$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/842ce387-8918-38c2-8a38-4d294a77d361.roa File: 842ce387-8918-38c2-8a38-4d294a77d361.roa (raw, json) Hash identifier: ypQYCXXS9GpdRpggYUzEEK9i7TeJtDgytSP4RJ0FI8k= Subject key identifier: 88:1E:7A:D8:72:8A:E8:94:C6:5C:47:F5:C3:D3:A0:03:B3:20:F6:10 Certificate issuer: /CN=a68ef886-c437-4b77-8d56-b917b6150d9a Certificate serial: 010D0C9F4328584D7A052DE2C379D2C5D6F33D80 Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/842ce387-8918-38c2-8a38-4d294a77d361.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 91 IP address blocks: 146.8.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:2d:e2:c3:79:d2:c5:d6:f3:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=aeacfc63-534e-4e8a-982d-54b65bc6170f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:90:68:bb:d3:32:40:62:ae:24:30:ad:0a:e4: 77:0a:be:1e:4d:8a:b0:22:7a:ef:00:0c:75:c0:6e: 47:e1:75:88:3d:29:05:8d:a4:c1:4b:1b:03:35:30: be:09:01:12:06:0f:c2:ae:52:4d:39:ba:b4:99:7a: a0:54:42:67:42:af:e3:a4:40:d7:11:83:04:6c:3a: dd:38:d7:a1:9f:7c:a0:aa:a7:41:63:79:87:bc:1d: 25:9d:ab:7e:c5:fb:17:9c:d1:f2:67:1d:8a:df:84: 1e:71:5a:99:cf:8f:8e:2f:81:c8:a7:2e:63:b8:6d: 8c:67:ef:22:62:0a:fe:01:ae:82:35:9b:3a:77:64: 72:63:5f:10:05:dd:12:c8:a2:3a:bd:1c:1f:35:52: 55:1c:7a:26:35:d1:8f:ea:99:e4:c5:ff:e6:82:23: e6:b9:7d:10:b8:8a:49:da:8d:a6:cb:a4:de:93:57: 2c:bb:bd:ae:12:17:eb:e9:fa:1a:b7:4d:18:14:28: 10:b9:59:3d:be:d9:1c:d1:05:cd:4c:32:9e:9b:03: 22:6f:16:20:8c:14:2b:82:ec:b6:a8:db:9d:d1:fa: f1:a2:d5:d2:be:d2:c2:f3:4a:93:96:97:59:aa:75: f4:f1:04:d9:f1:79:88:8e:48:1f:77:50:21:99:3d: 50:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1E:7A:D8:72:8A:E8:94:C6:5C:47:F5:C3:D3:A0:03:B3:20:F6:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/842ce387-8918-38c2-8a38-4d294a77d361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl X509v3 Authority Key Identifier: keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer sbgp-ipAddrBlock: critical IPv4: 146.8.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ba:5c:80:54:a0:7a:19:38:08:13:cc:8f:d8:5d:a6:df:08: 04:72:74:21:40:ac:f4:b6:4d:a4:b6:81:60:56:28:ab:3c:9e: cc:19:a6:8d:58:36:91:63:95:47:0b:78:ae:09:0e:29:ee:dc: 4c:52:63:62:70:4d:22:35:0d:c5:81:0c:7c:4e:33:75:44:66: f0:af:3b:cd:3c:6c:f4:f0:72:b9:2e:1d:14:f7:0b:5d:14:79: ca:a3:f8:6b:55:b5:d1:15:42:a5:97:cf:81:d4:14:4a:49:df: 8e:ed:d6:dc:1c:db:ab:a2:05:8d:a4:cd:d9:9d:5b:76:ef:8e: b5:50:22:d5:01:68:2b:fd:05:4b:93:af:a4:59:ee:27:d0:fa: 03:6e:b2:17:80:19:65:28:99:c6:00:49:40:25:75:ea:81:ae: 14:39:e2:98:ec:f2:91:27:17:2e:eb:e3:63:d8:8e:b9:81:80: de:9f:dd:a7:83:db:5b:6d:d3:dd:85:fd:71:41:74:03:4b:12: f9:f9:11:5e:89:05:81:28:d3:4d:6e:c2:43:d3:71:83:15:77: 69:0a:68:ce:16:a9:4a:ee:f1:7c:29:20:fe:16:96:6a:94:61: 42:77:ae:a3:d7:11:2b:79:5b:bc:b1:1c:a6:35:db:1e:6d:28: 35:bc:97:98 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE16BS3iw3nSxdbzPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4ZWY4ODYtYzQzNy00Yjc3LThkNTYtYjkxN2I2MTUw ZDlhMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk YWVhY2ZjNjMtNTM0ZS00ZThhLTk4MmQtNTRiNjViYzYxNzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpBou9MyQGKuJDCtCuR3Cr4eTYqwInrvAAx1 wG5H4XWIPSkFjaTBSxsDNTC+CQESBg/CrlJNObq0mXqgVEJnQq/jpEDXEYMEbDrd ONehn3ygqqdBY3mHvB0lnat+xfsXnNHyZx2K34QecVqZz4+OL4HIpy5juG2MZ+8i Ygr+Aa6CNZs6d2RyY18QBd0SyKI6vRwfNVJVHHomNdGP6pnkxf/mgiPmuX0QuIpJ 2o2my6Tek1csu72uEhfr6foat00YFCgQuVk9vtkc0QXNTDKemwMibxYgjBQrguy2 qNud0frxotXSvtLC80qTlpdZqnX08QTZ8XmIjkgfd1AhmT1QXQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIgeethyiuiUxlxH9cPToAOzIPYQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjhl Zjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3YjYxNTBkOWEvODQyY2UzODctODkxOC0z OGMyLThhMzgtNGQyOTRhNzdkMzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTY4ZWY4ODYtYzQzNy00Yjc3LThk NTYtYjkxN2I2MTUwZDlhL2E2OGVmODg2LWM0MzctNGI3Ny04ZDU2LWI5MTdiNjE1 MGQ5YS5jcmwwHwYDVR0jBBgwFoAUfAnor+6RefUILLfICjw4Y9TiHA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjhlZjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3 YjYxNTBkOWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkggwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAi7pcgFSgehk4CBPMj9hdpt8IBHJ0IUCs9LZNpLaBYFYoqzyezBmmjVg2 kWOVRwt4rgkOKe7cTFJjYnBNIjUNxYEMfE4zdURm8K87zTxs9PByuS4dFPcLXRR5 yqP4a1W10RVCpZfPgdQUSknfju3W3Bzbq6IFjaTN2Z1bdu+OtVAi1QFoK/0FS5Ov pFnuJ9D6A26yF4AZZSiZxgBJQCV16oGuFDnimOzykScXLuvjY9iOuYGA3p/dp4Pb W23T3YX9cUF0A0sS+fkRXokFgSjTTW7CQ9NxgxV3aQpozhapSu7xfCkg/haWapRh Qneuo9cRK3lbvLEcpjXbHm0oNbyXmA== -----END CERTIFICATE-----Generated at Fri Apr 17 17:21:25 2026 by rpki-client