMzQ0 MGVlYi0zZDdhLTQzZTMtYTBhNC1mYTlhOTkzNzk4YmUvMjY1NmRhOGItZGI4Zi0z M2UxLWEwMDEtYWE4ZTI0ZjhkNmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzM0NDBlZWItM2Q3YS00M2UzLWEw YTQtZmE5YTk5Mzc5OGJlL2MzNDQwZWViLTNkN2EtNDNlMy1hMGE0LWZhOWE5OTM3 OThiZS5jcmwwHwYDVR0jBBgwFoAUiDcfaou/A6y4ImpcKZnxDN+IvRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jMzQ0MGVlYi0zZDdhLTQzZTMtYTBhNC1mYTlh OTkzNzk4YmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6WIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvorft3w9z2p7vlEQQRQk6YcGnd93fnJnj+I6TgedyYg/zWdDhNCs6M GvVP/Qjp5aYBr/w/a3qYwyt/4x95/B43wasjhWJ+ksPoBrtlx6BLoynRtjZpW1XJ vjU/WT8bbsRmPpvyHvxD+DlaTk7w1/IWWMENhlq52RnWtfHYTxq/dT+ak+5ovWRg kDENbpn3ZLdd+1AahKZewolLa0qZEFWYw+baF5beev8Htj8q/oaEKlxY9GJpg/gg VCEXH1mvD51zEGwaWAHXIHp6P7wZTSE1yJnORpcZiaTkAeiLGKXtnfs1dKOwXzkp UTg9wd3pnXvg5Mb7MWQcYsq7Fr2NG/c= -----END CERTIFICATE-----Generated at Fri Apr 17 09:51:05 2026 by rpki-client