$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa File: d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa (raw, json) Hash identifier: idklrHUuAIIiio0L9Ge2FPyTOnZPZWQBMpcMAYHadTg= Subject key identifier: CE:38:1D:B0:74:72:2A:E6:64:2D:43:39:9A:F4:2C:89:0B:88:46:96 Certificate issuer: /CN=2a85a41a-8114-4e04-abdb-a3a032b37a04 Certificate serial: 010D0C9F4328584D55BA4763D3330CC9CB79DA80 Authority key identifier: EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 32391 IP address blocks: 204.57.128.0/18 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:47:63:d3:33:0c:c9:cb:79:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85a41a-8114-4e04-abdb-a3a032b37a04 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=cd76d99a-7148-40ee-933b-d408642dd034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9f:88:13:bc:de:e9:07:33:c2:20:3f:0a:be: 63:d3:ea:e5:3b:2a:61:96:fc:50:3c:5e:40:0d:67: 57:6e:f0:97:28:62:8b:3f:d2:35:bf:03:f9:10:33: 04:b6:25:39:3a:34:3e:5f:24:47:ee:0b:8a:7d:5b: d9:ac:48:4a:f5:6b:58:a5:54:6c:e6:b9:55:e3:b0: 29:b4:c8:f8:2a:df:e6:d3:1c:32:15:2a:71:13:16: 8b:c4:a3:61:5f:b2:bf:f9:3d:1c:9d:27:78:8a:e9: 2b:66:e2:0a:c9:65:14:08:b5:7c:d3:92:61:36:17: a5:b9:e2:7b:db:6c:c7:81:10:5c:63:12:02:b5:c7: 54:f8:7a:94:8a:79:72:21:2d:e6:45:93:03:e5:48: ae:38:49:12:45:2e:41:c2:e3:06:0c:ba:d7:5f:f0: 1c:87:6f:29:87:f4:e9:12:db:c4:54:22:e6:c4:68: 46:8a:80:ba:ce:7e:51:95:9f:57:23:49:b2:4f:fe: 58:75:4f:d6:74:07:cd:17:a2:dc:20:43:6c:ed:98: c6:30:57:1c:49:4b:db:a4:d2:70:c9:04:dd:5d:8a: df:73:bd:a2:56:a2:84:b2:1a:d0:ac:5e:30:7e:4a: e7:5c:72:de:45:45:40:da:6e:86:7a:c5:48:2f:ff: 75:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:38:1D:B0:74:72:2A:E6:64:2D:43:39:9A:F4:2C:89:0B:88:46:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl X509v3 Authority Key Identifier: keyid:EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer sbgp-ipAddrBlock: critical IPv4: 204.57.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:a3:97:15:2a:bc:62:02:b4:90:76:e7:b0:52:4c:46:6f:6f: 8e:0c:95:b8:15:31:7d:9d:c6:a5:ab:02:b2:26:fc:92:a2:34: a0:0f:d0:43:d9:d5:92:4c:07:79:d2:9a:6f:fe:c5:28:a3:f1: 4d:d3:f5:82:04:33:ab:ed:2a:c1:bd:03:a3:72:df:ed:4d:0c: a8:fa:0f:08:84:a9:65:72:68:2a:54:2c:f9:f7:0d:c5:e4:45: 9b:89:12:bc:20:eb:2e:3e:b8:ad:fb:32:dd:d8:73:db:46:52: e3:76:5c:f4:88:8a:26:f0:39:4d:80:3c:29:aa:c8:27:43:7b: 08:33:9a:ec:83:f4:44:5b:2b:65:f4:aa:80:3b:1a:4e:07:88: 0b:49:17:bc:37:cc:2f:39:ee:b6:93:43:2a:ce:42:8e:3f:bb: ac:d0:a0:cf:e9:2a:f7:e3:69:47:43:20:22:b8:3e:0d:72:eb: f1:d4:23:84:31:5f:4d:ec:0d:16:5d:0b:86:0f:1f:f1:ea:31: 27:90:5e:cd:38:51:1c:45:a6:f5:66:a4:bc:31:a6:66:a6:c2: 0e:a2:8b:8b:30:76:0f:79:d8:6d:43:28:b9:cf:07:0b:76:71: a2:4a:bd:16:a6:7b:0d:00:1b:7f:ab:29:56:6f:01:4a:3f:93: ed:08:0a:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vukdj0zMMyct52oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NWE0MWEtODExNC00ZTA0LWFiZGItYTNhMDMyYjM3 YTA0MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk Y2Q3NmQ5OWEtNzE0OC00MGVlLTkzM2ItZDQwODY0MmRkMDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ+IE7ze6QczwiA/Cr5j0+rlOyphlvxQPF5A DWdXbvCXKGKLP9I1vwP5EDMEtiU5OjQ+XyRH7guKfVvZrEhK9WtYpVRs5rlV47Ap tMj4Kt/m0xwyFSpxExaLxKNhX7K/+T0cnSd4iukrZuIKyWUUCLV805JhNhelueJ7 22zHgRBcYxICtcdU+HqUinlyIS3mRZMD5UiuOEkSRS5BwuMGDLrXX/Ach28ph/Tp EtvEVCLmxGhGioC6zn5RlZ9XI0myT/5YdU/WdAfNF6LcIENs7ZjGMFccSUvbpNJw yQTdXYrfc72iVqKEshrQrF4wfkrnXHLeRUVA2m6GesVIL/91swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM44HbB0cirmZC1DOZr0LIkLiEaWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYTg1 YTQxYS04MTE0LTRlMDQtYWJkYi1hM2EwMzJiMzdhMDQvZDAwMTI5OTgtZTVkMy0z MmE5LWFkM2EtZGNkN2Y0NjE1NTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmE4NWE0MWEtODExNC00ZTA0LWFi ZGItYTNhMDMyYjM3YTA0LzJhODVhNDFhLTgxMTQtNGUwNC1hYmRiLWEzYTAzMmIz N2EwNC5jcmwwHwYDVR0jBBgwFoAU76oZ3vz/oGu+JzCMbTVq5IOpML4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYTg1YTQxYS04MTE0LTRlMDQtYWJkYi1hM2Ew MzJiMzdhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzDmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCjlxUqvGICtJB257BSTEZvb44MlbgVMX2dxqWrArIm/JKiNKAP0EPZ 1ZJMB3nSmm/+xSij8U3T9YIEM6vtKsG9A6Ny3+1NDKj6DwiEqWVyaCpULPn3DcXk RZuJErwg6y4+uK37Mt3Yc9tGUuN2XPSIiibwOU2APCmqyCdDewgzmuyD9ERbK2X0 qoA7Gk4HiAtJF7w3zC857raTQyrOQo4/u6zQoM/pKvfjaUdDICK4Pg1y6/HUI4Qx X03sDRZdC4YPH/HqMSeQXs04URxFpvVmpLwxpmamwg6ii4swdg952G1DKLnPBwt2 caJKvRamew0AG3+rKVZvAUo/k+0ICkw= -----END CERTIFICATE-----Generated at Fri Apr 17 23:36:31 2026 by rpki-client