$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa File: 9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa (raw, json) Hash identifier: KX6MyRpdDmfRIMo2Kr5QuYAu97wr/E6OjylfpabCTdQ= Subject key identifier: D9:85:4D:92:37:A9:8B:9C:CE:77:5F:EA:2E:17:7E:A8:AE:96:0B:E0 Certificate issuer: /CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e Certificate serial: 010D0C9F4328584D5E1A52BC0451305C3453CB80 Authority key identifier: B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 11550 IP address blocks: 173.243.176.0/20 maxlen: 24 199.96.120.0/22 maxlen: 24 204.89.253.0/24 maxlen: 24 216.249.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:52:bc:04:51:30:5c:34:53:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=2769054e-6dfb-4afc-90a0-768483f667bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d3:61:4b:d9:85:d3:33:c0:63:da:f0:3b:6a: 5b:a8:87:a1:d2:57:88:49:aa:4c:10:f1:5a:bc:c7: b6:4a:28:31:5d:c1:06:7a:df:9c:a8:9a:58:e2:e0: 42:d4:71:ba:85:a1:83:db:8c:13:7b:ed:ad:35:9b: 99:1d:7f:88:72:1b:25:a4:00:e5:e8:be:9f:a5:fd: 7e:d5:14:98:70:8e:0b:eb:74:30:bf:1b:1b:3a:14: cf:d0:23:31:1e:08:5f:93:06:e1:79:7e:64:51:26: 11:62:af:63:c8:93:90:40:78:a3:cb:32:3a:9b:e9: 9e:d6:e4:59:f2:18:10:94:16:f6:3b:c1:3d:41:14: ec:62:6a:53:84:34:51:e6:b9:35:c5:40:34:05:aa: a2:b6:47:37:e2:94:b7:7a:ef:dc:a2:89:82:05:ce: fb:73:81:ee:2b:8e:d5:d2:53:47:0f:03:98:14:fb: a1:bc:c2:97:79:cb:c5:67:1c:9e:2e:a1:c0:18:89: 56:3a:55:22:ad:f5:43:59:82:00:fe:47:b9:6e:3a: b6:d5:f0:19:38:03:6f:83:01:68:e9:fb:c5:74:eb: 92:83:6f:f9:de:7e:a2:32:84:1a:e6:26:21:3d:37: 76:f1:06:8e:2c:f2:5a:c2:06:0c:18:3f:90:43:2f: df:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:85:4D:92:37:A9:8B:9C:CE:77:5F:EA:2E:17:7E:A8:AE:96:0B:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl X509v3 Authority Key Identifier: keyid:B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer sbgp-ipAddrBlock: critical IPv4: 173.243.176.0/20 199.96.120.0/22 204.89.253.0/24 216.249.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:39:41:5e:33:df:a6:bb:d3:d4:d3:f5:60:40:b5:81:1a:67: 4e:bf:cb:0e:ec:a0:1d:a3:08:c1:47:e4:34:7e:4c:41:dc:b0: 41:76:3f:48:bf:87:b3:df:aa:21:2f:b2:fd:27:c3:5b:0e:af: ab:9a:e1:7c:c4:9a:0e:79:aa:ef:ca:e2:2a:b4:0b:71:39:ed: 12:2b:84:dc:d6:c2:2f:a5:41:44:7d:6d:b1:31:bf:c1:44:88: 59:42:c2:ee:12:16:75:50:a1:d3:d7:f8:43:b3:48:9f:8d:de: 75:87:9b:cf:92:72:a9:bf:9e:3e:b3:af:80:e0:05:ed:1d:32: 71:c2:74:b6:87:97:b5:30:29:07:93:2a:bb:ec:99:a6:30:de: 44:2c:1f:f3:da:b5:b3:ca:67:d3:10:a8:49:67:4f:2e:80:0d: de:7f:ff:79:80:c2:ae:b2:5e:95:09:04:27:75:08:6c:9a:46: 29:1a:50:70:26:56:f9:76:9e:5b:c8:d3:e4:f3:8a:91:7e:34: c1:eb:f8:f1:c5:88:aa:21:92:d1:5b:1f:ff:4d:d9:09:58:00: d7:46:ba:a9:12:6c:10:38:a5:54:ce:3b:ce:86:54:a7:d2:22: 0d:01:dc:a9:d6:68:a4:70:47:31:84:5b:10:9d:b7:a8:d0:ab: b5:21:9b:a9 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE1eGlK8BFEwXDRTy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VhYmE4MzAtMGYxNS00YzM2LTk5YjAtMGMxNGJmN2Vi ZjllMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk Mjc2OTA1NGUtNmRmYi00YWZjLTkwYTAtNzY4NDgzZjY2N2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNNhS9mF0zPAY9rwO2pbqIeh0leISapMEPFa vMe2SigxXcEGet+cqJpY4uBC1HG6haGD24wTe+2tNZuZHX+IchslpADl6L6fpf1+ 1RSYcI4L63QwvxsbOhTP0CMxHghfkwbheX5kUSYRYq9jyJOQQHijyzI6m+me1uRZ 8hgQlBb2O8E9QRTsYmpThDRR5rk1xUA0Baqitkc34pS3eu/coomCBc77c4HuK47V 0lNHDwOYFPuhvMKXecvFZxyeLqHAGIlWOlUirfVDWYIA/ke5bjq21fAZOANvgwFo 6fvFdOuSg2/53n6iMoQa5iYhPTd28QaOLPJawgYMGD+QQy/ftwIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFNmFTZI3qYuczndf6i4XfqiulgvgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWFi YTgzMC0wZjE1LTRjMzYtOTliMC0wYzE0YmY3ZWJmOWUvOWRhYjJmZjQtNmU0Ny0z ZTEyLTlhOTYtNGNkNzBiNGU4ZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2VhYmE4MzAtMGYxNS00YzM2LTk5 YjAtMGMxNGJmN2ViZjllLzNlYWJhODMwLTBmMTUtNGMzNi05OWIwLTBjMTRiZjdl YmY5ZS5jcmwwHwYDVR0jBBgwFoAUtkIn1zQmnRVMSxbhUm+PwQP6MTMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWFiYTgzMC0wZjE1LTRjMzYtOTliMC0wYzE0 YmY3ZWJmOWUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQErfOwAwQC x2B4AwQAzFn9AwQF2PlAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAE5QV4z36a709TT9WBAtYEaZ06/yw7s oB2jCMFH5DR+TEHcsEF2P0i/h7PfqiEvsv0nw1sOr6ua4XzEmg55qu/K4iq0C3E5 7RIrhNzWwi+lQUR9bbExv8FEiFlCwu4SFnVQodPX+EOzSJ+N3nWHm8+Scqm/nj6z r4DgBe0dMnHCdLaHl7UwKQeTKrvsmaYw3kQsH/PatbPKZ9MQqElnTy6ADd5//3mA wq6yXpUJBCd1CGyaRikaUHAmVvl2nlvI0+TzipF+NMHr+PHFiKohktFbH/9N2QlY ANdGuqkSbBA4pVTOO86GVKfSIg0B3KnWaKRwRzGEWxCdt6jQq7Uhm6k= -----END CERTIFICATE-----Generated at Fri Apr 17 19:56:12 2026 by rpki-client