$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/657752d5-7987-30fd-a6c9-761b35585226.roa File: 657752d5-7987-30fd-a6c9-761b35585226.roa (raw, json) Hash identifier: bG0LnefhJWWz4u1RPjKhpTngoFMdUEh4ELErrFy2Alo= Subject key identifier: B4:8D:F0:F6:82:4A:5C:49:1F:E6:17:D4:A8:EF:32:8A:08:BD:17:C4 Certificate issuer: /CN=9cae117d-b11f-4787-b860-f4d311531af3 Certificate serial: 010D0C9F4328584D4D5A9C2D6372D54D38621280 Authority key identifier: 8F:AA:F3:0C:EE:B1:82:F2:F0:D5:9F:35:B1:E4:9D:A7:90:BE:95:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/657752d5-7987-30fd-a6c9-761b35585226.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 36352 IP address blocks: 146.71.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:9c:2d:63:72:d5:4d:38:62:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cae117d-b11f-4787-b860-f4d311531af3 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=89ffeebf-620e-419c-98f6-7d36d8bd6417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dd:d3:55:46:da:0a:4a:7e:ce:9b:6b:5b:9f: 5a:3a:15:ee:46:f9:d1:29:6d:c1:91:4d:8d:c0:4d: 5b:65:41:d4:1c:56:4b:71:f9:d4:b0:14:4f:98:76: 48:12:36:14:a5:c2:57:a3:a6:33:cf:23:cf:76:8f: 9f:59:10:57:e2:da:55:d6:a5:04:bb:41:3a:d4:e2: 63:e2:fd:75:36:7f:8e:ca:ad:38:78:c3:1c:c4:61: 0a:e6:03:d7:a6:12:19:1b:2b:00:de:49:0a:e4:b4: 04:39:4c:12:ca:ef:d7:2a:2a:53:16:6f:2f:55:5a: 7b:41:73:c8:34:eb:52:07:cb:6c:18:de:76:67:bf: 60:a3:15:45:dd:db:85:fb:1a:7d:01:4d:1d:27:35: 4b:00:44:a7:d4:50:b0:16:09:1f:17:3a:55:1d:82: a9:8b:cf:be:2d:3a:bc:ce:36:36:ed:f1:6b:60:f7: 7c:37:9c:43:55:ea:c6:e8:a0:62:25:ff:79:75:44: ed:d5:48:f0:45:bb:a9:8a:42:a2:03:43:ae:a8:d0: 88:6c:7f:dc:a5:5c:9c:46:b2:b4:ab:f2:60:18:16: 5e:49:32:94:90:da:c9:da:02:cf:ab:47:4c:f1:72: f7:14:0d:13:b3:02:c6:d1:d5:7c:be:4f:78:fb:a6: 63:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8D:F0:F6:82:4A:5C:49:1F:E6:17:D4:A8:EF:32:8A:08:BD:17:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/657752d5-7987-30fd-a6c9-761b35585226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.crl X509v3 Authority Key Identifier: keyid:8F:AA:F3:0C:EE:B1:82:F2:F0:D5:9F:35:B1:E4:9D:A7:90:BE:95:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer sbgp-ipAddrBlock: critical IPv4: 146.71.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:cd:5c:77:f5:2c:e2:c6:43:5f:e9:d1:d5:89:47:dd:44:c6: 29:c5:99:5b:b4:29:25:91:ef:3e:73:9e:9a:d6:cc:b7:c3:5c: 14:08:47:b8:a9:27:e3:38:81:45:ec:76:7b:57:58:bb:df:2f: 35:22:5d:81:83:c0:6b:04:06:c5:e5:ab:91:e1:ab:ba:69:c9: dc:01:87:3c:4e:0f:7e:87:af:5d:01:ef:d6:0f:f2:e4:6e:ae: 30:a5:b5:0e:ef:ff:bc:f0:b1:09:76:a3:2e:46:f1:36:b9:e9: 98:71:5a:17:61:36:73:23:96:4e:bf:fc:88:9c:69:34:ca:9e: 6e:09:0d:b2:1e:03:4e:f7:77:6f:8c:89:23:4a:86:de:f8:96: 99:86:1c:12:bc:20:03:b8:db:6d:14:fe:e0:8d:c6:23:4a:99: d4:dc:1e:d7:20:2e:f8:9c:b8:b4:cb:b4:93:4f:37:22:94:35: 3f:4f:92:80:e9:11:ef:d0:21:d0:15:8a:3c:ca:65:86:09:68: 6b:37:15:ca:bc:93:a2:ff:93:90:c2:7f:a3:11:3d:07:b3:62: b0:8c:5f:e1:f5:7a:85:f0:97:b3:dd:07:c4:b5:f8:c3:d9:d3: bc:2f:03:5f:c8:ff:e8:e9:fe:15:7a:fe:97:b7:36:1d:b4:93: 5e:49:ec:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWpwtY3LVTThiEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNhZTExN2QtYjExZi00Nzg3LWI4NjAtZjRkMzExNTMx YWYzMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ODlmZmVlYmYtNjIwZS00MTljLTk4ZjYtN2QzNmQ4YmQ2NDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN3TVUbaCkp+zptrW59aOhXuRvnRKW3BkU2N wE1bZUHUHFZLcfnUsBRPmHZIEjYUpcJXo6YzzyPPdo+fWRBX4tpV1qUEu0E61OJj 4v11Nn+Oyq04eMMcxGEK5gPXphIZGysA3kkK5LQEOUwSyu/XKipTFm8vVVp7QXPI NOtSB8tsGN52Z79goxVF3duF+xp9AU0dJzVLAESn1FCwFgkfFzpVHYKpi8++LTq8 zjY27fFrYPd8N5xDVerG6KBiJf95dUTt1UjwRbupikKiA0OuqNCIbH/cpVycRrK0 q/JgGBZeSTKUkNrJ2gLPq0dM8XL3FA0TswLG0dV8vk94+6ZjawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSN8PaCSlxJH+YX1KjvMooIvRfEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85Y2Fl MTE3ZC1iMTFmLTQ3ODctYjg2MC1mNGQzMTE1MzFhZjMvNjU3NzUyZDUtNzk4Ny0z MGZkLWE2YzktNzYxYjM1NTg1MjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWNhZTExN2QtYjExZi00Nzg3LWI4 NjAtZjRkMzExNTMxYWYzLzljYWUxMTdkLWIxMWYtNDc4Ny1iODYwLWY0ZDMxMTUz MWFmMy5jcmwwHwYDVR0jBBgwFoAUj6rzDO6xgvLw1Z81seSdp5C+lbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85Y2FlMTE3ZC1iMTFmLTQ3ODctYjg2MC1mNGQz MTE1MzFhZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkkcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7NXHf1LOLGQ1/p0dWJR91ExinFmVu0KSWR7z5znprWzLfDXBQIR7ip J+M4gUXsdntXWLvfLzUiXYGDwGsEBsXlq5Hhq7ppydwBhzxOD36Hr10B79YP8uRu rjCltQ7v/7zwsQl2oy5G8Ta56ZhxWhdhNnMjlk6//IicaTTKnm4JDbIeA073d2+M iSNKht74lpmGHBK8IAO4220U/uCNxiNKmdTcHtcgLvicuLTLtJNPNyKUNT9PkoDp Ee/QIdAVijzKZYYJaGs3Fcq8k6L/k5DCf6MRPQezYrCMX+H1eoXwl7PdB8S1+MPZ 07wvA1/I/+jp/hV6/pe3Nh20k15J7PA= -----END CERTIFICATE-----Generated at Sun Apr 19 11:22:17 2026 by rpki-client