$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/b7718956-829a-3e02-9a2b-7cfb84f2012b.roa File: b7718956-829a-3e02-9a2b-7cfb84f2012b.roa (raw, json) Hash identifier: s9xgfAPLnsWi8eRu0sQuEg05JsOBu167lNTHQZnAbIc= Subject key identifier: 36:C1:CE:CD:4D:A6:12:B4:36:58:32:0D:A5:3F:CD:A1:AF:94:AB:17 Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001 Certificate serial: 010D0C9F4328584D83CA9FFE2750B071DFDDC140 Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/b7718956-829a-3e02-9a2b-7cfb84f2012b.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 212149 IP address blocks: 207.167.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:9f:fe:27:50:b0:71:df:dd:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001 Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=5eb11a4b-38ed-4aec-b3cc-6330dda34c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:97:ee:56:39:54:5c:a0:c5:28:31:ac:a5:31: 3c:51:d8:4f:74:18:53:18:4b:0e:85:52:1c:00:c6: b1:9d:4d:d3:90:89:09:a3:36:33:77:4c:d1:f3:76: 9b:4b:a3:7a:c6:6b:7d:82:2b:9c:77:cb:49:67:5d: bc:44:46:de:0b:70:c0:02:49:1f:7f:16:54:fd:cf: 68:79:2e:7b:4f:29:09:9b:55:35:7b:2a:2c:a5:da: db:3c:4c:df:de:f8:c5:9a:b2:3f:a0:3f:93:d1:18: 44:b1:be:5f:b6:1c:49:93:7d:c2:8c:68:11:8a:15: 83:de:c5:cd:f0:91:e5:95:22:7b:4f:84:5b:7e:38: 83:e9:76:71:f5:60:5c:f1:86:20:31:1c:0c:cb:50: ce:c5:1b:c4:9f:b3:55:20:da:cb:1c:2c:9a:12:38: 44:d2:e5:e2:0f:f9:36:14:ce:bd:e7:df:bc:20:db: 16:5e:52:7e:f2:f5:0e:88:3d:12:3a:06:bb:a8:91: 99:b0:ee:e9:89:d7:b0:2c:27:c6:ea:60:45:f6:2c: 46:2d:e9:1c:36:2b:22:b0:0d:37:9b:2a:96:61:34: 9a:9e:de:f5:97:d9:9c:6b:81:f5:0f:06:8b:07:f7: eb:43:38:65:7b:09:01:df:97:92:7e:75:a2:b8:05: bb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C1:CE:CD:4D:A6:12:B4:36:58:32:0D:A5:3F:CD:A1:AF:94:AB:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/b7718956-829a-3e02-9a2b-7cfb84f2012b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl X509v3 Authority Key Identifier: keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer sbgp-ipAddrBlock: critical IPv4: 207.167.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:04:93:d0:a2:e9:7a:1a:bd:e3:6b:94:ad:ab:9f:3e:85:6a: 87:f4:03:f6:8e:d4:ab:ea:ad:a8:0e:6a:70:e7:f1:52:e8:4f: fb:64:0d:2a:50:01:0d:7d:a0:38:01:cd:cd:f0:b8:02:9f:80: 52:8f:31:10:1c:f0:c0:5e:5d:02:3d:60:6b:31:bd:9a:a6:65: c3:14:77:1e:1e:c2:25:ca:8a:1e:cd:44:29:94:14:40:ee:ea: af:d3:75:7c:93:c0:f9:c0:e8:a2:88:8c:b6:39:20:9f:fc:f1: 44:89:f6:46:07:e1:a8:ca:13:58:63:f6:f5:aa:c6:45:1d:01: 44:fa:56:20:d0:67:a2:9d:5b:41:bd:9b:58:61:0a:08:ff:4c: 56:8c:2e:79:79:df:97:bc:30:a8:13:b6:e1:7f:ad:95:cd:52: 4a:66:8e:97:e4:6d:72:51:97:5c:8d:39:1a:d1:4a:63:32:65: de:4c:da:5a:34:1b:d6:07:c3:87:2c:1d:bc:b9:d7:e9:1d:39: f2:15:0f:de:ab:ed:fb:b9:f0:1e:d8:1e:20:58:8f:88:88:72: 83:0b:b9:0b:41:03:62:55:75:70:66:62:3d:ad:e7:72:27:0a: 22:0f:f8:10:42:44:93:8e:0b:7a:e8:79:e5:e4:24:6f:16:ce: 90:6c:79:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Dyp/+J1Cwcd/dwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRkMzVmMTEtMDI5NC00YmU5LTk0YjctNDljYWMyYmNi MDAxMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk NWViMTFhNGItMzhlZC00YWVjLWIzY2MtNjMzMGRkYTM0YzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZfuVjlUXKDFKDGspTE8UdhPdBhTGEsOhVIc AMaxnU3TkIkJozYzd0zR83abS6N6xmt9giucd8tJZ128REbeC3DAAkkffxZU/c9o eS57TykJm1U1eyospdrbPEzf3vjFmrI/oD+T0RhEsb5fthxJk33CjGgRihWD3sXN 8JHllSJ7T4RbfjiD6XZx9WBc8YYgMRwMy1DOxRvEn7NVINrLHCyaEjhE0uXiD/k2 FM6959+8INsWXlJ+8vUOiD0SOga7qJGZsO7pidewLCfG6mBF9ixGLekcNisisA03 myqWYTSant71l9mca4H1DwaLB/frQzhlewkB35eSfnWiuAW7XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbBzs1NphK0NlgyDaU/zaGvlKsXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQz NWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJiY2IwMDEvYjc3MTg5NTYtODI5YS0z ZTAyLTlhMmItN2NmYjg0ZjIwMTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWRkMzVmMTEtMDI5NC00YmU5LTk0 YjctNDljYWMyYmNiMDAxL2FkZDM1ZjExLTAyOTQtNGJlOS05NGI3LTQ5Y2FjMmJj YjAwMS5jcmwwHwYDVR0jBBgwFoAUpXphLLBJKDwfCZ0NXgzzjrlY+MowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNh YzJiY2IwMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6d5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQEk9Ci6XoaveNrlK2rnz6Faof0A/aO1KvqragOanDn8VLoT/tkDSpQ AQ19oDgBzc3wuAKfgFKPMRAc8MBeXQI9YGsxvZqmZcMUdx4ewiXKih7NRCmUFEDu 6q/TdXyTwPnA6KKIjLY5IJ/88USJ9kYH4ajKE1hj9vWqxkUdAUT6ViDQZ6KdW0G9 m1hhCgj/TFaMLnl535e8MKgTtuF/rZXNUkpmjpfkbXJRl1yNORrRSmMyZd5M2lo0 G9YHw4csHby51+kdOfIVD96r7fu58B7YHiBYj4iIcoMLuQtBA2JVdXBmYj2t53In CiIP+BBCRJOOC3roeeXkJG8WzpBsebo= -----END CERTIFICATE-----Generated at Sat Apr 18 01:35:57 2026 by rpki-client