$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/c1f707e3-581b-3a11-8a60-245b52060e4b.roa File: c1f707e3-581b-3a11-8a60-245b52060e4b.roa (raw, json) Hash identifier: rSe4qmxIlk+k6f6CXHskadI+xj9VlcTER+14rbcCgEE= Subject key identifier: C5:62:90:09:03:B1:0E:25:EE:41:1E:2C:66:3F:C0:AD:A8:EF:41:54 Certificate issuer: /CN=80697166-ff16-4bb4-87a8-1050eb90593c Certificate serial: 010D0C9F4328584D651526D6D0C3E163E3662CC0 Authority key identifier: 8A:5C:C2:0D:95:89:8B:CE:16:B6:4C:78:9D:B8:00:AE:AB:27:E0:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/c1f707e3-581b-3a11-8a60-245b52060e4b.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 399989 IP address blocks: 128.254.164.0/22 maxlen: 22 128.254.164.0/24 maxlen: 24 128.254.165.0/24 maxlen: 24 128.254.166.0/24 maxlen: 24 128.254.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/80697166-ff16-4bb4-87a8-1050eb90593c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/80697166-ff16-4bb4-87a8-1050eb90593c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:26:d6:d0:c3:e1:63:e3:66:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80697166-ff16-4bb4-87a8-1050eb90593c Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=8747abb2-16d0-43e6-9087-bf527cd6215d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:af:4d:25:20:06:27:6f:3c:05:1b:95:11:90: 8d:73:bc:24:a4:33:4f:1f:99:4b:8a:c1:db:cf:23: e5:21:a2:2f:5b:68:84:a7:86:f9:62:35:7b:23:d1: 9e:13:df:f1:ad:88:76:d4:16:36:03:51:86:a3:be: 9e:9d:6f:46:3a:94:49:50:39:e3:79:bc:c0:49:75: a1:74:f1:09:b9:8c:28:d7:c7:e9:f7:ed:ed:35:b5: d2:13:4b:9a:ca:b7:f4:17:08:45:36:21:5e:a4:95: 92:62:d3:a4:d9:b5:8d:be:90:11:b0:ef:0c:34:18: 7e:52:50:ff:77:d0:f7:8b:12:f4:05:4f:bc:12:02: 87:01:0d:11:69:c0:cf:83:0b:04:85:2c:db:bb:85: 68:ba:6a:62:2f:03:db:12:5f:d9:b3:e4:6d:a0:07: d7:16:aa:5a:0b:32:f4:73:3e:eb:fe:5a:1a:f0:0b: 28:2d:89:a6:c2:72:af:07:aa:38:df:01:6b:de:d3: 98:ad:1c:db:85:43:9f:fe:5f:55:74:62:32:37:40: 4a:87:e4:6e:b5:4d:ab:82:4a:76:ca:43:d9:f3:f4: 27:49:0a:a2:56:e9:73:99:22:85:4e:fe:19:52:ff: 0f:64:75:af:de:a5:5c:f9:15:a8:3f:ee:3e:80:f7: a9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:62:90:09:03:B1:0E:25:EE:41:1E:2C:66:3F:C0:AD:A8:EF:41:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/c1f707e3-581b-3a11-8a60-245b52060e4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/80697166-ff16-4bb4-87a8-1050eb90593c.crl X509v3 Authority Key Identifier: keyid:8A:5C:C2:0D:95:89:8B:CE:16:B6:4C:78:9D:B8:00:AE:AB:27:E0:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c.cer sbgp-ipAddrBlock: critical IPv4: 128.254.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:77:3a:36:83:ee:d6:c4:33:94:d5:78:7c:38:16:64:e9:87: 70:11:38:49:50:0c:ee:11:1c:67:1b:40:d4:ac:18:17:a8:9a: f6:c5:88:8e:bf:4d:33:1c:1b:a8:8c:a0:9c:8f:af:27:30:a2: 6b:61:07:bd:3d:b4:25:52:7b:92:78:39:54:89:60:0f:73:70: ec:d1:d2:fc:9b:3e:86:d1:0c:f1:a7:62:71:fa:6c:94:3e:ed: 00:49:40:8c:dc:25:70:e0:d8:8f:0b:a6:61:b0:ed:e8:f3:eb: 46:2b:5d:ba:bc:42:31:d1:e5:95:12:4d:a2:51:34:46:0d:7b: e3:70:6d:67:88:cc:41:9c:d2:c1:2e:39:9c:6b:7c:e5:31:91: bc:94:06:18:0a:35:ce:75:95:20:24:83:3b:f4:13:87:b7:ad: ff:a7:61:f9:9e:63:5c:2a:0f:a9:93:09:d6:59:cb:43:24:b7: d7:bc:d7:c0:cc:50:f4:5a:eb:92:ab:49:84:10:53:b2:a4:61: b0:c1:6c:c5:e1:08:e3:6d:7d:47:06:64:f7:bd:bc:e8:3b:8f: 94:19:16:c0:3f:fa:c0:64:d8:a5:39:bf:f9:a3:30:d8:36:46: 2e:af:d8:e0:58:e4:6c:36:d6:a4:d0:55:ae:f3:76:1c:0b:ed: ca:92:4b:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFSbW0MPhY+NmLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA2OTcxNjYtZmYxNi00YmI0LTg3YTgtMTA1MGViOTA1 OTNjMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk ODc0N2FiYjItMTZkMC00M2U2LTkwODctYmY1MjdjZDYyMTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi69NJSAGJ288BRuVEZCNc7wkpDNPH5lLisHb zyPlIaIvW2iEp4b5YjV7I9GeE9/xrYh21BY2A1GGo76enW9GOpRJUDnjebzASXWh dPEJuYwo18fp9+3tNbXSE0uayrf0FwhFNiFepJWSYtOk2bWNvpARsO8MNBh+UlD/ d9D3ixL0BU+8EgKHAQ0RacDPgwsEhSzbu4VoumpiLwPbEl/Zs+RtoAfXFqpaCzL0 cz7r/loa8AsoLYmmwnKvB6o43wFr3tOYrRzbhUOf/l9VdGIyN0BKh+RutU2rgkp2 ykPZ8/QnSQqiVulzmSKFTv4ZUv8PZHWv3qVc+RWoP+4+gPep3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVikAkDsQ4l7kEeLGY/wK2o70FUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDY5 NzE2Ni1mZjE2LTRiYjQtODdhOC0xMDUwZWI5MDU5M2MvYzFmNzA3ZTMtNTgxYi0z YTExLThhNjAtMjQ1YjUyMDYwZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODA2OTcxNjYtZmYxNi00YmI0LTg3 YTgtMTA1MGViOTA1OTNjLzgwNjk3MTY2LWZmMTYtNGJiNC04N2E4LTEwNTBlYjkw NTkzYy5jcmwwHwYDVR0jBBgwFoAUilzCDZWJi84Wtkx4nbgArqsn4KwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDY5NzE2Ni1mZjE2LTRiYjQtODdhOC0xMDUw ZWI5MDU5M2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgP6kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAB3OjaD7tbEM5TVeHw4FmTph3AROElQDO4RHGcbQNSsGBeomvbFiI6/ TTMcG6iMoJyPrycwomthB709tCVSe5J4OVSJYA9zcOzR0vybPobRDPGnYnH6bJQ+ 7QBJQIzcJXDg2I8LpmGw7ejz60YrXbq8QjHR5ZUSTaJRNEYNe+NwbWeIzEGc0sEu OZxrfOUxkbyUBhgKNc51lSAkgzv0E4e3rf+nYfmeY1wqD6mTCdZZy0Mkt9e818DM UPRa65KrSYQQU7KkYbDBbMXhCONtfUcGZPe9vOg7j5QZFsA/+sBk2KU5v/mjMNg2 Ri6v2OBY5Gw21qTQVa7zdhwL7cqSS/I= -----END CERTIFICATE-----Generated at Fri Apr 17 16:49:16 2026 by rpki-client