$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/cd834625-5e03-3003-a219-1f2ecf641d36.roa File: cd834625-5e03-3003-a219-1f2ecf641d36.roa (raw, json) Hash identifier: os7MHn3gx+dSKBpQBnoM+XvlAmKMV4Nt9e1lP+7TFqs= Subject key identifier: C4:F1:E1:D0:BC:62:2C:9D:89:0D:64:90:8A:5A:8C:C2:9E:FA:7E:FA Certificate issuer: /CN=da6a16ad-9697-4d95-a04c-86394f7b78c8 Certificate serial: 010D0C9F4328584D83CA9EC78171690687BE5CF8 Authority key identifier: F4:67:EA:9A:60:B0:9C:4E:6E:AD:2E:BC:5B:9C:08:94:BA:A6:04:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/cd834625-5e03-3003-a219-1f2ecf641d36.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 16509 IP address blocks: 204.10.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/da6a16ad-9697-4d95-a04c-86394f7b78c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/da6a16ad-9697-4d95-a04c-86394f7b78c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:9e:c7:81:71:69:06:87:be:5c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6a16ad-9697-4d95-a04c-86394f7b78c8 Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=a33ca63c-f93f-4a25-841d-f1b76270049b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:66:74:d0:51:13:59:53:a0:fa:50:38:b9:dd: e6:04:3d:f7:33:f4:76:12:e1:3a:df:4b:1f:59:64: 65:48:1c:ef:b3:f4:92:5c:6c:c0:75:44:80:53:bc: ae:8f:1f:33:d5:19:3d:3c:50:f6:b7:b9:2c:06:8b: 5c:34:7e:5f:8a:e7:30:26:32:5a:55:7b:c8:6c:31: 0a:9c:51:df:bb:d5:58:53:d2:10:9d:cf:a2:1b:1f: e3:6a:3d:6a:0a:98:97:72:3a:a2:ac:a9:8a:21:93: f3:c8:66:bc:80:62:e4:3a:ea:13:15:f2:f4:32:f0: 1f:37:fd:0f:be:a9:3c:b0:12:34:af:8d:6e:69:56: b1:26:d9:f7:54:28:2a:03:f9:92:23:78:58:58:7c: 2a:bb:2c:b5:ec:3e:b0:d0:9a:17:d1:62:30:03:b1: c0:41:f5:71:32:4d:0f:06:eb:7b:52:ce:1d:b4:b0: 23:17:65:fd:0d:94:dc:65:58:ff:98:fe:14:9b:9a: 1f:87:13:45:7b:cb:71:ac:53:59:c0:2f:3b:3b:6f: d0:8c:61:d5:93:e0:a5:01:62:14:9c:52:24:e4:b2: a1:ab:5d:17:28:53:e4:e5:32:54:e9:19:cb:20:06: a9:95:44:3b:7a:d5:1a:c0:e8:f8:3d:87:ef:9b:74: 21:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F1:E1:D0:BC:62:2C:9D:89:0D:64:90:8A:5A:8C:C2:9E:FA:7E:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/cd834625-5e03-3003-a219-1f2ecf641d36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/da6a16ad-9697-4d95-a04c-86394f7b78c8.crl X509v3 Authority Key Identifier: keyid:F4:67:EA:9A:60:B0:9C:4E:6E:AD:2E:BC:5B:9C:08:94:BA:A6:04:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8.cer sbgp-ipAddrBlock: critical IPv4: 204.10.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:21:66:f6:39:1d:28:20:06:e0:f7:4d:6d:a1:83:67:88:ec: bd:53:de:b6:75:05:9e:47:d2:0f:1e:53:3e:3f:23:8a:b1:ea: 9b:e6:fe:4d:de:6e:cc:0b:04:23:50:c3:25:be:21:5e:67:a8: 7d:52:53:df:11:3c:2a:04:89:4a:fd:d1:a2:f0:ec:a9:67:fb: 78:fc:7b:5e:91:e3:3b:4a:7c:c6:ab:a6:70:4a:07:af:5c:9a: 08:80:f5:14:49:fb:01:39:57:37:e6:67:9b:4d:a7:ab:70:29: ea:79:8d:38:3e:65:cc:ed:e4:c8:88:05:e2:74:43:95:90:1e: f7:77:f2:ea:0e:63:b9:8c:7d:47:4c:9f:ca:c5:d2:1a:a3:79: a8:d4:17:9f:db:24:85:6e:6f:56:22:e6:7e:29:da:e5:3e:33: d5:98:f8:30:0c:3d:84:c7:bb:29:bb:bb:7f:d1:81:4f:e0:93: ab:1a:fb:8e:c5:a8:a0:1e:33:ac:94:03:ff:e6:66:77:16:aa: d8:1c:69:52:7b:fa:81:85:55:06:c4:dd:8c:9e:53:57:d5:18: bf:59:ff:bb:1c:56:c9:e8:12:6e:42:ad:3d:a6:c9:62:c2:18: a0:db:2b:13:ae:ac:34:03:b2:72:56:d9:85:13:96:cd:31:ed: 5e:e4:28:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Dyp7HgXFpBoe+XPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2YTE2YWQtOTY5Ny00ZDk1LWEwNGMtODYzOTRmN2I3 OGM4MB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk YTMzY2E2M2MtZjkzZi00YTI1LTg0MWQtZjFiNzYyNzAwNDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGZ00FETWVOg+lA4ud3mBD33M/R2EuE630sf WWRlSBzvs/SSXGzAdUSAU7yujx8z1Rk9PFD2t7ksBotcNH5fiucwJjJaVXvIbDEK nFHfu9VYU9IQnc+iGx/jaj1qCpiXcjqirKmKIZPzyGa8gGLkOuoTFfL0MvAfN/0P vqk8sBI0r41uaVaxJtn3VCgqA/mSI3hYWHwquyy17D6w0JoX0WIwA7HAQfVxMk0P But7Us4dtLAjF2X9DZTcZVj/mP4Um5ofhxNFe8txrFNZwC87O2/QjGHVk+ClAWIU nFIk5LKhq10XKFPk5TJU6RnLIAaplUQ7etUawOj4PYfvm3QhiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTx4dC8YiydiQ1kkIpajMKe+n76MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTZh MTZhZC05Njk3LTRkOTUtYTA0Yy04NjM5NGY3Yjc4YzgvY2Q4MzQ2MjUtNWUwMy0z MDAzLWEyMTktMWYyZWNmNjQxZDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGE2YTE2YWQtOTY5Ny00ZDk1LWEw NGMtODYzOTRmN2I3OGM4L2RhNmExNmFkLTk2OTctNGQ5NS1hMDRjLTg2Mzk0Zjdi NzhjOC5jcmwwHwYDVR0jBBgwFoAU9GfqmmCwnE5urS68W5wIlLqmBFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTZhMTZhZC05Njk3LTRkOTUtYTA0Yy04NjM5 NGY3Yjc4YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzApgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQhZvY5HSggBuD3TW2hg2eI7L1T3rZ1BZ5H0g8eUz4/I4qx6pvm/k3e bswLBCNQwyW+IV5nqH1SU98RPCoEiUr90aLw7Kln+3j8e16R4ztKfMarpnBKB69c mgiA9RRJ+wE5VzfmZ5tNp6twKep5jTg+Zczt5MiIBeJ0Q5WQHvd38uoOY7mMfUdM n8rF0hqjeajUF5/bJIVub1Yi5n4p2uU+M9WY+DAMPYTHuym7u3/RgU/gk6sa+47F qKAeM6yUA//mZncWqtgcaVJ7+oGFVQbE3YyeU1fVGL9Z/7scVsnoEm5CrT2myWLC GKDbKxOurDQDsnJW2YUTls0x7V7kKJc= -----END CERTIFICATE-----Generated at Fri Apr 17 23:39:47 2026 by rpki-client