$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/cfea32f4-d591-3a37-9c22-4feb6fa4a3a8.roa File: cfea32f4-d591-3a37-9c22-4feb6fa4a3a8.roa (raw, json) Hash identifier: lR3hnmtFlzNu75mqk9NLFgy1dX8BWcFnaWkGmrAU+B8= Subject key identifier: 8A:61:9E:A3:6C:60:C3:33:52:A9:89:0D:CC:87:04:C9:53:D9:EF:69 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584D59EA5218C276E3F5A32EFF00 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/cfea32f4-d591-3a37-9c22-4feb6fa4a3a8.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 1280 IP address blocks: 204.152.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:52:18:c2:76:e3:f5:a3:2e:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=dbdda1f7-6c29-4b52-99f1-2295b4e84d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4b:72:1b:9b:20:d8:40:74:b5:5c:f0:61:90: 7e:18:8f:77:b1:6e:6b:a0:33:5b:2b:d5:30:8c:ba: 2d:e0:68:31:64:cb:04:42:d0:e1:cb:95:50:5c:b2: 8e:83:ec:71:29:21:55:b0:13:ba:fd:ba:88:c2:74: 8d:e2:d9:ef:70:72:1d:f5:25:d2:bc:04:a2:be:60: df:f3:aa:1d:31:b5:2e:f3:f8:5e:df:f4:90:be:20: 24:59:9b:8b:ba:63:0c:68:9d:34:51:ec:00:2e:a8: 91:5e:82:9b:88:58:b0:3b:44:a2:27:6b:59:38:69: 35:6e:c2:fa:59:70:d9:a7:70:2b:3a:60:70:62:10: bd:69:07:15:43:0b:68:d6:96:37:95:1c:0f:d2:56: 02:23:46:42:7e:0e:89:0f:6c:83:5b:30:33:36:ba: ff:c2:e8:41:7d:b6:5a:62:e1:49:ed:20:07:03:e8: b5:65:ef:3a:ed:a6:fc:cf:12:80:dc:0b:13:32:68: ba:ad:85:91:22:a1:57:52:8a:4f:ee:f5:09:1d:9f: d2:c5:8c:fd:c4:d9:a9:9e:9e:ab:19:83:f8:3d:2d: a4:7a:e9:ba:37:e3:a8:5a:4e:9f:64:fd:36:fe:64: 94:d8:69:03:96:41:08:01:6a:7f:07:7e:21:fb:11: 36:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:61:9E:A3:6C:60:C3:33:52:A9:89:0D:CC:87:04:C9:53:D9:EF:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/cfea32f4-d591-3a37-9c22-4feb6fa4a3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 204.152.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:1f:49:e5:46:c4:19:9d:f5:25:ab:5c:91:64:e5:6b:86:11: f9:43:e6:f9:8d:79:1f:90:a0:d6:86:d3:e6:88:db:22:eb:cb: 3a:6e:66:80:82:4c:fa:7c:4f:76:e5:aa:b4:ae:3c:46:5a:b6: 90:55:2f:56:85:06:20:66:f0:e6:33:bc:76:8a:fa:ae:70:e3: 3a:32:b2:bd:2b:fa:4c:ab:be:50:24:7b:e8:f8:6c:52:54:cf: 37:cc:ab:26:5b:c4:36:b7:68:80:92:13:db:89:0f:30:5b:06: e4:25:33:af:f7:0b:57:5b:4d:fa:20:ba:1b:26:db:a4:a7:b8: 19:38:9d:55:6b:fc:ae:97:1f:da:17:3a:e6:a9:b5:ee:c3:ea: d7:19:d4:dd:56:6a:0a:12:7d:36:11:e0:8c:ae:6f:45:88:5f: 14:b1:c1:1f:02:bb:87:df:05:a6:60:6f:79:d5:75:98:d5:d1: 25:a4:62:cf:b5:8b:d1:de:c0:aa:b3:13:5a:5e:c5:dc:0e:ff: b6:d6:7e:8d:51:02:f7:e8:fb:94:94:d9:06:44:f5:10:26:d5: 21:c2:5e:36:20:ec:3b:8b:3e:0c:62:b0:b0:ab:d8:f3:1d:8c: 8e:ba:86:64:93:91:b9:1f:18:fd:70:d5:f5:54:e4:71:38:d4: 2f:4b:32:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6lIYwnbj9aMu/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZGJkZGExZjctNmMyOS00YjUyLTk5ZjEtMjI5NWI0ZTg0ZDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0tyG5sg2EB0tVzwYZB+GI93sW5roDNbK9Uw jLot4GgxZMsEQtDhy5VQXLKOg+xxKSFVsBO6/bqIwnSN4tnvcHId9SXSvASivmDf 86odMbUu8/he3/SQviAkWZuLumMMaJ00UewALqiRXoKbiFiwO0SiJ2tZOGk1bsL6 WXDZp3ArOmBwYhC9aQcVQwto1pY3lRwP0lYCI0ZCfg6JD2yDWzAzNrr/wuhBfbZa YuFJ7SAHA+i1Ze867ab8zxKA3AsTMmi6rYWRIqFXUopP7vUJHZ/SxYz9xNmpnp6r GYP4PS2keum6N+OoWk6fZP02/mSU2GkDlkEIAWp/B34h+xE2IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIphnqNsYMMzUqmJDcyHBMlT2e9pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvY2ZlYTMyZjQtZDU5MS0z YTM3LTljMjItNGZlYjZmYTRhM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJi/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEfSeVGxBmd9SWrXJFk5WuGEflD5vmNeR+QoNaG0+aI2yLryzpuZoCC TPp8T3blqrSuPEZatpBVL1aFBiBm8OYzvHaK+q5w4zoysr0r+kyrvlAke+j4bFJU zzfMqyZbxDa3aICSE9uJDzBbBuQlM6/3C1dbTfoguhsm26SnuBk4nVVr/K6XH9oX Ouapte7D6tcZ1N1WagoSfTYR4Iyub0WIXxSxwR8Cu4ffBaZgb3nVdZjV0SWkYs+1 i9HewKqzE1pexdwO/7bWfo1RAvfo+5SU2QZE9RAm1SHCXjYg7DuLPgxisLCr2PMd jI66hmSTkbkfGP1w1fVU5HE41C9LMno= -----END CERTIFICATE-----Generated at Fri Apr 17 18:10:14 2026 by rpki-client