$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/c7ad1741-148a-37a7-bc3b-bb1f5db943b4.roa File: c7ad1741-148a-37a7-bc3b-bb1f5db943b4.roa (raw, json) Hash identifier: N/fa/Npbz2lp7jvbVMiZGyGyXlOTMYeEwxRZg27/hks= Subject key identifier: 87:C5:5B:33:9C:46:FE:92:6F:B8:72:3C:65:57:21:0B:F7:D4:87:67 Certificate issuer: /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Certificate serial: 010D0C9F4328584D869579A8F80B82F301463840 Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/c7ad1741-148a-37a7-bc3b-bb1f5db943b4.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 62874 IP address blocks: 167.160.40.0/22 maxlen: 23 167.160.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:79:a8:f8:0b:82:f3:01:46:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=034f2a9e-88f5-4e83-b7fb-9c55c693f8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a7:30:95:32:24:11:ec:54:a5:6a:7e:5e:dd: 3e:df:99:ea:37:2c:a0:3b:89:7f:f4:a1:70:3b:04: dc:15:9c:47:62:88:8b:0e:dd:20:bb:a7:58:7e:17: 5d:1a:90:d8:bc:c6:ad:86:91:f4:4f:72:31:11:ce: 1d:5f:90:0d:e2:c0:7f:df:eb:7c:ab:94:84:05:7a: e6:4a:86:11:1b:af:cd:64:26:94:4c:8c:ea:b6:9e: e8:ac:f8:65:b1:50:57:c0:90:74:66:25:c3:6e:6f: 1a:87:52:06:e9:f3:41:c0:9c:81:60:94:a9:46:e4: 31:19:37:fb:4f:48:96:81:10:e6:0d:b8:2d:f3:03: b4:97:af:f3:9a:8e:65:e0:f3:ca:43:66:72:c8:b9: e7:18:fa:ca:a8:88:7d:1c:37:8b:af:b7:08:36:e4: 84:9f:a3:67:aa:dd:d1:2f:69:3b:c7:5f:0a:91:6a: 38:96:35:13:42:be:b8:2e:bf:18:ff:11:f5:fc:f6: ee:6c:ee:ae:46:a2:01:90:1d:ed:6a:28:30:9a:3c: e6:7e:5f:83:83:e7:43:ba:97:0d:77:bc:c9:50:b7: a8:c9:be:5a:2e:77:63:b0:bb:80:6f:97:2a:17:52: 4d:be:4a:ab:95:c6:b5:50:98:75:4a:4d:9d:a9:0f: f7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C5:5B:33:9C:46:FE:92:6F:B8:72:3C:65:57:21:0B:F7:D4:87:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/c7ad1741-148a-37a7-bc3b-bb1f5db943b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl X509v3 Authority Key Identifier: keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer sbgp-ipAddrBlock: critical IPv4: 167.160.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:33:e1:79:32:88:20:5d:80:19:34:3c:66:dc:cf:68:78:b2: 70:32:1e:47:ed:8b:8b:68:18:38:43:5a:08:16:04:e7:64:de: 32:8b:eb:93:7a:ad:f6:2f:a2:14:e1:7b:64:24:b2:da:51:e8: 5e:b5:52:47:21:cf:b9:12:d5:cb:a0:21:67:99:0b:ee:78:a6: 74:33:0c:a7:54:32:4a:9c:b4:7c:83:10:0a:10:68:d5:85:c2: 06:e5:7e:0d:c5:45:1c:28:f7:2c:ea:0f:fa:93:57:1d:21:2f: 5e:3e:3d:48:d0:e0:39:8c:e6:7f:15:79:e3:ff:1b:fa:63:eb: 38:3f:3b:46:64:a3:2e:26:0b:81:77:56:6d:0c:06:ab:ce:06: bd:69:93:57:b9:33:38:cc:c8:22:99:ae:83:80:60:d5:ee:5d: 76:52:10:60:7c:42:d8:1d:25:b5:b1:72:9e:99:ef:e8:af:95: 30:7b:59:0c:52:74:a7:2f:ad:fd:c0:e8:53:58:58:38:04:72: 18:0f:50:f4:13:aa:c6:35:56:66:7f:b9:3d:53:f0:a2:8e:9d: 65:01:42:35:77:da:25:cd:12:b6:36:ff:1a:7b:d1:c5:c6:de: f6:b1:39:ae:81:48:34:d6:9f:14:f5:d4:84:cb:d4:86:d7:5e: 5c:83:1d:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlXmo+AuC8wFGOEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY3OTk5YzgtZTRhNS00NWZjLTljYzItYzRmZTdmMThi ZmUyMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk MDM0ZjJhOWUtODhmNS00ZTgzLWI3ZmItOWM1NWM2OTNmOGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgacwlTIkEexUpWp+Xt0+35nqNyygO4l/9KFw OwTcFZxHYoiLDt0gu6dYfhddGpDYvMathpH0T3IxEc4dX5AN4sB/3+t8q5SEBXrm SoYRG6/NZCaUTIzqtp7orPhlsVBXwJB0ZiXDbm8ah1IG6fNBwJyBYJSpRuQxGTf7 T0iWgRDmDbgt8wO0l6/zmo5l4PPKQ2ZyyLnnGPrKqIh9HDeLr7cINuSEn6Nnqt3R L2k7x18KkWo4ljUTQr64Lr8Y/xH1/PbubO6uRqIBkB3taigwmjzmfl+Dg+dDupcN d7zJULeoyb5aLndjsLuAb5cqF1JNvkqrlca1UJh1Sk2dqQ/3hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfFWzOcRv6Sb7hyPGVXIQv31IdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5 OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZlN2YxOGJmZTIvYzdhZDE3NDEtMTQ4YS0z N2E3LWJjM2ItYmIxZjVkYjk0M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY3OTk5YzgtZTRhNS00NWZjLTlj YzItYzRmZTdmMThiZmUyL2RmNzk5OWM4LWU0YTUtNDVmYy05Y2MyLWM0ZmU3ZjE4 YmZlMi5jcmwwHwYDVR0jBBgwFoAUGekERPSo9doFk24jLmU0Yzeeu6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZl N2YxOGJmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDp6AoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwz4XkyiCBdgBk0PGbcz2h4snAyHkfti4toGDhDWggWBOdk3jKL65N6 rfYvohThe2QkstpR6F61Ukchz7kS1cugIWeZC+54pnQzDKdUMkqctHyDEAoQaNWF wgblfg3FRRwo9yzqD/qTVx0hL14+PUjQ4DmM5n8VeeP/G/pj6zg/O0Zkoy4mC4F3 Vm0MBqvOBr1pk1e5MzjMyCKZroOAYNXuXXZSEGB8QtgdJbWxcp6Z7+ivlTB7WQxS dKcvrf3A6FNYWDgEchgPUPQTqsY1VmZ/uT1T8KKOnWUBQjV32iXNErY2/xp70cXG 3vaxOa6BSDTWnxT11ITL1IbXXlyDHd8= -----END CERTIFICATE-----Generated at Sun Apr 19 10:02:55 2026 by rpki-client