$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/b8f1cd10-ce5e-3fac-9723-e3190551e274.roa File: b8f1cd10-ce5e-3fac-9723-e3190551e274.roa (raw, json) Hash identifier: EwHbmS0+YuIxEv8UNjusxZ96Gc6nu7ltCvDDYVWUrxw= Subject key identifier: 33:66:B1:2D:CF:46:EB:CA:66:84:CC:F9:E8:37:4F:A5:6E:E1:CA:F0 Certificate issuer: /CN=ae21b62b-7bfc-4a0d-81bc-77f998df2cbe Certificate serial: 010D0C9F4328584D83CB1136AD0CBD98F5D87F40 Authority key identifier: 2C:80:E9:A3:91:5A:A2:9A:27:C4:41:A7:85:55:97:93:D6:6D:BC:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/b8f1cd10-ce5e-3fac-9723-e3190551e274.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 14298 IP address blocks: 192.58.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:cb:11:36:ad:0c:bd:98:f5:d8:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae21b62b-7bfc-4a0d-81bc-77f998df2cbe Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=1087b36f-b747-42c7-8d84-888084e05702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:96:a5:e1:26:5e:f2:44:93:c9:5d:55:e3:5c: f9:34:34:2e:45:2b:d5:bb:65:64:0f:36:72:ab:ea: 65:ab:96:7e:41:9f:b8:81:87:8e:e1:d2:e8:f7:bd: f0:0a:7d:67:d1:2d:ca:55:c9:cb:96:41:44:a3:1f: e6:c0:c9:2f:ab:d1:f7:6e:32:9f:6e:f0:71:e8:0a: 9c:0c:65:74:d8:76:b2:fc:ca:ce:d4:4a:4d:03:88: 40:bb:d5:38:0b:c8:bf:d9:7a:32:91:8f:ea:60:51: cd:84:e6:fe:43:0d:a5:e8:a0:c8:f0:ee:8d:d0:95: 5c:0a:35:d4:4b:88:d1:c1:2e:71:8e:c9:3a:81:fc: d1:4c:aa:6a:4f:09:dd:13:e8:19:aa:ea:34:bb:1c: 5d:c4:72:bb:79:78:fa:21:7d:6e:a2:cf:11:bb:ef: 0d:56:28:57:ff:6a:49:7a:80:92:44:13:62:20:28: de:9b:fc:22:0b:f4:44:66:99:f8:52:d2:ad:c0:52: 8f:ea:e9:ca:b5:bf:39:b4:29:02:ec:a0:c4:c4:6b: d5:33:df:2b:66:4f:38:04:37:dc:10:f6:2a:d1:cc: c5:1c:59:66:c4:3e:62:14:39:84:99:47:a7:30:de: ce:ef:0c:78:a6:5e:f2:52:05:28:c0:f5:f1:0a:ee: 2e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:66:B1:2D:CF:46:EB:CA:66:84:CC:F9:E8:37:4F:A5:6E:E1:CA:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/b8f1cd10-ce5e-3fac-9723-e3190551e274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.crl X509v3 Authority Key Identifier: keyid:2C:80:E9:A3:91:5A:A2:9A:27:C4:41:A7:85:55:97:93:D6:6D:BC:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer sbgp-ipAddrBlock: critical IPv4: 192.58.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:38:32:ab:f6:ab:ab:3b:f5:e8:58:26:81:c9:70:82:45:a6: 9d:00:c2:0d:b1:47:c7:67:7f:1e:c2:0c:6a:19:ac:b2:08:da: 9e:06:36:87:fa:70:10:ec:74:59:df:be:d1:57:d7:74:4b:a7: fd:ea:42:3e:d0:cd:c0:5a:3f:ed:ff:01:5e:53:51:b5:91:a9: 73:04:65:6f:0b:82:d9:39:24:2c:91:3d:43:b8:79:c2:3a:5f: ce:68:2b:ee:ff:4a:fb:b0:bb:7b:73:62:24:f1:b1:93:17:f5: c2:d6:5a:35:52:13:73:c7:06:6e:5e:21:fb:1c:7a:d1:80:39: a2:18:7f:13:86:e3:77:d9:2c:0d:ed:35:6f:b6:1c:ad:0d:d9: 8c:0c:f7:54:08:d5:8f:e4:63:69:f0:de:48:3a:bf:31:b1:1c: 81:82:2d:bc:02:55:e7:d4:f9:a0:62:18:22:94:87:d7:2a:22: ae:d8:1a:06:52:aa:55:3e:56:20:1e:01:96:e7:96:a1:8d:bb: 87:01:73:8f:3f:3e:f6:9b:8f:99:e5:7d:2d:05:ad:72:90:54: f1:78:12:e6:0d:35:f8:a3:fb:8d:29:9f:17:08:ca:46:85:7e: 21:fe:67:8c:db:68:ff:c0:41:a3:d9:04:60:e1:36:56:2e:1b: 28:72:c6:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2DyxE2rQy9mPXYf0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWUyMWI2MmItN2JmYy00YTBkLTgxYmMtNzdmOTk4ZGYy Y2JlMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk MTA4N2IzNmYtYjc0Ny00MmM3LThkODQtODg4MDg0ZTA1NzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Zal4SZe8kSTyV1V41z5NDQuRSvVu2VkDzZy q+plq5Z+QZ+4gYeO4dLo973wCn1n0S3KVcnLlkFEox/mwMkvq9H3bjKfbvBx6Aqc DGV02Hay/MrO1EpNA4hAu9U4C8i/2XoykY/qYFHNhOb+Qw2l6KDI8O6N0JVcCjXU S4jRwS5xjsk6gfzRTKpqTwndE+gZquo0uxxdxHK7eXj6IX1uos8Ru+8NVihX/2pJ eoCSRBNiICjem/wiC/REZpn4UtKtwFKP6unKtb85tCkC7KDExGvVM98rZk84BDfc EPYq0czFHFlmxD5iFDmEmUenMN7O7wx4pl7yUgUowPXxCu4uPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNmsS3PRuvKZoTM+eg3T6Vu4crwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZTIx YjYyYi03YmZjLTRhMGQtODFiYy03N2Y5OThkZjJjYmUvYjhmMWNkMTAtY2U1ZS0z ZmFjLTk3MjMtZTMxOTA1NTFlMjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWUyMWI2MmItN2JmYy00YTBkLTgx YmMtNzdmOTk4ZGYyY2JlL2FlMjFiNjJiLTdiZmMtNGEwZC04MWJjLTc3Zjk5OGRm MmNiZS5jcmwwHwYDVR0jBBgwFoAULIDpo5FaoponxEGnhVWXk9ZtvFAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZTIxYjYyYi03YmZjLTRhMGQtODFiYy03N2Y5 OThkZjJjYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDr3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALw4Mqv2q6s79ehYJoHJcIJFpp0Awg2xR8dnfx7CDGoZrLII2p4GNof6 cBDsdFnfvtFX13RLp/3qQj7QzcBaP+3/AV5TUbWRqXMEZW8Lgtk5JCyRPUO4ecI6 X85oK+7/Svuwu3tzYiTxsZMX9cLWWjVSE3PHBm5eIfscetGAOaIYfxOG43fZLA3t NW+2HK0N2YwM91QI1Y/kY2nw3kg6vzGxHIGCLbwCVefU+aBiGCKUh9cqIq7YGgZS qlU+ViAeAZbnlqGNu4cBc48/Pvabj5nlfS0FrXKQVPF4EuYNNfij+40pnxcIykaF fiH+Z4zbaP/AQaPZBGDhNlYuGyhyxtk= -----END CERTIFICATE-----Generated at Fri Apr 17 07:58:24 2026 by rpki-client