$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/18e749d1-f0e3-3f27-9598-de2eb7c53f65.roa File: 18e749d1-f0e3-3f27-9598-de2eb7c53f65.roa (raw, json) Hash identifier: +UGkwnwgdfky0gSR8c5Ygq9y2K409K7Q1nchN1agPaM= Subject key identifier: 1F:DA:BA:73:43:8D:51:04:F4:74:E0:4E:CC:C6:E2:D2:8D:4A:3E:9A Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Certificate serial: 010D0C9F4328584D67DFC0E34B44295B6F6A5300 Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/18e749d1-f0e3-3f27-9598-de2eb7c53f65.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 22709 IP address blocks: 199.101.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:c0:e3:4b:44:29:5b:6f:6a:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=8fbdf013-d0b4-48d4-ba6a-3a793c59062e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:41:d7:b1:04:bf:eb:ca:c1:0a:51:7a:0b:20: 2a:85:02:7e:71:6b:55:ff:34:00:8b:b4:de:67:de: 13:2f:e5:e6:52:4f:b7:5a:b9:f4:79:d5:4a:d8:c3: 58:24:2b:2c:ce:fe:62:57:5f:b3:8d:0d:0d:cd:6e: 67:6a:a4:de:56:5b:81:be:2f:f5:50:31:cc:88:cd: 07:c0:26:2e:fe:ca:35:36:74:8b:20:c6:f3:f5:2b: e0:60:73:c6:3e:5c:35:39:0d:36:85:3d:41:dc:a7: b4:21:c7:59:31:60:00:78:26:5a:3f:4d:bc:79:4f: 8a:67:fe:8d:71:a0:03:9d:0f:a1:ce:0b:16:8b:0c: b1:62:8e:dd:f2:f8:41:f3:73:63:30:b0:ac:c2:b5: 7c:5a:56:7e:fb:56:02:ed:1f:02:61:a7:0e:2e:73: 8c:4c:d4:a8:ee:e1:4b:36:de:d2:ed:7c:c9:15:b6: c8:87:d4:0e:8e:76:14:90:cc:2b:72:c0:45:16:5a: 45:f6:4a:1f:5d:c7:6c:20:4b:41:83:72:a2:01:32: fe:a7:65:4d:db:07:fe:6f:1b:fa:dd:cb:1b:6f:44: 7c:a1:0d:41:6c:62:ba:96:8b:5f:7f:11:52:e9:87: ec:64:37:59:1b:1e:d2:03:98:c3:50:26:92:95:13: e6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DA:BA:73:43:8D:51:04:F4:74:E0:4E:CC:C6:E2:D2:8D:4A:3E:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/18e749d1-f0e3-3f27-9598-de2eb7c53f65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl X509v3 Authority Key Identifier: keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer sbgp-ipAddrBlock: critical IPv4: 199.101.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:1b:81:9a:83:22:68:a1:a6:92:9f:bd:e4:8f:87:05:9f:03: 73:a4:02:20:ac:7c:31:64:b1:46:76:ad:68:af:6d:e1:c7:4d: d6:d8:6a:9c:55:6a:b8:35:f4:32:94:b3:45:fc:e7:cd:6c:e5: f4:55:b2:2d:2a:1e:42:52:5e:e0:ae:e1:52:ca:49:21:75:6e: 6e:ed:3a:03:fd:a2:a8:d2:a4:32:a7:27:f0:c7:6b:5a:04:c9: 96:a9:62:bb:36:f0:86:4c:06:22:cb:88:f1:7d:53:23:f0:84: 6a:d7:cd:fa:4b:e3:2a:3c:40:a6:95:27:ac:2a:9d:60:e4:85: e0:fc:e2:b2:41:26:50:47:54:9a:77:ae:bd:8d:78:0b:86:ab: 66:af:7e:81:b2:e1:08:c0:2b:37:26:0b:55:97:67:0f:ff:e9: eb:a0:34:6f:41:0c:84:39:68:1b:9d:c5:30:b0:ea:bb:3f:1c: 50:e5:ef:41:ec:8a:e6:63:62:53:ad:30:c9:95:b2:aa:de:cf: fd:fb:d1:38:e1:5a:69:e0:c9:6a:96:63:f2:81:d5:13:46:2d: dc:0d:ec:a3:43:b8:15:12:15:30:ae:e4:4f:36:93:21:cc:bd: 26:b7:6f:0f:bb:18:4f:c2:f3:f5:22:2c:46:4d:c6:2e:a8:46: 4b:25:51:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n38DjS0QpW29qUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1 ZmE3MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk OGZiZGYwMTMtZDBiNC00OGQ0LWJhNmEtM2E3OTNjNTkwNjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0HXsQS/68rBClF6CyAqhQJ+cWtV/zQAi7Te Z94TL+XmUk+3Wrn0edVK2MNYJCsszv5iV1+zjQ0NzW5naqTeVluBvi/1UDHMiM0H wCYu/so1NnSLIMbz9SvgYHPGPlw1OQ02hT1B3Ke0IcdZMWAAeCZaP028eU+KZ/6N caADnQ+hzgsWiwyxYo7d8vhB83NjMLCswrV8WlZ++1YC7R8CYacOLnOMTNSo7uFL Nt7S7XzJFbbIh9QOjnYUkMwrcsBFFlpF9kofXcdsIEtBg3KiATL+p2VN2wf+bxv6 3csbb0R8oQ1BbGK6lotffxFS6YfsZDdZGx7SA5jDUCaSlRPmKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/aunNDjVEE9HTgTszG4tKNSj6aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5 YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvMThlNzQ5ZDEtZjBlMy0z ZjI3LTk1OTgtZGUyZWI3YzUzZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2 MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw OWNmYjVmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2V4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcbgZqDImihppKfveSPhwWfA3OkAiCsfDFksUZ2rWivbeHHTdbYapxV arg19DKUs0X8581s5fRVsi0qHkJSXuCu4VLKSSF1bm7tOgP9oqjSpDKnJ/DHa1oE yZapYrs28IZMBiLLiPF9UyPwhGrXzfpL4yo8QKaVJ6wqnWDkheD84rJBJlBHVJp3 rr2NeAuGq2avfoGy4QjAKzcmC1WXZw//6eugNG9BDIQ5aBudxTCw6rs/HFDl70Hs iuZjYlOtMMmVsqrez/370TjhWmngyWqWY/KB1RNGLdwN7KNDuBUSFTCu5E82kyHM vSa3bw+7GE/C8/UiLEZNxi6oRkslUXU= -----END CERTIFICATE-----Generated at Fri Apr 17 18:45:35 2026 by rpki-client