$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/571768c7-1a06-3657-84a4-df54cd111858.roa File: 571768c7-1a06-3657-84a4-df54cd111858.roa (raw, json) Hash identifier: Xqm/dpEtnIbaKz8x5R2KRqPpUWMZg3hT/oNbeNrtlT0= Subject key identifier: C6:58:9A:9B:4C:80:0A:A1:FD:EC:47:B8:16:87:74:4E:95:71:27:56 Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F4328584D7B6A9AB1199912AE2F05328E Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/571768c7-1a06-3657-84a4-df54cd111858.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 54535 IP address blocks: 156.53.198.0/24 maxlen: 24 156.53.199.0/24 maxlen: 24 156.53.224.0/23 maxlen: 23 156.53.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:9a:b1:19:99:12:ae:2f:05:32:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=ce08a265-ff62-4122-a244-05945554d28a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c1:31:96:37:34:de:6d:ed:1c:0e:a3:96:52: dc:56:1c:3e:16:23:c7:91:6b:2d:5d:e3:75:aa:a8: 57:a1:67:7f:e8:35:99:d6:83:9b:96:5a:23:a8:85: f4:4a:e1:99:60:12:65:a5:af:5e:55:c9:67:eb:46: 3a:0f:41:3c:37:9b:45:d8:29:3a:88:19:48:40:8b: 91:8b:c6:55:b2:29:a9:7c:c5:98:d2:54:ee:0b:77: ec:d1:57:ac:f9:4d:1f:ce:b1:e3:7c:f4:9c:ec:d8: 17:7e:a4:da:18:20:5e:ab:fe:00:ba:e4:58:6e:be: 81:d6:b1:ec:45:ce:07:db:52:07:99:5e:ab:1a:bd: f7:56:6d:d8:0a:b3:86:0a:c0:33:db:65:0f:53:88: 44:60:91:fd:dc:bd:3d:2d:2c:80:31:5c:8a:72:e3: a6:8d:79:73:83:45:c5:29:89:2f:25:9d:44:d1:cc: cc:f1:73:4b:a4:98:2a:67:86:22:fb:58:68:c1:7e: e7:f3:1c:cd:16:c6:85:bc:16:f9:9c:34:7b:db:c9: 0a:8c:0c:8b:fb:9b:8e:37:86:da:3e:42:16:55:05: 73:42:1e:7a:c7:6f:d0:f7:57:05:8e:a9:b6:8d:3d: af:97:64:df:0d:ab:7c:54:de:8a:e1:81:71:40:b1: 9a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:58:9A:9B:4C:80:0A:A1:FD:EC:47:B8:16:87:74:4E:95:71:27:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/571768c7-1a06-3657-84a4-df54cd111858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 156.53.198.0/23 156.53.224.0/23 156.53.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:8f:52:35:d4:98:76:15:ff:58:42:5f:ef:09:53:1f:e9:a9: be:08:16:5d:e1:77:57:2c:dd:7b:13:9a:0a:64:93:2b:4b:50: ce:46:19:a6:00:d5:9d:38:18:43:d2:09:2c:02:cb:a4:a5:0e: 7e:1b:4d:a0:0e:88:f3:14:67:7e:61:ee:88:ad:6a:ac:07:b7: bd:77:93:a7:b9:86:03:91:d5:4a:9b:7c:6a:c0:1e:ef:14:e6: e4:78:6d:04:19:3c:d6:07:79:7e:52:ea:1e:8c:3a:de:da:fc: 21:19:61:fc:c3:83:a2:c7:31:56:63:eb:2a:03:d5:cc:54:46: fc:33:1e:10:0e:b2:72:3e:fa:da:59:11:e9:e5:fd:4b:47:66: 68:05:bb:8c:a7:b4:a7:fc:ed:0a:89:dd:53:53:b3:d1:5b:6c: 9b:1b:ba:ad:b8:95:36:53:a8:71:fa:83:4d:f2:68:0f:8d:48: e9:41:d8:13:1b:52:59:c0:84:74:65:c8:98:82:6b:8a:2a:7a: 8d:51:19:1b:97:ba:fa:e1:11:e2:c1:f5:60:3c:97:00:fa:ff: 6c:b5:fc:ae:92:3e:c0:24:ab:d1:ff:99:b7:2a:fe:4b:46:f3: 97:c2:cb:c8:78:cd:6e:62:55:37:e8:b8:b8:b8:3d:ba:9b:39: dd:d8:e5:b4 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE17apqxGZkSri8FMo4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk Y2UwOGEyNjUtZmY2Mi00MTIyLWEyNDQtMDU5NDU1NTRkMjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcExljc03m3tHA6jllLcVhw+FiPHkWstXeN1 qqhXoWd/6DWZ1oObllojqIX0SuGZYBJlpa9eVcln60Y6D0E8N5tF2Ck6iBlIQIuR i8ZVsimpfMWY0lTuC3fs0Ves+U0fzrHjfPSc7NgXfqTaGCBeq/4AuuRYbr6B1rHs Rc4H21IHmV6rGr33Vm3YCrOGCsAz22UPU4hEYJH93L09LSyAMVyKcuOmjXlzg0XF KYkvJZ1E0czM8XNLpJgqZ4Yi+1howX7n8xzNFsaFvBb5nDR728kKjAyL+5uON4ba PkIWVQVzQh56x2/Q91cFjqm2jT2vl2TfDat8VN6K4YFxQLGamQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFMZYmptMgAqh/exHuBaHdE6VcSdWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvNTcxNzY4YzctMWEwNi0z NjU3LTg0YTQtZGY1NGNkMTExODU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBnDXGAwQB nDXgAwQCnDXwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAC+PUjXUmHYV/1hCX+8JUx/pqb4IFl3hd1cs3XsT mgpkkytLUM5GGaYA1Z04GEPSCSwCy6SlDn4bTaAOiPMUZ35h7oitaqwHt713k6e5 hgOR1UqbfGrAHu8U5uR4bQQZPNYHeX5S6h6MOt7a/CEZYfzDg6LHMVZj6yoD1cxU RvwzHhAOsnI++tpZEenl/UtHZmgFu4yntKf87QqJ3VNTs9FbbJsbuq24lTZTqHH6 g03yaA+NSOlB2BMbUlnAhHRlyJiCa4oqeo1RGRuXuvrhEeLB9WA8lwD6/2y1/K6S PsAkq9H/mbcq/ktG85fCy8h4zW5iVTfouLi4PbqbOd3Y5bQ= -----END CERTIFICATE-----Generated at Fri Apr 17 12:56:59 2026 by rpki-client