$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/4ceb54a7-225f-32e0-81d7-109b70ac65de.roa File: 4ceb54a7-225f-32e0-81d7-109b70ac65de.roa (raw, json) Hash identifier: N+tt0J6iJKoSSuAY1bpMvLI0ueTHUVsWxcct3HQUYnw= Subject key identifier: 41:47:44:96:27:5F:25:B9:9F:38:41:79:6C:0C:69:DA:78:58:CA:FE Certificate issuer: /CN=28bc3af1-87e7-4ad5-ba9c-7eebdbd820db Certificate serial: 010D0C9F4328584D80FFDE77D31CD03B100B4B80 Authority key identifier: 78:BD:2E:9E:0F:6D:71:DF:A1:7A:6B:F4:02:24:03:50:B3:19:7C:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/4ceb54a7-225f-32e0-81d7-109b70ac65de.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 402074 IP address blocks: 208.92.236.0/22 maxlen: 24 2602:f85e::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:de:77:d3:1c:d0:3b:10:0b:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28bc3af1-87e7-4ad5-ba9c-7eebdbd820db Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=fff074fe-af15-4ea0-83fd-597b42116a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cc:7d:a7:fd:c1:3c:7d:66:95:04:be:85:36: fb:b3:ca:28:18:65:74:3b:6d:84:aa:84:05:87:36: 07:38:bf:d1:38:a4:27:f4:4b:77:49:56:bd:4e:64: 32:b7:b7:33:27:ed:28:46:c7:16:48:cc:8d:9f:07: 12:36:5f:aa:90:ed:2c:ad:bf:09:36:25:c3:54:2c: 56:e9:f1:b2:44:e4:c8:70:50:66:05:67:59:b2:a2: 64:40:9b:f2:8c:e3:eb:bd:29:b4:9c:ba:6b:8b:d5: 5e:a0:30:5b:71:0a:5b:45:e9:49:38:9b:16:1b:cb: bb:ee:3d:fb:6b:87:b5:48:68:55:e0:17:11:a8:ca: 89:0e:2b:7b:d0:64:e2:7c:c1:30:f3:c9:ab:aa:50: c9:1a:cc:9f:a5:e8:37:10:06:58:e0:9b:64:09:b2: 01:d1:7a:55:23:8b:0b:da:b7:71:d2:b9:f4:f9:84: 05:8f:59:4a:af:6c:3f:18:15:9b:db:fa:32:24:5a: ec:8b:5e:f0:0a:e9:c6:b0:2c:7a:2d:12:58:e2:ae: f5:c1:1e:4e:8f:f2:68:b7:23:37:77:5e:29:13:0d: d9:49:7f:10:a3:88:84:20:37:15:76:50:aa:27:10: be:81:14:c4:bb:33:af:9b:5b:a4:c9:ec:04:61:2f: 5c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:47:44:96:27:5F:25:B9:9F:38:41:79:6C:0C:69:DA:78:58:CA:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/4ceb54a7-225f-32e0-81d7-109b70ac65de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.crl X509v3 Authority Key Identifier: keyid:78:BD:2E:9E:0F:6D:71:DF:A1:7A:6B:F4:02:24:03:50:B3:19:7C:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.cer sbgp-ipAddrBlock: critical IPv4: 208.92.236.0/22 IPv6: 2602:f85e::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:56:e1:68:bf:4b:0a:37:7c:73:68:8b:b0:14:5f:31:11:ca: f0:ff:fb:00:de:d2:3d:56:5a:6e:aa:ce:94:ce:b0:e4:99:ff: 30:e2:48:6d:66:40:e4:d2:61:eb:d2:1a:48:fd:af:7b:42:ba: 75:d1:fb:55:73:62:b0:b7:5d:40:03:07:ea:b0:ba:1d:40:d4: d7:26:60:12:67:e9:57:7d:54:e0:37:6e:17:85:78:e0:ea:92: 69:00:8f:dd:42:7f:00:67:52:49:eb:f4:7c:23:fc:9f:f8:3d: 4e:56:27:68:ab:5f:65:cb:e8:2e:01:31:6c:4c:2c:ca:c1:79: 01:73:32:5a:4a:cb:8a:d6:9a:55:6a:01:a0:25:37:9e:62:69: 28:45:89:3d:27:3e:47:07:d6:58:bc:af:14:d6:e7:c8:90:95: 9b:d2:e7:cb:54:34:4b:a5:21:96:1a:f5:2c:22:23:c2:36:77: aa:66:59:0e:e6:4a:61:e9:5a:df:0d:ff:0b:7d:9c:76:4c:3a: 71:ab:47:12:a2:68:6f:07:e9:f0:88:ec:40:7e:79:43:77:e9: b7:1e:0f:6a:3e:f8:bc:87:a4:bc:3c:fb:97:ee:30:c9:f3:fc: dc:cf:b0:d8:58:4d:dc:4b:5d:07:c5:b1:dd:a5:da:29:9c:8e: f8:27:88:aa -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2A/9530xzQOxALS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhiYzNhZjEtODdlNy00YWQ1LWJhOWMtN2VlYmRiZDgy MGRiMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk ZmZmMDc0ZmUtYWYxNS00ZWEwLTgzZmQtNTk3YjQyMTE2YTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcx9p/3BPH1mlQS+hTb7s8ooGGV0O22EqoQF hzYHOL/ROKQn9Et3SVa9TmQyt7czJ+0oRscWSMyNnwcSNl+qkO0srb8JNiXDVCxW 6fGyROTIcFBmBWdZsqJkQJvyjOPrvSm0nLpri9VeoDBbcQpbRelJOJsWG8u77j37 a4e1SGhV4BcRqMqJDit70GTifMEw88mrqlDJGsyfpeg3EAZY4JtkCbIB0XpVI4sL 2rdx0rn0+YQFj1lKr2w/GBWb2/oyJFrsi17wCunGsCx6LRJY4q71wR5Oj/JotyM3 d14pEw3ZSX8Qo4iEIDcVdlCqJxC+gRTEuzOvm1ukyewEYS9cKwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEFHRJYnXyW5nzhBeWwMadp4WMr+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yOGJj M2FmMS04N2U3LTRhZDUtYmE5Yy03ZWViZGJkODIwZGIvNGNlYjU0YTctMjI1Zi0z MmUwLTgxZDctMTA5YjcwYWM2NWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjhiYzNhZjEtODdlNy00YWQ1LWJh OWMtN2VlYmRiZDgyMGRiLzI4YmMzYWYxLTg3ZTctNGFkNS1iYTljLTdlZWJkYmQ4 MjBkYi5jcmwwHwYDVR0jBBgwFoAUeL0ung9tcd+hemv0AiQDULMZfHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8yOGJjM2FmMS04N2U3LTRhZDUtYmE5Yy03ZWVi ZGJkODIwZGIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQC0FzsMA4E AgACMAgDBgQmAvheADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5VuFov0sKN3xzaIuwFF8xEcrw//sA3tI9 Vlpuqs6UzrDkmf8w4khtZkDk0mHr0hpI/a97Qrp10ftVc2Kwt11AAwfqsLodQNTX JmASZ+lXfVTgN24XhXjg6pJpAI/dQn8AZ1JJ6/R8I/yf+D1OVidoq19ly+guATFs TCzKwXkBczJaSsuK1ppVagGgJTeeYmkoRYk9Jz5HB9ZYvK8U1ufIkJWb0ufLVDRL pSGWGvUsIiPCNneqZlkO5kph6VrfDf8LfZx2TDpxq0cSomhvB+nwiOxAfnlDd+m3 Hg9qPvi8h6S8PPuX7jDJ8/zcz7DYWE3cS10HxbHdpdopnI74J4iq -----END CERTIFICATE-----Generated at Sun Apr 19 12:46:13 2026 by rpki-client