$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa File: b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa (raw, json) Hash identifier: W7YBnpZ/dNwXpkP7hVwE3OY2RrYQCcBOzt9qQ7Wlzq8= Subject key identifier: 29:B5:18:63:3D:9A:74:16:06:68:C2:2D:7A:04:E8:D6:CF:46:93:AF Certificate issuer: /CN=f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46 Certificate serial: 010D0C9F4328584D7F9A831E8EA99BA972937200 Authority key identifier: 0D:44:BD:AB:7C:21:FB:0B:72:23:7C:72:55:45:47:A7:E9:EF:40:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 142.9.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:83:1e:8e:a9:9b:a9:72:93:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=de8685c5-c8bd-4a80-8fa1-14d2b85e42c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d9:80:7c:6e:65:7f:04:7c:4b:17:d3:3f:fa: fc:0d:a8:8f:38:56:cc:6b:ea:be:be:23:6b:25:2d: 72:e3:e8:1d:89:44:b5:27:6d:54:81:d2:e1:5e:8a: 26:de:c2:cc:c3:7b:1f:e3:30:8c:0b:3c:90:bd:53: a9:65:24:e4:5b:16:fe:a7:23:4c:3b:ce:25:cc:1c: 8f:80:40:5a:59:79:af:64:47:72:1f:4c:bb:42:47: 38:24:c5:b2:b1:4d:a8:ad:0e:14:68:9f:73:6a:78: 23:7c:62:68:49:5e:ee:02:9a:18:4c:90:6e:f8:7f: ea:2c:8c:34:65:9e:fb:31:b3:0b:8e:6d:d6:d3:f0: 00:68:33:9e:73:50:cc:b0:8d:3d:fd:97:28:55:65: 30:de:0d:1f:73:92:13:3c:8d:48:fc:67:fb:74:9b: 06:1e:91:3b:cf:93:e9:d7:e9:80:22:d2:bb:72:6c: 7c:8c:6c:12:80:85:97:a6:93:2a:f5:d7:41:da:a4: 8a:62:13:5b:71:21:80:d3:c3:41:4e:6c:c3:79:dc: c5:e4:2b:5e:b4:69:7c:3c:a8:d5:72:fc:15:a1:61: 9c:2f:e0:8f:1a:d0:cb:a3:24:f7:b6:60:3f:f3:59: f6:cd:ee:f3:dc:3d:12:85:fe:ba:5e:44:a5:39:03: a1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B5:18:63:3D:9A:74:16:06:68:C2:2D:7A:04:E8:D6:CF:46:93:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.crl X509v3 Authority Key Identifier: keyid:0D:44:BD:AB:7C:21:FB:0B:72:23:7C:72:55:45:47:A7:E9:EF:40:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer sbgp-ipAddrBlock: critical IPv4: 142.9.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:4b:7b:e4:cb:31:ad:2d:b6:f3:77:a8:2e:a5:17:09:7f:ec: a6:5c:a6:9c:50:fe:4d:f9:5a:a2:36:c8:21:a7:35:b9:97:57: 44:33:81:c2:98:3e:70:7c:93:ef:2a:a3:93:ea:ba:f4:23:6d: cb:eb:4f:ca:0b:38:75:ad:b5:e9:4e:27:15:17:41:26:ef:27: 54:46:72:43:12:6a:60:cd:28:00:a2:b0:b7:be:4c:84:5d:7e: 84:d9:fc:a3:95:00:50:63:1b:07:c6:81:68:99:79:63:02:05: 48:22:37:d7:e4:aa:35:d3:81:7c:64:07:bd:1d:6d:87:c4:0a: df:d5:5b:bd:62:f8:d2:12:77:1f:55:43:42:a6:9b:b7:f2:41: 5d:6f:fc:24:08:6a:7e:19:56:14:69:77:d9:de:aa:14:fd:a8: 2b:8c:f3:44:4f:89:1e:54:5a:89:2c:85:d8:9a:ec:20:7c:84: e8:c5:6a:e7:f4:72:fc:d5:28:0e:d6:e9:c0:90:fa:35:2d:2a: f4:cd:49:26:87:fb:6a:2a:07:d8:a2:51:f4:76:96:99:f2:cc: 9d:72:91:d4:80:0d:37:0a:dd:11:7d:46:aa:8e:8a:5f:ab:b0: 1e:62:b8:b6:fc:27:6c:c2:8f:3e:0b:69:64:12:d0:28:36:a0: 60:aa:a6:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/moMejqmbqXKTcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjc4YzFhN2QtMWNkYi00ZTYzLWJhMzgtYWM1MGQxYTRk ZDQ2MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZGU4Njg1YzUtYzhiZC00YTgwLThmYTEtMTRkMmI4NWU0MmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNmAfG5lfwR8SxfTP/r8DaiPOFbMa+q+viNr JS1y4+gdiUS1J21UgdLhXoom3sLMw3sf4zCMCzyQvVOpZSTkWxb+pyNMO84lzByP gEBaWXmvZEdyH0y7Qkc4JMWysU2orQ4UaJ9zangjfGJoSV7uApoYTJBu+H/qLIw0 ZZ77MbMLjm3W0/AAaDOec1DMsI09/ZcoVWUw3g0fc5ITPI1I/Gf7dJsGHpE7z5Pp 1+mAItK7cmx8jGwSgIWXppMq9ddB2qSKYhNbcSGA08NBTmzDedzF5CtetGl8PKjV cvwVoWGcL+CPGtDLoyT3tmA/81n2ze7z3D0Shf66XkSlOQOhfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCm1GGM9mnQWBmjCLXoE6NbPRpOvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNzhj MWE3ZC0xY2RiLTRlNjMtYmEzOC1hYzUwZDFhNGRkNDYvYjE2OGE3ZDktZmVlNC0z ZjE3LTk4NmItNmJiN2JiZmM1ZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjc4YzFhN2QtMWNkYi00ZTYzLWJh MzgtYWM1MGQxYTRkZDQ2L2Y3OGMxYTdkLTFjZGItNGU2My1iYTM4LWFjNTBkMWE0 ZGQ0Ni5jcmwwHwYDVR0jBBgwFoAUDUS9q3wh+wtyI3xyVUVHp+nvQKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNzhjMWE3ZC0xY2RiLTRlNjMtYmEzOC1hYzUw ZDFhNGRkNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjgn/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBLe+TLMa0ttvN3qC6lFwl/7KZcppxQ/k35WqI2yCGnNbmXV0QzgcKY PnB8k+8qo5PquvQjbcvrT8oLOHWttelOJxUXQSbvJ1RGckMSamDNKACisLe+TIRd foTZ/KOVAFBjGwfGgWiZeWMCBUgiN9fkqjXTgXxkB70dbYfECt/VW71i+NISdx9V Q0Kmm7fyQV1v/CQIan4ZVhRpd9neqhT9qCuM80RPiR5UWokshdia7CB8hOjFauf0 cvzVKA7W6cCQ+jUtKvTNSSaH+2oqB9iiUfR2lpnyzJ1ykdSADTcK3RF9RqqOil+r sB5iuLb8J2zCjz4LaWQS0Cg2oGCqpnY= -----END CERTIFICATE-----Generated at Fri Apr 17 10:09:10 2026 by rpki-client