$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/d5cf8319-403b-387c-a79b-84a59277e3f3.roa File: d5cf8319-403b-387c-a79b-84a59277e3f3.roa (raw, json) Hash identifier: ec5DFRBVDvVaxranHgqzxkCGvYWNOPd1wJ5KtXJqRuA= Subject key identifier: 73:71:F6:22:7D:A5:18:FC:6D:68:F2:45:96:AD:AD:72:67:E6:85:A7 Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F4328584D7B6A9A96971BB7EE06055280 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/d5cf8319-403b-387c-a79b-84a59277e3f3.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 54535 IP address blocks: 156.37.196.0/24 maxlen: 24 156.37.197.0/24 maxlen: 24 156.37.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:9a:96:97:1b:b7:ee:06:05:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=33aa39ce-1065-495a-8152-0d351113438e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8e:a1:f0:cf:49:26:4c:4a:a9:e5:94:fa:05: 33:b1:7f:a8:16:3d:00:d8:b2:1c:96:79:b2:7d:40: 9f:aa:c9:35:93:52:d7:e0:73:2d:22:60:9a:6a:8f: 69:4e:79:a5:7c:65:b2:da:a1:79:22:76:b8:40:69: e6:15:ba:d9:a7:4c:e4:7d:93:43:36:78:d7:4e:32: e8:98:a8:26:a5:7e:ab:bc:fe:59:60:37:fd:3c:6c: 94:7a:fc:8a:61:c4:21:38:66:0a:20:a6:07:f3:df: 53:b8:aa:02:bd:37:7c:19:2d:b1:9e:81:41:14:54: 87:45:95:fe:f0:e2:1c:1c:f4:16:69:8f:2b:07:10: b4:cc:1b:e9:59:7d:9e:6c:b9:e9:f8:b7:2d:d7:b0: 13:4f:d3:04:f5:4f:5b:4e:f8:e1:e5:47:00:82:73: b1:54:cd:1c:e5:ba:88:60:ac:72:c0:a1:e7:a4:f6: fd:f1:cd:23:90:b9:c4:4f:0d:2a:22:2b:81:60:c2: 0e:86:56:b4:28:0b:4b:04:16:6d:0e:2d:40:8a:16: 58:cd:66:22:d8:6a:4a:92:5b:56:c2:1b:b1:3d:5b: 09:c3:62:3c:66:2c:a4:98:45:b2:67:fc:bc:b4:40: c3:44:c0:3f:27:1a:6c:99:d4:f4:15:41:c8:5e:0b: b7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:71:F6:22:7D:A5:18:FC:6D:68:F2:45:96:AD:AD:72:67:E6:85:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/d5cf8319-403b-387c-a79b-84a59277e3f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 156.37.196.0-156.37.198.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:75:e3:fb:66:60:14:5b:8e:23:c8:f5:56:05:4b:a5:8a:64: 4a:e3:89:5c:6b:e6:09:08:7d:17:f3:1b:89:12:fe:a4:0c:ae: 88:37:97:88:a2:98:a9:72:cb:48:3d:08:d4:66:8d:45:40:8a: f7:d4:c8:cf:2a:f8:53:86:bd:74:db:0d:d8:f1:cc:e1:31:8a: 7f:85:bc:df:90:f7:f5:9d:37:7b:7e:28:cb:2b:5f:2e:bb:d4: 31:41:ed:e9:b6:32:6f:45:6f:4f:3c:dc:18:0c:30:aa:a1:57: 02:00:d5:fd:62:de:81:48:d6:83:85:a6:75:a1:41:8c:8e:d0: 01:ab:8f:5e:c3:aa:79:f7:c2:d2:10:87:28:35:01:39:ef:e7: ab:47:6e:0b:58:10:84:25:d3:1d:2f:8c:37:fc:19:1a:d7:2a: 2e:39:8b:cf:92:4a:a5:0b:8b:e3:26:39:f3:1e:57:db:5a:5b: 10:fe:d0:e1:2a:1e:c2:6a:c4:03:47:a7:36:5e:df:a9:2a:4c: c5:97:82:11:97:50:7b:6d:44:cb:a4:89:40:07:dc:fe:a3:05: f6:f4:3e:b3:75:f7:f3:fb:76:b9:aa:bc:9b:17:c9:4a:78:a2: c9:7e:97:55:2f:a6:c7:16:8c:af:cd:b6:70:0f:db:ce:97:b0: e8:10:8b:f2 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE17apqWlxu37gYFUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk MzNhYTM5Y2UtMTA2NS00OTVhLTgxNTItMGQzNTExMTM0MzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY6h8M9JJkxKqeWU+gUzsX+oFj0A2LIclnmy fUCfqsk1k1LX4HMtImCaao9pTnmlfGWy2qF5Ina4QGnmFbrZp0zkfZNDNnjXTjLo mKgmpX6rvP5ZYDf9PGyUevyKYcQhOGYKIKYH899TuKoCvTd8GS2xnoFBFFSHRZX+ 8OIcHPQWaY8rBxC0zBvpWX2ebLnp+Lct17ATT9ME9U9bTvjh5UcAgnOxVM0c5bqI YKxywKHnpPb98c0jkLnETw0qIiuBYMIOhla0KAtLBBZtDi1AihZYzWYi2GpKkltW whuxPVsJw2I8ZiykmEWyZ/y8tEDDRMA/JxpsmdT0FUHIXgu3fwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFHNx9iJ9pRj8bWjyRZatrXJn5oWnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvZDVjZjgzMTktNDAzYi0z ODdjLWE3OWItODRhNTkyNzdlM2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKcJcQD BACcJcYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAFHXj+2ZgFFuOI8j1VgVLpYpkSuOJXGvmCQh9F/MbiRL+ pAyuiDeXiKKYqXLLSD0I1GaNRUCK99TIzyr4U4a9dNsN2PHM4TGKf4W835D39Z03 e34oyytfLrvUMUHt6bYyb0VvTzzcGAwwqqFXAgDV/WLegUjWg4WmdaFBjI7QAauP XsOqeffC0hCHKDUBOe/nq0duC1gQhCXTHS+MN/wZGtcqLjmLz5JKpQuL4yY58x5X 21pbEP7Q4SoewmrEA0enNl7fqSpMxZeCEZdQe21Ey6SJQAfc/qMF9vQ+s3X38/t2 uaq8mxfJSniiyX6XVS+mxxaMr822cA/bzpew6BCL8g== -----END CERTIFICATE-----Generated at Fri Apr 17 09:48:26 2026 by rpki-client