$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883/4df36641-222d-32f6-a628-9d7a11fed67f.roa File: 4df36641-222d-32f6-a628-9d7a11fed67f.roa (raw, json) Hash identifier: q/PjTixtcEME06FbajGuP1nDMQjGvmAMiBK/s/8F/ZI= Subject key identifier: 2B:01:F6:06:6E:96:D2:D9:13:06:CD:73:00:17:22:E6:87:1B:23:F6 Certificate issuer: /CN=4051554a-224d-4a2b-8646-85ee8bbdb883 Certificate serial: 010D0C9F4328584D7F9AA0592403E12BB6C34420 Authority key identifier: 7A:38:55:4F:E5:FB:8F:6B:9C:E5:55:3D:E7:A2:F8:E2:3F:1B:38:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883/4df36641-222d-32f6-a628-9d7a11fed67f.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 8095 IP address blocks: 204.128.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883/4051554a-224d-4a2b-8646-85ee8bbdb883.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883/4051554a-224d-4a2b-8646-85ee8bbdb883.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:a0:59:24:03:e1:2b:b6:c3:44:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4051554a-224d-4a2b-8646-85ee8bbdb883 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=4cbe28ac-bac5-4b46-a411-ed92df0d21a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ac:3b:54:76:e2:a8:8f:86:c7:dd:a8:03:94: 2b:3b:d6:09:54:0b:d5:32:78:39:98:d9:88:ef:3c: f8:6c:0b:e9:e2:10:8a:ce:72:fa:7e:98:f4:fe:17: 9b:68:4b:ed:b0:b3:58:81:a1:f3:07:ab:18:35:d2: 95:90:35:dc:21:6e:cd:a5:ed:e4:23:b4:76:f2:bb: 44:1d:5d:c3:1d:fb:20:99:4a:ad:c1:ac:65:fe:56: ef:82:23:63:09:84:73:cb:9b:6b:e6:1d:94:a7:92: f8:5c:e4:27:43:62:13:a5:aa:71:20:c3:20:a4:49: 22:9c:02:9d:89:ec:a7:d9:68:f5:9a:3d:ea:82:d5: 9e:86:ca:fa:1c:94:e7:18:01:ef:5c:9f:c6:0a:c3: 33:24:dc:a3:00:5c:3b:c9:72:d7:5f:c4:5c:34:90: b9:20:31:97:bc:f2:36:0c:c8:fe:a7:6c:3d:2d:ee: 37:2f:76:33:50:7b:da:a6:92:e2:a6:21:c0:6f:d7: b9:3e:81:cb:87:bb:38:69:37:31:87:ce:73:d8:4a: 54:f1:09:90:7f:e6:ec:a4:70:37:d7:a0:b0:15:35: d5:d1:40:63:1f:55:c5:df:37:4e:01:e6:4c:72:f6: d7:36:e6:43:c0:90:ed:67:27:a8:1f:0d:7a:86:30: 47:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:01:F6:06:6E:96:D2:D9:13:06:CD:73:00:17:22:E6:87:1B:23:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883/4df36641-222d-32f6-a628-9d7a11fed67f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883/4051554a-224d-4a2b-8646-85ee8bbdb883.crl X509v3 Authority Key Identifier: keyid:7A:38:55:4F:E5:FB:8F:6B:9C:E5:55:3D:E7:A2:F8:E2:3F:1B:38:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4051554a-224d-4a2b-8646-85ee8bbdb883.cer sbgp-ipAddrBlock: critical IPv4: 204.128.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b0:53:63:25:fc:a0:a8:17:6d:ba:ef:74:57:eb:e8:27:4e: 7d:a9:01:69:1a:7f:2f:44:7b:b1:dd:2f:0c:e6:d6:37:96:9b: 78:0d:78:5f:45:cb:ad:d6:96:52:3d:ed:80:be:f7:fd:d7:19: a6:11:45:aa:7d:68:ef:2b:62:38:fb:13:ca:b8:fe:13:f8:42: d0:ce:f2:a5:46:6e:ee:11:f3:f4:f3:f1:b4:55:e8:d7:16:fb: 42:8a:5c:3a:5f:05:db:c3:3d:fc:7f:79:20:9d:f5:8c:34:5e: 1b:52:0b:4b:ce:69:5b:9e:3c:02:f5:94:7a:93:54:32:4c:7d: 3c:1d:e4:c8:18:bd:61:41:f4:aa:08:a6:20:31:75:70:60:16: b3:4c:d4:e7:9d:be:81:90:56:4e:33:3f:2d:9b:ae:c6:11:7e: b5:47:89:1a:c2:d7:a2:80:66:e8:85:a1:19:46:4e:52:8f:4d: 68:8a:58:86:96:b4:0a:3d:ac:ae:08:5b:0d:43:1e:64:de:4f: 29:f8:65:47:86:b5:c1:d1:09:58:64:61:86:db:74:d2:6c:bb: a5:8a:25:19:39:72:b4:3c:eb:45:70:07:46:5f:92:c1:48:11: c3:57:48:ec:a4:24:8a:92:9b:3e:45:91:ed:6f:75:b5:4b:0b: 95:4f:ed:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mqBZJAPhK7bDRCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDA1MTU1NGEtMjI0ZC00YTJiLTg2NDYtODVlZThiYmRi ODgzMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk NGNiZTI4YWMtYmFjNS00YjQ2LWE0MTEtZWQ5MmRmMGQyMWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaw7VHbiqI+Gx92oA5QrO9YJVAvVMng5mNmI 7zz4bAvp4hCKznL6fpj0/hebaEvtsLNYgaHzB6sYNdKVkDXcIW7Npe3kI7R28rtE HV3DHfsgmUqtwaxl/lbvgiNjCYRzy5tr5h2Up5L4XOQnQ2ITpapxIMMgpEkinAKd ieyn2Wj1mj3qgtWehsr6HJTnGAHvXJ/GCsMzJNyjAFw7yXLXX8RcNJC5IDGXvPI2 DMj+p2w9Le43L3YzUHvappLipiHAb9e5PoHLh7s4aTcxh85z2EpU8QmQf+bspHA3 16CwFTXV0UBjH1XF3zdOAeZMcvbXNuZDwJDtZyeoHw16hjBH+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsB9gZultLZEwbNcwAXIuaHGyP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80MDUx NTU0YS0yMjRkLTRhMmItODY0Ni04NWVlOGJiZGI4ODMvNGRmMzY2NDEtMjIyZC0z MmY2LWE2MjgtOWQ3YTExZmVkNjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNDA1MTU1NGEtMjI0ZC00YTJiLTg2 NDYtODVlZThiYmRiODgzLzQwNTE1NTRhLTIyNGQtNGEyYi04NjQ2LTg1ZWU4YmJk Yjg4My5jcmwwHwYDVR0jBBgwFoAUejhVT+X7j2uc5VU956L44j8bOLYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80MDUxNTU0YS0yMjRkLTRhMmItODY0Ni04NWVl OGJiZGI4ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzIA4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWwU2Ml/KCoF22673RX6+gnTn2pAWkafy9Ee7HdLwzm1jeWm3gNeF9F y63WllI97YC+9/3XGaYRRap9aO8rYjj7E8q4/hP4QtDO8qVGbu4R8/Tz8bRV6NcW +0KKXDpfBdvDPfx/eSCd9Yw0XhtSC0vOaVuePAL1lHqTVDJMfTwd5MgYvWFB9KoI piAxdXBgFrNM1OedvoGQVk4zPy2brsYRfrVHiRrC16KAZuiFoRlGTlKPTWiKWIaW tAo9rK4IWw1DHmTeTyn4ZUeGtcHRCVhkYYbbdNJsu6WKJRk5crQ860VwB0ZfksFI EcNXSOykJIqSmz5Fke1vdbVLC5VP7Uc= -----END CERTIFICATE-----Generated at Sun Apr 19 11:20:01 2026 by rpki-client