$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa File: 4049c44a-f808-3c97-bfb6-a323f04f3436.roa (raw, json) Hash identifier: 7NhpULGEsaVqipM9J8DzAoaAskIYAvWxMh/2GgdyVmo= Subject key identifier: 42:79:41:5C:AC:B3:68:79:26:2F:AE:90:66:6A:BD:D7:AC:19:FD:22 Certificate issuer: /CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Certificate serial: 010D0C9F4328584D7F9A84B263A34E776A16D700 Authority key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 395927 IP address blocks: 208.72.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:84:b2:63:a3:4e:77:6a:16:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=a458f13e-4baa-4f89-9e46-9a982a56707c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ca:49:87:ff:16:ad:00:f6:7d:ad:80:8e:6b: c5:41:f0:fd:d7:40:88:a8:57:27:d4:f0:e2:2f:32: 25:bc:9f:a6:d4:c8:24:78:2b:2f:94:27:c8:af:47: cf:66:2f:34:f0:b8:e1:7e:44:ce:98:59:88:09:98: 70:09:f1:4a:55:87:c0:68:0c:46:3c:c0:84:87:b4: a7:7b:89:0f:e3:a7:c8:d1:f6:3d:73:85:67:c0:89: f1:43:c3:41:4a:65:80:ad:37:2b:2a:85:7b:87:3e: 9b:18:76:41:83:c0:03:79:fe:88:09:63:70:6b:04: 0d:51:a4:22:b6:72:dc:5e:bf:20:5f:10:d3:a7:65: 72:97:6e:56:f7:44:b5:b4:1a:2c:db:9b:b8:3a:e8: 45:e8:80:dc:05:fa:16:e1:07:29:73:b2:b0:82:5d: 3c:47:22:50:6f:f2:88:df:59:03:ae:cf:0b:ff:3b: e0:1e:ef:15:15:9e:e6:79:a9:c6:c1:4f:e2:41:44: ea:1e:12:be:72:d6:1a:0e:ef:68:ce:cd:a0:09:43: f5:10:9a:85:49:11:e9:e0:91:04:f1:6a:3c:2b:32: bf:9f:b1:f9:50:1a:f4:e7:9f:cb:97:80:d5:6c:c4: c7:16:0b:66:45:aa:6f:50:65:43:b2:0d:3d:0b:1d: 68:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:79:41:5C:AC:B3:68:79:26:2F:AE:90:66:6A:BD:D7:AC:19:FD:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl X509v3 Authority Key Identifier: keyid:88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer sbgp-ipAddrBlock: critical IPv4: 208.72.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d2:76:5c:50:6d:20:c1:db:cb:89:f3:43:00:2c:b4:3d:a0: 18:15:66:26:e6:b9:b4:da:64:88:e1:1d:65:09:fa:d8:90:2d: 6d:2a:33:c3:f7:6e:4c:95:c2:73:9a:e4:3c:38:5b:36:14:b3: 58:9d:42:4b:eb:7c:0d:68:4a:1e:e2:dc:47:71:82:ee:7f:f6: a3:52:3e:59:10:33:a1:f6:40:eb:e6:74:82:77:3e:c6:af:4f: 49:e6:47:ac:64:2f:53:84:77:b4:65:3a:7d:79:a9:c0:95:50: dd:0b:dc:a1:06:ac:04:d4:1e:f4:ab:77:a8:70:bd:57:05:25: 47:4b:f6:82:5b:79:72:cc:c7:10:86:fd:30:7f:f5:d0:a4:1d: d1:9a:a3:20:65:73:ae:15:d7:59:73:f4:14:40:be:20:53:06: 81:55:c0:19:21:d3:e6:ec:c6:58:f4:ba:62:71:20:19:9b:22: 56:d7:28:1c:66:2f:98:12:57:80:ec:5c:03:6d:e2:ac:54:f1: e6:ab:3d:2d:4c:99:bd:b3:fd:15:f7:c8:eb:11:c8:54:e2:5f: 2c:1c:86:b0:7a:35:88:ca:9e:48:59:5d:86:e9:7d:2a:6a:4d: fe:06:5a:12:2e:6b:84:94:c1:73:15:51:21:ce:45:b4:56:96: 0c:ce:1f:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/moSyY6NOd2oW1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2NTVhYWYtNzZmNC00YmFiLWI0ZjctOGZiMjNjM2Q0 MDExMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk YTQ1OGYxM2UtNGJhYS00Zjg5LTllNDYtOWE5ODJhNTY3MDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7spJh/8WrQD2fa2AjmvFQfD910CIqFcn1PDi LzIlvJ+m1MgkeCsvlCfIr0fPZi808LjhfkTOmFmICZhwCfFKVYfAaAxGPMCEh7Sn e4kP46fI0fY9c4VnwInxQ8NBSmWArTcrKoV7hz6bGHZBg8ADef6ICWNwawQNUaQi tnLcXr8gXxDTp2Vyl25W90S1tBos25u4OuhF6IDcBfoW4Qcpc7Kwgl08RyJQb/KI 31kDrs8L/zvgHu8VFZ7meanGwU/iQUTqHhK+ctYaDu9ozs2gCUP1EJqFSRHp4JEE 8Wo8KzK/n7H5UBr055/Ll4DVbMTHFgtmRapvUGVDsg09Cx1ouwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ5QVyss2h5Ji+ukGZqvdesGf0iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1 NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2MzZDQwMTEvNDA0OWM0NGEtZjgwOC0z Yzk3LWJmYjYtYTMyM2YwNGYzNDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2M2NTVhYWYtNzZmNC00YmFiLWI0 ZjctOGZiMjNjM2Q0MDExLzNjNjU1YWFmLTc2ZjQtNGJhYi1iNGY3LThmYjIzYzNk NDAxMS5jcmwwHwYDVR0jBBgwFoAUiHOJW9dIB54yw37e57iTyJjsLBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIy M2MzZDQwMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Eg0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7SdlxQbSDB28uJ80MALLQ9oBgVZibmubTaZIjhHWUJ+tiQLW0qM8P3 bkyVwnOa5Dw4WzYUs1idQkvrfA1oSh7i3Edxgu5/9qNSPlkQM6H2QOvmdIJ3Psav T0nmR6xkL1OEd7RlOn15qcCVUN0L3KEGrATUHvSrd6hwvVcFJUdL9oJbeXLMxxCG /TB/9dCkHdGaoyBlc64V11lz9BRAviBTBoFVwBkh0+bsxlj0umJxIBmbIlbXKBxm L5gSV4DsXANt4qxU8earPS1Mmb2z/RX3yOsRyFTiXywchrB6NYjKnkhZXYbpfSpq Tf4GWhIua4SUwXMVUSHORbRWlgzOH8Q= -----END CERTIFICATE-----Generated at Fri Apr 17 19:31:35 2026 by rpki-client