$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa File: fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa (raw, json) Hash identifier: W47Wfixmk14KrZA/OH99yi0jNYRelxwCzEcqmThPLCI= Subject key identifier: 1C:3C:4A:03:8C:28:10:CC:D3:F4:92:BB:E9:F9:F9:B4:AE:5B:31:2E Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945 Certificate serial: 010D0C9F4328584D703FE3BCD334E3312307AD80 Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 16509 IP address blocks: 192.28.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:e3:bc:d3:34:e3:31:23:07:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=842e7a70-535a-4f5d-8ec1-1d4b3bb4b6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1d:13:f2:13:d1:29:3a:43:43:06:95:78:99: b7:f0:ee:8e:2b:a1:3e:fb:14:76:e1:0a:68:6b:98: 15:e2:34:ac:3a:53:35:bd:0c:46:d1:b3:53:7e:00: 36:d5:23:04:f0:c1:f2:ea:e0:d0:bf:e6:ca:d2:ff: 0e:e6:f2:5e:71:83:4e:69:ac:e8:8b:dc:96:ae:7e: 9e:05:07:bf:66:1d:25:32:15:84:a2:61:64:ba:97: 64:a9:f9:43:2a:3c:3e:94:f1:6f:52:7a:34:68:35: b7:19:c2:37:43:b1:33:c8:e6:b9:76:9d:ea:f2:14: 82:26:54:66:d4:07:75:62:5c:23:ef:c5:df:c3:b2: b5:d5:01:f1:31:44:82:46:5b:78:9b:8c:ea:54:f1: be:3c:5a:2a:14:de:53:d7:fa:ce:37:a4:d5:ea:c0: 2d:a8:37:a6:fb:75:52:b4:62:2e:a8:de:9b:ac:a2: aa:49:eb:5b:45:fb:f0:dc:ea:81:c4:ce:50:88:b4: 87:60:52:23:ed:ea:de:db:22:1c:2d:b7:f3:c9:23: 03:63:a3:72:d9:71:a6:53:d1:f6:c7:fc:ae:bd:aa: b9:10:ec:1c:79:3e:27:ad:4e:7e:d9:35:d7:95:e1: d4:e1:f0:da:1b:16:e7:22:37:36:ac:96:94:7f:09: d4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3C:4A:03:8C:28:10:CC:D3:F4:92:BB:E9:F9:F9:B4:AE:5B:31:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl X509v3 Authority Key Identifier: keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer sbgp-ipAddrBlock: critical IPv4: 192.28.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:36:4b:4d:00:99:c9:54:30:84:35:10:7a:8e:9e:12:cf:b7: 65:f7:d9:0b:a6:7b:52:2d:e7:a1:87:95:89:ae:d2:bc:f4:70: fb:e9:07:42:17:52:d2:85:52:e3:5b:47:02:15:61:af:fd:db: 3c:ca:60:df:8b:96:27:9b:56:d1:53:96:de:f3:f4:8f:a6:07: 73:5a:31:5e:7e:45:bd:e9:4b:1f:f8:bc:7e:75:f6:8f:c1:3c: 7d:81:74:0c:e8:c3:41:d6:0a:9f:84:03:32:c3:f8:9a:d7:e4: 54:83:d6:3b:4e:cb:29:d7:ed:1a:13:df:2e:e1:b7:54:0a:a5: c4:cb:f9:20:96:0e:e5:58:25:88:e5:5a:e7:4a:7c:9b:fe:e9: d3:60:23:24:dd:f9:21:fe:92:02:1f:21:b5:84:d5:f6:0f:54: e4:49:c8:ae:21:16:c0:4f:5a:68:bf:45:8b:4f:0f:e3:88:e6: 1f:7a:f3:be:3e:2c:79:1c:d0:b1:4b:b3:d2:43:d3:96:b7:f2: 9d:b4:e6:f2:c3:1f:70:d0:24:d2:ac:84:5d:c8:86:f1:7b:c5: 77:5b:ac:84:1d:80:73:68:0c:64:f7:94:d5:56:cc:51:2b:00: dc:da:d6:39:0e:3a:09:f5:1b:2d:14:81:8a:80:0c:d0:6c:e6: 07:b1:6b:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP+O80zTjMSMHrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi OTQ1MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk ODQyZTdhNzAtNTM1YS00ZjVkLThlYzEtMWQ0YjNiYjRiNmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB0T8hPRKTpDQwaVeJm38O6OK6E++xR24Qpo a5gV4jSsOlM1vQxG0bNTfgA21SME8MHy6uDQv+bK0v8O5vJecYNOaazoi9yWrn6e BQe/Zh0lMhWEomFkupdkqflDKjw+lPFvUno0aDW3GcI3Q7EzyOa5dp3q8hSCJlRm 1Ad1Ylwj78Xfw7K11QHxMUSCRlt4m4zqVPG+PFoqFN5T1/rON6TV6sAtqDem+3VS tGIuqN6brKKqSetbRfvw3OqBxM5QiLSHYFIj7ere2yIcLbfzySMDY6Ny2XGmU9H2 x/yuvaq5EOwceT4nrU5+2TXXleHU4fDaGxbnIjc2rJaUfwnUawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBw8SgOMKBDM0/SSu+n5+bSuWzEuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2 ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvZmIzY2VjM2MtZTNmOC0z MGI0LWFkNmUtNWVjZWRhMTA5OTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwBwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY2S00AmclUMIQ1EHqOnhLPt2X32Qume1It56GHlYmu0rz0cPvpB0IX UtKFUuNbRwIVYa/92zzKYN+LliebVtFTlt7z9I+mB3NaMV5+Rb3pSx/4vH519o/B PH2BdAzow0HWCp+EAzLD+JrX5FSD1jtOyynX7RoT3y7ht1QKpcTL+SCWDuVYJYjl WudKfJv+6dNgIyTd+SH+kgIfIbWE1fYPVORJyK4hFsBPWmi/RYtPD+OI5h96874+ LHkc0LFLs9JD05a38p205vLDH3DQJNKshF3IhvF7xXdbrIQdgHNoDGT3lNVWzFEr ANza1jkOOgn1Gy0UgYqADNBs5gexa98= -----END CERTIFICATE-----Generated at Fri Apr 17 14:33:31 2026 by rpki-client