$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd5af3ca-44fc-378f-8a8d-67e59613cc9e.roa File: cd5af3ca-44fc-378f-8a8d-67e59613cc9e.roa (raw, json) Hash identifier: d8EoQYON8NW2PJadVIDf89cbER5dcBkxFPzQtfcdoF0= Subject key identifier: D0:49:7C:B7:23:2C:3C:BE:9B:BF:33:3C:58:04:59:B2:DA:1B:1E:4D Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D67DFF76A660A06372D9A6FC0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd5af3ca-44fc-378f-8a8d-67e59613cc9e.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 852 IP address blocks: 216.198.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:f7:6a:66:0a:06:37:2d:9a:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=3642c757-a2e2-4ca5-bfb8-b0eccce2ce71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f8:47:24:c0:0b:6c:b5:89:3f:b5:93:6c:67: 94:a0:f8:38:f7:da:9c:22:f9:9d:ff:1a:77:6a:47: 69:8c:e8:9c:eb:43:4e:4b:de:87:6c:0b:7d:24:78: 55:cc:9c:bd:7f:20:17:e6:17:14:b1:1b:25:b0:5a: 3d:32:19:ba:7a:49:98:c3:95:ce:8e:40:dd:16:f7: 40:11:28:a5:cc:08:f9:a7:26:90:6d:a9:16:7a:eb: 50:33:df:d8:e6:3d:70:43:b9:82:07:a3:7e:9d:71: 21:6e:72:2c:d5:e3:1f:ad:66:f1:73:d4:2e:3b:b8: 34:63:f0:f8:e2:80:b7:b5:81:c7:cd:c9:a2:78:51: 4d:04:50:58:ab:61:14:92:94:20:0d:a2:bf:e2:02: d1:f5:91:c7:29:5a:36:b6:c8:8d:24:56:5b:b0:af: b2:b9:04:11:de:b8:3e:50:77:52:06:f2:bb:67:26: 84:d4:a1:9b:e4:b0:5b:cf:b6:dd:5f:98:ee:d7:dd: 81:fe:42:95:e3:21:3a:d2:e7:d2:02:af:a9:81:ae: 83:5a:15:1a:1c:f3:8a:14:90:f9:6f:61:07:4c:09: d7:bc:8c:8d:eb:7b:4e:41:35:73:1a:a9:68:bb:00: 94:6f:d2:44:a5:3d:20:67:b0:98:bd:ec:9b:e9:ac: 27:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:49:7C:B7:23:2C:3C:BE:9B:BF:33:3C:58:04:59:B2:DA:1B:1E:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd5af3ca-44fc-378f-8a8d-67e59613cc9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 216.198.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c8:5a:ba:25:a5:54:65:8d:cc:eb:b8:ec:94:ae:2c:07:e1: e2:cd:df:ca:78:cc:c4:b7:37:17:16:b3:24:42:5b:a0:78:3a: b5:6d:a7:ea:aa:81:24:c5:ba:7d:12:4a:77:01:04:4f:d7:3c: 6d:66:0a:70:7b:45:7d:16:7f:5b:e0:12:27:ee:6e:e7:d4:4c: 9d:98:d6:9d:e2:48:2d:83:17:c0:f0:57:d8:fb:55:d6:84:92: df:0a:8b:70:16:3b:84:b4:cd:34:81:ff:eb:0d:14:3d:26:7e: 47:07:2b:af:68:bf:22:5c:04:b9:53:27:2a:d7:ea:3a:d9:6d: df:43:f4:85:a4:17:e7:4f:32:03:9c:93:40:61:a1:1c:76:fa: 06:ca:9b:6c:bd:ce:c6:8d:99:65:05:0f:19:ec:a4:1b:34:83: 49:f9:80:41:f6:8e:f7:e7:7b:8d:73:f4:73:06:e6:f3:b8:25: ad:b3:10:6f:86:2d:d9:3d:71:7a:ff:6d:1b:c4:dd:1d:e7:c1: 68:9a:55:f4:0d:c4:80:1a:19:b4:32:f4:23:bf:0c:c7:8e:04: 4d:3b:74:2d:0c:ba:c9:5c:f1:4c:99:14:ac:42:79:f2:6f:9f: 59:3b:ac:f9:aa:fb:1e:6f:95:01:ce:91:a6:e8:31:71:cb:7f: 5a:07:3b:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3/dqZgoGNy2ab8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk MzY0MmM3NTctYTJlMi00Y2E1LWJmYjgtYjBlY2NjZTJjZTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfhHJMALbLWJP7WTbGeUoPg499qcIvmd/xp3 akdpjOic60NOS96HbAt9JHhVzJy9fyAX5hcUsRslsFo9Mhm6ekmYw5XOjkDdFvdA ESilzAj5pyaQbakWeutQM9/Y5j1wQ7mCB6N+nXEhbnIs1eMfrWbxc9QuO7g0Y/D4 4oC3tYHHzcmieFFNBFBYq2EUkpQgDaK/4gLR9ZHHKVo2tsiNJFZbsK+yuQQR3rg+ UHdSBvK7ZyaE1KGb5LBbz7bdX5ju192B/kKV4yE60ufSAq+pga6DWhUaHPOKFJD5 b2EHTAnXvIyN63tOQTVzGqlouwCUb9JEpT0gZ7CYveyb6awnbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBJfLcjLDy+m78zPFgEWbLaGx5NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvY2Q1YWYzY2EtNDRmYy0z NzhmLThhOGQtNjdlNTk2MTNjYzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2MaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLIWrolpVRljczruOyUriwH4eLN38p4zMS3NxcWsyRCW6B4OrVtp+qq gSTFun0SSncBBE/XPG1mCnB7RX0Wf1vgEifubufUTJ2Y1p3iSC2DF8DwV9j7VdaE kt8Ki3AWO4S0zTSB/+sNFD0mfkcHK69ovyJcBLlTJyrX6jrZbd9D9IWkF+dPMgOc k0BhoRx2+gbKm2y9zsaNmWUFDxnspBs0g0n5gEH2jvfne41z9HMG5vO4Ja2zEG+G Ldk9cXr/bRvE3R3nwWiaVfQNxIAaGbQy9CO/DMeOBE07dC0Muslc8UyZFKxCefJv n1k7rPmq+x5vlQHOkaboMXHLf1oHO7w= -----END CERTIFICATE-----Generated at Fri Apr 17 11:17:04 2026 by rpki-client