$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/fd434724-7632-35bf-832e-50b74b1f77f7.roa File: fd434724-7632-35bf-832e-50b74b1f77f7.roa (raw, json) Hash identifier: fWrbI32oeq8XTkTvYuHzqnNH0HLZIrCM9j7jYGguICs= Subject key identifier: 23:9D:4C:30:EA:CF:16:EC:C2:14:5F:45:A7:6E:8E:FC:60:4B:14:F3 Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F4328584D7B6A9ABFC50DADDF3BBA8780 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/fd434724-7632-35bf-832e-50b74b1f77f7.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 54535 IP address blocks: 156.53.200.0/24 maxlen: 24 156.53.201.0/24 maxlen: 24 156.53.232.0/23 maxlen: 23 156.53.240.0/24 maxlen: 24 156.53.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:9a:bf:c5:0d:ad:df:3b:ba:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=ee0a35bc-90c5-4a5c-93fc-255b884a4ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:64:ac:79:1d:5a:f0:62:55:0d:6d:fd:70:1b: 27:47:72:94:23:d7:cc:e0:89:ae:86:04:87:fd:67: f6:35:46:b8:0c:8d:68:29:55:c0:d9:79:21:6e:56: 44:29:b1:a5:be:60:6e:a0:45:25:61:d6:09:99:68: 43:f2:aa:70:88:be:ea:50:a5:b9:cf:6c:9e:3f:ae: 7a:8a:1a:dc:16:eb:5e:08:26:e1:33:fb:53:35:8a: 0d:96:18:02:84:56:7e:21:92:6c:f4:df:a5:93:a0: e3:ba:74:37:1e:3a:21:a7:ab:94:df:a2:88:ed:01: 72:f9:be:9b:03:36:a9:ae:31:45:cd:47:e6:07:48: fd:44:d4:9f:84:75:62:22:15:14:ee:04:4c:d8:60: db:91:a6:68:fc:a1:aa:5c:d8:53:03:03:e3:41:c6: 7c:21:3f:fa:be:01:5d:e2:2d:34:0e:84:fd:43:7b: 10:da:61:ca:e5:ec:0b:72:04:44:b8:cc:6b:40:da: d1:7e:c7:7e:0f:78:50:bb:a3:e5:63:66:8f:64:34: 06:33:a1:f3:17:b1:f9:a5:b0:95:a4:95:9a:3d:2f: 50:d7:b4:6a:08:26:19:37:44:75:83:96:e1:31:b2: 0a:b7:fd:25:59:25:dd:6a:63:28:83:6b:d2:54:7a: 36:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9D:4C:30:EA:CF:16:EC:C2:14:5F:45:A7:6E:8E:FC:60:4B:14:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/fd434724-7632-35bf-832e-50b74b1f77f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 156.53.200.0/23 156.53.232.0/23 156.53.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:59:88:6e:ed:ef:cd:f1:62:b1:7a:03:44:75:29:43:67:0e: 19:38:26:3f:9c:9b:f1:98:41:ab:88:2b:15:05:ae:b8:a1:60: 24:6b:96:70:6c:40:63:de:e3:f9:9d:48:41:0c:3a:96:15:4d: 2f:59:4d:f3:5e:2c:d2:84:c3:f8:f6:f5:ed:c2:e8:83:77:02: 68:d3:e6:bc:eb:c6:6e:08:ef:e6:72:41:57:47:75:61:45:42: 3a:ab:b9:bf:8a:6b:17:1f:c5:bb:4d:22:89:35:e8:6c:2a:f9: 90:17:c6:10:f3:28:d8:c3:44:5b:ea:98:9b:e9:ad:7d:af:bc: 60:08:f4:8b:de:5b:9b:dc:e5:37:43:5c:2d:43:36:67:92:dd: f7:eb:3c:f5:d4:dd:db:e1:7d:86:6b:00:b3:04:30:27:be:65: e9:f5:2a:d7:71:3e:98:d9:b5:5b:27:5a:b7:73:68:6b:ed:c6: bd:e3:54:d9:f5:3c:d3:be:b6:7c:d0:07:8f:16:c1:ca:23:e6: a3:08:68:8d:f0:9b:0f:f6:3b:5e:bc:60:60:91:8f:5e:ed:46: 86:19:d6:77:6f:18:e0:64:b8:37:2b:b9:89:02:07:3f:80:4e: 63:08:fc:c4:62:f5:b8:d1:47:12:11:66:11:0b:82:d0:2c:dc: af:bf:bc:ee -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE17apq/xQ2t3zu6h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk ZWUwYTM1YmMtOTBjNS00YTVjLTkzZmMtMjU1Yjg4NGE0ZWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGSseR1a8GJVDW39cBsnR3KUI9fM4ImuhgSH /Wf2NUa4DI1oKVXA2XkhblZEKbGlvmBuoEUlYdYJmWhD8qpwiL7qUKW5z2yeP656 ihrcFuteCCbhM/tTNYoNlhgChFZ+IZJs9N+lk6DjunQ3Hjohp6uU36KI7QFy+b6b AzaprjFFzUfmB0j9RNSfhHViIhUU7gRM2GDbkaZo/KGqXNhTAwPjQcZ8IT/6vgFd 4i00DoT9Q3sQ2mHK5ewLcgREuMxrQNrRfsd+D3hQu6PlY2aPZDQGM6HzF7H5pbCV pJWaPS9Q17RqCCYZN0R1g5bhMbIKt/0lWSXdamMog2vSVHo24wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFCOdTDDqzxbswhRfRadujvxgSxTzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvZmQ0MzQ3MjQtNzYzMi0z NWJmLTgzMmUtNTBiNzRiMWY3N2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBnDXIAwQB nDXoAwQBnDXwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABtZiG7t783xYrF6A0R1KUNnDhk4Jj+cm/GYQauI KxUFrrihYCRrlnBsQGPe4/mdSEEMOpYVTS9ZTfNeLNKEw/j29e3C6IN3AmjT5rzr xm4I7+ZyQVdHdWFFQjqrub+KaxcfxbtNIok16Gwq+ZAXxhDzKNjDRFvqmJvprX2v vGAI9IveW5vc5TdDXC1DNmeS3ffrPPXU3dvhfYZrALMEMCe+Zen1KtdxPpjZtVsn WrdzaGvtxr3jVNn1PNO+tnzQB48Wwcoj5qMIaI3wmw/2O168YGCRj17tRoYZ1ndv GOBkuDcruYkCBz+ATmMI/MRi9bjRRxIRZhELgtAs3K+/vO4= -----END CERTIFICATE-----Generated at Fri Apr 17 15:14:22 2026 by rpki-client