$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/ffe4fb56-35e6-3f12-99f0-b1139d28e4e4.roa File: ffe4fb56-35e6-3f12-99f0-b1139d28e4e4.roa (raw, json) Hash identifier: SiehRQxXI0jBlWLHDvr2aIr0glt0uZzuEZXl2FReE1g= Subject key identifier: A4:02:D8:8F:96:DE:CD:FA:10:BA:AC:D5:8D:60:21:07:01:90:5D:6D Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Certificate serial: 010D0C9F4328584D75D540722C895D500E03EB94 Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/ffe4fb56-35e6-3f12-99f0-b1139d28e4e4.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 27183 IP address blocks: 152.157.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:40:72:2c:89:5d:50:0e:03:eb:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=5c91f75e-7547-4aff-94a9-0c50cba31d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d0:5c:7e:51:fc:3c:f7:9c:13:f7:f7:e5:f3: 59:3a:c2:3a:78:f4:b7:6b:0e:be:13:74:f6:09:60: 8a:11:03:38:32:b5:ee:63:ed:a7:72:4c:35:4f:0e: 23:fa:99:4e:a9:5a:81:48:34:9e:7c:e0:11:13:a1: 5c:18:fe:cd:cf:c3:e8:21:86:4e:20:57:9d:4e:d1: d2:c1:87:9c:7c:79:0f:54:55:17:05:6d:dd:d8:b9: ce:90:c8:1c:3b:96:30:84:d7:49:d3:27:58:39:63: 56:30:d7:9c:f7:79:c3:22:32:84:33:c8:14:ff:1e: da:cd:b2:67:10:5c:ae:fa:c9:2f:f1:0a:fc:bd:07: 4e:0a:c8:57:86:f0:f8:3c:da:44:ec:b3:21:c8:be: 72:bf:56:36:40:cd:bf:dc:6a:f6:5a:2b:b2:c9:30: fb:62:09:ce:22:53:c4:89:a1:0b:f3:68:a1:8d:17: ff:c8:ed:b1:45:b9:04:ad:4c:6d:91:18:ad:86:bb: aa:31:41:58:10:eb:1d:b3:e4:5b:ec:21:15:c9:98: 9c:93:d3:b4:6d:09:c0:28:a8:c7:c6:34:d6:32:c1: f9:57:ce:36:af:22:74:0c:9f:35:bd:b7:df:13:1b: d5:dc:c4:52:47:32:09:26:ce:81:aa:de:bc:13:b8: 2a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:02:D8:8F:96:DE:CD:FA:10:BA:AC:D5:8D:60:21:07:01:90:5D:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/ffe4fb56-35e6-3f12-99f0-b1139d28e4e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl X509v3 Authority Key Identifier: keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer sbgp-ipAddrBlock: critical IPv4: 152.157.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:c6:46:d7:07:67:31:67:2a:a0:2d:b5:c3:a3:94:5c:a3:6c: 82:de:91:08:9e:1a:8f:7b:77:50:6d:83:37:e7:60:6a:92:c9: 27:d1:42:99:38:1f:98:09:3f:b5:d5:3c:84:ac:cd:19:cc:68: f3:5e:05:bb:c5:98:de:28:c9:7d:6f:c2:37:1f:96:e2:6d:b4: bd:c5:f9:f0:fa:e8:6f:3b:c9:89:62:db:c9:9f:e7:65:88:29: 46:cd:52:f4:b5:d0:79:0f:44:c8:8b:31:f3:58:1a:41:48:e4: a6:c0:29:e5:a8:85:c4:78:23:b6:3c:5f:d9:6f:8a:a2:08:03: 91:e3:75:69:11:e3:c1:35:76:8d:d7:83:08:6e:5c:48:58:c9: c1:dd:f2:b0:77:ce:a7:8b:53:b6:cd:95:4c:ad:63:de:a9:99: 1d:be:5b:e8:b9:86:16:d1:de:47:dd:58:55:03:d1:c5:a2:11: 3f:1b:09:8d:fb:6b:6b:e5:d2:1a:37:4e:9e:62:49:b8:88:2f: e6:6a:10:04:23:c4:ea:1f:a5:40:0e:c8:b7:b2:84:c7:6b:e2: cf:b8:d6:f4:ea:74:84:18:6f:2b:7d:78:92:42:dd:6b:f5:91: 59:a7:b2:37:05:45:b8:b6:3e:85:bc:29:60:39:e7:c9:a2:2c: c7:03:9a:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111UByLIldUA4D65QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk ODE2MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk NWM5MWY3NWUtNzU0Ny00YWZmLTk0YTktMGM1MGNiYTMxZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodBcflH8PPecE/f35fNZOsI6ePS3aw6+E3T2 CWCKEQM4MrXuY+2nckw1Tw4j+plOqVqBSDSefOARE6FcGP7Nz8PoIYZOIFedTtHS wYecfHkPVFUXBW3d2LnOkMgcO5YwhNdJ0ydYOWNWMNec93nDIjKEM8gU/x7azbJn EFyu+skv8Qr8vQdOCshXhvD4PNpE7LMhyL5yv1Y2QM2/3Gr2WiuyyTD7YgnOIlPE iaEL82ihjRf/yO2xRbkErUxtkRithruqMUFYEOsds+Rb7CEVyZick9O0bQnAKKjH xjTWMsH5V842ryJ0DJ81vbffExvV3MRSRzIJJs6Bqt68E7gqowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQC2I+W3s36ELqs1Y1gIQcBkF1tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5 OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvZmZlNGZiNTYtMzVlNi0z ZjEyLTk5ZjAtYjExMzlkMjhlNGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx NDkxYWQ4MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmJ1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjGRtcHZzFnKqAttcOjlFyjbILekQieGo97d1BtgzfnYGqSySfRQpk4 H5gJP7XVPISszRnMaPNeBbvFmN4oyX1vwjcfluJttL3F+fD66G87yYli28mf52WI KUbNUvS10HkPRMiLMfNYGkFI5KbAKeWohcR4I7Y8X9lviqIIA5HjdWkR48E1do3X gwhuXEhYycHd8rB3zqeLU7bNlUytY96pmR2+W+i5hhbR3kfdWFUD0cWiET8bCY37 a2vl0ho3Tp5iSbiIL+ZqEAQjxOofpUAOyLeyhMdr4s+41vTqdIQYbyt9eJJC3Wv1 kVmnsjcFRbi2PoW8KWA558miLMcDmhc= -----END CERTIFICATE-----Generated at Sun Apr 19 12:58:10 2026 by rpki-client