$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f1ab6abd-360d-358e-ad42-6a4bdd69f7a3.roa File: f1ab6abd-360d-358e-ad42-6a4bdd69f7a3.roa (raw, json) Hash identifier: xmhck1bY8HR9vof7nyC5Dzk4rIwQTUw3kceDLNsPk6Q= Subject key identifier: 4D:CD:9C:D7:64:85:96:10:BA:55:6A:11:AB:95:DA:3C:73:C3:6D:2A Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584D80FFEA48C2EDCE0F31B60100 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f1ab6abd-360d-358e-ad42-6a4bdd69f7a3.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 9009 IP address blocks: 198.145.157.0/24 maxlen: 24 209.20.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:ea:48:c2:ed:ce:0f:31:b6:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=ba71631c-ddf3-4e3c-bc5b-d7277527f86a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:62:8c:b6:71:c4:7c:15:bc:ca:ab:0e:03:0b: 4d:dd:05:0b:d3:18:2e:ef:86:ee:b0:bc:eb:e3:29: ee:8c:21:91:38:68:a2:1d:47:ea:d4:52:77:60:05: 1d:45:39:d4:18:87:1b:0c:48:7c:87:fb:21:85:50: 92:d9:68:fc:df:62:13:ad:2e:e2:03:d7:32:c1:a1: 56:61:b2:2b:45:47:62:2d:d1:d5:05:36:aa:5a:f6: ca:5c:f2:c1:a4:d9:d7:18:33:b7:04:53:0b:6f:8a: 74:a5:1b:a6:26:5c:69:ad:2d:c0:b5:4f:43:26:1a: 87:d6:65:38:72:98:7f:89:fd:b9:d7:03:27:0c:be: 21:82:8b:54:b3:3e:de:c2:df:92:b0:91:16:0c:e3: c7:5c:20:0d:70:f0:50:25:5c:27:b2:0e:f5:12:9f: 4d:b6:87:5c:4e:0f:9b:94:df:60:ac:17:16:aa:40: 69:b5:f7:40:37:b7:0a:8f:8c:6d:b7:fe:04:66:cc: e1:ca:85:4d:ac:3b:63:3f:15:d4:bc:e1:a9:ea:e3: bb:58:32:68:ae:2b:8f:47:db:f0:e3:67:87:75:b6: 3d:1a:66:af:08:16:ce:14:a5:73:bb:ef:8c:66:09: 07:da:a4:36:2c:24:55:2e:d7:9a:c6:51:66:e3:3e: a4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CD:9C:D7:64:85:96:10:BA:55:6A:11:AB:95:DA:3C:73:C3:6D:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f1ab6abd-360d-358e-ad42-6a4bdd69f7a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.157.0/24 209.20.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e1:0c:d5:81:5f:2e:14:28:e6:37:15:45:f2:4f:9c:03:7f:8c: ff:20:30:00:30:7f:85:d1:4c:a6:f7:8e:c3:3f:bc:76:a5:b5: 21:2e:00:61:1c:42:be:b9:74:41:95:aa:43:63:15:ee:12:a4: ed:53:28:b8:7b:0e:8c:cf:73:3a:28:1e:f6:a2:c3:65:90:ee: 55:a2:16:05:1b:b8:2d:1d:1c:48:9c:d4:e7:ea:a8:d6:01:7b: 92:87:b7:3a:8c:30:66:3b:76:4b:09:03:2e:0c:60:58:fb:c1: e4:cd:17:ab:7b:d6:05:7d:6e:65:88:af:00:4d:6e:f6:b6:0a: 74:6f:06:9a:76:de:41:99:a9:f4:11:24:55:cd:56:04:bd:2b: a6:82:74:04:2c:1e:03:10:e0:ee:00:b9:0b:9f:1f:81:42:de: f5:58:cc:5b:ec:07:aa:a1:57:60:be:1a:e1:13:53:f0:6d:02: fe:02:7a:33:e3:9a:de:2a:43:12:ff:6a:1e:9d:d7:25:d3:0a: a7:2f:bd:36:5f:be:81:e8:56:5e:fc:93:0a:da:06:07:02:66: 84:94:3e:9f:dd:d9:ce:8b:28:ca:60:de:30:2b:c8:77:61:26: 55:c8:20:e5:02:d2:1d:f7:66:97:41:ad:bf:06:f2:32:7b:c9: bd:e0:a8:9e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2A/+pIwu3ODzG2AQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk YmE3MTYzMWMtZGRmMy00ZTNjLWJjNWItZDcyNzc1MjdmODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWKMtnHEfBW8yqsOAwtN3QUL0xgu74busLzr 4ynujCGROGiiHUfq1FJ3YAUdRTnUGIcbDEh8h/shhVCS2Wj832ITrS7iA9cywaFW YbIrRUdiLdHVBTaqWvbKXPLBpNnXGDO3BFMLb4p0pRumJlxprS3AtU9DJhqH1mU4 cph/if251wMnDL4hgotUsz7ewt+SsJEWDOPHXCANcPBQJVwnsg71Ep9NtodcTg+b lN9grBcWqkBptfdAN7cKj4xtt/4EZszhyoVNrDtjPxXUvOGp6uO7WDJoriuPR9vw 42eHdbY9GmavCBbOFKVzu++MZgkH2qQ2LCRVLteaxlFm4z6kyQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFE3NnNdkhZYQulVqEauV2jxzw20qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvZjFhYjZhYmQtMzYwZC0z NThlLWFkNDItNmE0YmRkNjlmN2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxpGdAwQA 0RSEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAOEM1YFfLhQo5jcVRfJPnAN/jP8gMAAwf4XRTKb3jsM/vHal tSEuAGEcQr65dEGVqkNjFe4SpO1TKLh7DozPczooHvaiw2WQ7lWiFgUbuC0dHEic 1OfqqNYBe5KHtzqMMGY7dksJAy4MYFj7weTNF6t71gV9bmWIrwBNbva2CnRvBpp2 3kGZqfQRJFXNVgS9K6aCdAQsHgMQ4O4AuQufH4FC3vVYzFvsB6qhV2C+GuETU/Bt Av4CejPjmt4qQxL/ah6d1yXTCqcvvTZfvoHoVl78kwraBgcCZoSUPp/d2c6LKMpg 3jAryHdhJlXIIOUC0h33ZpdBrb8G8jJ7yb3gqJ4= -----END CERTIFICATE-----Generated at Fri Apr 17 19:25:21 2026 by rpki-client