$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/4a040a24-5bae-3ee8-8138-da7d47f5f640.roa File: 4a040a24-5bae-3ee8-8138-da7d47f5f640.roa (raw, json) Hash identifier: fx/ZnEdopP8Ejg0KpiezLuywZbIq/hJk5f6l5+uTOho= Subject key identifier: 9C:7B:0C:6F:C0:78:95:3F:97:23:3F:5C:8D:13:07:2D:EE:55:47:E2 Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584D7F9A757FC0DF3B0350A85800 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/4a040a24-5bae-3ee8-8138-da7d47f5f640.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 18186 IP address blocks: 172.81.96.0/24 maxlen: 24 172.81.97.0/24 maxlen: 24 172.81.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:75:7f:c0:df:3b:03:50:a8:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=729c7e47-cc5f-4a7a-9c9a-d4e5fd5c0e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ee:b2:f6:46:7f:4f:e8:62:79:33:08:58:a8: 9b:61:63:d9:47:04:34:b5:28:96:51:79:b1:cf:22: 23:85:8b:32:f0:2a:56:a9:75:e8:1d:08:58:04:ac: 75:5f:03:29:83:01:e4:53:b2:04:e8:de:d7:d9:95: 39:b1:32:4f:bd:37:25:3b:87:43:9d:6a:cf:35:f3: a6:2a:11:e4:0c:53:82:79:22:76:56:9c:b6:87:69: dd:8b:35:16:5d:98:54:39:ac:07:d9:f3:ac:60:81: e7:21:73:0e:b3:12:01:77:56:b6:de:d1:66:f0:11: 32:f7:71:d8:2e:be:3e:bb:b0:b5:06:5e:8e:18:8e: 72:4f:9e:cc:3d:9e:eb:ef:07:d5:f3:cc:2a:ad:6c: 11:df:6f:e7:5a:b2:1a:63:08:a7:34:c9:4f:5e:e4: a3:a9:ae:1d:08:16:64:f5:ee:a7:c0:4c:56:ee:81: 8d:9a:59:7e:3e:9b:df:db:d5:e3:4c:a2:0e:c9:29: d1:2f:4c:3a:1f:37:4e:2b:0d:8d:be:77:42:1c:21: 0f:7f:1e:0d:39:c2:7e:62:9a:7f:8d:56:53:54:b5: de:d9:0a:62:95:1f:15:2e:4d:19:97:da:31:a2:96: c8:10:3f:eb:00:2c:e6:48:43:61:f7:c7:e7:05:5b: e7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:7B:0C:6F:C0:78:95:3F:97:23:3F:5C:8D:13:07:2D:EE:55:47:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/4a040a24-5bae-3ee8-8138-da7d47f5f640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 172.81.96.0-172.81.98.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:81:ac:85:6a:db:f4:a0:d5:16:2a:d8:f1:26:7c:53:57:e7: b0:da:32:64:94:0a:88:98:73:6c:78:35:73:09:a5:d0:48:b1: 32:da:34:f4:0a:10:a3:38:52:77:62:f3:a2:e2:32:98:3f:87: e6:96:79:3f:ca:c3:9d:4e:50:79:3e:4e:21:25:bc:7f:be:6c: bb:ad:f6:37:4f:c1:f2:93:b8:9a:01:0c:57:7c:03:fa:bf:89: 1c:d2:3e:d3:5b:12:36:1c:cc:75:4a:a9:60:2b:c5:9b:be:17: 1c:e5:1f:5d:fe:49:50:9e:e4:90:e0:3f:5f:b4:5c:f0:1a:f8: b1:9a:5a:49:e0:68:9f:c4:39:56:c6:f8:1e:31:43:ea:7f:18: 5a:a2:e0:74:de:8e:d0:9e:6d:19:71:15:1d:d8:55:48:c0:2d: 9f:9b:ca:ed:9b:91:11:91:c7:c4:33:1a:1b:74:51:6f:b2:81: 5d:47:89:c0:55:cd:3d:ea:91:9b:d9:ef:bf:84:a5:a3:59:ff: f4:b1:c2:6a:f7:b6:33:a9:b6:4e:55:ef:a5:66:c3:12:5e:a4: fc:ab:00:d8:71:0d:25:3f:53:47:17:65:93:61:97:54:c3:c2: 3e:03:fe:32:f8:3d:9e:30:89:a6:7d:fe:ab:e3:77:48:0b:77: 90:3a:f1:69 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE1/mnV/wN87A1CoWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk NzI5YzdlNDctY2M1Zi00YTdhLTljOWEtZDRlNWZkNWMwZTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu6y9kZ/T+hieTMIWKibYWPZRwQ0tSiWUXmx zyIjhYsy8CpWqXXoHQhYBKx1XwMpgwHkU7IE6N7X2ZU5sTJPvTclO4dDnWrPNfOm KhHkDFOCeSJ2Vpy2h2ndizUWXZhUOawH2fOsYIHnIXMOsxIBd1a23tFm8BEy93HY Lr4+u7C1Bl6OGI5yT57MPZ7r7wfV88wqrWwR32/nWrIaYwinNMlPXuSjqa4dCBZk 9e6nwExW7oGNmll+Ppvf29XjTKIOySnRL0w6HzdOKw2NvndCHCEPfx4NOcJ+Ypp/ jVZTVLXe2QpilR8VLk0Zl9oxopbIED/rACzmSENh98fnBVvntwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJx7DG/AeJU/lyM/XI0TBy3uVUfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvNGEwNDBhMjQtNWJhZS0z ZWU4LTgxMzgtZGE3ZDQ3ZjVmNjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAWsUWAD BACsUWIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAcYGshWrb9KDVFirY8SZ8U1fnsNoyZJQKiJhzbHg1cwml 0EixMto09AoQozhSd2LzouIymD+H5pZ5P8rDnU5QeT5OISW8f75su632N0/B8pO4 mgEMV3wD+r+JHNI+01sSNhzMdUqpYCvFm74XHOUfXf5JUJ7kkOA/X7Rc8Br4sZpa SeBon8Q5Vsb4HjFD6n8YWqLgdN6O0J5tGXEVHdhVSMAtn5vK7ZuREZHHxDMaG3RR b7KBXUeJwFXNPeqRm9nvv4Slo1n/9LHCave2M6m2TlXvpWbDEl6k/KsA2HENJT9T Rxdlk2GXVMPCPgP+Mvg9njCJpn3+q+N3SAt3kDrxaQ== -----END CERTIFICATE-----Generated at Fri Apr 17 10:16:02 2026 by rpki-client