$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31130eb0-2a06-36f9-a3d9-8d773cb0408a.roa File: 31130eb0-2a06-36f9-a3d9-8d773cb0408a.roa (raw, json) Hash identifier: iefzK1g39e5azgyow305v6QjDz+3Qv+yuLOsmovAEFg= Subject key identifier: 66:9D:29:BF:EE:72:21:C3:8A:87:A8:B2:7A:EB:B1:F3:A6:CD:BC:72 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D63AFA079DABEA9D9CCF81200 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31130eb0-2a06-36f9-a3d9-8d773cb0408a.roa Signing time: Sat 04 Apr 2026 01:00:25 +0000 ROA not before: Sat 04 Apr 2026 01:00:25 +0000 ROA not after: Fri 03 Jul 2026 01:00:25 +0000 asID: 852 IP address blocks: 153.68.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:63:af:a0:79:da:be:a9:d9:cc:f8:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 4 01:00:25 2026 GMT Not After : Jul 3 01:00:25 2026 GMT Subject: CN=039dc26c-a3d3-4cc9-a6df-bc2ab1d6ec6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fa:0e:c6:1e:4e:24:d1:97:d0:ba:22:08:3d: 57:ef:81:78:ce:9d:ab:82:01:55:e7:6b:d9:9f:8a: c2:53:07:d8:68:03:02:fc:fd:02:63:8f:00:a6:4e: c6:a4:e0:de:56:46:a3:f0:19:29:b0:89:2a:e8:9a: b2:1f:01:da:d0:21:16:26:42:fa:ed:8c:ec:34:96: 4b:8d:0f:b8:9b:87:9e:5b:77:8a:11:0c:f8:de:6c: 80:32:14:db:7c:bb:a3:b4:d6:a6:9b:21:ba:30:0b: 54:fb:56:db:e2:ee:79:8a:56:ac:28:45:90:67:3f: 0e:ce:e3:6d:06:61:5e:bf:e0:76:c6:84:c6:da:2a: ec:9c:70:5e:04:7f:03:81:3e:53:4a:2f:df:09:37: b1:2d:28:85:ee:fd:94:60:9f:4f:4a:51:36:0a:52: e6:67:6b:9c:a6:06:ef:ab:9c:13:de:6b:5d:f6:1f: 46:8b:10:e8:d6:06:d8:f2:0d:c9:8d:1a:28:39:cd: 64:e8:04:c3:8f:e2:1f:a7:c5:f9:8a:6e:c5:3a:6f: fe:ae:ce:8b:db:b9:1f:69:e3:68:0f:3e:4f:5b:49: 90:77:c8:a0:f3:f8:4b:d8:2d:7c:9b:35:9e:12:dd: 0d:d1:73:50:85:68:4e:6f:b3:83:59:73:8f:85:35: bc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9D:29:BF:EE:72:21:C3:8A:87:A8:B2:7A:EB:B1:F3:A6:CD:BC:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31130eb0-2a06-36f9-a3d9-8d773cb0408a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 153.68.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:2c:4e:7c:76:0a:65:1f:38:d4:a5:4d:db:6c:1c:d8:04:d4: 7a:7b:33:1d:e1:ab:c0:13:98:2b:54:73:fb:c0:d3:29:02:9b: 07:aa:92:69:dd:0a:ed:f6:67:f1:0a:5b:f5:d0:2d:8c:af:99: 33:ce:62:07:fa:0b:cf:b8:c1:2f:1f:11:e8:db:6a:2c:60:ed: 8f:3c:a9:93:00:87:29:b5:02:7f:48:36:e8:f2:78:15:25:55: 69:77:33:91:b4:31:da:87:69:03:76:31:b0:7e:52:bd:98:7a: ba:4c:46:d2:06:c6:d2:f7:c9:d4:4f:dc:be:56:b1:c4:59:69: e7:3b:56:fb:e8:9a:43:75:58:30:57:97:1f:4d:94:fc:47:73: 86:15:cf:59:0f:8d:fd:32:a8:55:82:a6:8e:54:b7:1c:f8:b8: c5:40:92:39:42:fa:9b:4d:1f:ac:14:8a:cd:12:ae:78:e4:77: be:be:81:f7:d5:0b:12:e1:26:3e:4f:2a:9d:6c:0d:dc:e1:a3: 8b:52:74:12:21:de:4a:14:4c:ea:85:ba:77:95:8c:91:00:fe: 87:0a:5f:ec:d1:6a:a8:83:19:ec:33:0e:37:70:c5:fa:3f:52: 56:79:18:e1:81:10:7f:1d:44:77:e3:ed:85:5a:6d:34:2a:44: 3b:7b:61:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1jr6B52r6p2cz4EgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDQwNDAxMDAyNVoXDTI2MDcwMzAxMDAyNVowLzEtMCsGA1UEAxMk MDM5ZGMyNmMtYTNkMy00Y2M5LWE2ZGYtYmMyYWIxZDZlYzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfoOxh5OJNGX0LoiCD1X74F4zp2rggFV52vZ n4rCUwfYaAMC/P0CY48Apk7GpODeVkaj8BkpsIkq6JqyHwHa0CEWJkL67YzsNJZL jQ+4m4eeW3eKEQz43myAMhTbfLujtNammyG6MAtU+1bb4u55ilasKEWQZz8OzuNt BmFev+B2xoTG2irsnHBeBH8DgT5TSi/fCTexLSiF7v2UYJ9PSlE2ClLmZ2ucpgbv q5wT3mtd9h9GixDo1gbY8g3JjRooOc1k6ATDj+Ifp8X5im7FOm/+rs6L27kfaeNo Dz5PW0mQd8ig8/hL2C18mzWeEt0N0XNQhWhOb7ODWXOPhTW8rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGadKb/uciHDioeosnrrsfOmzbxyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzExMzBlYjAtMmEwNi0z NmY5LWEzZDktOGQ3NzNjYjA0MDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmUTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwsTnx2CmUfONSlTdtsHNgE1Hp7Mx3hq8ATmCtUc/vA0ykCmweqkmnd Cu32Z/EKW/XQLYyvmTPOYgf6C8+4wS8fEejbaixg7Y88qZMAhym1An9INujyeBUl VWl3M5G0MdqHaQN2MbB+Ur2YerpMRtIGxtL3ydRP3L5WscRZaec7VvvomkN1WDBX lx9NlPxHc4YVz1kPjf0yqFWCpo5Utxz4uMVAkjlC+ptNH6wUis0Srnjkd76+gffV CxLhJj5PKp1sDdzho4tSdBIh3koUTOqFuneVjJEA/ocKX+zRaqiDGewzDjdwxfo/ UlZ5GOGBEH8dRHfj7YVabTQqRDt7YcA= -----END CERTIFICATE-----Generated at Fri Apr 17 16:47:11 2026 by rpki-client