$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/f00f9702-64da-301c-b2bf-95c79284f35e.roa File: f00f9702-64da-301c-b2bf-95c79284f35e.roa (raw, json) Hash identifier: tU/UQH7KpQpWmsrycDhzVcP8qBzPbNQor/M7wqFCdjA= Subject key identifier: 9D:FD:84:1E:EA:EC:DF:02:02:4A:E5:4F:17:95:4A:3C:2E:4B:F0:27 Certificate issuer: /CN=714cea24-cc07-46e3-abc3-b9e783b4180b Certificate serial: 010D0C9F4328584D524353578FA561C5DFA58500 Authority key identifier: EA:B7:9F:8E:3A:45:D3:DA:27:49:DD:B3:D0:4C:09:2C:3B:EB:6C:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/f00f9702-64da-301c-b2bf-95c79284f35e.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 198394 IP address blocks: 216.104.192.0/24 maxlen: 24 216.104.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/714cea24-cc07-46e3-abc3-b9e783b4180b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/714cea24-cc07-46e3-abc3-b9e783b4180b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:53:57:8f:a5:61:c5:df:a5:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=714cea24-cc07-46e3-abc3-b9e783b4180b Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=9b8acf1a-12fe-429d-8535-ee4a257ebe68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e7:cd:64:65:ca:81:98:93:8f:be:33:50:3f: 2f:19:ca:ea:b0:d0:17:55:cc:a5:59:4d:10:1c:2d: a1:bc:8a:28:d8:ad:24:37:1b:b9:f5:3e:e5:11:07: 11:9d:e8:fd:13:d5:af:78:8c:5e:9c:cc:a4:ec:ae: af:94:8d:d8:91:6a:84:f7:a7:52:6a:19:a1:4a:8f: ce:97:23:3a:97:29:6d:25:9d:22:e3:64:16:35:c9: 76:94:d3:b5:26:4a:24:2a:69:a6:05:7e:3d:b9:0d: ef:4c:48:4a:21:42:39:89:cf:ac:a9:93:38:dc:e1: 21:f1:04:10:f2:37:19:10:8c:4a:d7:0d:f5:a2:99: 81:e5:79:89:eb:e7:bd:9f:55:6f:2e:03:1d:d3:d9: 50:e0:87:a7:b4:06:a5:1e:37:3e:9c:c2:13:8a:dd: 59:5d:77:c6:76:08:a2:de:5f:8e:7f:5c:1c:c5:7c: 92:63:64:8e:db:1b:f8:d2:8e:c1:72:6e:0f:cb:fa: a5:b6:f5:55:3c:d0:2b:3e:2c:45:cf:f7:d8:05:25: 8b:95:84:49:46:40:60:cc:0c:d4:31:e9:64:05:10: ba:79:54:f7:ea:e0:c9:20:04:49:23:87:f5:29:d2: e6:e1:5f:26:4e:bb:ce:7f:6f:cc:cb:53:b4:19:15: f7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FD:84:1E:EA:EC:DF:02:02:4A:E5:4F:17:95:4A:3C:2E:4B:F0:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/f00f9702-64da-301c-b2bf-95c79284f35e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/714cea24-cc07-46e3-abc3-b9e783b4180b.crl X509v3 Authority Key Identifier: keyid:EA:B7:9F:8E:3A:45:D3:DA:27:49:DD:B3:D0:4C:09:2C:3B:EB:6C:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b.cer sbgp-ipAddrBlock: critical IPv4: 216.104.192.0/24 216.104.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a3:ea:a3:31:52:d1:df:c9:ed:96:8a:9f:c6:05:d2:97:be: 7f:a6:be:36:36:06:74:b3:3e:0b:03:c6:ea:9d:07:98:56:f2: 43:03:8b:8b:4b:ef:1b:e9:a9:70:ef:09:ea:c9:4c:a1:6c:4d: d2:d7:19:01:cb:dc:da:78:00:52:6e:f0:f7:f2:0a:7f:d4:5f: 38:b2:06:c8:ed:dc:89:e7:59:4e:b9:82:dc:4a:1e:c0:0e:d3: b0:ac:45:19:be:ab:66:68:34:32:fb:bc:57:9b:e9:fc:16:97: fe:58:06:01:8c:4d:12:11:7d:6c:45:45:f9:b5:85:6e:31:da: 9e:7a:0d:ea:e7:58:de:c2:71:cd:b5:58:6d:07:e2:10:4a:c1: 60:8a:0f:7e:5f:49:69:d4:a6:e2:22:66:ad:36:ac:70:76:3d: 5d:93:bf:39:8b:6d:ab:8d:0f:bd:0d:a9:17:45:c7:1c:7d:95: 6b:7c:e9:76:e5:ca:e5:29:67:58:7d:43:80:1c:83:b7:3c:aa: d2:4b:41:d3:68:a2:89:dd:0b:b7:8f:ba:b7:82:b7:cf:a1:9e: a5:7b:b8:a6:7e:0c:c8:b9:6c:3e:0e:47:ca:46:4a:cf:6d:b0: 79:2a:f7:bb:1a:b0:fd:89:2b:15:78:18:b1:2d:55:5f:56:33: 35:af:ac:56 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1SQ1NXj6Vhxd+lhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzE0Y2VhMjQtY2MwNy00NmUzLWFiYzMtYjllNzgzYjQx ODBiMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk OWI4YWNmMWEtMTJmZS00MjlkLTg1MzUtZWU0YTI1N2ViZTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvefNZGXKgZiTj74zUD8vGcrqsNAXVcylWU0Q HC2hvIoo2K0kNxu59T7lEQcRnej9E9WveIxenMyk7K6vlI3YkWqE96dSahmhSo/O lyM6lyltJZ0i42QWNcl2lNO1JkokKmmmBX49uQ3vTEhKIUI5ic+sqZM43OEh8QQQ 8jcZEIxK1w31opmB5XmJ6+e9n1VvLgMd09lQ4IentAalHjc+nMITit1ZXXfGdgii 3l+Of1wcxXySY2SO2xv40o7Bcm4Py/qltvVVPNArPixFz/fYBSWLlYRJRkBgzAzU MelkBRC6eVT36uDJIARJI4f1KdLm4V8mTrvOf2/My1O0GRX35wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJ39hB7q7N8CAkrlTxeVSjwuS/AnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83MTRj ZWEyNC1jYzA3LTQ2ZTMtYWJjMy1iOWU3ODNiNDE4MGIvZjAwZjk3MDItNjRkYS0z MDFjLWIyYmYtOTVjNzkyODRmMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzE0Y2VhMjQtY2MwNy00NmUzLWFi YzMtYjllNzgzYjQxODBiLzcxNGNlYTI0LWNjMDctNDZlMy1hYmMzLWI5ZTc4M2I0 MTgwYi5jcmwwHwYDVR0jBBgwFoAU6refjjpF09onSd2z0EwJLDvrbB4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83MTRjZWEyNC1jYzA3LTQ2ZTMtYWJjMy1iOWU3 ODNiNDE4MGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2GjAAwQA 2GjLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADSj6qMxUtHfye2Wip/GBdKXvn+mvjY2BnSzPgsDxuqdB5hW 8kMDi4tL7xvpqXDvCerJTKFsTdLXGQHL3Np4AFJu8PfyCn/UXziyBsjt3InnWU65 gtxKHsAO07CsRRm+q2ZoNDL7vFeb6fwWl/5YBgGMTRIRfWxFRfm1hW4x2p56Dern WN7Ccc21WG0H4hBKwWCKD35fSWnUpuIiZq02rHB2PV2TvzmLbauND70NqRdFxxx9 lWt86XblyuUpZ1h9Q4Acg7c8qtJLQdNooondC7ePureCt8+hnqV7uKZ+DMi5bD4O R8pGSs9tsHkq97sasP2JKxV4GLEtVV9WMzWvrFY= -----END CERTIFICATE-----Generated at Fri Apr 17 14:42:40 2026 by rpki-client