$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d7fc411b-66b9-35f2-9bac-1a91b18ee301.roa File: d7fc411b-66b9-35f2-9bac-1a91b18ee301.roa (raw, json) Hash identifier: psqKLoSp02sFWzd+ppph5th5ZUJHjPEOxErqhYrDLb0= Subject key identifier: F3:2B:68:BF:9C:00:C5:5B:98:9C:DB:70:EB:65:01:F0:59:ED:63:6C Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584D746FBE21B96BFEE6C1650D80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d7fc411b-66b9-35f2-9bac-1a91b18ee301.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 19437 IP address blocks: 23.235.252.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:be:21:b9:6b:fe:e6:c1:65:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=956acc3f-7c52-4ae8-9182-07616fb0c165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cf:62:96:2f:c7:70:0e:bc:44:42:8a:e4:45: 19:9a:91:6d:25:66:33:31:ed:8a:55:a2:30:60:85: 76:21:f4:50:c7:d2:e1:59:e7:d8:fb:d0:0f:ab:69: 6d:31:90:d9:b9:15:b8:83:fa:61:13:0c:5e:46:ad: 5d:09:14:a3:86:c2:31:63:62:25:5b:40:4e:68:0f: 6d:7f:3d:61:42:b8:1a:7f:48:db:6e:c0:e3:62:67: 42:67:11:42:ef:ee:03:ca:d1:ec:09:13:89:e8:a7: 61:78:1e:96:0d:a4:20:cf:7b:70:ef:31:23:39:0e: b6:49:81:04:23:62:38:22:d2:ca:ad:dd:ab:7a:e9: c5:db:5f:9f:12:b7:ed:f6:90:aa:f8:69:32:d6:b7: db:c7:67:af:f1:3d:d5:48:2f:1e:26:a0:2a:7f:e0: 30:7a:3d:7c:40:1b:53:78:63:dd:76:3d:5d:1d:3a: 32:d4:98:2d:12:ad:b9:1c:1f:cf:50:57:d1:0d:3c: d4:92:4f:8b:39:0f:e4:10:6d:1a:bb:62:b2:cf:1c: ee:b2:b3:bb:aa:51:ae:df:25:f4:bf:5c:8b:b2:cb: 8d:b4:cf:ec:74:91:ce:c4:08:87:2a:f6:dc:be:8d: b0:8a:c7:fc:99:f4:8f:85:2f:b2:0f:9e:c6:88:7d: 57:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2B:68:BF:9C:00:C5:5B:98:9C:DB:70:EB:65:01:F0:59:ED:63:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d7fc411b-66b9-35f2-9bac-1a91b18ee301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 23.235.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:83:45:92:6a:b2:c2:f0:f0:ea:20:35:45:03:ac:16:17:af: c6:fa:f1:82:0a:8e:6e:38:20:a3:b4:8d:13:f8:04:5b:de:33: 5c:12:02:6a:65:a9:c8:8a:d6:ff:be:1c:a1:ce:06:91:78:4a: 47:dc:d0:c2:aa:36:ff:02:db:30:e4:e3:13:c7:a2:38:99:c3: e0:9c:50:c3:f6:1a:73:70:ac:61:42:6e:f9:8a:40:40:f1:5b: bf:33:af:c2:83:6b:78:d3:77:b7:19:4f:4f:b9:e2:cf:90:bf: be:19:46:e8:42:d3:85:5f:a8:21:8e:02:af:1b:e2:05:0b:18: 94:54:15:83:ac:4b:1a:8e:71:4a:c3:90:ec:9f:d2:fa:0c:d6: 53:ff:cf:2f:b2:ff:95:da:0b:5d:10:95:e7:68:63:16:6f:c3: 43:02:c9:c0:92:14:78:5e:ee:d7:1a:78:3d:17:29:07:a4:a7: c5:b4:9a:55:84:33:65:6c:9f:bd:85:f7:4e:4c:c7:4c:12:72: d1:66:50:e9:37:9a:76:11:18:91:28:c9:cf:e9:e1:7e:fd:c2: 64:da:fe:15:9f:ac:b8:65:c1:09:a0:76:20:4e:0a:3e:c3:3c: 50:b4:64:73:58:9a:af:f9:74:31:2d:85:ad:82:c6:ff:8c:aa: a6:eb:31:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b74huWv+5sFlDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk OTU2YWNjM2YtN2M1Mi00YWU4LTkxODItMDc2MTZmYjBjMTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx89ili/HcA68REKK5EUZmpFtJWYzMe2KVaIw YIV2IfRQx9LhWefY+9APq2ltMZDZuRW4g/phEwxeRq1dCRSjhsIxY2IlW0BOaA9t fz1hQrgaf0jbbsDjYmdCZxFC7+4DytHsCROJ6KdheB6WDaQgz3tw7zEjOQ62SYEE I2I4ItLKrd2reunF21+fErft9pCq+Gky1rfbx2ev8T3VSC8eJqAqf+Awej18QBtT eGPddj1dHToy1JgtEq25HB/PUFfRDTzUkk+LOQ/kEG0au2KyzxzusrO7qlGu3yX0 v1yLssuNtM/sdJHOxAiHKvbcvo2wisf8mfSPhS+yD57GiH1XWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMraL+cAMVbmJzbcOtlAfBZ7WNsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZDdmYzQxMWItNjZiOS0z NWYyLTliYWMtMWE5MWIxOGVlMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+v8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeDRZJqssLw8OogNUUDrBYXr8b68YIKjm44IKO0jRP4BFveM1wSAmpl qciK1v++HKHOBpF4Skfc0MKqNv8C2zDk4xPHojiZw+CcUMP2GnNwrGFCbvmKQEDx W78zr8KDa3jTd7cZT0+54s+Qv74ZRuhC04VfqCGOAq8b4gULGJRUFYOsSxqOcUrD kOyf0voM1lP/zy+y/5XaC10QledoYxZvw0MCycCSFHhe7tcaeD0XKQekp8W0mlWE M2Vsn72F905Mx0wSctFmUOk3mnYRGJEoyc/p4X79wmTa/hWfrLhlwQmgdiBOCj7D PFC0ZHNYmq/5dDEtha2Cxv+MqqbrMZo= -----END CERTIFICATE-----Generated at Fri Apr 17 14:01:02 2026 by rpki-client