$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/cc126209-aeb3-363b-92cb-8a40229b5b5c.roa File: cc126209-aeb3-363b-92cb-8a40229b5b5c.roa (raw, json) Hash identifier: +MXiO3TR+k29/HsDTPF0HOtGWJ9tc/PLACRsUuL9rqU= Subject key identifier: 9F:01:4B:49:D3:D1:18:ED:51:FB:58:85:37:28:AE:8F:B8:E4:79:2A Certificate issuer: /CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Certificate serial: 010D0C9F4328584D7F9A84A19720D139152DAC40 Authority key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/cc126209-aeb3-363b-92cb-8a40229b5b5c.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 395927 IP address blocks: 172.83.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:84:a1:97:20:d1:39:15:2d:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=7bd5a3d3-5bcb-4d92-9f5d-7d4f2026f3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7a:67:5f:a9:8d:22:01:e4:da:43:75:f7:b9: 32:bf:a8:91:59:b2:b2:96:f8:9b:4a:38:25:e6:e0: 01:d0:f8:91:5a:b9:a2:4c:f9:a9:f7:db:2e:93:74: d4:09:c3:80:6f:49:7a:1e:a8:e7:9b:96:e0:67:c8: 2d:76:76:04:f6:de:01:5a:aa:d3:6e:d9:2a:44:b5: 2d:4d:f7:3c:c0:1b:98:3f:9e:bf:6b:c9:6d:02:66: 13:4b:3f:de:63:11:c6:af:cd:c4:91:45:68:67:2a: 35:2d:a6:ff:32:ac:74:45:cf:49:2e:97:e4:18:29: 59:37:c6:d3:3d:03:cf:6d:46:4a:a5:ea:0a:59:f8: 24:00:ad:29:12:68:e5:49:57:b3:31:f9:f8:7b:74: 90:c8:0e:94:e5:b0:53:87:b6:e2:39:aa:35:fa:64: 80:a3:b7:13:93:a0:27:6d:a5:e5:81:ca:84:f7:9e: a0:49:cf:70:d7:88:e6:58:d9:1f:36:8f:3e:25:16: e5:43:8b:45:64:01:9f:5e:2d:bf:42:04:20:3b:e2: 2f:1a:7b:0b:9c:de:08:61:09:77:bd:99:36:ea:81: 0c:e0:3b:fc:24:9b:5a:f5:a4:f9:46:e1:de:1d:32: 36:3d:91:bb:0c:06:15:b3:81:a8:a4:30:b6:56:54: 2d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:01:4B:49:D3:D1:18:ED:51:FB:58:85:37:28:AE:8F:B8:E4:79:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/cc126209-aeb3-363b-92cb-8a40229b5b5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl X509v3 Authority Key Identifier: keyid:88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer sbgp-ipAddrBlock: critical IPv4: 172.83.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:3d:9f:18:6f:d7:30:4d:5b:e2:9a:1b:c7:f7:78:63:4c:13: cc:f5:ab:86:fe:d4:31:c5:f1:d7:54:b9:3c:e6:d7:c2:ec:4c: 23:d9:15:6f:eb:86:ba:de:b7:e6:3e:75:a3:3c:7e:c9:2a:d0: 97:3d:ac:4a:77:a0:ae:80:c0:c5:17:df:91:c7:2b:fb:b3:a8: 41:20:b0:6e:9f:a3:6c:2d:0a:7b:04:5f:00:63:1c:23:7e:c5: c7:51:db:de:05:a9:74:7c:19:7d:f3:92:bc:ff:be:a6:28:79: 7d:f9:41:7e:61:f3:15:f8:b5:5f:99:be:33:c9:8a:8f:e5:d6: 36:9f:26:96:46:c4:ce:db:3b:b4:be:2e:de:de:ab:98:05:53: ef:67:f5:e9:54:b7:cf:53:59:fa:19:e0:ac:1a:fe:cf:3a:e5: 67:59:31:7c:cb:78:b3:23:4f:cd:63:c1:c3:f9:ee:6e:24:04: 87:e7:67:4b:3e:02:52:b8:0e:9f:b0:74:f6:30:e4:ab:bc:6f: 3a:5b:9b:d2:13:f1:37:a2:fd:b3:ae:2a:b4:bc:ca:03:bd:28: d4:a4:fc:05:e2:90:4b:22:84:3c:02:37:6c:fb:92:f2:39:15: 37:20:41:e1:a5:35:2d:8a:4a:de:7c:c0:d8:a0:06:77:05:c2: 07:f1:1e:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/moShlyDRORUtrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2NTVhYWYtNzZmNC00YmFiLWI0ZjctOGZiMjNjM2Q0 MDExMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk N2JkNWEzZDMtNWJjYi00ZDkyLTlmNWQtN2Q0ZjIwMjZmM2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXpnX6mNIgHk2kN197kyv6iRWbKylvibSjgl 5uAB0PiRWrmiTPmp99suk3TUCcOAb0l6Hqjnm5bgZ8gtdnYE9t4BWqrTbtkqRLUt Tfc8wBuYP56/a8ltAmYTSz/eYxHGr83EkUVoZyo1Lab/Mqx0Rc9JLpfkGClZN8bT PQPPbUZKpeoKWfgkAK0pEmjlSVezMfn4e3SQyA6U5bBTh7biOao1+mSAo7cTk6An baXlgcqE956gSc9w14jmWNkfNo8+JRblQ4tFZAGfXi2/QgQgO+IvGnsLnN4IYQl3 vZk26oEM4Dv8JJta9aT5RuHeHTI2PZG7DAYVs4GopDC2VlQtvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8BS0nT0RjtUftYhTcoro+45HkqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1 NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2MzZDQwMTEvY2MxMjYyMDktYWViMy0z NjNiLTkyY2ItOGE0MDIyOWI1YjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2M2NTVhYWYtNzZmNC00YmFiLWI0 ZjctOGZiMjNjM2Q0MDExLzNjNjU1YWFmLTc2ZjQtNGJhYi1iNGY3LThmYjIzYzNk NDAxMS5jcmwwHwYDVR0jBBgwFoAUiHOJW9dIB54yw37e57iTyJjsLBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIy M2MzZDQwMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI09nxhv1zBNW+KaG8f3eGNME8z1q4b+1DHF8ddUuTzm18LsTCPZFW/r hrret+Y+daM8fskq0Jc9rEp3oK6AwMUX35HHK/uzqEEgsG6fo2wtCnsEXwBjHCN+ xcdR294FqXR8GX3zkrz/vqYoeX35QX5h8xX4tV+ZvjPJio/l1jafJpZGxM7bO7S+ Lt7eq5gFU+9n9elUt89TWfoZ4Kwa/s865WdZMXzLeLMjT81jwcP57m4kBIfnZ0s+ AlK4Dp+wdPYw5Ku8bzpbm9IT8Tei/bOuKrS8ygO9KNSk/AXikEsihDwCN2z7kvI5 FTcgQeGlNS2KSt58wNigBncFwgfxHrE= -----END CERTIFICATE-----Generated at Fri Apr 17 14:17:41 2026 by rpki-client