$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/890db329-2478-3442-b6b3-ec84331a6a0a.roa File: 890db329-2478-3442-b6b3-ec84331a6a0a.roa (raw, json) Hash identifier: TjT3qW2NcanV0KN0264vXjThJQlMpQ6S/UMyXdgILnA= Subject key identifier: A3:75:FE:95:BB:69:1E:7F:96:5E:11:F8:30:C3:3C:A8:7D:1A:C6:76 Certificate issuer: /CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333 Certificate serial: 010D0C9F4328584D6C0FB75C742D9C9F6EB02880 Authority key identifier: E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/890db329-2478-3442-b6b3-ec84331a6a0a.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 198949 IP address blocks: 205.208.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:b7:5c:74:2d:9c:9f:6e:b0:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=778e87fd-3af9-41b3-9c5e-1e06acb4b7b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:09:85:2b:92:a8:55:37:79:4d:61:fc:22:ae: d4:c3:f7:d7:0b:b9:38:55:22:ff:99:c5:7a:0e:7b: 0f:49:37:49:79:6f:e3:46:63:46:ca:ee:38:ab:f4: 26:e9:d4:93:47:20:0a:63:8a:a9:0d:d6:3d:0f:9a: 39:9e:6d:6b:ee:b3:78:c4:d0:90:78:8d:67:36:bd: f1:ef:c1:ef:02:d0:6b:8b:ac:ac:67:22:b2:05:c5: 71:62:70:ce:d6:01:fd:3d:d3:55:85:ec:da:3e:e8: 00:dc:aa:2b:3f:f0:eb:49:74:a4:2e:4c:99:21:e0: 4b:70:bb:42:e5:7b:da:11:23:7e:6d:4c:3e:ad:e1: 95:1b:40:8a:d1:cf:e5:21:a9:c5:e6:c4:27:56:a9: bb:32:84:69:ab:9b:d6:8d:3a:04:f8:38:46:aa:86: 93:6d:68:f5:70:8a:2a:90:80:7c:f6:b0:97:09:3e: 1b:7e:b8:ef:dd:cd:47:2b:c9:cc:3a:2c:1b:53:07: 3a:08:aa:c2:c8:02:c6:dd:c8:7b:ec:81:39:ef:b6: 73:6e:c3:c9:ee:19:86:8f:0b:a0:2a:d4:f5:a2:a5: ba:7a:be:48:f1:ee:7d:5b:34:e4:0f:3e:cb:d0:68: 31:d8:5e:94:87:b0:88:06:8a:e5:4c:36:b4:e2:27: cb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:75:FE:95:BB:69:1E:7F:96:5E:11:F8:30:C3:3C:A8:7D:1A:C6:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/890db329-2478-3442-b6b3-ec84331a6a0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl X509v3 Authority Key Identifier: keyid:E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer sbgp-ipAddrBlock: critical IPv4: 205.208.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:70:04:88:ac:82:e5:af:0c:52:48:cc:6e:a3:12:b3:25:5e: 12:06:cf:b3:ff:3b:cf:33:d6:25:49:37:c9:7f:83:5e:ab:28: 84:e1:94:4e:98:11:fa:3e:79:91:fe:37:0e:76:27:e7:d8:1e: c9:3e:ec:fb:e3:3a:6b:ac:9a:90:49:79:9a:80:39:6d:18:c9: 8c:23:35:61:ac:aa:f9:43:53:3b:62:bb:61:f9:e7:cc:07:31: da:24:c4:a3:ba:bb:47:09:c9:59:04:11:e5:80:b4:e8:58:fb: 79:23:49:44:fc:28:44:36:04:48:df:4e:96:cb:e5:81:3b:d6: 59:8c:84:6f:3a:a5:c4:27:60:b9:8b:46:13:1c:90:66:fd:a8: 69:ad:ad:f9:0c:10:93:fd:d6:1e:ca:85:c0:db:a2:3a:8d:7a: 00:c3:cf:ab:d1:56:e8:04:bb:94:e6:7c:ec:ca:9d:a6:c5:bf: 60:6e:ea:43:fa:1e:b0:70:3f:74:bf:7f:d2:f6:11:36:40:b0: ca:b8:56:c3:fa:8e:bd:65:d7:4f:80:cf:2f:de:d4:74:63:7f: eb:40:2c:cd:4e:91:45:7a:43:3d:65:06:23:86:d1:47:29:fe: e4:e4:e4:72:20:92:2f:7a:7f:a0:49:06:6c:27:4f:b7:60:04: 2f:3b:82:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD7dcdC2cn26wKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyMjE1MGYtMmU2Zi00ZmM5LWIwZDMtNWE4ZTA5MDNi MzMzMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk Nzc4ZTg3ZmQtM2FmOS00MWIzLTljNWUtMWUwNmFjYjRiN2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQmFK5KoVTd5TWH8Iq7Uw/fXC7k4VSL/mcV6 DnsPSTdJeW/jRmNGyu44q/Qm6dSTRyAKY4qpDdY9D5o5nm1r7rN4xNCQeI1nNr3x 78HvAtBri6ysZyKyBcVxYnDO1gH9PdNVhezaPugA3KorP/DrSXSkLkyZIeBLcLtC 5XvaESN+bUw+reGVG0CK0c/lIanF5sQnVqm7MoRpq5vWjToE+DhGqoaTbWj1cIoq kIB89rCXCT4bfrjv3c1HK8nMOiwbUwc6CKrCyALG3ch77IE577ZzbsPJ7hmGjwug KtT1oqW6er5I8e59WzTkDz7L0Ggx2F6Uh7CIBorlTDa04ifLKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKN1/pW7aR5/ll4R+DDDPKh9GsZ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ODIy MTUwZi0yZTZmLTRmYzktYjBkMy01YThlMDkwM2IzMzMvODkwZGIzMjktMjQ3OC0z NDQyLWI2YjMtZWM4NDMzMWE2YTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTgyMjE1MGYtMmU2Zi00ZmM5LWIw ZDMtNWE4ZTA5MDNiMzMzLzk4MjIxNTBmLTJlNmYtNGZjOS1iMGQzLTVhOGUwOTAz YjMzMy5jcmwwHwYDVR0jBBgwFoAU6PtTQ2MJkFBb6KTESgm8RptQc+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ODIyMTUwZi0yZTZmLTRmYzktYjBkMy01YThl MDkwM2IzMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzdAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9wBIisguWvDFJIzG6jErMlXhIGz7P/O88z1iVJN8l/g16rKIThlE6Y Efo+eZH+Nw52J+fYHsk+7PvjOmusmpBJeZqAOW0YyYwjNWGsqvlDUztiu2H558wH MdokxKO6u0cJyVkEEeWAtOhY+3kjSUT8KEQ2BEjfTpbL5YE71lmMhG86pcQnYLmL RhMckGb9qGmtrfkMEJP91h7KhcDbojqNegDDz6vRVugEu5TmfOzKnabFv2Bu6kP6 HrBwP3S/f9L2ETZAsMq4VsP6jr1l10+Azy/e1HRjf+tALM1OkUV6Qz1lBiOG0Ucp /uTk5HIgki96f6BJBmwnT7dgBC87gqY= -----END CERTIFICATE-----Generated at Sun Apr 19 08:51:28 2026 by rpki-client