$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/eb445058-2c43-3d50-9d55-7c5a6985e2aa.roa File: eb445058-2c43-3d50-9d55-7c5a6985e2aa.roa (raw, json) Hash identifier: e9DBGax1ItPX6tuY47Ebjeijgb+rQ9fCYIkwO+l70zM= Subject key identifier: 13:BF:23:5F:D9:F7:66:03:37:98:15:36:DD:13:1A:F1:6D:57:FD:8B Certificate issuer: /CN=a1ef3634-7b49-4b97-8787-680d6196e6e4 Certificate serial: 010D0C9F4328584D75D52D2A64F641EC93B37100 Authority key identifier: EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/eb445058-2c43-3d50-9d55-7c5a6985e2aa.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 53507 IP address blocks: 162.0.156.0/22 maxlen: 24 173.243.16.0/20 maxlen: 24 199.96.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:2d:2a:64:f6:41:ec:93:b3:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ef3634-7b49-4b97-8787-680d6196e6e4 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=43e0f46c-044a-4663-aa76-a5ce253f854f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4a:4e:89:79:33:0e:77:d5:37:71:06:94:ba: 9d:8b:a8:f6:b7:14:fc:9c:b6:12:a6:3c:d1:2c:5b: b4:be:f6:69:53:f5:84:25:46:8e:01:36:9c:97:96: fb:e4:7e:8f:39:66:f2:0c:bb:b4:2c:e2:45:6c:91: 33:32:1f:e2:ac:d9:85:39:2b:92:9a:73:c4:6c:82: b6:6e:cd:8b:01:ec:25:0c:a9:d6:08:7d:19:23:86: 7c:d6:12:9d:69:df:24:d0:49:d4:5b:94:81:a3:46: 64:f9:68:56:c0:30:8f:e6:56:f2:07:94:93:05:fb: db:f5:0e:19:92:3c:ab:9f:16:7b:62:62:b6:9c:70: 83:39:be:27:f5:3e:df:b3:1c:1f:9a:70:63:30:d9: 78:e5:1b:e8:ef:77:b5:c7:e9:0c:4c:86:c3:10:20: 50:6b:b2:32:fc:d9:63:50:4c:c1:c9:d2:5a:62:d6: d8:61:f7:8c:47:e6:f1:46:bf:eb:08:68:7a:a1:3e: 3e:05:0a:8b:75:81:6b:5c:ae:89:70:72:12:10:f3: a3:ac:99:c0:d3:27:f7:6c:ff:45:9a:56:16:b2:80: cf:8a:ef:bd:0a:ac:fa:c4:4e:bf:2e:a9:b2:3e:74: 0b:ac:fa:dd:a2:0c:13:0d:e0:17:c0:58:cd:14:a3: c2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:BF:23:5F:D9:F7:66:03:37:98:15:36:DD:13:1A:F1:6D:57:FD:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/eb445058-2c43-3d50-9d55-7c5a6985e2aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl X509v3 Authority Key Identifier: keyid:EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer sbgp-ipAddrBlock: critical IPv4: 162.0.156.0/22 173.243.16.0/20 199.96.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:60:b9:df:ba:aa:45:5c:f2:bb:87:98:a3:fd:0c:65:5f:9b: 66:03:76:fe:1e:3c:da:55:47:23:49:73:e6:94:e3:e7:c5:ce: 31:3e:90:11:e3:51:68:08:b3:5a:a3:06:67:7e:74:ed:1a:da: 57:2f:ae:66:03:fe:fc:0d:01:ef:73:76:e3:b7:54:a6:88:5a: 80:1d:4e:f9:e2:af:fa:c5:84:fe:f9:f7:45:6a:5c:b0:a5:25: b9:87:12:06:e6:6d:4b:e9:13:88:f5:31:43:62:d1:75:37:95: ae:ba:20:99:01:a3:07:30:7a:9b:4c:1e:da:36:29:52:67:c5: 7b:8a:07:36:31:04:bc:84:9b:82:30:1f:19:a3:60:c7:c0:2c: d5:33:54:14:fd:d5:a0:2f:66:42:e1:98:85:ea:35:e4:9e:e5: 42:1c:bb:a2:99:08:85:04:6a:ab:b7:e6:50:27:12:98:ef:d1: 3f:b1:84:21:52:2d:a2:16:40:04:08:be:5c:95:dd:c2:c9:8b: b6:24:dd:41:94:c9:e1:58:b8:15:98:66:9b:05:fd:45:54:fb: cd:77:ac:ab:98:09:37:2c:c3:71:48:17:3c:f3:26:70:be:ef: 9c:9e:9b:20:56:74:36:68:d1:bb:ef:da:e5:be:32:53:9d:94: 37:64:33:5f -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE111S0qZPZB7JOzcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlZjM2MzQtN2I0OS00Yjk3LTg3ODctNjgwZDYxOTZl NmU0MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk NDNlMGY0NmMtMDQ0YS00NjYzLWFhNzYtYTVjZTI1M2Y4NTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEpOiXkzDnfVN3EGlLqdi6j2txT8nLYSpjzR LFu0vvZpU/WEJUaOATacl5b75H6POWbyDLu0LOJFbJEzMh/irNmFOSuSmnPEbIK2 bs2LAewlDKnWCH0ZI4Z81hKdad8k0EnUW5SBo0Zk+WhWwDCP5lbyB5STBfvb9Q4Z kjyrnxZ7YmK2nHCDOb4n9T7fsxwfmnBjMNl45Rvo73e1x+kMTIbDECBQa7Iy/Nlj UEzBydJaYtbYYfeMR+bxRr/rCGh6oT4+BQqLdYFrXK6JcHISEPOjrJnA0yf3bP9F mlYWsoDPiu+9Cqz6xE6/LqmyPnQLrPrdogwTDeAXwFjNFKPCvQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFBO/I1/Z92YDN5gVNt0TGvFtV/2LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWVm MzYzNC03YjQ5LTRiOTctODc4Ny02ODBkNjE5NmU2ZTQvZWI0NDUwNTgtMmM0My0z ZDUwLTlkNTUtN2M1YTY5ODVlMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTFlZjM2MzQtN2I0OS00Yjk3LTg3 ODctNjgwZDYxOTZlNmU0L2ExZWYzNjM0LTdiNDktNGI5Ny04Nzg3LTY4MGQ2MTk2 ZTZlNC5jcmwwHwYDVR0jBBgwFoAU64YxEagOCq33QaX8gmjaFICXvrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWVmMzYzNC03YjQ5LTRiOTctODc4Ny02ODBk NjE5NmU2ZTQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCogCcAwQE rfMQAwQCx2A0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHNgud+6qkVc8ruHmKP9DGVfm2YDdv4ePNpVRyNJ c+aU4+fFzjE+kBHjUWgIs1qjBmd+dO0a2lcvrmYD/vwNAe9zduO3VKaIWoAdTvni r/rFhP7590VqXLClJbmHEgbmbUvpE4j1MUNi0XU3la66IJkBowcweptMHto2KVJn xXuKBzYxBLyEm4IwHxmjYMfALNUzVBT91aAvZkLhmIXqNeSe5UIcu6KZCIUEaqu3 5lAnEpjv0T+xhCFSLaIWQAQIvlyV3cLJi7Yk3UGUyeFYuBWYZpsF/UVU+813rKuY CTcsw3FIFzzzJnC+75yemyBWdDZo0bvv2uW+MlOdlDdkM18= -----END CERTIFICATE-----Generated at Sun Apr 19 15:32:45 2026 by rpki-client