$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/b1b637d3-1237-3b23-aec5-e6f0f8b16d4b.roa File: b1b637d3-1237-3b23-aec5-e6f0f8b16d4b.roa (raw, json) Hash identifier: gcTBLf/Dbyy7RcaSN7BC0LIfuXvJZUtj3Q8IgAUEEvc= Subject key identifier: A9:EF:FA:49:54:78:A1:84:DC:57:64:FD:28:C2:2C:EC:30:0C:FD:62 Certificate issuer: /CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b Certificate serial: 010D0C9F4328584D746FBBAC54B9655C7CC05A00 Authority key identifier: 56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/b1b637d3-1237-3b23-aec5-e6f0f8b16d4b.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 216.169.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:bb:ac:54:b9:65:5c:7c:c0:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=b6e17092-84c4-46e3-8834-5a975112c51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:27:33:11:4b:26:45:a1:a5:64:cb:42:c2:2b: ca:0e:3c:c0:e6:95:87:56:dd:d8:f3:be:5f:13:8a: 47:7f:5e:a2:f0:34:c2:22:b1:ab:d4:62:c2:5f:16: bf:de:0c:c9:08:c3:75:23:0a:10:e7:62:1b:59:60: d5:20:ca:cd:ce:ae:94:62:85:44:c8:7e:7d:66:c5: fd:d5:9c:ce:77:2f:ba:84:70:e6:7f:7b:7f:af:e7: 78:41:b5:2e:75:8b:2e:08:81:66:1a:ba:05:46:e8: 5e:5b:92:5f:30:0e:e6:2c:99:1f:16:87:85:06:47: fd:1d:cc:29:ea:9d:36:ec:03:0e:94:4c:cb:2a:17: bf:df:92:b9:a5:59:b0:f5:35:89:88:f9:d3:22:ed: 29:24:9d:70:43:ac:c0:98:25:e2:41:5f:72:e6:a4: 08:b2:36:22:74:05:42:d5:96:9f:98:c1:f2:e0:8b: 24:4b:a0:21:47:19:87:2e:da:12:3c:36:1c:68:01: 7e:a5:19:9b:fb:e0:ff:a2:e2:b9:f7:8e:5b:16:8b: 41:b7:9f:9f:c2:79:bd:1d:c5:e1:b1:0f:9c:39:1a: fa:2f:97:0c:cf:7a:49:94:0b:a9:c3:6c:98:35:08: 73:c2:e9:22:84:47:c4:06:8f:96:44:c5:81:1e:e0: dc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EF:FA:49:54:78:A1:84:DC:57:64:FD:28:C2:2C:EC:30:0C:FD:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/b1b637d3-1237-3b23-aec5-e6f0f8b16d4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl X509v3 Authority Key Identifier: keyid:56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer sbgp-ipAddrBlock: critical IPv4: 216.169.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:cc:78:79:2b:3a:d0:4b:7d:44:9f:4a:ff:e3:67:8e:e9:bb: c6:29:d9:7a:7d:7a:5b:ac:88:6b:65:50:7e:11:dc:53:7d:8c: 4c:23:5f:31:34:84:3b:40:92:f2:43:85:ff:00:32:cc:06:72: 82:78:bf:f4:9b:38:bc:b4:6d:0b:cf:4d:43:60:4e:82:a6:5d: 2d:2a:68:03:8f:1c:c3:0d:9b:62:50:8e:a3:0f:d0:96:a0:4e: 81:c1:8e:5f:f3:db:ca:6f:ee:c1:d8:32:ef:58:e9:ca:8a:6b: 90:ef:09:33:55:d0:cf:ba:f5:fa:92:8f:3b:78:c8:12:e8:fb: 34:65:4e:83:5a:7d:c5:f8:b5:3e:07:d4:bf:ae:2b:0a:99:c6: 03:66:56:7f:f8:1e:1e:62:f4:c4:58:40:bc:26:78:26:36:71: 82:a2:d0:56:46:7f:c2:04:2e:28:05:fc:b2:2a:13:75:de:3d: a5:a2:82:e0:e2:fa:21:f8:d3:78:5e:d2:cf:1a:48:50:5c:88: 8f:ab:16:09:38:01:ff:3f:b7:af:67:1f:d4:ec:7b:ba:2f:85: a7:46:ae:61:a9:69:6c:8f:f9:08:38:f0:1d:ea:2f:63:bc:d5: a3:24:30:ca:1e:e5:ec:3c:a6:4b:cc:8f:39:2a:b0:11:35:68: b7:23:d6:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b7usVLllXHzAWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjEzYzI5OGUtMzE3OS00ZjM1LTllN2QtODg2ZWUzZjli ZTBiMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk YjZlMTcwOTItODRjNC00NmUzLTg4MzQtNWE5NzUxMTJjNTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iczEUsmRaGlZMtCwivKDjzA5pWHVt3Y875f E4pHf16i8DTCIrGr1GLCXxa/3gzJCMN1IwoQ52IbWWDVIMrNzq6UYoVEyH59ZsX9 1ZzOdy+6hHDmf3t/r+d4QbUudYsuCIFmGroFRuheW5JfMA7mLJkfFoeFBkf9Hcwp 6p027AMOlEzLKhe/35K5pVmw9TWJiPnTIu0pJJ1wQ6zAmCXiQV9y5qQIsjYidAVC 1ZafmMHy4IskS6AhRxmHLtoSPDYcaAF+pRmb++D/ouK5945bFotBt5+fwnm9HcXh sQ+cORr6L5cMz3pJlAupw2yYNQhzwukihEfEBo+WRMWBHuDccQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnv+klUeKGE3Fdk/SjCLOwwDP1iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMTNj Mjk4ZS0zMTc5LTRmMzUtOWU3ZC04ODZlZTNmOWJlMGIvYjFiNjM3ZDMtMTIzNy0z YjIzLWFlYzUtZTZmMGY4YjE2ZDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjEzYzI5OGUtMzE3OS00ZjM1LTll N2QtODg2ZWUzZjliZTBiL2YxM2MyOThlLTMxNzktNGYzNS05ZTdkLTg4NmVlM2Y5 YmUwYi5jcmwwHwYDVR0jBBgwFoAUVlbPxbTjRRY3+Rn6Z5c9Lkgn50IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMTNjMjk4ZS0zMTc5LTRmMzUtOWU3ZC04ODZl ZTNmOWJlMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KmRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3MeHkrOtBLfUSfSv/jZ47pu8Yp2Xp9elusiGtlUH4R3FN9jEwjXzE0 hDtAkvJDhf8AMswGcoJ4v/SbOLy0bQvPTUNgToKmXS0qaAOPHMMNm2JQjqMP0Jag ToHBjl/z28pv7sHYMu9Y6cqKa5DvCTNV0M+69fqSjzt4yBLo+zRlToNafcX4tT4H 1L+uKwqZxgNmVn/4Hh5i9MRYQLwmeCY2cYKi0FZGf8IELigF/LIqE3XePaWiguDi +iH403he0s8aSFBciI+rFgk4Af8/t69nH9Tse7ovhadGrmGpaWyP+Qg48B3qL2O8 1aMkMMoe5ew8pkvMjzkqsBE1aLcj1hc= -----END CERTIFICATE-----Generated at Fri Apr 17 07:23:53 2026 by rpki-client