$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/84b980dc-1b89-371a-8343-16c5dac99a40.roa File: 84b980dc-1b89-371a-8343-16c5dac99a40.roa (raw, json) Hash identifier: unOjRjduimFcYwgtWfQ5eXgjBFjwNiZ1F967+2VmTrQ= Subject key identifier: A6:49:7D:E7:DC:7E:E4:EC:83:A3:44:EF:D4:14:F1:66:59:B6:AC:90 Certificate issuer: /CN=688a78fa-2d94-478e-900a-a1fec661b769 Certificate serial: 010D0C9F4328584D60E4FDB47438606E6974A900 Authority key identifier: 90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/84b980dc-1b89-371a-8343-16c5dac99a40.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 58580 IP address blocks: 168.245.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e4:fd:b4:74:38:60:6e:69:74:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688a78fa-2d94-478e-900a-a1fec661b769 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=23a2557f-c512-49fb-9657-1024c279e834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a4:5b:6a:a3:53:11:9a:8f:2f:7f:e8:ed:10: 89:cb:60:38:c8:00:1e:e4:91:1d:38:c4:f9:8b:0f: 64:0c:55:9d:2f:30:74:4e:e0:54:2c:a9:fd:04:76: d3:6a:38:ba:9f:80:0d:9e:bc:62:8c:1d:2b:1d:6b: 4b:e0:9e:52:6b:00:3f:08:f6:21:e9:97:af:64:98: d5:e0:2b:1c:c5:5e:2e:4c:3e:74:ce:22:f3:52:0b: 09:c8:be:d3:ab:4b:00:1a:37:a6:fa:ab:26:df:83: 12:c8:2e:53:4b:66:e5:0c:9b:bf:b3:80:5e:2e:b6: e4:60:ab:c7:fe:ac:7b:3c:d9:35:ea:64:1c:9b:4e: 75:48:75:0e:5a:61:9a:1c:e2:c7:a9:2b:28:08:99: b1:f2:28:14:d0:5f:99:40:a4:22:f8:47:98:85:cc: c1:27:27:d8:cb:c1:1b:0a:fe:69:bf:f4:65:e2:e0: e4:f4:1e:0b:76:72:75:3b:b7:e1:24:45:1c:c7:82: a0:28:9f:ce:bc:47:b7:c0:57:c2:7c:d2:19:56:79: 2b:21:0c:9c:d8:93:ee:90:96:4f:c0:25:00:82:32: f4:12:4f:47:c3:45:c6:27:60:5f:9a:97:32:1e:80: 63:18:7f:1f:5c:80:3d:f1:8c:bc:0f:78:7e:cd:03: 48:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:49:7D:E7:DC:7E:E4:EC:83:A3:44:EF:D4:14:F1:66:59:B6:AC:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/84b980dc-1b89-371a-8343-16c5dac99a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl X509v3 Authority Key Identifier: keyid:90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer sbgp-ipAddrBlock: critical IPv4: 168.245.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:9c:3a:b5:57:b0:ab:97:63:51:74:2d:bb:52:1a:cc:87:9e: d4:4f:0c:92:b5:51:92:e1:b9:80:57:7a:69:97:4c:9c:4d:d4: eb:10:81:ba:5b:0e:d8:7f:8d:6c:4b:6d:f8:21:f9:68:41:1e: ee:fa:59:30:7c:87:1c:4e:1e:ad:dd:c1:e5:b3:fc:dc:2e:b8: d9:c9:99:59:c0:94:e4:c9:6a:3e:21:7b:f8:6a:26:d9:b8:23: fc:e6:6c:09:a3:10:a1:df:e9:de:9e:45:22:43:7a:5c:c2:27: 0a:d9:38:7f:b2:8c:63:5b:49:e2:d7:f7:3b:22:f6:8c:d4:e9: a3:ae:ec:1a:90:a7:c4:8d:fb:eb:2d:f3:64:f8:c2:30:72:d1: d8:e8:5a:4b:c9:09:0f:60:e1:68:b8:99:aa:b9:d4:2f:78:49: 48:12:3b:0f:db:f8:e8:6e:a2:88:87:67:4a:55:c5:df:c2:a3: 6c:28:5f:1a:60:0c:57:e2:c6:07:4e:98:05:7b:85:69:49:9f: d2:a2:a0:84:f4:5b:bb:0b:31:e5:7e:6d:fa:8c:ca:46:e7:08: 09:2c:f1:c4:d6:9d:60:18:1e:f9:cc:a7:aa:f6:cd:89:3b:09: 8e:74:4a:2e:2e:cd:a7:bb:9c:e5:72:a1:f3:02:61:5d:60:1a: 8e:a2:71:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5P20dDhgbml0qQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4YTc4ZmEtMmQ5NC00NzhlLTkwMGEtYTFmZWM2NjFi NzY5MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk MjNhMjU1N2YtYzUxMi00OWZiLTk2NTctMTAyNGMyNzllODM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qRbaqNTEZqPL3/o7RCJy2A4yAAe5JEdOMT5 iw9kDFWdLzB0TuBULKn9BHbTaji6n4ANnrxijB0rHWtL4J5SawA/CPYh6ZevZJjV 4CscxV4uTD50ziLzUgsJyL7Tq0sAGjem+qsm34MSyC5TS2blDJu/s4BeLrbkYKvH /qx7PNk16mQcm051SHUOWmGaHOLHqSsoCJmx8igU0F+ZQKQi+EeYhczBJyfYy8Eb Cv5pv/Rl4uDk9B4LdnJ1O7fhJEUcx4KgKJ/OvEe3wFfCfNIZVnkrIQyc2JPukJZP wCUAgjL0Ek9Hw0XGJ2BfmpcyHoBjGH8fXIA98Yy8D3h+zQNICQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZJfefcfuTsg6NE79QU8WZZtqyQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhh NzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZlYzY2MWI3NjkvODRiOTgwZGMtMWI4OS0z NzFhLTgzNDMtMTZjNWRhYzk5YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg4YTc4ZmEtMmQ5NC00NzhlLTkw MGEtYTFmZWM2NjFiNzY5LzY4OGE3OGZhLTJkOTQtNDc4ZS05MDBhLWExZmVjNjYx Yjc2OS5jcmwwHwYDVR0jBBgwFoAUkFvoLBBymwQG9cpaFkwist9khrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhhNzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZl YzY2MWI3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqPXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCcOrVXsKuXY1F0LbtSGsyHntRPDJK1UZLhuYBXemmXTJxN1OsQgbpb Dth/jWxLbfgh+WhBHu76WTB8hxxOHq3dweWz/NwuuNnJmVnAlOTJaj4he/hqJtm4 I/zmbAmjEKHf6d6eRSJDelzCJwrZOH+yjGNbSeLX9zsi9ozU6aOu7BqQp8SN++st 82T4wjBy0djoWkvJCQ9g4Wi4maq51C94SUgSOw/b+OhuooiHZ0pVxd/Co2woXxpg DFfixgdOmAV7hWlJn9KioIT0W7sLMeV+bfqMykbnCAks8cTWnWAYHvnMp6r2zYk7 CY50Si4uzae7nOVyofMCYV1gGo6icTs= -----END CERTIFICATE-----Generated at Fri Apr 17 20:02:50 2026 by rpki-client