$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/7cf1b155-1ef2-3673-9779-9ab9f58972da.roa File: 7cf1b155-1ef2-3673-9779-9ab9f58972da.roa (raw, json) Hash identifier: 71/41SFwUi7V6UGs5NAt6V1pY9SrO9X9ZQSMjM6F9Po= Subject key identifier: 1C:31:48:E5:53:F1:21:9A:3A:06:6E:3A:70:09:06:67:10:FA:67:B3 Certificate issuer: /CN=cc39a973-cf2e-44b1-984a-6596dc0b6963 Certificate serial: 010D0C9F4328584D746FCC2B48890A42D2D9C380 Authority key identifier: 45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/7cf1b155-1ef2-3673-9779-9ab9f58972da.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 4476 IP address blocks: 192.68.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:cc:2b:48:89:0a:42:d2:d9:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=20152125-ab37-4b6c-9708-b4aac09d3f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:11:ac:9b:25:e8:bd:fe:22:6c:ee:f8:a1:20: 19:08:35:da:80:6b:bc:e1:05:c7:27:80:cb:41:11: 02:15:e4:13:0c:90:67:aa:e2:46:27:c8:dc:03:8b: 51:d6:be:95:06:f6:16:7a:fa:d3:ca:35:84:aa:6b: 69:be:bb:e3:14:54:06:39:65:53:8b:6c:3f:b9:91: b2:e2:9b:bc:0b:1e:24:ee:10:7e:7a:dc:d8:3a:32: a4:9e:89:c3:86:0a:59:9c:83:18:4c:c4:c3:98:71: 3f:76:f5:a0:d9:a7:48:8c:8e:53:c7:0b:52:e7:71: bc:35:41:aa:59:d0:1c:e8:1a:21:b4:f1:19:fb:0f: f5:f9:4c:16:1c:ed:ba:f6:7d:13:98:bf:34:e1:20: 53:5b:62:0b:c7:66:cb:6d:8f:4a:43:00:81:c4:52: 88:54:15:e2:ec:9f:d4:bf:50:17:3b:20:39:e6:c1: cc:4c:b2:8f:e0:c8:ea:22:21:87:e0:ca:06:e5:95: b3:5f:33:19:f5:ff:03:e6:b5:65:78:52:38:63:34: 19:cb:56:73:2d:1e:52:3a:fd:36:a2:6e:11:e6:b9: cb:7c:14:bd:6f:68:d3:76:fa:7c:b8:5d:b3:d9:0f: ea:37:37:29:7e:71:07:2a:b0:45:97:9a:ca:cf:e8: 4c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:31:48:E5:53:F1:21:9A:3A:06:6E:3A:70:09:06:67:10:FA:67:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/7cf1b155-1ef2-3673-9779-9ab9f58972da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl X509v3 Authority Key Identifier: keyid:45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer sbgp-ipAddrBlock: critical IPv4: 192.68.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:8b:6c:6f:9a:d3:1d:8e:52:03:17:16:01:ea:2e:71:48:fd: 29:66:9b:4e:5f:4d:81:4d:14:e4:7d:8e:bd:eb:9e:92:e9:d2: dd:e9:28:1e:f5:cd:f9:6b:48:84:c5:71:02:8f:08:70:ff:d8: 5d:bd:d3:95:48:6c:22:17:25:7e:0c:da:d7:f1:e8:63:51:cd: 19:64:39:53:a6:f6:44:ab:b4:51:e9:68:00:9a:9f:4d:c4:52: 5c:74:2e:d1:5d:89:90:27:6d:cf:0c:6e:72:12:0c:05:0f:52: ca:38:b1:04:68:9c:2f:53:52:13:10:18:f6:c1:eb:3d:0d:4a: 2b:be:7b:76:d2:cc:b8:1b:2c:05:40:d2:3f:3a:a7:57:46:73: 31:d3:88:d5:1d:9a:d8:55:b3:ff:41:51:b3:03:aa:d1:42:82: fb:d3:ed:b9:d1:82:9c:7c:6f:e1:2f:36:6c:f3:5b:9e:45:1c: c9:c9:30:70:d0:de:41:d7:16:7a:40:4f:72:74:04:ec:b8:a6: 85:15:d0:24:87:57:06:76:aa:af:60:b7:2e:4d:43:d6:01:74: 98:28:41:1a:ea:f8:ae:cb:2d:03:c1:51:84:ec:75:48:63:91: 90:a4:2d:f8:f3:65:26:53:97:66:15:06:2e:da:ce:e4:15:b1: c6:6e:5e:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b8wrSIkKQtLZw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzOWE5NzMtY2YyZS00NGIxLTk4NGEtNjU5NmRjMGI2 OTYzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk MjAxNTIxMjUtYWIzNy00YjZjLTk3MDgtYjRhYWMwOWQzZjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBGsmyXovf4ibO74oSAZCDXagGu84QXHJ4DL QRECFeQTDJBnquJGJ8jcA4tR1r6VBvYWevrTyjWEqmtpvrvjFFQGOWVTi2w/uZGy 4pu8Cx4k7hB+etzYOjKknonDhgpZnIMYTMTDmHE/dvWg2adIjI5TxwtS53G8NUGq WdAc6BohtPEZ+w/1+UwWHO269n0TmL804SBTW2ILx2bLbY9KQwCBxFKIVBXi7J/U v1AXOyA55sHMTLKP4MjqIiGH4MoG5ZWzXzMZ9f8D5rVleFI4YzQZy1ZzLR5SOv02 om4R5rnLfBS9b2jTdvp8uF2z2Q/qNzcpfnEHKrBFl5rKz+hMnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwxSOVT8SGaOgZuOnAJBmcQ+mezMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jYzM5 YTk3My1jZjJlLTQ0YjEtOTg0YS02NTk2ZGMwYjY5NjMvN2NmMWIxNTUtMWVmMi0z NjczLTk3NzktOWFiOWY1ODk3MmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2MzOWE5NzMtY2YyZS00NGIxLTk4 NGEtNjU5NmRjMGI2OTYzL2NjMzlhOTczLWNmMmUtNDRiMS05ODRhLTY1OTZkYzBi Njk2My5jcmwwHwYDVR0jBBgwFoAURaGd2u0urqKIyrHJ+roNx0DS2I8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jYzM5YTk3My1jZjJlLTQ0YjEtOTg0YS02NTk2 ZGMwYjY5NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwERGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCLbG+a0x2OUgMXFgHqLnFI/Slmm05fTYFNFOR9jr3rnpLp0t3pKB71 zflrSITFcQKPCHD/2F2905VIbCIXJX4M2tfx6GNRzRlkOVOm9kSrtFHpaACan03E Ulx0LtFdiZAnbc8MbnISDAUPUso4sQRonC9TUhMQGPbB6z0NSiu+e3bSzLgbLAVA 0j86p1dGczHTiNUdmthVs/9BUbMDqtFCgvvT7bnRgpx8b+EvNmzzW55FHMnJMHDQ 3kHXFnpAT3J0BOy4poUV0CSHVwZ2qq9gty5NQ9YBdJgoQRrq+K7LLQPBUYTsdUhj kZCkLfjzZSZTl2YVBi7azuQVscZuXsA= -----END CERTIFICATE-----Generated at Fri Apr 17 16:41:30 2026 by rpki-client