$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/42ea5e30-2a4b-3b08-b897-777e4100a774.roa File: 42ea5e30-2a4b-3b08-b897-777e4100a774.roa (raw, json) Hash identifier: S2O0OGO4cTMDFpU+Uvc1wwNSN/PeZChIyha9yRd2Pok= Subject key identifier: EB:91:70:D1:33:1C:25:20:64:B1:D9:9E:F9:C2:71:F9:86:D1:C0:FF Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Certificate serial: 010D0C9F4328584D7F9AA2F47DE522E6381F2280 Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/42ea5e30-2a4b-3b08-b897-777e4100a774.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 55126 IP address blocks: 198.124.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:a2:f4:7d:e5:22:e6:38:1f:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=1b1c2cef-862a-41b6-adf9-3f5a9a5b7a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:43:31:f7:be:fe:63:66:f9:77:90:76:bf:31: 03:85:c4:77:a7:b7:f2:c8:20:4e:05:04:1b:52:71: d4:80:05:79:2e:74:be:32:52:d4:95:e6:45:f2:f8: 25:7a:03:36:ae:5e:ed:8b:2d:91:50:f4:51:80:39: c8:62:05:13:8a:57:1a:a0:96:9e:0b:fe:20:25:22: 34:7b:e5:51:d5:25:8d:fa:f8:1e:a9:cb:be:af:aa: 25:07:9b:a2:43:59:5b:09:31:70:7c:2b:f2:4b:c0: 9c:c9:df:48:1d:2c:a4:bb:0b:80:35:f3:20:2d:d7: af:61:a7:03:59:74:89:6c:d9:e6:ca:88:30:df:0e: 9c:11:69:71:b8:41:97:eb:77:8f:fb:63:20:6d:e2: da:10:32:45:3c:3d:e2:35:db:6d:02:78:51:fc:7d: d5:34:33:4c:b6:ef:c4:f5:d7:c5:b5:57:33:fa:28: 3f:40:b6:94:49:7e:b5:ad:c8:af:91:db:c8:14:3d: 18:20:d5:d4:d8:b6:80:2b:88:66:94:72:2d:9d:48: b7:09:85:f1:1b:4f:91:c6:c5:b1:da:f7:3d:5c:a9: 1b:3f:29:1d:f1:9d:43:1f:2f:0d:ed:06:0a:f9:d4: bf:d3:33:db:64:a6:d5:7e:f8:ed:0a:c4:05:22:60: 85:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:91:70:D1:33:1C:25:20:64:B1:D9:9E:F9:C2:71:F9:86:D1:C0:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/42ea5e30-2a4b-3b08-b897-777e4100a774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl X509v3 Authority Key Identifier: keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer sbgp-ipAddrBlock: critical IPv4: 198.124.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:91:0c:26:8f:4a:cf:ea:55:a3:43:cf:67:b7:41:4d:31:ad: 0d:e4:4a:5f:04:4a:a2:8a:a3:3b:b7:67:32:b8:b8:61:a0:6d: 36:86:98:9a:20:8f:87:1e:06:bd:de:b8:7b:d2:0d:30:43:b4: 5d:19:0b:ca:b2:36:4e:28:2b:47:3f:91:05:d1:01:80:c7:e5: d0:b9:70:e1:8a:33:82:ed:20:6c:68:3d:c6:4e:6a:22:ca:64: f8:1a:5a:9a:ae:13:3a:f3:04:af:6e:3a:03:93:50:8b:50:e1: e8:80:67:b9:85:40:69:63:65:4a:56:3b:2b:c6:5a:ae:15:ea: 0e:2a:9d:74:18:89:30:6a:05:7e:6e:55:ce:1a:81:2b:fb:02: b5:ca:83:10:77:70:b5:c4:39:ed:53:f8:98:7f:5d:e4:8a:9c: 47:61:6d:80:f2:3c:66:b4:d4:51:d8:c5:b2:7f:68:e9:c0:af: e0:f2:10:d0:16:a5:a7:e1:41:59:ec:67:e4:1e:0b:d7:4b:1a: 37:8c:33:45:8b:58:eb:c0:86:62:50:c7:d7:2b:0a:1d:79:fc: 10:af:3b:fb:0c:14:bd:d9:b6:f6:bf:3e:b4:47:42:36:c3:e8: 19:6d:2c:5e:9a:89:b9:d8:db:59:39:9c:be:22:b3:bc:dc:b7: 3c:25:33:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mqL0feUi5jgfIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz ZmM1MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MWIxYzJjZWYtODYyYS00MWI2LWFkZjktM2Y1YTlhNWI3YTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkMx977+Y2b5d5B2vzEDhcR3p7fyyCBOBQQb UnHUgAV5LnS+MlLUleZF8vglegM2rl7tiy2RUPRRgDnIYgUTilcaoJaeC/4gJSI0 e+VR1SWN+vgeqcu+r6olB5uiQ1lbCTFwfCvyS8Ccyd9IHSykuwuANfMgLdevYacD WXSJbNnmyogw3w6cEWlxuEGX63eP+2MgbeLaEDJFPD3iNdttAnhR/H3VNDNMtu/E 9dfFtVcz+ig/QLaUSX61rcivkdvIFD0YINXU2LaAK4hmlHItnUi3CYXxG0+RxsWx 2vc9XKkbPykd8Z1DHy8N7QYK+dS/0zPbZKbVfvjtCsQFImCFeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuRcNEzHCUgZLHZnvnCcfmG0cD/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2 ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvNDJlYTVlMzAtMmE0Yi0z YjA4LWI4OTctNzc3ZTQxMDBhNzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2 MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxnxYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+RDCaPSs/qVaNDz2e3QU0xrQ3kSl8ESqKKozu3ZzK4uGGgbTaGmJog j4ceBr3euHvSDTBDtF0ZC8qyNk4oK0c/kQXRAYDH5dC5cOGKM4LtIGxoPcZOaiLK ZPgaWpquEzrzBK9uOgOTUItQ4eiAZ7mFQGljZUpWOyvGWq4V6g4qnXQYiTBqBX5u Vc4agSv7ArXKgxB3cLXEOe1T+Jh/XeSKnEdhbYDyPGa01FHYxbJ/aOnAr+DyENAW pafhQVnsZ+QeC9dLGjeMM0WLWOvAhmJQx9crCh15/BCvO/sMFL3Ztva/PrRHQjbD 6BltLF6aibnY21k5nL4is7zctzwlM/0= -----END CERTIFICATE-----Generated at Sat Apr 18 06:12:51 2026 by rpki-client