$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/d0a2e19b-797c-3dcd-bfa3-7bfc5eb8d4d4.roa File: d0a2e19b-797c-3dcd-bfa3-7bfc5eb8d4d4.roa (raw, json) Hash identifier: EfIJJAljT7GHF52lyodc9FaGmystIul6e9PqyRdtAqU= Subject key identifier: FE:76:F8:F2:07:50:DA:56:05:88:77:96:6F:7E:80:98:25:36:8D:12 Certificate issuer: /CN=21428d3a-0040-4c60-9202-cd68b2fd51de Certificate serial: 010D0C9F4328584D6AAAADFE9DC1FCAC5EFF9080 Authority key identifier: 3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/d0a2e19b-797c-3dcd-bfa3-7bfc5eb8d4d4.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 14618 IP address blocks: 198.207.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:ad:fe:9d:c1:fc:ac:5e:ff:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21428d3a-0040-4c60-9202-cd68b2fd51de Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=bb133a17-1c6c-4ab0-906e-f79ff3357ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:27:d4:69:fd:b3:29:d0:b6:df:1a:b3:af:4b: 06:7e:bd:c8:07:0a:b0:c0:78:86:96:3e:e7:27:06: 6b:5e:ef:f9:82:2e:8b:ae:57:90:82:9d:5f:df:ec: 30:92:44:08:11:da:8d:9b:40:c6:bc:d4:45:5e:51: 7a:30:05:b9:3a:4a:97:11:e1:96:20:f0:b9:13:0a: 19:3d:68:df:da:6f:09:fd:2c:66:1b:58:1e:a2:8d: 32:88:6d:01:5b:34:5d:5c:51:7d:11:1f:6c:d6:e0: 6c:13:30:28:92:bb:ee:e9:c9:ca:d7:55:83:3a:f3: b0:b1:e9:3c:55:50:e3:7a:ed:2f:78:eb:ef:a0:dd: d9:84:2b:97:ff:2a:d7:8b:e6:ab:64:eb:ed:cc:8f: 0a:8d:2b:b2:ea:0a:45:4d:83:cc:b8:5a:a2:65:5a: ed:50:46:e1:d0:24:55:f6:28:c0:90:20:dd:0f:43: 8e:f2:cf:01:34:94:47:5e:90:de:97:3f:1a:47:32: f0:ff:b9:6a:a3:da:a4:fb:5e:2b:14:27:3a:ef:a2: 13:e3:73:42:36:9c:9c:ee:76:f1:17:a2:26:2e:79: fd:f8:5e:1f:6e:84:a4:c1:92:ab:7a:26:38:50:8c: 8d:a3:e0:f9:9e:f0:84:b7:95:d1:be:00:f0:47:7b: 42:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:76:F8:F2:07:50:DA:56:05:88:77:96:6F:7E:80:98:25:36:8D:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/d0a2e19b-797c-3dcd-bfa3-7bfc5eb8d4d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl X509v3 Authority Key Identifier: keyid:3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer sbgp-ipAddrBlock: critical IPv4: 198.207.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:a8:4c:98:27:35:cf:be:0f:75:91:88:0a:39:6d:28:6c:0f: e0:36:b5:ef:ef:18:37:47:34:09:57:a4:62:58:11:a5:cc:cc: 6f:49:da:73:e6:9c:8e:86:43:9c:c4:cc:43:de:01:11:03:f3: 25:37:05:f2:1b:f8:e2:52:bc:68:7f:57:90:13:3f:97:cd:8d: 93:aa:e5:5e:69:28:88:b9:7f:7a:0e:ac:f2:f0:35:0b:33:99: 61:9a:32:f5:98:3f:28:f3:99:1f:82:08:7c:e1:04:f9:96:ef: bb:fd:c3:54:2e:96:23:48:74:3e:1c:60:5a:12:6c:67:2a:24: f0:65:6e:e3:73:ff:d9:23:b5:36:3f:dd:f9:5e:9a:46:40:8f: 86:51:89:ed:46:71:9b:a2:b2:c4:bd:bd:e0:40:15:f6:8a:0a: a7:70:b1:5c:77:8a:2a:40:3a:f4:4d:8a:74:3c:18:09:cf:70: af:13:fb:a0:69:f0:4b:50:61:30:a7:6a:aa:e8:a7:01:d9:96: bd:56:d4:4e:9b:24:8d:22:30:6d:b1:75:e6:17:f5:20:0a:20: 53:60:2f:6a:3e:b6:3a:48:58:8d:82:12:54:cb:cb:61:0c:85: 49:2f:6f:4b:a0:3f:a9:29:f4:43:a7:55:c8:e2:d5:9a:29:33: 57:54:4b:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqq3+ncH8rF7/kIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE0MjhkM2EtMDA0MC00YzYwLTkyMDItY2Q2OGIyZmQ1 MWRlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk YmIxMzNhMTctMWM2Yy00YWIwLTkwNmUtZjc5ZmYzMzU3ZWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyfUaf2zKdC23xqzr0sGfr3IBwqwwHiGlj7n JwZrXu/5gi6LrleQgp1f3+wwkkQIEdqNm0DGvNRFXlF6MAW5OkqXEeGWIPC5EwoZ PWjf2m8J/SxmG1geoo0yiG0BWzRdXFF9ER9s1uBsEzAokrvu6cnK11WDOvOwsek8 VVDjeu0veOvvoN3ZhCuX/yrXi+arZOvtzI8KjSuy6gpFTYPMuFqiZVrtUEbh0CRV 9ijAkCDdD0OO8s8BNJRHXpDelz8aRzLw/7lqo9qk+14rFCc676IT43NCNpyc7nbx F6ImLnn9+F4fboSkwZKreiY4UIyNo+D5nvCEt5XRvgDwR3tCZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP52+PIHUNpWBYh3lm9+gJglNo0SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTQy OGQzYS0wMDQwLTRjNjAtOTIwMi1jZDY4YjJmZDUxZGUvZDBhMmUxOWItNzk3Yy0z ZGNkLWJmYTMtN2JmYzVlYjhkNGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjE0MjhkM2EtMDA0MC00YzYwLTky MDItY2Q2OGIyZmQ1MWRlLzIxNDI4ZDNhLTAwNDAtNGM2MC05MjAyLWNkNjhiMmZk NTFkZS5jcmwwHwYDVR0jBBgwFoAUOqs5Kv2S/OJ7+tDn3ypExz44Pv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTQyOGQzYS0wMDQwLTRjNjAtOTIwMi1jZDY4 YjJmZDUxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxs+pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSoTJgnNc++D3WRiAo5bShsD+A2te/vGDdHNAlXpGJYEaXMzG9J2nPm nI6GQ5zEzEPeARED8yU3BfIb+OJSvGh/V5ATP5fNjZOq5V5pKIi5f3oOrPLwNQsz mWGaMvWYPyjzmR+CCHzhBPmW77v9w1QuliNIdD4cYFoSbGcqJPBlbuNz/9kjtTY/ 3flemkZAj4ZRie1GcZuissS9veBAFfaKCqdwsVx3iipAOvRNinQ8GAnPcK8T+6Bp 8EtQYTCnaqropwHZlr1W1E6bJI0iMG2xdeYX9SAKIFNgL2o+tjpIWI2CElTLy2EM hUkvb0ugP6kp9EOnVcji1ZopM1dUS4g= -----END CERTIFICATE-----Generated at Fri Apr 17 06:33:16 2026 by rpki-client