$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/1eb6dd8c-d6d7-3967-983c-a2a1e85bd6e5.roa File: 1eb6dd8c-d6d7-3967-983c-a2a1e85bd6e5.roa (raw, json) Hash identifier: 3ep4hcBxTz+PTGsMNR3Md771Iaz7mVdynJeB7AjKGqE= Subject key identifier: 85:3C:3F:B1:31:85:C5:CA:BA:BB:02:0C:E5:05:15:77:4E:6C:BC:82 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584D60E505AC5C225F76FC93A780 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/1eb6dd8c-d6d7-3967-983c-a2a1e85bd6e5.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 212238 IP address blocks: 172.102.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:05:ac:5c:22:5f:76:fc:93:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=7a58ae10-46c4-4cb3-8bb2-5f903b7d4996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:34:b5:27:a1:25:6c:26:74:5f:14:57:b3:bb: b2:cd:aa:66:b3:87:a4:7b:8e:6b:90:96:5f:7f:a8: 15:14:e6:12:1c:f0:bf:0e:ae:4b:98:a4:66:8a:dd: 5b:10:ba:34:6a:52:2f:70:04:cc:e1:e9:4e:aa:01: 61:ad:cd:1e:ed:a4:3a:75:a5:f2:16:2e:c5:e7:2f: 4a:76:db:96:79:d2:91:b7:ea:72:78:82:14:58:25: 18:40:fe:8f:d4:ec:f8:de:7b:d1:9b:5b:02:75:da: fd:ab:15:e3:73:b5:c5:47:92:a0:06:7f:d8:06:df: 3d:47:3a:76:fd:9e:ff:6d:51:a6:29:2f:ea:0d:98: 9c:5f:ad:c3:10:00:35:56:98:5d:07:3a:fc:50:07: 42:28:59:f0:90:3c:97:4c:6a:88:cc:8e:ef:14:be: a8:78:82:5b:09:a7:26:a8:a6:6d:e1:32:6e:fa:f3: 55:84:92:aa:a8:8c:e0:89:b8:66:83:6a:f5:bd:a0: af:96:c7:45:15:cf:ef:3d:58:f1:79:5e:51:a0:bd: ed:84:92:07:7e:39:fe:4c:1b:38:6b:ac:a0:3d:ca: 96:a1:01:2a:20:ea:fa:ab:da:b7:29:d0:06:41:7d: 57:27:b5:fb:18:54:9e:d5:86:97:fe:0e:b6:99:c8: 85:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3C:3F:B1:31:85:C5:CA:BA:BB:02:0C:E5:05:15:77:4E:6C:BC:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/1eb6dd8c-d6d7-3967-983c-a2a1e85bd6e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:a4:17:d7:9f:d0:44:8a:14:96:9c:e0:0d:11:dc:d1:3a:bc: 38:38:25:f5:4d:28:dd:e0:8c:c0:bb:04:3d:f8:71:62:45:36: 36:30:0a:53:4c:6f:d6:d2:e2:32:7c:40:53:b5:80:9f:59:09: 99:1d:06:fe:6c:bf:f6:84:5d:14:b3:a3:72:6f:17:b1:aa:0c: b2:d6:80:11:04:57:30:25:60:77:65:d4:67:15:22:62:5f:e4: a2:41:fc:42:b2:2c:d1:c4:9a:30:ad:37:54:30:90:47:1b:f9: 1e:fe:a1:d6:44:69:1e:42:18:3e:67:85:c4:34:a4:82:7a:79: 30:1b:b8:a7:11:22:61:3e:99:87:c9:ec:c5:08:18:c5:87:1a: f7:27:2e:4f:50:91:a3:41:6e:7c:b3:38:5f:a3:7c:5d:05:65: 57:05:a0:79:02:73:b5:e4:0b:93:83:4b:ce:c3:36:ba:62:92: b7:9e:44:4c:47:a3:19:34:ec:58:8c:e8:a5:c1:99:bc:8d:55: 7b:c0:2b:a1:8c:38:16:47:49:ce:37:00:29:57:89:b0:44:70: 78:ec:b0:6c:57:87:86:ff:d1:3f:da:95:7b:0b:8f:b3:2a:2c: 8d:8e:20:b6:96:ac:50:53:42:b1:07:a3:56:9b:3c:a1:55:b9: 30:de:2f:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5QWsXCJfdvyTp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk N2E1OGFlMTAtNDZjNC00Y2IzLThiYjItNWY5MDNiN2Q0OTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzS1J6ElbCZ0XxRXs7uyzapms4eke45rkJZf f6gVFOYSHPC/Dq5LmKRmit1bELo0alIvcATM4elOqgFhrc0e7aQ6daXyFi7F5y9K dtuWedKRt+pyeIIUWCUYQP6P1Oz43nvRm1sCddr9qxXjc7XFR5KgBn/YBt89Rzp2 /Z7/bVGmKS/qDZicX63DEAA1VphdBzr8UAdCKFnwkDyXTGqIzI7vFL6oeIJbCacm qKZt4TJu+vNVhJKqqIzgibhmg2r1vaCvlsdFFc/vPVjxeV5RoL3thJIHfjn+TBs4 a6ygPcqWoQEqIOr6q9q3KdAGQX1XJ7X7GFSe1YaX/g62mciFowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIU8P7ExhcXKursCDOUFFXdObLyCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvMWViNmRkOGMtZDZkNy0z OTY3LTk4M2MtYTJhMWU4NWJkNmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGbLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJukF9ef0ESKFJac4A0R3NE6vDg4JfVNKN3gjMC7BD34cWJFNjYwClNM b9bS4jJ8QFO1gJ9ZCZkdBv5sv/aEXRSzo3JvF7GqDLLWgBEEVzAlYHdl1GcVImJf 5KJB/EKyLNHEmjCtN1QwkEcb+R7+odZEaR5CGD5nhcQ0pIJ6eTAbuKcRImE+mYfJ 7MUIGMWHGvcnLk9QkaNBbnyzOF+jfF0FZVcFoHkCc7XkC5ODS87DNrpikreeRExH oxk07FiM6KXBmbyNVXvAK6GMOBZHSc43AClXibBEcHjssGxXh4b/0T/alXsLj7Mq LI2OILaWrFBTQrEHo1abPKFVuTDeL5M= -----END CERTIFICATE-----Generated at Fri Apr 17 18:06:01 2026 by rpki-client