$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/88ec12f6-7a05-30e1-ba64-f073e2a900fb.roa File: 88ec12f6-7a05-30e1-ba64-f073e2a900fb.roa (raw, json) Hash identifier: sFh9388lxRCjkPxOQ37mDVfPmLlay94JbYJUcAaaffs= Subject key identifier: CA:D6:25:BF:18:13:64:51:08:FE:77:87:18:A5:E4:8B:E7:4D:8B:16 Certificate issuer: /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Certificate serial: 010D0C9F4328584D55BA3CF8A9840ACCF6EE6FEC Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/88ec12f6-7a05-30e1-ba64-f073e2a900fb.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 17017 IP address blocks: 168.245.136.0/24 maxlen: 24 208.70.144.0/21 maxlen: 21 2604:7fc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:3c:f8:a9:84:0a:cc:f6:ee:6f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=96f70d96-ff48-4ee2-b916-71e0157bf6b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cb:e8:8c:e5:10:70:4e:2f:64:9f:e1:94:09: 7d:02:ac:17:56:1b:f5:7a:69:f7:81:c3:7c:5e:7f: a0:93:8d:c1:cb:35:0f:be:d0:3f:b0:0b:e7:4f:a6: 38:18:9e:79:70:93:94:3c:4e:df:d0:10:8d:e3:a3: 58:72:88:1f:77:50:ce:36:be:d6:f3:ea:6d:5e:83: a3:eb:99:e8:da:b1:9b:c7:08:65:59:90:09:40:1c: 8a:87:e3:09:ae:72:c4:6c:41:52:53:30:cb:83:d6: 0d:9a:53:0b:cf:4f:8e:90:03:e8:be:88:15:f6:80: 93:84:e9:fd:78:64:91:d5:cd:e3:7c:b5:41:82:23: fb:81:31:f5:36:75:7b:b6:a2:6e:84:7d:69:38:04: 1d:b7:28:6b:ed:3e:12:01:ac:41:d7:a0:d9:f7:72: 21:eb:6c:21:a4:28:c0:c5:f8:56:78:4d:a1:58:0e: b8:66:9b:7a:8e:fb:96:11:b7:9e:d1:ae:83:37:48: ad:32:d6:9f:37:95:46:d4:4e:71:7a:4f:b5:08:cb: 6f:e1:40:8e:4e:7e:71:84:34:09:18:e1:65:3f:8c: c0:cb:f1:a3:bf:dd:a3:bc:21:36:f6:ea:66:7e:d7: dc:d2:ec:5e:10:02:da:5e:54:71:25:90:61:cb:c9: 6e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D6:25:BF:18:13:64:51:08:FE:77:87:18:A5:E4:8B:E7:4D:8B:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/88ec12f6-7a05-30e1-ba64-f073e2a900fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl X509v3 Authority Key Identifier: keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer sbgp-ipAddrBlock: critical IPv4: 168.245.136.0/24 208.70.144.0/21 IPv6: 2604:7fc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:5d:65:1b:09:e0:4e:58:f2:66:f5:65:b1:86:98:bf:f3:c2: 0c:37:49:49:ac:49:1b:0a:68:0f:76:5a:67:3d:c7:3b:cb:23: 37:96:af:a5:06:c0:89:d6:f2:f6:17:12:bd:65:d4:6b:f3:ba: 6b:0b:3f:d9:f4:d0:5d:8c:9e:7e:ad:65:69:56:1d:b7:75:09: db:b1:ac:8e:8f:d7:93:bf:9c:08:b0:35:59:58:1d:44:84:6b: 11:e8:0f:b9:51:88:e5:cc:49:98:b4:7b:af:e0:c7:d2:8b:2f: cc:e0:76:c6:4a:d5:f1:f1:68:8d:68:9e:82:f9:c6:69:e5:f1: da:c4:aa:21:9c:8d:d0:ae:a3:2e:79:ab:df:41:65:58:16:50: 09:96:15:c8:7c:2e:57:84:71:f3:ee:1c:4e:d4:d7:6e:ea:1c: 40:45:fe:1a:0e:27:2f:6f:ab:c2:1b:f4:d9:1a:82:95:89:d0: 70:9c:f3:73:af:f0:20:74:b5:c3:58:94:02:a5:8e:81:7b:ad: fe:17:61:60:9f:3b:93:7b:ed:6c:d8:7d:95:d0:b0:5f:8c:0d: 2c:c4:ba:1c:06:65:62:52:4a:26:de:f9:2f:c7:28:ba:e9:a9: bc:d9:10:4f:25:11:8b:ed:c0:89:4b:0f:d8:d9:de:51:bf:60: 08:a8:bc:70 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE1Vujz4qYQKzPbub+wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0M2FkZmQtZjZlNC00NTA0LTg2ZjAtMmVmYWRmOWQ0 ZDIxMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk OTZmNzBkOTYtZmY0OC00ZWUyLWI5MTYtNzFlMDE1N2JmNmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucvojOUQcE4vZJ/hlAl9AqwXVhv1emn3gcN8 Xn+gk43ByzUPvtA/sAvnT6Y4GJ55cJOUPE7f0BCN46NYcogfd1DONr7W8+ptXoOj 65no2rGbxwhlWZAJQByKh+MJrnLEbEFSUzDLg9YNmlMLz0+OkAPovogV9oCThOn9 eGSR1c3jfLVBgiP7gTH1NnV7tqJuhH1pOAQdtyhr7T4SAaxB16DZ93Ih62whpCjA xfhWeE2hWA64Zpt6jvuWEbee0a6DN0itMtafN5VG1E5xek+1CMtv4UCOTn5xhDQJ GOFlP4zAy/Gjv92jvCE29upmftfc0uxeEALaXlRxJZBhy8luqQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFMrWJb8YE2RRCP53hxil5IvnTYsWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQz YWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZhZGY5ZDRkMjEvODhlYzEyZjYtN2EwNS0z MGUxLWJhNjQtZjA3M2UyYTkwMGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGQ0M2FkZmQtZjZlNC00NTA0LTg2 ZjAtMmVmYWRmOWQ0ZDIxLzRkNDNhZGZkLWY2ZTQtNDUwNC04NmYwLTJlZmFkZjlk NGQyMS5jcmwwHwYDVR0jBBgwFoAUHLPKVHX2AJyrqb/kFUAJQKHvOZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQzYWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZh ZGY5ZDRkMjEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAqPWIAwQD 0EaQMA0EAgACMAcDBQAmBH/AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKtdZRsJ4E5Y8mb1ZbGGmL/zwgw3 SUmsSRsKaA92Wmc9xzvLIzeWr6UGwInW8vYXEr1l1GvzumsLP9n00F2Mnn6tZWlW Hbd1CduxrI6P15O/nAiwNVlYHUSEaxHoD7lRiOXMSZi0e6/gx9KLL8zgdsZK1fHx aI1onoL5xmnl8drEqiGcjdCuoy55q99BZVgWUAmWFch8LleEcfPuHE7U127qHEBF /hoOJy9vq8Ib9NkagpWJ0HCc83Ov8CB0tcNYlAKljoF7rf4XYWCfO5N77WzYfZXQ sF+MDSzEuhwGZWJSSibe+S/HKLrpqbzZEE8lEYvtwIlLD9jZ3lG/YAiovHA= -----END CERTIFICATE-----Generated at Sat Apr 18 06:05:23 2026 by rpki-client