$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/a8006d90-9db1-3770-bb6a-a49d4decae45.roa File: a8006d90-9db1-3770-bb6a-a49d4decae45.roa (raw, json) Hash identifier: IppAVVml1ExSRdU80FDPGu20dfb+ojmHWX1o0VZf7zs= Subject key identifier: 13:42:BF:E9:C1:81:ED:B1:E5:71:A0:AE:FB:56:67:E9:40:AC:14:3C Certificate issuer: /CN=d92cf10a-b836-4dce-a8f5-f920d630995e Certificate serial: 010D0C9F4328584D65151B280F287FD6CABC5280 Authority key identifier: 08:2A:2C:8C:F2:11:B3:A0:A4:59:C9:14:F5:8A:A8:BB:AF:DF:EF:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/a8006d90-9db1-3770-bb6a-a49d4decae45.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 16509 IP address blocks: 146.71.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/d92cf10a-b836-4dce-a8f5-f920d630995e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/d92cf10a-b836-4dce-a8f5-f920d630995e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:1b:28:0f:28:7f:d6:ca:bc:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d92cf10a-b836-4dce-a8f5-f920d630995e Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=a6d385d6-88f8-4e2d-8d06-23a7d1c2ca7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b5:6d:fa:ea:e8:ad:1f:a5:bf:89:07:1b:7e: 78:c6:c7:e1:29:40:fd:d8:01:2c:62:b7:dc:e5:78: 9c:39:db:20:4a:2e:05:b9:64:60:60:49:e7:66:9c: 77:79:0d:bc:84:b5:a9:6e:f4:31:72:e6:95:5a:c8: f8:bb:9b:07:eb:8b:eb:8a:8b:29:80:55:13:f7:e0: 78:80:5b:b2:4b:83:f0:ea:47:77:15:b7:a9:c2:84: 2b:46:56:78:04:e4:6c:19:00:5d:72:c3:16:93:15: 2d:ed:90:6d:04:66:95:98:ac:c4:b2:b6:bb:ea:d7: 89:25:f6:86:67:c7:89:3a:23:92:d1:21:dc:c6:97: 25:0f:c5:3c:de:01:30:69:0c:e8:c8:6d:e9:1c:e0: d5:ff:ad:aa:22:37:9e:57:1b:08:fb:5d:05:71:a5: 7a:5c:23:70:ae:6f:98:bb:c7:ba:34:fa:50:ff:34: b2:d7:0d:a7:d5:a0:df:d6:a7:f4:13:1e:4f:5f:33: c7:90:54:99:9b:e2:7f:88:1e:40:8c:5f:74:a5:33: 39:fb:16:8d:94:1a:41:1f:b8:a5:e5:2a:fc:a9:af: ea:93:b2:7b:1b:ff:65:cf:eb:4b:37:d8:04:aa:be: 99:d8:c8:d8:52:73:e9:24:67:ed:f3:5b:b4:97:2e: 3c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:42:BF:E9:C1:81:ED:B1:E5:71:A0:AE:FB:56:67:E9:40:AC:14:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/a8006d90-9db1-3770-bb6a-a49d4decae45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/d92cf10a-b836-4dce-a8f5-f920d630995e.crl X509v3 Authority Key Identifier: keyid:08:2A:2C:8C:F2:11:B3:A0:A4:59:C9:14:F5:8A:A8:BB:AF:DF:EF:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer sbgp-ipAddrBlock: critical IPv4: 146.71.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:16:72:dc:5b:49:d5:3d:4f:d1:55:0a:b7:34:f1:bd:32:b2: 42:52:1c:e0:0a:e8:67:cd:34:d5:c9:ff:93:de:5c:36:fa:b4: f9:17:69:9e:c2:35:f3:c1:b3:66:6f:1d:93:5d:5d:dc:a2:05: eb:4b:cc:55:28:f1:34:c1:29:9c:57:89:a4:5e:c6:2a:96:e5: f7:1c:ac:80:ca:cc:55:64:06:ae:fb:36:63:8f:7d:73:32:2d: 03:c2:01:62:12:21:97:a3:13:ad:ea:86:84:e1:94:62:45:03: 61:03:bc:04:d8:d7:6a:bc:c1:52:7f:bf:29:6a:39:96:34:a6: ac:21:49:49:96:9c:ae:ce:e7:7f:70:ec:22:4a:84:b6:84:b3: 28:c6:b5:4e:5f:42:ef:cb:69:e8:20:f5:84:80:f7:bc:cb:d1: 94:4d:32:cb:de:1d:1c:5c:60:2d:c1:86:80:4f:2f:68:ab:8b: ef:58:93:38:11:e2:65:6b:10:b3:f7:ad:af:6d:29:83:05:7c: d3:00:55:a0:b0:18:35:1f:a2:d0:42:87:32:7b:ac:43:aa:ec: 05:eb:9d:85:18:0b:64:bb:02:9d:25:8a:f3:0a:fb:68:58:95: f0:50:91:52:4f:dd:69:07:b3:c9:2d:de:79:02:13:61:0e:af: 40:ac:fe:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFRsoDyh/1sq8UoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDkyY2YxMGEtYjgzNi00ZGNlLWE4ZjUtZjkyMGQ2MzA5 OTVlMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk YTZkMzg1ZDYtODhmOC00ZTJkLThkMDYtMjNhN2QxYzJjYTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurVt+urorR+lv4kHG354xsfhKUD92AEsYrfc 5XicOdsgSi4FuWRgYEnnZpx3eQ28hLWpbvQxcuaVWsj4u5sH64vriospgFUT9+B4 gFuyS4Pw6kd3FbepwoQrRlZ4BORsGQBdcsMWkxUt7ZBtBGaVmKzEsra76teJJfaG Z8eJOiOS0SHcxpclD8U83gEwaQzoyG3pHODV/62qIjeeVxsI+10FcaV6XCNwrm+Y u8e6NPpQ/zSy1w2n1aDf1qf0Ex5PXzPHkFSZm+J/iB5AjF90pTM5+xaNlBpBH7il 5Sr8qa/qk7J7G/9lz+tLN9gEqr6Z2MjYUnPpJGft81u0ly48gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNCv+nBge2x5XGgrvtWZ+lArBQ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kOTJj ZjEwYS1iODM2LTRkY2UtYThmNS1mOTIwZDYzMDk5NWUvYTgwMDZkOTAtOWRiMS0z NzcwLWJiNmEtYTQ5ZDRkZWNhZTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDkyY2YxMGEtYjgzNi00ZGNlLWE4 ZjUtZjkyMGQ2MzA5OTVlL2Q5MmNmMTBhLWI4MzYtNGRjZS1hOGY1LWY5MjBkNjMw OTk1ZS5jcmwwHwYDVR0jBBgwFoAUCCosjPIRs6CkWckU9Yqou6/f76QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kOTJjZjEwYS1iODM2LTRkY2UtYThmNS1mOTIw ZDYzMDk5NWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkkcDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkWctxbSdU9T9FVCrc08b0yskJSHOAK6GfNNNXJ/5PeXDb6tPkXaZ7C NfPBs2ZvHZNdXdyiBetLzFUo8TTBKZxXiaRexiqW5fccrIDKzFVkBq77NmOPfXMy LQPCAWISIZejE63qhoThlGJFA2EDvATY12q8wVJ/vylqOZY0pqwhSUmWnK7O539w 7CJKhLaEsyjGtU5fQu/Laegg9YSA97zL0ZRNMsveHRxcYC3BhoBPL2iri+9YkzgR 4mVrELP3ra9tKYMFfNMAVaCwGDUfotBChzJ7rEOq7AXrnYUYC2S7Ap0livMK+2hY lfBQkVJP3WkHs8kt3nkCE2EOr0Cs/jU= -----END CERTIFICATE-----Generated at Fri Apr 17 14:37:22 2026 by rpki-client