$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/663e90a8-582d-388a-8c51-a87ffad4ecb2.roa File: 663e90a8-582d-388a-8c51-a87ffad4ecb2.roa (raw, json) Hash identifier: qOXVdGvcW524d3cpqKwofDvS48XAWyJrk2o2h537W0o= Subject key identifier: 12:43:C1:D2:C7:17:86:11:38:4E:0C:79:7F:62:4E:76:F4:DD:35:54 Certificate issuer: /CN=10aa04f0-7421-4813-bfda-269303d05d1d Certificate serial: 010D0C9F4328584D65152A29661A4EBC65B4D380 Authority key identifier: 4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/663e90a8-582d-388a-8c51-a87ffad4ecb2.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 77 IP address blocks: 204.9.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:2a:29:66:1a:4e:bc:65:b4:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10aa04f0-7421-4813-bfda-269303d05d1d Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=ad8c6947-9489-4fef-be6d-ae3662a34e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:24:be:31:49:7d:63:73:7b:35:8f:2b:8a:93: 91:8d:16:71:32:5f:01:dd:83:ba:c4:c4:2c:ee:9c: 57:61:19:b1:83:fd:8a:fa:a1:8e:9d:97:b7:25:ad: 0e:c6:a1:26:f9:27:c1:15:90:c4:2c:24:ac:16:fd: 51:29:8d:a6:a1:94:1d:ef:0a:21:68:a4:11:ae:67: b1:67:08:43:37:cb:27:f2:bf:3d:d8:75:b5:df:0f: 75:28:11:6f:99:52:d9:7f:46:47:f8:f9:b2:29:c4: 38:2b:a0:55:80:16:bb:0f:32:33:36:18:4f:c7:ff: a7:46:e7:b9:0c:92:fd:3b:45:98:10:cd:d7:2c:82: 61:aa:2d:2b:97:d9:1a:ea:59:ae:65:de:5c:91:9b: b9:be:00:48:da:07:8e:b7:54:76:83:b8:67:6b:58: 95:dd:18:9e:ab:32:81:11:3c:83:12:c3:e5:56:e3: b0:88:4e:be:53:d4:f4:0a:10:7c:a0:35:a9:15:a0: 2d:84:ed:6d:30:22:32:2a:08:89:ed:cb:92:cb:5c: fd:51:18:7b:ce:66:0d:43:65:1b:01:03:19:d1:d3: 16:74:ea:ce:59:c3:35:a6:fa:43:d8:58:80:25:dc: 9f:a1:2f:24:f9:b0:08:00:58:51:a9:19:ca:8c:2c: 80:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:43:C1:D2:C7:17:86:11:38:4E:0C:79:7F:62:4E:76:F4:DD:35:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/663e90a8-582d-388a-8c51-a87ffad4ecb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl X509v3 Authority Key Identifier: keyid:4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer sbgp-ipAddrBlock: critical IPv4: 204.9.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:8f:56:33:be:2d:ce:f0:41:00:ff:b5:85:b3:b3:fa:64:93: 73:cf:2a:58:9d:23:d3:9b:96:16:42:5d:31:4b:2e:e6:48:83: 66:a0:ca:4d:5d:72:65:57:ec:69:8f:97:e0:29:f1:01:8f:52: 09:e5:ea:1d:76:e2:af:ef:3c:db:b0:b4:4a:56:32:55:a3:5d: 15:f8:52:a1:47:90:f3:2b:d1:5c:df:be:e2:6b:ef:1b:dd:bd: 6b:8b:56:02:e2:49:7d:e9:a2:54:fa:54:30:8a:26:dd:86:92: b9:f0:75:2c:fb:76:57:8e:52:29:54:10:da:9d:77:70:cc:0c: fc:7c:af:54:bf:7f:03:00:05:20:b8:a9:6c:30:50:9b:f6:47: 24:c2:3d:42:04:15:db:48:4c:21:fc:6a:f6:6b:6a:65:d8:22: e6:17:1a:70:29:26:cd:36:2c:98:72:ec:90:b2:d7:11:56:9e: 51:00:b2:c1:9d:de:bd:ad:88:bd:62:e5:16:5e:96:0e:90:b5: 83:7b:9d:3d:7c:cd:14:06:a1:48:5d:f8:b1:6f:09:44:8e:c7: 13:3a:29:77:bf:5a:dd:cc:67:81:8a:44:1d:b5:9a:29:d5:23: ab:f7:47:8e:4e:be:6c:94:35:78:9e:92:c7:4b:94:0f:77:a8: 2c:e7:97:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFSopZhpOvGW004AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBhYTA0ZjAtNzQyMS00ODEzLWJmZGEtMjY5MzAzZDA1 ZDFkMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk YWQ4YzY5NDctOTQ4OS00ZmVmLWJlNmQtYWUzNjYyYTM0ZTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyS+MUl9Y3N7NY8ripORjRZxMl8B3YO6xMQs 7pxXYRmxg/2K+qGOnZe3Ja0OxqEm+SfBFZDELCSsFv1RKY2moZQd7wohaKQRrmex ZwhDN8sn8r892HW13w91KBFvmVLZf0ZH+PmyKcQ4K6BVgBa7DzIzNhhPx/+nRue5 DJL9O0WYEM3XLIJhqi0rl9ka6lmuZd5ckZu5vgBI2geOt1R2g7hna1iV3RieqzKB ETyDEsPlVuOwiE6+U9T0ChB8oDWpFaAthO1tMCIyKgiJ7cuSy1z9URh7zmYNQ2Ub AQMZ0dMWdOrOWcM1pvpD2FiAJdyfoS8k+bAIAFhRqRnKjCyAGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJDwdLHF4YROE4MeX9iTnb03TVUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMGFh MDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkzMDNkMDVkMWQvNjYzZTkwYTgtNTgyZC0z ODhhLThjNTEtYTg3ZmZhZDRlY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTBhYTA0ZjAtNzQyMS00ODEzLWJm ZGEtMjY5MzAzZDA1ZDFkLzEwYWEwNGYwLTc0MjEtNDgxMy1iZmRhLTI2OTMwM2Qw NWQxZC5jcmwwHwYDVR0jBBgwFoAUTGfGK5MkpuRq99aLqn2ln2oTfgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMGFhMDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkz MDNkMDVkMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACePVjO+Lc7wQQD/tYWzs/pkk3PPKlidI9OblhZCXTFLLuZIg2agyk1d cmVX7GmPl+Ap8QGPUgnl6h124q/vPNuwtEpWMlWjXRX4UqFHkPMr0VzfvuJr7xvd vWuLVgLiSX3polT6VDCKJt2GkrnwdSz7dleOUilUENqdd3DMDPx8r1S/fwMABSC4 qWwwUJv2RyTCPUIEFdtITCH8avZramXYIuYXGnApJs02LJhy7JCy1xFWnlEAssGd 3r2tiL1i5RZelg6QtYN7nT18zRQGoUhd+LFvCUSOxxM6KXe/Wt3MZ4GKRB21minV I6v3R45OvmyUNXieksdLlA93qCznl38= -----END CERTIFICATE-----Generated at Fri Apr 17 20:53:52 2026 by rpki-client