$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c1bab32e-ba6f-30e4-bb04-585c662c039e.roa File: c1bab32e-ba6f-30e4-bb04-585c662c039e.roa (raw, json) Hash identifier: z+q02AG5h/lsl2QkJq1R/VrUw0+OPc8QJ00TjXH/lt8= Subject key identifier: 85:A2:9F:0F:6A:38:83:51:AA:6C:48:17:3B:62:AA:0F:26:FC:29:BA Certificate issuer: /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Certificate serial: 010D0C9F4328584D80FFF11E17CC82B59632DE80 Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c1bab32e-ba6f-30e4-bb04-585c662c039e.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 400238 IP address blocks: 204.8.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:f1:1e:17:cc:82:b5:96:32:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=99fbcbd1-de5b-4ce2-9bae-e33d5ce037aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a6:ce:ef:5a:fe:50:20:d0:81:2f:38:14:8f: 7f:a5:7e:a6:27:19:81:9a:ac:8f:f6:c3:33:42:28: 70:de:87:ae:9d:55:d2:a6:9c:01:51:40:65:c3:94: 4d:85:4d:f6:ae:9d:bf:22:e4:92:55:32:ae:b9:1c: 46:91:ce:fd:18:48:f0:92:d1:12:6a:96:06:e4:f5: e2:db:83:20:e7:eb:4d:c3:56:59:ba:33:4c:7d:0a: 05:1c:68:02:2e:67:19:b1:de:e8:c1:e6:8f:31:f4: 09:d6:e0:21:cd:8e:f5:59:94:fb:b1:55:3c:f8:9e: f6:f9:07:4a:8e:cf:6a:44:2d:0c:0e:5f:a3:85:49: 9b:9b:99:a9:19:f0:2a:09:a0:8a:f5:9d:06:4d:82: a1:a1:f6:e6:7f:d2:0c:90:47:1d:ce:24:0f:f6:ab: 40:fa:ec:0e:cd:00:7e:74:9a:72:c5:ad:3c:b4:ac: 58:f3:81:6e:84:ec:55:1c:35:3e:22:52:4e:86:e7: 10:65:c7:30:f1:e4:b1:a1:5a:55:c7:30:0e:09:1b: a0:7e:9c:42:42:9d:56:81:80:c3:c6:94:7a:40:ac: c4:9c:8b:3e:d9:17:8e:d2:ab:21:53:a6:db:b5:2e: b7:71:f1:9c:69:7a:d5:05:13:ce:ee:3a:26:6c:a8: 15:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A2:9F:0F:6A:38:83:51:AA:6C:48:17:3B:62:AA:0F:26:FC:29:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c1bab32e-ba6f-30e4-bb04-585c662c039e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl X509v3 Authority Key Identifier: keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer sbgp-ipAddrBlock: critical IPv4: 204.8.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:dc:3f:2c:0d:b7:b5:d2:97:e6:c3:9d:3d:2c:a9:49:00:99: ee:41:ba:80:81:a0:35:90:31:88:14:54:9a:8c:a5:b3:69:5f: dc:c6:66:55:84:4b:4f:a5:2c:05:f8:dd:35:af:5f:25:89:a3: 85:b9:df:02:6a:31:22:4b:36:29:b2:43:4e:21:20:55:15:fa: 5c:e2:fb:98:56:64:74:f6:e1:2c:90:08:a7:55:f1:fc:d0:6d: 30:37:3d:69:8d:01:31:d1:65:fe:52:19:d2:25:ce:19:08:40: 17:22:7a:34:22:aa:54:95:35:b6:9b:43:c9:f6:83:a4:93:a4: ab:b7:a0:26:1a:ec:01:98:03:49:62:f6:8e:97:49:68:ff:a9: e8:dd:c8:95:da:32:ab:e1:67:e6:9c:90:60:1d:dc:bc:65:20: 30:e6:82:4a:38:34:7f:b1:1f:19:44:69:66:55:45:bb:67:cf: 2a:07:8e:eb:bf:88:80:ce:13:b8:ae:08:69:42:9a:c1:25:88: 2d:f2:55:81:f1:06:37:1e:3d:c3:5f:44:2f:03:ba:d5:cc:07: 25:8d:0e:03:79:a1:be:3b:c5:f7:18:67:5f:53:16:4b:76:59: 8b:05:03:47:1a:ab:d8:14:a8:79:c6:ca:b6:d3:db:bd:e1:b2: a0:3d:19:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A//EeF8yCtZYy3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY2YTZjOGUtYWE3My00ZDgyLWEyYjEtZTYxOWViM2Yy YWVjMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk OTlmYmNiZDEtZGU1Yi00Y2UyLTliYWUtZTMzZDVjZTAzN2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKbO71r+UCDQgS84FI9/pX6mJxmBmqyP9sMz Qihw3oeunVXSppwBUUBlw5RNhU32rp2/IuSSVTKuuRxGkc79GEjwktESapYG5PXi 24Mg5+tNw1ZZujNMfQoFHGgCLmcZsd7oweaPMfQJ1uAhzY71WZT7sVU8+J72+QdK js9qRC0MDl+jhUmbm5mpGfAqCaCK9Z0GTYKhofbmf9IMkEcdziQP9qtA+uwOzQB+ dJpyxa08tKxY84FuhOxVHDU+IlJOhucQZccw8eSxoVpVxzAOCRugfpxCQp1WgYDD xpR6QKzEnIs+2ReO0qshU6bbtS63cfGcaXrVBRPO7jombKgV2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWinw9qOINRqmxIFztiqg8m/Cm6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZh NmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIzZjJhZWMvYzFiYWIzMmUtYmE2Zi0z MGU0LWJiMDQtNTg1YzY2MmMwMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWY2YTZjOGUtYWE3My00ZDgyLWEy YjEtZTYxOWViM2YyYWVjLzFmNmE2YzhlLWFhNzMtNGQ4Mi1hMmIxLWU2MTllYjNm MmFlYy5jcmwwHwYDVR0jBBgwFoAU4cKiXdGkcBTXif4pkOW5K7a7dxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5 ZWIzZjJhZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAh0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/cPywNt7XSl+bDnT0sqUkAme5BuoCBoDWQMYgUVJqMpbNpX9zGZlWE S0+lLAX43TWvXyWJo4W53wJqMSJLNimyQ04hIFUV+lzi+5hWZHT24SyQCKdV8fzQ bTA3PWmNATHRZf5SGdIlzhkIQBciejQiqlSVNbabQ8n2g6STpKu3oCYa7AGYA0li 9o6XSWj/qejdyJXaMqvhZ+ackGAd3LxlIDDmgko4NH+xHxlEaWZVRbtnzyoHjuu/ iIDOE7iuCGlCmsEliC3yVYHxBjcePcNfRC8DutXMByWNDgN5ob47xfcYZ19TFkt2 WYsFA0caq9gUqHnGyrbT273hsqA9Gcs= -----END CERTIFICATE-----Generated at Sun Apr 19 12:17:45 2026 by rpki-client