$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/effebbf7-ee2d-3137-8b68-780d284e81c1.roa File: effebbf7-ee2d-3137-8b68-780d284e81c1.roa (raw, json) Hash identifier: s9IrFLQJNe+vUtAmKIH87mQI80NwJXXe+9VDyyZJlL4= Subject key identifier: C4:2C:A0:36:42:37:E8:02:27:D5:B9:D0:AB:8F:9E:00:E3:56:73:7E Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584D80FFEE5650D5D2E3FA651CC0 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/effebbf7-ee2d-3137-8b68-780d284e81c1.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 10430 IP address blocks: 173.229.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:ee:56:50:d5:d2:e3:fa:65:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=d04ecf56-2b43-43d3-b61d-0ec01d458f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ac:c1:b6:d4:23:dc:e9:15:d5:84:87:65:d8: 64:a4:18:4a:85:a5:19:86:54:48:0e:cb:a8:cd:97: c0:09:bb:4e:50:63:9e:35:1a:a8:88:fe:4c:12:13: ba:fa:0e:12:1a:ef:4e:21:08:58:16:2f:1e:3d:7a: 85:0a:a6:ac:62:02:7f:72:ae:ab:f3:4b:af:54:27: 35:8d:6e:19:96:cd:8d:ef:f8:84:a8:f6:ea:ae:ee: f5:d2:86:cb:d9:95:0d:1c:f3:2e:cb:d7:38:c0:99: 7a:4c:fe:b8:ef:ff:91:6a:4c:7d:af:49:b5:26:fa: b2:11:09:24:91:dc:6f:36:de:2e:e6:40:65:a5:90: 42:fd:6e:83:f1:cd:bc:88:9a:96:1b:49:e8:20:f7: 4a:c5:6e:14:fa:ab:66:ac:32:23:37:70:89:f7:21: 9b:75:c9:e6:d6:1e:c2:48:f8:25:18:ec:91:3a:a4: 21:82:46:ca:b5:c9:7f:e0:3f:96:57:b7:77:79:9e: 92:ae:6d:a2:6c:ac:e8:6f:31:20:a4:ac:1c:78:dd: 02:25:6c:e7:b8:7a:f9:54:57:94:51:99:7d:a5:f2: 6c:e7:89:d5:0b:00:70:b3:c1:1b:d8:95:35:50:8a: a7:61:2c:18:fd:8d:35:ef:9a:18:e0:83:38:91:6b: d7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2C:A0:36:42:37:E8:02:27:D5:B9:D0:AB:8F:9E:00:E3:56:73:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/effebbf7-ee2d-3137-8b68-780d284e81c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 173.229.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:8a:9f:28:1f:f2:56:4d:bd:e1:24:c0:7a:e4:68:6c:a2:81: 5b:31:68:4c:19:70:47:87:b1:2a:26:1f:17:c9:94:0d:7a:e2: 6b:d2:79:02:50:78:03:37:74:e3:03:9e:1d:03:9f:42:af:d0: 85:92:d9:0a:62:06:bc:9c:2f:46:e1:cc:7a:2d:0a:60:91:fa: c0:40:ee:40:01:85:56:d3:4b:5c:14:19:45:97:13:76:88:cd: ad:13:30:d3:20:4f:23:dc:f8:a3:0b:03:34:e2:0c:bf:f2:e6: 0e:ed:64:7e:f5:9e:6e:de:cd:d6:02:77:08:fd:29:94:1a:90: 44:b0:f4:f6:4c:cf:7b:66:14:f6:54:42:fc:f4:7e:01:ef:75: 5a:4b:bb:e1:a3:7f:34:f3:e6:ed:71:e3:8a:d9:88:9e:b0:21: 74:24:28:26:b7:8c:15:e1:8e:1a:f2:f6:2f:2a:d8:2c:b4:4b: da:79:12:8d:ce:aa:bf:4d:59:1a:44:ea:d3:b6:63:57:6e:c4: 3f:d8:7b:78:4c:e9:66:a9:05:2f:5c:3f:49:49:9c:64:0d:3d: 2a:7f:fc:3b:73:10:2e:5c:ca:59:70:33:f3:a7:1b:69:f3:aa: 03:a1:cd:f1:6d:14:34:e5:5f:b3:b2:f6:20:fb:d1:77:2e:7b: 82:32:3b:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A/+5WUNXS4/plHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk ZDA0ZWNmNTYtMmI0My00M2QzLWI2MWQtMGVjMDFkNDU4ZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoazBttQj3OkV1YSHZdhkpBhKhaUZhlRIDsuo zZfACbtOUGOeNRqoiP5MEhO6+g4SGu9OIQhYFi8ePXqFCqasYgJ/cq6r80uvVCc1 jW4Zls2N7/iEqPbqru710obL2ZUNHPMuy9c4wJl6TP647/+Rakx9r0m1JvqyEQkk kdxvNt4u5kBlpZBC/W6D8c28iJqWG0noIPdKxW4U+qtmrDIjN3CJ9yGbdcnm1h7C SPglGOyROqQhgkbKtcl/4D+WV7d3eZ6Srm2ibKzobzEgpKwceN0CJWznuHr5VFeU UZl9pfJs54nVCwBws8Eb2JU1UIqnYSwY/Y0175oY4IM4kWvXmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQsoDZCN+gCJ9W50KuPngDjVnN+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvZWZmZWJiZjctZWUyZC0z MTM3LThiNjgtNzgwZDI4NGU4MWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFreUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSKnygf8lZNveEkwHrkaGyigVsxaEwZcEeHsSomHxfJlA164mvSeQJQ eAM3dOMDnh0Dn0Kv0IWS2QpiBrycL0bhzHotCmCR+sBA7kABhVbTS1wUGUWXE3aI za0TMNMgTyPc+KMLAzTiDL/y5g7tZH71nm7ezdYCdwj9KZQakESw9PZMz3tmFPZU Qvz0fgHvdVpLu+GjfzTz5u1x44rZiJ6wIXQkKCa3jBXhjhry9i8q2Cy0S9p5Eo3O qr9NWRpE6tO2Y1duxD/Ye3hM6WapBS9cP0lJnGQNPSp//DtzEC5cyllwM/OnG2nz qgOhzfFtFDTlX7Oy9iD70Xcue4IyO6k= -----END CERTIFICATE-----Generated at Fri Apr 17 20:12:34 2026 by rpki-client