$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/96c3ceef-7277-31a2-b662-83d269d30f16.roa File: 96c3ceef-7277-31a2-b662-83d269d30f16.roa (raw, json) Hash identifier: tuQvwS/U+oAaO1hh6tUF/l9FYMrjs7UEpGUYQWpJ8YA= Subject key identifier: 53:B9:5C:4C:BC:25:E1:9F:E9:85:08:2F:30:E9:66:DC:9F:C9:DE:FB Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584D59EA5A1F5226F5A4D05E1740 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/96c3ceef-7277-31a2-b662-83d269d30f16.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 1280 IP address blocks: 204.152.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:5a:1f:52:26:f5:a4:d0:5e:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=a3c97256-192f-46e2-9d31-238f8d6146b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:40:59:f6:48:00:de:9b:5f:91:73:ef:d5:64: 61:9f:ab:17:93:b6:f0:6c:5f:e3:62:55:db:c2:7c: 42:51:e6:94:ea:3b:68:3f:c8:74:b7:6c:58:18:68: 3c:b5:a4:80:45:88:5b:63:8d:3e:34:08:f8:55:4b: b7:1f:36:12:74:20:e4:51:0d:3a:65:8b:72:94:0c: a0:c9:a1:3f:df:79:00:51:c5:4d:a6:78:3b:68:6f: 7f:7a:12:f2:d3:f4:3d:ae:90:7a:25:01:e2:68:33: c2:81:6b:ae:9b:20:0f:88:f3:45:0f:3e:70:39:b2: bc:b9:ce:9f:36:fe:b3:67:2a:cc:e7:c8:e8:6a:4e: 68:a8:d5:df:e9:95:a7:17:b3:db:ba:d7:17:08:7d: be:11:ff:e4:5e:26:dc:5d:9e:00:f6:cd:99:cd:61: c1:aa:d3:ac:68:a3:ef:b0:3b:b7:fc:16:c3:df:06: 2a:5f:41:07:52:ff:cc:23:c5:11:fe:0d:61:2e:6a: e2:79:eb:98:8e:a1:fd:88:ae:b9:67:03:3e:19:a4: 06:cb:5c:3d:03:e8:a1:58:a6:8b:10:fa:20:c9:75: 68:14:ba:05:af:7c:33:bc:c4:6a:20:54:b6:64:da: 06:26:c2:fb:81:1e:b7:bf:e9:f8:9c:bd:c4:0e:d9: 65:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B9:5C:4C:BC:25:E1:9F:E9:85:08:2F:30:E9:66:DC:9F:C9:DE:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/96c3ceef-7277-31a2-b662-83d269d30f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 204.152.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:9a:93:df:d3:39:db:1b:4b:a9:de:ef:5f:9e:3e:80:25:7a: 13:64:b2:aa:27:f4:2b:27:2f:6c:07:66:42:c0:40:50:be:1a: 53:db:04:30:22:0e:71:c1:bc:a7:bb:ba:3f:af:4d:18:18:3f: 79:13:6e:26:13:09:fe:bd:54:86:71:96:be:20:3f:8f:1e:9d: 35:8d:97:6d:f9:2b:89:27:f6:d9:d8:cd:00:f4:d5:ac:7d:e5: 31:ac:93:6c:ab:00:40:ac:8d:a0:db:eb:27:37:f1:42:46:40: a6:ae:c9:55:a0:b9:25:a0:05:a0:21:b6:e9:d6:4a:b7:ec:82: ec:00:5b:34:f7:a7:5f:55:5c:9c:ad:4d:7f:57:cf:41:12:89: 9a:e4:40:79:50:f3:6b:6a:53:53:08:fb:85:aa:7b:2b:58:fa: 76:71:a8:bd:83:4f:1f:75:d0:95:22:71:13:c2:b6:b9:85:0a: b0:a9:65:c6:f8:96:df:15:55:e7:d6:ec:b9:76:b4:e5:1c:b9: 57:51:dc:01:8d:9a:34:8c:f9:4d:61:59:f7:5f:9b:98:93:5a: 0c:6a:22:8d:d6:91:a1:90:1e:14:4b:01:de:ca:18:14:30:7a: 57:fe:9d:1e:a0:01:37:18:9f:c5:79:a8:a3:00:b2:a2:a2:15: 5b:da:5e:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6lofUib1pNBeF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YTNjOTcyNTYtMTkyZi00NmUyLTlkMzEtMjM4ZjhkNjE0NmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEBZ9kgA3ptfkXPv1WRhn6sXk7bwbF/jYlXb wnxCUeaU6jtoP8h0t2xYGGg8taSARYhbY40+NAj4VUu3HzYSdCDkUQ06ZYtylAyg yaE/33kAUcVNpng7aG9/ehLy0/Q9rpB6JQHiaDPCgWuumyAPiPNFDz5wObK8uc6f Nv6zZyrM58joak5oqNXf6ZWnF7PbutcXCH2+Ef/kXibcXZ4A9s2ZzWHBqtOsaKPv sDu3/BbD3wYqX0EHUv/MI8UR/g1hLmrieeuYjqH9iK65ZwM+GaQGy1w9A+ihWKaL EPogyXVoFLoFr3wzvMRqIFS2ZNoGJsL7gR63v+n4nL3EDtllCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFO5XEy8JeGf6YUILzDpZtyfyd77MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvOTZjM2NlZWYtNzI3Ny0z MWEyLWI2NjItODNkMjY5ZDMwZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJi9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqak9/TOdsbS6ne71+ePoAlehNksqon9CsnL2wHZkLAQFC+GlPbBDAi DnHBvKe7uj+vTRgYP3kTbiYTCf69VIZxlr4gP48enTWNl235K4kn9tnYzQD01ax9 5TGsk2yrAECsjaDb6yc38UJGQKauyVWguSWgBaAhtunWSrfsguwAWzT3p19VXJyt TX9Xz0ESiZrkQHlQ82tqU1MI+4WqeytY+nZxqL2DTx910JUicRPCtrmFCrCpZcb4 lt8VVefW7Ll2tOUcuVdR3AGNmjSM+U1hWfdfm5iTWgxqIo3WkaGQHhRLAd7KGBQw elf+nR6gATcYn8V5qKMAsqKiFVvaXnE= -----END CERTIFICATE-----Generated at Fri Apr 17 20:07:21 2026 by rpki-client