$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/58de4557-2aef-37b6-b27a-3d70da1eb4b0.roa File: 58de4557-2aef-37b6-b27a-3d70da1eb4b0.roa (raw, json) Hash identifier: 6qqageALohn5q40zMS/KZDtQWAHX17vCLqE3+nbJr/U= Subject key identifier: 9B:D3:FE:50:9F:2D:46:40:74:48:DD:69:E5:01:01:F5:95:E7:DA:E8 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584D59EA5A2CDE46F3E625B7FF40 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/58de4557-2aef-37b6-b27a-3d70da1eb4b0.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 1280 IP address blocks: 204.152.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:5a:2c:de:46:f3:e6:25:b7:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=eb81485b-61ca-4680-8c3c-489b02bdb59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:82:b5:ba:d4:7b:a0:da:db:c3:3d:5f:8e:4d: 3d:7a:ff:5c:ad:b1:30:6e:ee:95:98:ba:3f:dc:f4: aa:cc:82:9a:ea:45:bf:e9:f7:b5:aa:dd:48:d7:14: 61:1e:a6:60:1b:ab:73:b4:bc:d3:ec:0a:99:85:ea: 8e:02:43:b7:3a:c4:88:87:dd:c7:9b:e4:bc:ab:d0: bb:0a:1f:68:0c:18:e8:49:1f:d5:1b:ba:81:db:93: 1d:5c:b9:d0:88:b9:e8:9f:02:98:97:2c:cf:24:c3: 7f:e1:3e:36:71:ac:af:d3:22:05:45:ef:71:0f:a0: 7b:3c:3a:15:09:55:97:40:ea:a6:50:53:69:a3:8a: 19:ef:52:f6:da:55:3b:80:71:df:e5:de:82:63:cf: 93:ab:2f:49:d3:16:9b:12:1e:19:61:b2:29:27:39: 26:9d:a9:a7:35:f0:46:62:15:6b:40:9e:7a:e4:e0: d0:a1:19:b2:8e:e2:12:6a:ca:7a:de:d7:be:b2:16: 92:80:2c:04:f6:db:70:6b:d9:20:f4:a0:5d:3e:37: 4a:71:d2:4f:25:da:70:a7:2e:99:c5:22:8a:03:05: 9e:19:2a:48:82:3d:f2:97:dd:d8:6a:86:9c:0f:e6: 90:97:0b:16:34:aa:ac:89:b5:64:ca:b8:f6:01:78: 5b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D3:FE:50:9F:2D:46:40:74:48:DD:69:E5:01:01:F5:95:E7:DA:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/58de4557-2aef-37b6-b27a-3d70da1eb4b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 204.152.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:a1:45:fe:c2:3b:f5:76:a3:85:b6:ee:fb:2b:e1:0f:a1:b4: 98:b1:28:12:d5:49:59:29:6c:29:20:5a:e5:2d:54:30:b5:40: da:4e:1b:96:93:75:78:3e:8a:ad:5e:56:98:f1:4c:b5:89:99: 63:dc:d9:69:59:67:92:38:74:b3:ab:35:c0:eb:00:b9:0f:31: 2b:03:3e:3d:05:0d:61:5a:05:db:b0:84:c9:9e:4a:23:70:15: c7:55:18:18:fd:e6:a6:7a:35:b6:d8:af:cb:b1:72:3d:58:e5: 1a:d8:bd:ae:97:29:a5:3b:a2:5d:8f:a0:c8:33:f0:26:20:13: 72:47:86:66:79:1a:95:04:c0:97:7c:8e:04:9f:26:4e:cb:9a: b5:71:72:0c:57:4d:c8:f7:db:7a:4b:a8:ec:ac:b3:a5:cf:29: 7f:eb:c2:c1:84:05:d0:5b:53:c1:c1:ef:7f:64:a2:71:0c:b4: 2f:81:de:ad:b0:3a:c3:96:7d:bc:f9:8b:73:79:a0:f7:fe:25: 18:64:3f:2b:8d:4b:95:62:3a:c0:17:7f:29:55:2c:5c:b8:f1: 78:83:35:94:87:92:5f:f1:48:ec:7c:e6:f7:06:e1:db:60:c9: a6:6b:98:48:f2:a3:75:46:6b:5f:60:b5:a5:ab:02:60:95:3a: 0c:2d:0f:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6los3kbz5iW3/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZWI4MTQ4NWItNjFjYS00NjgwLThjM2MtNDg5YjAyYmRiNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYK1utR7oNrbwz1fjk09ev9crbEwbu6VmLo/ 3PSqzIKa6kW/6fe1qt1I1xRhHqZgG6tztLzT7AqZheqOAkO3OsSIh93Hm+S8q9C7 Ch9oDBjoSR/VG7qB25MdXLnQiLnonwKYlyzPJMN/4T42cayv0yIFRe9xD6B7PDoV CVWXQOqmUFNpo4oZ71L22lU7gHHf5d6CY8+Tqy9J0xabEh4ZYbIpJzkmnamnNfBG YhVrQJ565ODQoRmyjuISasp63te+shaSgCwE9ttwa9kg9KBdPjdKcdJPJdpwpy6Z xSKKAwWeGSpIgj3yl93YaoacD+aQlwsWNKqsibVkyrj2AXhbFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvT/lCfLUZAdEjdaeUBAfWV59roMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNThkZTQ1NTctMmFlZi0z N2I2LWIyN2EtM2Q3MGRhMWViNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJi5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2hRf7CO/V2o4W27vsr4Q+htJixKBLVSVkpbCkgWuUtVDC1QNpOG5aT dXg+iq1eVpjxTLWJmWPc2WlZZ5I4dLOrNcDrALkPMSsDPj0FDWFaBduwhMmeSiNw FcdVGBj95qZ6NbbYr8uxcj1Y5RrYva6XKaU7ol2PoMgz8CYgE3JHhmZ5GpUEwJd8 jgSfJk7LmrVxcgxXTcj323pLqOyss6XPKX/rwsGEBdBbU8HB739konEMtC+B3q2w OsOWfbz5i3N5oPf+JRhkPyuNS5ViOsAXfylVLFy48XiDNZSHkl/xSOx85vcG4dtg yaZrmEjyo3VGa19gtaWrAmCVOgwtD7o= -----END CERTIFICATE-----Generated at Sat Apr 18 00:06:00 2026 by rpki-client