$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/43fa5e64-29a9-3a99-9db0-4c40481d11d4.roa File: 43fa5e64-29a9-3a99-9db0-4c40481d11d4.roa (raw, json) Hash identifier: AYIO+KqkZV1xm8nFkNsYrTzwXoH5k+I69gfO0zoCCv4= Subject key identifier: 1A:E3:E5:77:E1:1E:70:6E:B6:96:06:3C:6A:55:99:16:D4:8B:EE:78 Certificate issuer: /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Certificate serial: 010D0C9F4328584D59EA60C3E57493BFFF607DC0 Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/43fa5e64-29a9-3a99-9db0-4c40481d11d4.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 399861 IP address blocks: 172.84.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:60:c3:e5:74:93:bf:ff:60:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=5f74294c-454f-4351-ac34-0ee925613671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2f:e9:b0:67:fd:73:9a:fd:5e:dd:e0:eb:dc: 0c:dd:29:de:9d:10:ae:17:1b:1c:65:f7:42:7f:34: 88:00:85:d1:b8:65:96:a6:33:5e:28:27:49:08:e0: 3f:f2:88:75:5a:8f:88:54:15:55:d6:7a:be:93:5f: 33:d0:5b:82:a6:99:66:f8:c4:5b:2e:c2:9b:43:00: a4:ed:71:b1:32:c0:d9:5e:29:bb:43:c6:bd:dc:a7: e6:a0:37:3c:4f:b0:7b:a8:7f:a3:ec:e4:a9:19:4e: b1:c6:19:4d:e1:02:37:cc:22:c2:8c:58:6f:5d:7b: 1d:26:55:1d:e2:9b:36:41:70:14:13:dd:ad:52:63: ef:16:ff:ca:a0:99:18:15:e4:d1:b2:79:47:8a:fc: 21:c6:d0:24:19:f0:41:a0:4c:27:ac:f4:0c:17:11: 0b:d0:bb:5b:49:5d:cb:d7:b8:03:a8:d1:f3:b9:2b: 52:c1:f4:dc:6f:cc:fe:4e:a9:03:72:09:b3:df:1e: b4:c0:e4:0d:98:75:3e:2a:77:de:24:6f:0c:2f:68: 32:35:9c:dc:ec:ce:fd:4b:ea:9f:c2:80:9a:bc:ee: 64:75:86:0d:5d:18:d3:d0:80:13:23:f3:2f:83:86: 2d:c4:25:06:fa:77:24:4c:1b:12:49:d8:8a:2b:ff: 1b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E3:E5:77:E1:1E:70:6E:B6:96:06:3C:6A:55:99:16:D4:8B:EE:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/43fa5e64-29a9-3a99-9db0-4c40481d11d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl X509v3 Authority Key Identifier: keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer sbgp-ipAddrBlock: critical IPv4: 172.84.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:61:f8:5c:81:9e:a0:dc:9c:53:9b:3f:27:ef:a8:0f:0b:df: ef:1d:f3:bd:cd:ae:dc:42:a9:bf:a3:7c:13:74:67:5c:66:bc: c7:86:e9:db:f2:a1:97:86:eb:f5:f2:4e:f6:2f:9b:ed:f2:f8: 01:cb:82:d0:96:e1:b3:fe:d1:08:5f:cc:c7:19:f6:f3:2f:2b: 86:ee:ee:b1:74:e5:55:15:ff:97:9a:a7:0e:4a:58:d2:79:1d: d3:ca:ac:ef:05:74:c6:06:01:d8:55:b8:e0:98:b1:2b:cc:2c: 3c:6d:3f:82:60:e5:fd:17:2b:36:ac:0c:ae:73:7b:88:c7:9e: 5c:70:15:f9:f2:2b:9d:18:5a:e6:33:a3:45:e1:31:6d:c9:f1: 55:b5:fe:df:40:6b:7f:66:ea:dd:1f:89:39:c2:de:dc:17:71: ac:ed:11:fe:d9:42:a1:9f:e8:4f:73:7b:dd:dd:20:df:91:06: e2:fc:4b:d5:2a:ec:36:32:a8:e2:0f:8d:db:38:84:79:9b:6a: 56:f4:c6:7e:71:09:b3:1c:6e:0c:c5:21:2c:4f:20:ac:c2:60: f3:b7:3c:d3:42:6b:a9:ca:a0:72:f4:7f:67:2c:31:79:31:53: 7b:6e:20:74:98:62:52:01:c4:d3:2e:08:c2:bc:40:36:c7:d4: 75:3a:82:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6mDD5XSTv/9gfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz NGQ2MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NWY3NDI5NGMtNDU0Zi00MzUxLWFjMzQtMGVlOTI1NjEzNjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly/psGf9c5r9Xt3g69wM3SnenRCuFxscZfdC fzSIAIXRuGWWpjNeKCdJCOA/8oh1Wo+IVBVV1nq+k18z0FuCpplm+MRbLsKbQwCk 7XGxMsDZXim7Q8a93KfmoDc8T7B7qH+j7OSpGU6xxhlN4QI3zCLCjFhvXXsdJlUd 4ps2QXAUE92tUmPvFv/KoJkYFeTRsnlHivwhxtAkGfBBoEwnrPQMFxEL0LtbSV3L 17gDqNHzuStSwfTcb8z+TqkDcgmz3x60wOQNmHU+KnfeJG8ML2gyNZzc7M79S+qf woCavO5kdYYNXRjT0IATI/Mvg4YtxCUG+nckTBsSSdiKK/8bsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrj5XfhHnButpYGPGpVmRbUi+54MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvNDNmYTVlNjQtMjlhOS0z YTk5LTlkYjAtNGM0MDQ4MWQxMWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0 YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1 MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2 MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFROMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADph+FyBnqDcnFObPyfvqA8L3+8d873NrtxCqb+jfBN0Z1xmvMeG6dvy oZeG6/XyTvYvm+3y+AHLgtCW4bP+0QhfzMcZ9vMvK4bu7rF05VUV/5eapw5KWNJ5 HdPKrO8FdMYGAdhVuOCYsSvMLDxtP4Jg5f0XKzasDK5ze4jHnlxwFfnyK50YWuYz o0XhMW3J8VW1/t9Aa39m6t0fiTnC3twXcaztEf7ZQqGf6E9ze93dIN+RBuL8S9Uq 7DYyqOIPjds4hHmbalb0xn5xCbMcbgzFISxPIKzCYPO3PNNCa6nKoHL0f2csMXkx U3tuIHSYYlIBxNMuCMK8QDbH1HU6gnA= -----END CERTIFICATE-----Generated at Fri Apr 17 17:55:49 2026 by rpki-client