$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/8f41887f-e02f-3b1f-9011-a36a71b35c82.roa File: 8f41887f-e02f-3b1f-9011-a36a71b35c82.roa (raw, json) Hash identifier: LzOfhQImvVIEOoWSjj1aGOoTbg2tnNeoPLWwybKHtlQ= Subject key identifier: A8:09:90:32:1C:D5:6F:77:C7:00:1E:0B:EC:B8:F7:78:83:FD:E8:47 Certificate issuer: /CN=688a78fa-2d94-478e-900a-a1fec661b769 Certificate serial: 010D0C9F4328584D60E4F6F6EA1A8A3D5B46F240 Authority key identifier: 90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/8f41887f-e02f-3b1f-9011-a36a71b35c82.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 58580 IP address blocks: 199.101.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e4:f6:f6:ea:1a:8a:3d:5b:46:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688a78fa-2d94-478e-900a-a1fec661b769 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=9564cbbe-4741-45b4-9d01-b741edc5af8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4b:bf:14:91:ca:93:83:96:2c:3b:d2:53:dd: d7:ad:f6:36:51:b6:79:b7:56:48:07:f4:b0:80:1e: 82:8d:92:4d:65:d1:60:a6:05:c7:86:84:89:fc:06: fd:22:1e:87:95:18:c3:d2:f6:92:08:bc:fc:59:5c: 95:b9:67:e1:8e:e0:f9:84:ee:4c:46:d1:8f:98:f9: 7a:8b:ba:f9:3d:79:bf:97:fd:dc:fe:bd:49:ed:72: 95:f4:88:01:d1:01:0a:c8:8b:c3:4d:35:30:a0:de: 1c:1a:54:42:94:0d:96:99:3f:eb:99:a7:b9:67:e1: 2c:91:8f:85:a5:00:a9:0e:fd:7f:3d:89:d7:6e:f2: f6:5d:e3:2b:c0:54:04:53:f5:71:50:8c:ed:2e:57: dc:43:5a:eb:db:7b:85:84:4f:8e:10:66:33:af:bf: e2:c7:9d:8a:df:d3:fa:1c:57:03:02:22:11:99:77: 2b:d0:38:0c:be:68:59:0c:bb:9b:e7:07:2e:40:b2: d7:10:1e:8f:cd:c5:1e:a5:11:d5:1d:bd:0b:6e:19: 83:ff:ec:fc:21:66:48:ad:a8:7c:95:84:b7:9e:81: 26:12:cb:b8:3a:fb:29:19:76:64:b5:df:82:93:91: 6d:f7:fe:42:60:fa:f0:bf:4b:9e:de:be:bb:10:02: 3c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:09:90:32:1C:D5:6F:77:C7:00:1E:0B:EC:B8:F7:78:83:FD:E8:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/8f41887f-e02f-3b1f-9011-a36a71b35c82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl X509v3 Authority Key Identifier: keyid:90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer sbgp-ipAddrBlock: critical IPv4: 199.101.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:da:99:92:ad:f1:c7:e8:53:2f:fd:55:c9:1a:d3:03:44:ac: f0:8c:ee:04:3f:1f:94:fd:3c:aa:2b:4e:53:ac:93:e0:c1:75: ff:d2:a8:c6:1c:c7:31:25:53:4a:5d:6b:cf:e6:b8:21:2c:d2: b8:b2:7b:61:da:78:64:74:ee:d8:40:c1:3b:66:fe:63:99:bd: 22:8d:b9:25:2d:37:aa:81:a3:e1:89:80:2f:ad:e4:64:37:9a: 03:1c:34:15:ca:a3:6f:04:1a:d6:9e:94:29:9c:a9:ba:11:30: 55:34:c8:bf:80:e1:65:89:a9:87:64:80:81:05:73:ea:d1:95: c3:48:2a:ab:e2:04:25:36:a9:9d:53:52:9b:99:b5:4c:02:7e: 0f:91:79:ae:92:cd:3c:cf:a8:ab:6c:c1:b7:c6:5b:8c:5c:55: 3a:b3:a2:38:68:c7:a6:2b:2c:7d:a0:37:72:5e:86:ed:f1:15: 2e:25:60:3b:79:55:02:8e:f3:8a:ca:99:9e:46:d2:35:72:23: 95:f9:f7:fc:1c:c9:d2:d2:b7:48:80:bb:69:c0:24:d8:5f:df: 43:ee:97:ea:ae:98:c4:09:f1:b9:08:bc:4a:bc:38:b3:04:3a: 4d:70:0d:28:e3:10:33:a1:e4:8a:14:83:8c:03:69:6a:80:57: 87:fb:da:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5Pb26hqKPVtG8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4YTc4ZmEtMmQ5NC00NzhlLTkwMGEtYTFmZWM2NjFi NzY5MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk OTU2NGNiYmUtNDc0MS00NWI0LTlkMDEtYjc0MWVkYzVhZjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEu/FJHKk4OWLDvSU93XrfY2UbZ5t1ZIB/Sw gB6CjZJNZdFgpgXHhoSJ/Ab9Ih6HlRjD0vaSCLz8WVyVuWfhjuD5hO5MRtGPmPl6 i7r5PXm/l/3c/r1J7XKV9IgB0QEKyIvDTTUwoN4cGlRClA2WmT/rmae5Z+EskY+F pQCpDv1/PYnXbvL2XeMrwFQEU/VxUIztLlfcQ1rr23uFhE+OEGYzr7/ix52K39P6 HFcDAiIRmXcr0DgMvmhZDLub5wcuQLLXEB6PzcUepRHVHb0LbhmD/+z8IWZIrah8 lYS3noEmEsu4OvspGXZktd+Ck5Ft9/5CYPrwv0ue3r67EAI8nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgJkDIc1W93xwAeC+y493iD/ehHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhh NzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZlYzY2MWI3NjkvOGY0MTg4N2YtZTAyZi0z YjFmLTkwMTEtYTM2YTcxYjM1YzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg4YTc4ZmEtMmQ5NC00NzhlLTkw MGEtYTFmZWM2NjFiNzY5LzY4OGE3OGZhLTJkOTQtNDc4ZS05MDBhLWExZmVjNjYx Yjc2OS5jcmwwHwYDVR0jBBgwFoAUkFvoLBBymwQG9cpaFkwist9khrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhhNzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZl YzY2MWI3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2VsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3amZKt8cfoUy/9Vcka0wNErPCM7gQ/H5T9PKorTlOsk+DBdf/SqMYc xzElU0pda8/muCEs0riye2HaeGR07thAwTtm/mOZvSKNuSUtN6qBo+GJgC+t5GQ3 mgMcNBXKo28EGtaelCmcqboRMFU0yL+A4WWJqYdkgIEFc+rRlcNIKqviBCU2qZ1T UpuZtUwCfg+Rea6SzTzPqKtswbfGW4xcVTqzojhox6YrLH2gN3Jehu3xFS4lYDt5 VQKO84rKmZ5G0jVyI5X59/wcydLSt0iAu2nAJNhf30Pul+qumMQJ8bkIvEq8OLME Ok1wDSjjEDOh5IoUg4wDaWqAV4f72oI= -----END CERTIFICATE-----Generated at Fri Apr 17 19:56:37 2026 by rpki-client