$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/b874dedc-9a39-3c5b-8eb0-fe349f0e60c9.roa File: b874dedc-9a39-3c5b-8eb0-fe349f0e60c9.roa (raw, json) Hash identifier: 8JXchVCTB2Y03V7h0WcOF90y1wqssrgel9zIbkE00gU= Subject key identifier: D6:9F:DE:89:50:F5:F2:E3:CC:37:1B:F4:C9:5A:91:76:40:81:28:85 Certificate issuer: /CN=0dca6695-752f-4d90-822c-1351355a562e Certificate serial: 010D0C9F4328584D83CA9F184867970C8B3E9E00 Authority key identifier: 4A:DB:D3:45:21:9E:7E:95:81:10:A0:AC:82:EB:5E:D1:9A:46:0C:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/b874dedc-9a39-3c5b-8eb0-fe349f0e60c9.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 46189 IP address blocks: 208.92.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/0dca6695-752f-4d90-822c-1351355a562e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/0dca6695-752f-4d90-822c-1351355a562e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:9f:18:48:67:97:0c:8b:3e:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dca6695-752f-4d90-822c-1351355a562e Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=9b401dee-51a4-4f64-bf2c-684c5dd07d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ad:55:df:ac:e4:f4:ca:78:8c:99:db:0a:57: 07:de:2b:56:cf:02:ee:fc:77:30:0d:b3:d9:bf:aa: 2c:f7:5f:dd:4b:8f:ce:7b:59:30:99:c3:48:f0:98: e5:25:e2:6c:57:24:cb:d9:a1:dc:4a:cb:e0:91:ac: 61:de:b9:cc:4f:49:f4:71:76:76:de:40:a6:54:05: a2:53:be:96:03:d6:d4:80:b4:2f:c2:88:55:ce:31: 73:7d:3f:bd:08:c5:cc:e6:d2:c6:65:07:f5:ef:a7: f9:7a:f9:6e:93:ef:6b:9a:23:fd:8c:b8:e5:12:c7: 02:77:78:22:c7:39:dc:d6:4e:4c:80:08:0b:52:06: d4:40:c4:3a:5d:ad:cc:d3:8f:85:be:23:08:6d:07: 27:2c:26:22:0a:e1:9d:29:88:78:73:46:f6:05:f4: fc:b0:d0:7b:c8:09:80:37:21:c9:5a:26:cd:e1:5c: 08:38:fd:d5:8f:fb:96:03:da:a8:f2:c7:f0:54:3d: 8f:22:10:f6:39:92:68:f1:49:a1:7c:e3:0c:9e:40: e7:6c:f8:62:26:b1:e2:af:1e:b9:4a:a1:0d:85:7c: 1d:80:ee:b2:23:74:4e:97:ef:06:d7:96:af:99:10: 31:f4:ae:58:83:36:dc:81:3c:6e:c7:3c:53:79:fa: a4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9F:DE:89:50:F5:F2:E3:CC:37:1B:F4:C9:5A:91:76:40:81:28:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/b874dedc-9a39-3c5b-8eb0-fe349f0e60c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/0dca6695-752f-4d90-822c-1351355a562e.crl X509v3 Authority Key Identifier: keyid:4A:DB:D3:45:21:9E:7E:95:81:10:A0:AC:82:EB:5E:D1:9A:46:0C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e.cer sbgp-ipAddrBlock: critical IPv4: 208.92.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:eb:af:7e:22:04:84:23:f5:b2:93:fb:fe:17:41:cd:99:b0: 6f:96:ac:b8:1d:47:0e:f6:f9:39:5e:b9:a3:5f:69:2c:e6:02: f4:77:f9:3b:55:74:f0:49:12:68:07:60:11:78:d4:44:90:85: cf:d4:e1:0d:f7:07:43:c4:2b:ff:52:3c:44:d6:e6:8d:54:92: e0:06:a2:a1:7d:f9:86:5f:20:a8:be:e0:05:c1:c1:35:e3:b6: 9e:1f:0c:a6:8f:4f:00:cd:ff:f6:f9:a8:ac:86:a4:40:15:88: 6d:00:85:70:61:a1:4a:14:87:95:9e:b0:e3:13:35:1b:32:cc: de:9c:17:76:3d:e4:a7:09:33:8b:be:32:7a:0e:26:f0:09:05: 00:73:09:c2:98:c1:86:3f:9a:a7:ad:9c:e3:6b:f0:06:41:ad: bd:84:16:10:a9:5c:93:5b:80:fc:ce:2d:53:27:ee:6c:c5:4d: 37:4b:48:f1:11:5c:55:b8:64:75:ee:13:e8:a9:81:80:11:4d: 42:f0:ab:d5:d2:85:9b:38:8b:ad:aa:e0:3f:69:fd:c1:79:2b: 70:cb:fe:d1:37:30:25:64:43:f6:b8:9e:d1:e4:52:11:bc:a0: 4a:29:ce:67:cc:d4:68:30:ac:30:1c:b1:de:90:ba:db:7b:a7: 6d:fd:5d:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Dyp8YSGeXDIs+ngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRjYTY2OTUtNzUyZi00ZDkwLTgyMmMtMTM1MTM1NWE1 NjJlMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk OWI0MDFkZWUtNTFhNC00ZjY0LWJmMmMtNjg0YzVkZDA3ZDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq1V36zk9Mp4jJnbClcH3itWzwLu/HcwDbPZ v6os91/dS4/Oe1kwmcNI8JjlJeJsVyTL2aHcSsvgkaxh3rnMT0n0cXZ23kCmVAWi U76WA9bUgLQvwohVzjFzfT+9CMXM5tLGZQf176f5evluk+9rmiP9jLjlEscCd3gi xznc1k5MgAgLUgbUQMQ6Xa3M04+FviMIbQcnLCYiCuGdKYh4c0b2BfT8sNB7yAmA NyHJWibN4VwIOP3Vj/uWA9qo8sfwVD2PIhD2OZJo8UmhfOMMnkDnbPhiJrHirx65 SqENhXwdgO6yI3ROl+8G15avmRAx9K5YgzbcgTxuxzxTefqk7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNaf3olQ9fLjzDcb9MlakXZAgSiFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZGNh NjY5NS03NTJmLTRkOTAtODIyYy0xMzUxMzU1YTU2MmUvYjg3NGRlZGMtOWEzOS0z YzViLThlYjAtZmUzNDlmMGU2MGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGRjYTY2OTUtNzUyZi00ZDkwLTgy MmMtMTM1MTM1NWE1NjJlLzBkY2E2Njk1LTc1MmYtNGQ5MC04MjJjLTEzNTEzNTVh NTYyZS5jcmwwHwYDVR0jBBgwFoAUStvTRSGefpWBEKCsgute0ZpGDHEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZGNhNjY5NS03NTJmLTRkOTAtODIyYy0xMzUx MzU1YTU2MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHrr34iBIQj9bKT+/4XQc2ZsG+WrLgdRw72+TleuaNfaSzmAvR3+TtV dPBJEmgHYBF41ESQhc/U4Q33B0PEK/9SPETW5o1UkuAGoqF9+YZfIKi+4AXBwTXj tp4fDKaPTwDN//b5qKyGpEAViG0AhXBhoUoUh5WesOMTNRsyzN6cF3Y95KcJM4u+ MnoOJvAJBQBzCcKYwYY/mqetnONr8AZBrb2EFhCpXJNbgPzOLVMn7mzFTTdLSPER XFW4ZHXuE+ipgYARTULwq9XShZs4i62q4D9p/cF5K3DL/tE3MCVkQ/a4ntHkUhG8 oEopzmfM1GgwrDAcsd6Qutt7p239Xdg= -----END CERTIFICATE-----Generated at Fri Apr 17 21:16:54 2026 by rpki-client