$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/2a008e47-d7ee-388f-8dd0-00eec15271e8.roa File: 2a008e47-d7ee-388f-8dd0-00eec15271e8.roa (raw, json) Hash identifier: gfMzGUHn9UEYXm4Ka/r54aJh6GZZK3bpE46Qg2hn39w= Subject key identifier: 85:F1:82:84:13:51:C8:DF:77:69:D1:AC:A8:5C:7F:E8:68:64:02:9F Certificate issuer: /CN=143c0e16-c384-40db-8cbd-7b2f4a55e007 Certificate serial: 010D0C9F4328584D746FC281257C384AE4ED47C0 Authority key identifier: 8B:D3:DF:B3:87:7D:6A:C1:E1:D8:C2:C7:BF:CF:A1:37:02:8D:7C:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/2a008e47-d7ee-388f-8dd0-00eec15271e8.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 15154 IP address blocks: 64.113.32.0/20 maxlen: 24 198.232.165.0/24 maxlen: 24 198.232.166.0/24 maxlen: 24 2604:e780::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/143c0e16-c384-40db-8cbd-7b2f4a55e007.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/143c0e16-c384-40db-8cbd-7b2f4a55e007.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:c2:81:25:7c:38:4a:e4:ed:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143c0e16-c384-40db-8cbd-7b2f4a55e007 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=3ff9d0d7-549f-429b-85f7-4b5deb819da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5b:d1:65:77:b9:5d:bb:b8:dd:a1:a2:f8:a1: fb:a4:5a:76:8f:e8:ce:c5:f7:79:47:1d:58:39:db: 81:2c:b5:df:a7:c0:20:d2:33:1b:af:c6:bc:1f:5e: a4:41:de:92:a5:5d:9e:bc:25:ca:0e:07:12:79:7c: d3:14:7d:fd:43:d8:fc:b9:ce:94:38:2b:88:73:4f: c4:3d:fb:aa:4b:b4:1d:94:13:9e:6c:87:b6:22:a0: c6:a7:a4:a1:0f:fc:10:77:61:9b:6a:d3:79:a8:6d: 57:06:85:67:53:70:c3:cd:90:34:8a:a0:ad:d8:bc: c5:58:6b:21:a0:e5:5e:ba:63:d5:e4:9a:93:d1:ac: 4e:e1:a9:4d:0c:93:a0:2c:9f:8c:3f:42:8b:01:8c: 84:61:72:11:17:2c:2a:fe:36:61:b4:bf:27:5c:00: df:0f:cd:0d:89:ba:18:28:d0:80:3e:bc:b5:a0:4c: 08:16:50:40:14:1d:bb:8b:98:c6:49:04:53:a1:ef: 70:6b:ea:81:8d:78:27:80:44:7f:fc:79:47:c4:f0: 0e:f8:a6:71:5e:3f:9f:5c:75:7a:0e:b0:fd:0d:41: 30:9a:48:13:d4:24:5b:b2:2e:0a:e8:4c:13:e3:f0: 66:ba:39:44:b5:f4:fb:0a:95:88:0b:93:2c:a3:32: 78:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F1:82:84:13:51:C8:DF:77:69:D1:AC:A8:5C:7F:E8:68:64:02:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/2a008e47-d7ee-388f-8dd0-00eec15271e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/143c0e16-c384-40db-8cbd-7b2f4a55e007.crl X509v3 Authority Key Identifier: keyid:8B:D3:DF:B3:87:7D:6A:C1:E1:D8:C2:C7:BF:CF:A1:37:02:8D:7C:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007.cer sbgp-ipAddrBlock: critical IPv4: 64.113.32.0/20 198.232.165.0-198.232.166.255 IPv6: 2604:e780::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:de:5f:69:51:5f:b0:05:ff:b7:57:4d:c5:a4:85:69:bd:a7: 9c:18:36:6e:8e:ed:c1:41:e6:81:a2:5b:f9:b6:2b:b3:f4:57: bb:cd:2b:c6:36:91:97:5f:5e:c4:52:e6:26:e7:ed:d6:94:a9: 0b:fe:0a:18:f3:1e:36:09:26:4e:ce:cd:38:57:6d:fb:f0:eb: 5e:b5:86:a3:8e:85:a4:3a:2a:05:93:43:5f:ef:39:be:90:2e: 3c:9b:d0:e6:ac:53:f0:d6:41:86:28:8a:80:8d:9b:61:be:45: 32:ec:f4:76:21:0e:c9:a9:9b:9e:c4:e2:f4:42:d6:35:cf:8d: 7b:1c:0a:60:d2:1c:8a:54:37:e8:6b:26:e2:db:1b:4e:c0:4d: 63:e7:62:aa:3b:e4:b2:bf:d2:a8:dc:7b:23:dc:3a:fe:b6:a4: 8b:bb:84:34:4d:67:11:13:35:d5:72:41:a0:eb:a7:d4:ce:5f: 0e:26:ba:aa:23:94:32:51:58:fd:c6:b7:9d:72:2f:41:ec:ad: 2c:1f:9f:a9:fe:66:cd:12:4b:12:a6:83:c6:5d:71:bf:34:c2: c4:fb:31:1e:f1:68:81:98:5c:81:51:b4:55:fc:23:46:f2:69: 57:33:d2:59:d6:2e:b4:da:11:02:6b:aa:40:1f:16:a7:c8:e7: 32:91:df:58 -----BEGIN CERTIFICATE----- MIIGYDCCBUigAwIBAgIUAQ0Mn0MoWE10b8KBJXw4SuTtR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzYzBlMTYtYzM4NC00MGRiLThjYmQtN2IyZjRhNTVl MDA3MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk M2ZmOWQwZDctNTQ5Zi00MjliLTg1ZjctNGI1ZGViODE5ZGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVvRZXe5Xbu43aGi+KH7pFp2j+jOxfd5Rx1Y OduBLLXfp8Ag0jMbr8a8H16kQd6SpV2evCXKDgcSeXzTFH39Q9j8uc6UOCuIc0/E PfuqS7QdlBOebIe2IqDGp6ShD/wQd2GbatN5qG1XBoVnU3DDzZA0iqCt2LzFWGsh oOVeumPV5JqT0axO4alNDJOgLJ+MP0KLAYyEYXIRFywq/jZhtL8nXADfD80NiboY KNCAPry1oEwIFlBAFB27i5jGSQRToe9wa+qBjXgngER//HlHxPAO+KZxXj+fXHV6 DrD9DUEwmkgT1CRbsi4K6EwT4/BmujlEtfT7CpWIC5MsozJ4WQIDAQABo4IDcjCC A24wHQYDVR0OBBYEFIXxgoQTUcjfd2nRrKhcf+hoZAKfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xNDNj MGUxNi1jMzg0LTQwZGItOGNiZC03YjJmNGE1NWUwMDcvMmEwMDhlNDctZDdlZS0z ODhmLThkZDAtMDBlZWMxNTI3MWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTQzYzBlMTYtYzM4NC00MGRiLThj YmQtN2IyZjRhNTVlMDA3LzE0M2MwZTE2LWMzODQtNDBkYi04Y2JkLTdiMmY0YTU1 ZTAwNy5jcmwwHwYDVR0jBBgwFoAUi9Pfs4d9asHh2MLHv8+hNwKNfB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xNDNjMGUxNi1jMzg0LTQwZGItOGNiZC03YjJm NGE1NWUwMDcuY2VyMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQEQHEgMAwD BADG6KUDBADG6KYwDQQCAAIwBwMFACYE54AwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjd5faVFfsAX/t1dN xaSFab2nnBg2bo7twUHmgaJb+bYrs/RXu80rxjaRl19exFLmJuft1pSpC/4KGPMe NgkmTs7NOFdt+/DrXrWGo46FpDoqBZNDX+85vpAuPJvQ5qxT8NZBhiiKgI2bYb5F Muz0diEOyambnsTi9ELWNc+NexwKYNIcilQ36Gsm4tsbTsBNY+diqjvksr/SqNx7 I9w6/raki7uENE1nERM11XJBoOun1M5fDia6qiOUMlFY/ca3nXIvQeytLB+fqf5m zRJLEqaDxl1xvzTCxPsxHvFogZhcgVG0VfwjRvJpVzPSWdYutNoRAmuqQB8Wp8jn MpHfWA== -----END CERTIFICATE-----Generated at Sun Apr 19 17:00:46 2026 by rpki-client