$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/425f0c5e-768d-395f-a459-8106dd940da2.roa File: 425f0c5e-768d-395f-a459-8106dd940da2.roa (raw, json) Hash identifier: kOAj7xCLxqTHNp/f0nTSDRJCrTDB8h8mVYnTkk80/p0= Subject key identifier: 83:D0:2C:54:32:B9:13:31:E4:22:23:22:C8:74:19:14:A8:44:24:A7 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584D6D7510C41FD5DE3E6EE44B00 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/425f0c5e-768d-395f-a459-8106dd940da2.roa Signing time: Tue 07 Apr 2026 13:00:30 +0000 ROA not before: Tue 07 Apr 2026 13:00:30 +0000 ROA not after: Mon 06 Jul 2026 13:00:30 +0000 asID: 212238 IP address blocks: 198.145.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:75:10:c4:1f:d5:de:3e:6e:e4:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Apr 7 13:00:30 2026 GMT Not After : Jul 6 13:00:30 2026 GMT Subject: CN=ce35dafa-6bb9-404a-9ce0-9a4a79aa736e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ba:30:0a:bf:f7:7a:8f:29:b7:8c:08:f1:4d: ec:4d:41:bc:3b:7b:20:3a:f5:b9:0c:3e:4a:17:df: 3d:8e:7a:b9:f0:fc:b7:cb:63:d9:42:4f:77:56:26: 50:41:1e:65:19:f0:09:06:0d:c4:98:cf:b8:6b:27: 26:1d:75:c8:72:f3:d4:b0:74:af:b4:3d:c7:06:df: b2:9b:c1:c2:7c:d3:c5:b9:3a:71:fb:18:8f:0d:54: 74:b7:8a:4c:1c:1c:ea:2d:2b:19:44:c7:75:98:af: 3b:6e:6e:e9:e2:8f:7b:d9:6b:15:f0:07:f4:6e:47: df:63:86:98:c6:8c:9d:48:16:3d:e7:80:1a:9e:94: 5c:66:a4:2a:74:c0:cb:b4:2d:f8:c7:d6:23:30:fc: e4:8d:57:f7:0c:88:65:81:a1:7c:28:bc:9c:0c:6a: ca:fe:f2:ea:2b:e3:2d:48:32:d2:11:35:a5:ae:87: a5:c1:fc:fd:38:b7:de:b9:b7:2c:bb:0b:01:28:33: b3:d0:6f:7d:e2:51:78:84:8e:8d:d6:41:d9:52:50: 72:dd:24:e3:6d:bc:ac:9b:33:1a:df:1d:70:b0:eb: d4:e7:ad:6d:59:0a:ed:e1:e4:77:ab:c6:84:3a:d3: 33:de:1e:bf:e0:c5:86:72:5a:28:f9:ef:8a:8c:3c: 8e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D0:2C:54:32:B9:13:31:E4:22:23:22:C8:74:19:14:A8:44:24:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/425f0c5e-768d-395f-a459-8106dd940da2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:83:a7:6c:6d:8d:f8:0b:cd:f7:6f:06:04:94:97:d5:50:b7: db:5b:8f:b8:8c:82:82:73:33:a3:92:b5:dc:62:ea:f5:f3:d8: bc:7e:3c:25:d1:c0:ac:56:df:32:a0:46:0b:e5:b0:c8:61:d3: ac:29:27:af:1d:c7:3c:43:cd:d7:8a:9b:ee:dd:ff:0b:28:aa: d9:ad:6f:f4:cd:eb:2e:ea:6a:7f:d4:b1:ab:ad:ee:20:01:cf: 0b:c2:fa:77:2f:4a:bd:19:86:4f:cd:96:a4:9b:bc:a7:37:bb: c2:27:b7:a4:b3:f2:fd:bb:76:8f:2f:50:ef:7e:a9:b2:8b:1b: e3:5f:34:e6:ec:db:a0:f7:3c:28:d9:22:46:96:58:29:a1:ce: ad:53:d9:43:76:8e:ae:19:7f:d9:c8:44:2a:d2:e2:e6:1f:8a: 1f:55:2f:af:64:d9:c5:c8:2b:23:9b:06:f8:dd:fb:45:11:76: f2:6e:19:fb:21:68:4a:27:f1:22:d2:4e:42:6d:95:07:b7:94: 4c:42:15:c5:3e:14:1e:0c:ff:86:ce:5c:d3:a6:ec:03:7c:3e: 53:04:9e:1b:f6:6a:e5:ba:84:d2:75:78:60:81:e9:5a:f6:b3: 0d:8d:f1:3e:fa:6b:ed:84:8a:b6:01:d2:6d:ac:40:6f:1e:35: 9b:5b:72:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1tdRDEH9XePm7kSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI2MDQwNzEzMDAzMFoXDTI2MDcwNjEzMDAzMFowLzEtMCsGA1UEAxMk Y2UzNWRhZmEtNmJiOS00MDRhLTljZTAtOWE0YTc5YWE3MzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubowCr/3eo8pt4wI8U3sTUG8O3sgOvW5DD5K F989jnq58Py3y2PZQk93ViZQQR5lGfAJBg3EmM+4aycmHXXIcvPUsHSvtD3HBt+y m8HCfNPFuTpx+xiPDVR0t4pMHBzqLSsZRMd1mK87bm7p4o972WsV8Af0bkffY4aY xoydSBY954AanpRcZqQqdMDLtC34x9YjMPzkjVf3DIhlgaF8KLycDGrK/vLqK+Mt SDLSETWlroelwfz9OLfeubcsuwsBKDOz0G994lF4hI6N1kHZUlBy3STjbbysmzMa 3x1wsOvU561tWQrt4eR3q8aEOtMz3h6/4MWGcloo+e+KjDyO4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPQLFQyuRMx5CIjIsh0GRSoRCSnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNDI1ZjBjNWUtNzY4ZC0z OTVmLWE0NTktODEwNmRkOTQwZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpGbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANWDp2xtjfgLzfdvBgSUl9VQt9tbj7iMgoJzM6OStdxi6vXz2Lx+PCXR wKxW3zKgRgvlsMhh06wpJ68dxzxDzdeKm+7d/wsoqtmtb/TN6y7qan/Usaut7iAB zwvC+ncvSr0Zhk/NlqSbvKc3u8Int6Sz8v27do8vUO9+qbKLG+NfNObs26D3PCjZ IkaWWCmhzq1T2UN2jq4Zf9nIRCrS4uYfih9VL69k2cXIKyObBvjd+0URdvJuGfsh aEon8SLSTkJtlQe3lExCFcU+FB4M/4bOXNOm7AN8PlMEnhv2auW6hNJ1eGCB6Vr2 sw2N8T76a+2EirYB0m2sQG8eNZtbck4= -----END CERTIFICATE-----Generated at Fri Apr 17 19:39:27 2026 by rpki-client