$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/85c8bb0f-50d5-3658-aa4f-fea8ed9636ff.roa File: 85c8bb0f-50d5-3658-aa4f-fea8ed9636ff.roa (raw, json) Hash identifier: brLP/wj2PSgOjUiHTtFzsjgRZKYwlo0dYhyRAg/b+bo= Subject key identifier: 52:F0:6E:E9:3F:62:AE:00:57:B4:4E:41:ED:52:32:08:7C:56:51:67 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584D59EA5234EFB4E1F40F3F4D60 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/85c8bb0f-50d5-3658-aa4f-fea8ed9636ff.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 1280 IP address blocks: 204.152.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:52:34:ef:b4:e1:f4:0f:3f:4d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=b1513eb2-4277-43de-a3c4-26d23eda9dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:61:15:37:83:6e:1d:10:84:fe:d3:c5:73:9a: aa:11:3f:10:de:f7:8a:3f:c7:05:14:ed:f6:94:36: ce:12:50:f3:f7:13:11:99:91:9b:85:91:87:1b:ff: 1b:5d:43:1f:b3:e5:3a:0b:8c:65:e2:ed:b8:3e:d3: a5:73:2b:38:09:b8:dd:07:59:a8:c8:df:8d:5d:c4: 2b:2b:70:a7:b6:a2:18:1d:b4:42:cd:d6:20:52:ce: 32:2f:81:a3:cd:52:49:85:14:e6:8f:71:43:bb:dd: d7:33:d2:ad:ce:93:24:d5:c6:a3:60:d0:8d:52:f9: b6:8e:49:9d:98:4f:40:70:fd:d2:11:ef:7b:42:91: 37:08:c0:79:32:07:75:95:21:31:bf:10:92:63:81: 7b:42:ca:d1:7e:e9:9b:05:b2:a4:71:72:b8:92:3c: 11:84:f6:de:8d:44:02:a5:bf:e6:54:15:58:a4:e1: 3f:93:0b:c1:61:f7:ae:1b:6a:75:a0:20:d6:32:58: 6e:88:49:95:49:e1:14:52:e2:39:d8:7a:45:ba:76: e6:1b:b9:e1:6e:d6:3a:7a:bf:33:4d:45:a2:7d:a4: bf:ae:ba:28:64:ba:1f:ce:aa:bd:73:46:37:0b:41: 75:44:92:b9:71:56:96:b5:eb:ac:32:c6:b4:8c:40: d4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F0:6E:E9:3F:62:AE:00:57:B4:4E:41:ED:52:32:08:7C:56:51:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/85c8bb0f-50d5-3658-aa4f-fea8ed9636ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 204.152.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:18:81:5d:d3:68:7a:c6:87:8c:b0:7d:6a:03:a2:61:d5:4f: 4a:e1:aa:7a:ba:7b:9b:57:15:9b:63:11:9b:80:f5:b2:34:2d: 0d:47:4c:55:ba:b5:20:5a:8a:92:dd:9d:eb:4d:53:3a:3a:7d: bc:65:74:dc:b3:80:a7:83:17:b5:44:95:1d:de:e3:70:13:c7: 37:b0:39:c0:83:bd:02:ee:5d:83:dc:62:9b:72:c2:74:5b:36: 77:a6:9f:2d:07:9d:a0:40:2f:ae:e0:03:80:77:4d:85:5e:98: 0d:e0:3e:da:b5:2e:dd:60:64:ab:3b:80:ec:57:d5:eb:79:42: 72:19:96:79:a8:90:c9:56:5b:a8:3a:be:04:7d:db:39:cf:49: d8:b1:14:9a:49:d9:86:2b:75:4e:90:c6:27:f2:70:dd:c8:4e: 3c:2d:5e:86:2b:6f:ea:b8:3d:7e:8d:8c:e3:f4:c1:38:2e:cf: 15:61:99:8f:7c:3d:4b:24:39:64:6a:76:b8:00:54:37:8f:eb: 23:b0:79:dd:d2:4c:9b:8d:18:5e:82:e3:aa:26:31:9c:ad:d2: 30:a4:82:32:b1:53:ec:23:4e:95:38:21:4c:31:28:50:93:66: de:c0:13:09:f8:aa:d9:69:1c:42:de:98:a7:05:a6:23:73:0d: ef:41:fa:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6lI077Th9A8/TWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YjE1MTNlYjItNDI3Ny00M2RlLWEzYzQtMjZkMjNlZGE5ZGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGEVN4NuHRCE/tPFc5qqET8Q3veKP8cFFO32 lDbOElDz9xMRmZGbhZGHG/8bXUMfs+U6C4xl4u24PtOlcys4CbjdB1moyN+NXcQr K3CntqIYHbRCzdYgUs4yL4GjzVJJhRTmj3FDu93XM9KtzpMk1cajYNCNUvm2jkmd mE9AcP3SEe97QpE3CMB5Mgd1lSExvxCSY4F7QsrRfumbBbKkcXK4kjwRhPbejUQC pb/mVBVYpOE/kwvBYfeuG2p1oCDWMlhuiEmVSeEUUuI52HpFunbmG7nhbtY6er8z TUWifaS/rrooZLofzqq9c0Y3C0F1RJK5cVaWteusMsa0jEDUPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLwbuk/Yq4AV7ROQe1SMgh8VlFnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvODVjOGJiMGYtNTBkNS0z NjU4LWFhNGYtZmVhOGVkOTYzNmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJi7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8YgV3TaHrGh4ywfWoDomHVT0rhqnq6e5tXFZtjEZuA9bI0LQ1HTFW6 tSBaipLdnetNUzo6fbxldNyzgKeDF7VElR3e43ATxzewOcCDvQLuXYPcYptywnRb Nnemny0HnaBAL67gA4B3TYVemA3gPtq1Lt1gZKs7gOxX1et5QnIZlnmokMlWW6g6 vgR92znPSdixFJpJ2YYrdU6QxifycN3ITjwtXoYrb+q4PX6NjOP0wTguzxVhmY98 PUskOWRqdrgAVDeP6yOwed3STJuNGF6C46omMZyt0jCkgjKxU+wjTpU4IUwxKFCT Zt7AEwn4qtlpHELemKcFpiNzDe9B+lY= -----END CERTIFICATE-----Generated at Fri Apr 17 17:17:55 2026 by rpki-client