$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/d38d2318-c196-35bd-940f-43a4eb1b63c8.roa File: d38d2318-c196-35bd-940f-43a4eb1b63c8.roa (raw, json) Hash identifier: 5+4BlPMUD9FDbFFUJ4jqajyiRdXcEIiDYitwNkbmHUM= Subject key identifier: CC:B7:BD:92:37:48:40:AD:F1:89:29:85:0D:60:E4:24:70:33:E8:93 Certificate issuer: /CN=a68ef886-c437-4b77-8d56-b917b6150d9a Certificate serial: 010D0C9F4328584D55BCBA45C92258D28959B5F0 Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/d38d2318-c196-35bd-940f-43a4eb1b63c8.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 91 IP address blocks: 204.76.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:ba:45:c9:22:58:d2:89:59:b5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=b6112b00-345a-48c4-82fe-f609d614bc7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c0:e5:62:f5:f3:0a:df:19:b0:9e:71:56:85: 4d:27:21:8c:07:eb:c1:27:59:a8:96:3b:96:dc:0d: 86:08:a2:22:79:ff:26:c7:fe:76:db:5e:c9:da:6e: ea:32:3c:48:52:d8:d3:20:cf:8a:da:0f:d2:3d:e4: 34:45:c8:dc:e0:a2:84:de:c4:e0:e2:db:f2:8b:b8: 4b:9a:25:2d:8d:42:0a:ed:ce:52:b0:4f:cf:79:d6: ba:5f:6b:cf:55:00:17:6d:33:d7:cc:28:80:bf:3e: 48:3f:dd:e3:6c:74:66:8f:05:56:c6:0d:16:36:cd: dc:0c:5d:3f:79:47:c1:a0:e2:d5:20:f4:73:aa:77: fe:59:30:6e:33:dd:b4:8e:d1:5b:c6:67:52:32:5e: 99:48:aa:0f:c8:ea:2b:bc:8a:8f:86:40:a2:ef:20: 58:b3:29:bf:8a:53:39:cc:af:5a:83:4f:8e:79:49: f0:8a:cd:3e:f1:6a:ad:98:ee:a7:76:15:24:8d:f5: a3:4a:8e:9e:44:4c:ce:fd:74:fd:a9:ca:c1:58:f0: 01:ee:cc:a1:e5:5a:79:d0:af:20:a6:9c:27:b0:4f: 49:bd:b5:4f:8f:cb:9b:18:af:e4:05:b5:02:47:dd: 60:aa:ca:db:58:f1:03:14:55:5c:b0:c1:e6:40:27: 12:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B7:BD:92:37:48:40:AD:F1:89:29:85:0D:60:E4:24:70:33:E8:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/d38d2318-c196-35bd-940f-43a4eb1b63c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl X509v3 Authority Key Identifier: keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer sbgp-ipAddrBlock: critical IPv4: 204.76.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:7a:86:07:cb:0a:f6:04:a3:43:ab:1b:cf:b7:67:69:b9:2a: f0:5a:10:3e:d5:37:81:d9:7a:e7:fd:4b:77:dc:cc:1f:38:ce: 06:7b:06:fc:1d:c3:79:dd:84:8a:7e:a6:68:a2:ad:12:d9:04: 4f:bd:e0:3c:2e:33:8a:2a:e8:97:ad:78:e2:21:54:74:6e:5e: ba:af:85:ea:8c:c0:71:90:56:54:60:c5:bd:a8:6e:0e:d4:a3: 82:c9:14:d8:66:f2:a3:eb:b5:ce:da:e8:b6:ff:1e:d6:c0:02: 51:61:9d:2d:cd:5f:93:17:8c:b9:7c:f3:74:65:9b:71:98:9f: a4:b2:cb:e7:3e:a7:25:6c:44:0e:c4:55:c4:96:18:df:e8:e6: c6:0b:4c:e1:45:c3:21:29:01:53:0e:c7:5a:83:92:15:c9:a6: be:8b:6b:0a:97:6d:d3:0d:33:a8:5b:8d:27:24:98:47:c4:ad: 6a:3c:1e:bc:08:c8:9d:f9:40:70:82:e1:07:4c:7e:26:1d:c3: 4f:0c:bd:1a:01:9d:74:19:91:cd:42:ba:b3:86:cc:5f:70:62: 4e:63:4c:f4:e3:80:40:8f:08:cf:8a:67:32:39:19:00:d4:9b: c3:44:3a:a1:71:bc:f4:32:92:11:fe:66:99:98:48:44:9c:c5: 37:6b:20:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLpFySJY0olZtfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4ZWY4ODYtYzQzNy00Yjc3LThkNTYtYjkxN2I2MTUw ZDlhMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YjYxMTJiMDAtMzQ1YS00OGM0LTgyZmUtZjYwOWQ2MTRiYzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsDlYvXzCt8ZsJ5xVoVNJyGMB+vBJ1moljuW 3A2GCKIief8mx/52217J2m7qMjxIUtjTIM+K2g/SPeQ0Rcjc4KKE3sTg4tvyi7hL miUtjUIK7c5SsE/Peda6X2vPVQAXbTPXzCiAvz5IP93jbHRmjwVWxg0WNs3cDF0/ eUfBoOLVIPRzqnf+WTBuM920jtFbxmdSMl6ZSKoPyOorvIqPhkCi7yBYsym/ilM5 zK9ag0+OeUnwis0+8WqtmO6ndhUkjfWjSo6eREzO/XT9qcrBWPAB7syh5Vp50K8g ppwnsE9JvbVPj8ubGK/kBbUCR91gqsrbWPEDFFVcsMHmQCcS4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMy3vZI3SECt8YkphQ1g5CRwM+iTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjhl Zjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3YjYxNTBkOWEvZDM4ZDIzMTgtYzE5Ni0z NWJkLTk0MGYtNDNhNGViMWI2M2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTY4ZWY4ODYtYzQzNy00Yjc3LThk NTYtYjkxN2I2MTUwZDlhL2E2OGVmODg2LWM0MzctNGI3Ny04ZDU2LWI5MTdiNjE1 MGQ5YS5jcmwwHwYDVR0jBBgwFoAUfAnor+6RefUILLfICjw4Y9TiHA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjhlZjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3 YjYxNTBkOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzEzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFB6hgfLCvYEo0OrG8+3Z2m5KvBaED7VN4HZeuf9S3fczB84zgZ7Bvwd w3ndhIp+pmiirRLZBE+94DwuM4oq6JeteOIhVHRuXrqvheqMwHGQVlRgxb2obg7U o4LJFNhm8qPrtc7a6Lb/HtbAAlFhnS3NX5MXjLl883Rlm3GYn6Syy+c+pyVsRA7E VcSWGN/o5sYLTOFFwyEpAVMOx1qDkhXJpr6LawqXbdMNM6hbjSckmEfErWo8HrwI yJ35QHCC4QdMfiYdw08MvRoBnXQZkc1CurOGzF9wYk5jTPTjgECPCM+KZzI5GQDU m8NEOqFxvPQykhH+ZpmYSEScxTdrIBk= -----END CERTIFICATE-----Generated at Fri Apr 17 21:16:12 2026 by rpki-client