$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/31d025fd-7ea7-3f5f-a2ab-8ac37134b28a.roa File: 31d025fd-7ea7-3f5f-a2ab-8ac37134b28a.roa (raw, json) Hash identifier: XaUtIwQ366i+gjDICr/84vqorvwdn0v/9UkQuqldzEY= Subject key identifier: 72:BF:4A:D3:37:08:CA:19:9E:8B:D2:02:81:F5:30:16:A9:AF:6D:5E Certificate issuer: /CN=3f8139ba-06a7-4b31-baf7-d40af70fdc55 Certificate serial: 010D0C9F4328584D7B6A83C8AB8C8EAD94C61580 Authority key identifier: 3D:99:95:E3:FF:A1:7A:34:6F:61:22:3C:50:F3:10:33:DA:1E:11:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/31d025fd-7ea7-3f5f-a2ab-8ac37134b28a.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 16509 IP address blocks: 204.17.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/3f8139ba-06a7-4b31-baf7-d40af70fdc55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/3f8139ba-06a7-4b31-baf7-d40af70fdc55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:83:c8:ab:8c:8e:ad:94:c6:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8139ba-06a7-4b31-baf7-d40af70fdc55 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=2358c67d-9bc3-4abd-8594-b674cad88d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:39:01:46:1c:25:39:e8:6d:ba:42:71:f4:18: f6:78:26:e2:3d:9d:c6:25:ce:1f:2d:97:17:9a:0f: 2e:e4:7e:1a:ba:75:8c:0b:c3:71:60:41:42:c8:a2: 32:68:a0:7e:99:34:32:56:42:5d:a9:4a:db:c1:89: 69:cb:27:f7:fd:c1:e2:af:1f:a7:30:20:68:c7:d5: 3c:e8:53:9a:72:0b:43:43:74:b4:3f:96:fb:79:95: b3:70:6f:b1:5c:f0:9c:58:14:9f:cc:65:8a:f5:96: f9:a9:ab:f6:8b:b5:e9:85:81:d7:0d:40:7c:59:de: de:73:8f:00:2b:e6:42:bd:2c:93:f5:cc:e8:f4:c4: 34:12:30:74:af:26:33:32:46:75:4e:fa:d6:6c:57: 49:81:e7:36:57:61:4c:f5:84:dc:ac:5d:c7:01:48: db:cb:4f:83:4a:b6:5d:72:ce:d9:6a:5d:6b:ca:5e: 7a:c3:26:70:78:b8:b2:96:43:bc:1d:6c:a4:a0:75: db:7e:40:49:3b:db:b9:2a:77:10:81:2e:f4:7a:52: 2e:ce:69:93:0f:d9:cf:a0:bd:db:95:e3:73:b3:a4: 9c:1f:41:ba:70:5d:6e:b3:f5:e5:44:6f:5a:2d:13: 4d:27:e8:bb:30:c4:2f:5c:04:30:9c:12:ca:21:41: c2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BF:4A:D3:37:08:CA:19:9E:8B:D2:02:81:F5:30:16:A9:AF:6D:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/31d025fd-7ea7-3f5f-a2ab-8ac37134b28a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/3f8139ba-06a7-4b31-baf7-d40af70fdc55.crl X509v3 Authority Key Identifier: keyid:3D:99:95:E3:FF:A1:7A:34:6F:61:22:3C:50:F3:10:33:DA:1E:11:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55.cer sbgp-ipAddrBlock: critical IPv4: 204.17.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:d7:43:97:ab:b0:0d:f3:1c:0b:27:d5:5b:81:fc:7b:2c:1f: 39:5f:0e:8b:64:eb:fe:04:18:76:bd:84:8e:11:7d:cd:8f:07: 69:bf:6a:24:3b:4a:c3:2d:64:97:b3:0e:51:8d:7d:cf:a0:40: ac:7f:8d:b7:ed:39:ac:dd:72:01:4a:62:4d:c9:88:cc:59:0e: 9b:24:d7:26:f3:2e:33:af:0c:73:25:fa:ca:d6:ce:f0:04:f0: 71:48:8b:71:38:59:01:9f:59:c0:ee:8f:49:a9:7e:9b:41:4a: f6:02:f6:db:8f:14:e0:58:6a:ad:33:c3:0b:4a:86:ba:5f:c7: a0:3c:d7:b8:37:6a:85:6a:b9:1a:d9:fa:32:a2:81:3d:c5:11: 7c:37:1d:cf:02:83:5a:8a:42:9f:f9:77:92:05:c4:8d:4a:fe: e7:58:ac:f0:8d:59:08:32:f0:a1:10:04:fd:72:30:51:2c:c0: 4d:24:7a:e1:98:5d:a8:ce:01:09:54:d5:05:37:05:90:0e:a3: 1e:b7:cc:e7:3d:70:f0:dc:5a:74:e3:0f:69:43:ec:ca:25:38: f8:cc:e4:f7:b8:aa:b7:6e:18:d6:9d:67:18:64:f4:3c:02:34: 3d:6d:99:17:ef:a0:49:34:1b:24:b5:ac:ed:8d:fe:ff:b2:7e: d0:75:07:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17aoPIq4yOrZTGFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4MTM5YmEtMDZhNy00YjMxLWJhZjctZDQwYWY3MGZk YzU1MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk MjM1OGM2N2QtOWJjMy00YWJkLTg1OTQtYjY3NGNhZDg4ZDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjkBRhwlOehtukJx9Bj2eCbiPZ3GJc4fLZcX mg8u5H4aunWMC8NxYEFCyKIyaKB+mTQyVkJdqUrbwYlpyyf3/cHirx+nMCBox9U8 6FOacgtDQ3S0P5b7eZWzcG+xXPCcWBSfzGWK9Zb5qav2i7XphYHXDUB8Wd7ec48A K+ZCvSyT9czo9MQ0EjB0ryYzMkZ1TvrWbFdJgec2V2FM9YTcrF3HAUjby0+DSrZd cs7Zal1ryl56wyZweLiylkO8HWykoHXbfkBJO9u5KncQgS70elIuzmmTD9nPoL3b leNzs6ScH0G6cF1us/XlRG9aLRNNJ+i7MMQvXAQwnBLKIUHCMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHK/StM3CMoZnovSAoH1MBapr21eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjgx MzliYS0wNmE3LTRiMzEtYmFmNy1kNDBhZjcwZmRjNTUvMzFkMDI1ZmQtN2VhNy0z ZjVmLWEyYWItOGFjMzcxMzRiMjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4MTM5YmEtMDZhNy00YjMxLWJh ZjctZDQwYWY3MGZkYzU1LzNmODEzOWJhLTA2YTctNGIzMS1iYWY3LWQ0MGFmNzBm ZGM1NS5jcmwwHwYDVR0jBBgwFoAUPZmV4/+hejRvYSI8UPMQM9oeEUQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjgxMzliYS0wNmE3LTRiMzEtYmFmNy1kNDBh ZjcwZmRjNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzBEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXXQ5ersA3zHAsn1VuB/HssHzlfDotk6/4EGHa9hI4Rfc2PB2m/aiQ7 SsMtZJezDlGNfc+gQKx/jbftOazdcgFKYk3JiMxZDpsk1ybzLjOvDHMl+srWzvAE 8HFIi3E4WQGfWcDuj0mpfptBSvYC9tuPFOBYaq0zwwtKhrpfx6A817g3aoVquRrZ +jKigT3FEXw3Hc8Cg1qKQp/5d5IFxI1K/udYrPCNWQgy8KEQBP1yMFEswE0keuGY XajOAQlU1QU3BZAOox63zOc9cPDcWnTjD2lD7MolOPjM5Pe4qrduGNadZxhk9DwC ND1tmRfvoEk0GyS1rO2N/v+yftB1B7I= -----END CERTIFICATE-----Generated at Fri Apr 17 06:55:46 2026 by rpki-client