$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cc83b72a-e8f7-3a69-bda4-a5eea7a6c565.roa File: cc83b72a-e8f7-3a69-bda4-a5eea7a6c565.roa (raw, json) Hash identifier: YaD21S8JWbbXLcF45NI4B2k0JDQhfKU4frWZxn9TFVk= Subject key identifier: E3:FC:55:0C:28:E2:D8:71:63:81:62:F5:6E:1D:40:14:A8:71:AB:95 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D667A50803E82367AB93D9A40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cc83b72a-e8f7-3a69-bda4-a5eea7a6c565.roa Signing time: Sun 05 Apr 2026 01:00:24 +0000 ROA not before: Sun 05 Apr 2026 01:00:24 +0000 ROA not after: Sat 04 Jul 2026 01:00:24 +0000 asID: 6079 IP address blocks: 216.133.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:7a:50:80:3e:82:36:7a:b9:3d:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 5 01:00:24 2026 GMT Not After : Jul 4 01:00:24 2026 GMT Subject: CN=afe302fb-5e64-4a32-a9db-669eea9764b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:83:e6:39:aa:7a:5c:6b:f6:71:c1:6c:a5:73: 38:ba:3e:73:07:c7:14:4b:b1:97:75:38:bd:b6:c0: fb:f7:fc:1b:a5:3f:b4:40:e4:d7:4f:67:49:93:c7: 97:84:9b:1f:89:27:97:c9:fa:0c:5e:c6:c0:a0:57: 65:94:88:71:d9:2f:27:9b:d8:19:1b:38:4a:73:eb: 5d:e5:f3:43:95:24:1d:4c:f5:98:08:3f:ad:cd:b2: 6d:37:3d:26:0f:6d:aa:ad:51:21:e3:71:0e:7b:65: 93:ea:e8:85:64:a2:3a:07:3f:c1:f0:c3:ea:85:17: cd:d3:89:e5:b4:f2:31:28:cc:28:52:76:8b:c2:f2: 5b:2b:36:1e:cc:db:cd:9c:a4:63:c8:4a:57:40:a9: 59:0b:0e:e9:79:e1:9b:3a:10:c6:7d:da:d5:75:13: f4:76:5f:37:1a:dc:67:8a:26:72:e0:f8:06:47:51: 5e:39:0e:fb:1b:84:bf:b0:5b:29:1c:2c:5c:46:33: b5:39:d4:09:c4:1a:da:22:0c:a0:63:79:17:1b:f8: 1d:af:3b:0f:2c:9f:31:db:9e:f0:e7:ba:0c:d2:38: f8:64:41:95:92:9b:c2:40:fe:9a:29:e5:7f:aa:cd: ce:08:97:70:ba:ec:27:a4:29:88:2d:92:ca:2e:31: 23:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FC:55:0C:28:E2:D8:71:63:81:62:F5:6E:1D:40:14:A8:71:AB:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cc83b72a-e8f7-3a69-bda4-a5eea7a6c565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.133.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:51:6c:5f:44:31:47:d9:dd:76:43:32:ae:ea:d0:47:db:fa: 5b:40:03:19:ef:22:4b:a2:b4:cc:5a:f2:92:fa:68:c4:c8:47: 2c:9c:fb:fa:15:b6:14:c4:af:e2:ad:6d:fb:32:61:72:d0:2e: 4d:4d:b7:68:7d:e3:55:89:ad:04:dc:db:26:a4:a6:ad:00:91: ba:15:1c:f2:85:7f:4f:1b:5b:ac:ff:c0:4e:ef:f1:71:ca:58: 21:9d:1d:7b:6d:af:8d:4a:78:18:d0:42:48:85:9a:ed:05:9a: 3c:7f:6b:48:52:2e:34:ef:78:91:e7:ed:42:16:77:87:d3:46: 64:1a:eb:82:1b:00:1a:9a:40:8a:e7:01:a7:07:36:45:67:5c: 38:e6:b9:e6:a3:88:a8:a6:de:36:77:6f:94:ac:73:33:95:07: 28:f3:77:04:88:fc:90:ef:f8:ce:8d:0a:98:a5:de:d7:fd:6c: d6:35:44:c2:f5:2e:18:bc:00:a9:4b:cc:a8:e1:4d:6f:76:a9: a3:32:c0:9f:5f:51:a5:d0:66:d5:7b:a3:8a:be:3b:81:75:d7: 80:bf:9a:50:de:ed:f8:ea:81:2d:cf:b5:a5:c4:b1:c0:00:45: c0:a0:29:ea:f4:a3:68:66:8f:6d:64:2d:20:4c:48:88:6d:f9: d9:d3:29:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1melCAPoI2erk9mkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk YWZlMzAyZmItNWU2NC00YTMyLWE5ZGItNjY5ZWVhOTc2NGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYPmOap6XGv2ccFspXM4uj5zB8cUS7GXdTi9 tsD79/wbpT+0QOTXT2dJk8eXhJsfiSeXyfoMXsbAoFdllIhx2S8nm9gZGzhKc+td 5fNDlSQdTPWYCD+tzbJtNz0mD22qrVEh43EOe2WT6uiFZKI6Bz/B8MPqhRfN04nl tPIxKMwoUnaLwvJbKzYezNvNnKRjyEpXQKlZCw7peeGbOhDGfdrVdRP0dl83Gtxn iiZy4PgGR1FeOQ77G4S/sFspHCxcRjO1OdQJxBraIgygY3kXG/gdrzsPLJ8x257w 57oM0jj4ZEGVkpvCQP6aKeV/qs3OCJdwuuwnpCmILZLKLjEjawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOP8VQwo4thxY4Fi9W4dQBSocauVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2M4M2I3MmEtZThmNy0z YTY5LWJkYTQtYTVlZWE3YTZjNTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2IWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNRbF9EMUfZ3XZDMq7q0Efb+ltAAxnvIkuitMxa8pL6aMTIRyyc+/oV thTEr+KtbfsyYXLQLk1Nt2h941WJrQTc2yakpq0AkboVHPKFf08bW6z/wE7v8XHK WCGdHXttr41KeBjQQkiFmu0Fmjx/a0hSLjTveJHn7UIWd4fTRmQa64IbABqaQIrn AacHNkVnXDjmueajiKim3jZ3b5SsczOVByjzdwSI/JDv+M6NCpil3tf9bNY1RML1 Lhi8AKlLzKjhTW92qaMywJ9fUaXQZtV7o4q+O4F114C/mlDe7fjqgS3PtaXEscAA RcCgKer0o2hmj21kLSBMSIht+dnTKSY= -----END CERTIFICATE-----Generated at Fri Apr 17 19:37:36 2026 by rpki-client