$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/dea56328-45cc-3bf6-a7c0-a7d4b1ceb156.roa File: dea56328-45cc-3bf6-a7c0-a7d4b1ceb156.roa (raw, json) Hash identifier: hFdr7GfbYKOx+g4PUVxMKVi09DoVtfFKTl9cCu2TeS8= Subject key identifier: 46:5F:D0:B6:0D:43:DA:35:73:15:F5:E9:7B:13:58:B9:9F:1A:89:D3 Certificate issuer: /CN=e215a9e7-8c66-4e81-a077-2a73c903a0ac Certificate serial: 010D0C9F4328584D7CCFD72FFE036C0668FE9400 Authority key identifier: BB:CC:6E:8F:71:EE:5B:79:1C:68:18:85:B1:3F:64:3F:01:D1:C8:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/dea56328-45cc-3bf6-a7c0-a7d4b1ceb156.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 1299 IP address blocks: 169.224.192.0/19 maxlen: 24 2607:cdc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/e215a9e7-8c66-4e81-a077-2a73c903a0ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/e215a9e7-8c66-4e81-a077-2a73c903a0ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:d7:2f:fe:03:6c:06:68:fe:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e215a9e7-8c66-4e81-a077-2a73c903a0ac Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=f0a6b13f-3ccb-48a6-ab9c-d3273c04e70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3c:65:f6:1b:d3:7a:82:7c:1b:01:d9:8e:4c: 76:65:65:cd:85:d0:8f:e1:d7:04:75:a7:69:f7:51: 07:16:17:1e:89:66:9a:e0:9d:31:ea:47:a1:96:3a: 54:0d:ef:8e:56:75:ed:78:a4:61:27:98:d1:63:8a: 00:ac:2d:06:c8:a2:fa:de:6e:07:f2:ea:81:04:d5: 2c:00:c9:c2:ac:e4:16:13:a1:0b:f8:8c:48:f0:5c: 92:d1:3d:5a:62:55:4d:a1:bd:2f:0f:35:b5:69:ed: a1:10:8a:28:6a:cb:8d:a1:94:27:c3:a9:d0:4a:f5: 72:89:e0:b5:b6:b3:82:d3:5d:9f:02:d2:a4:8f:b4: 92:f5:dc:23:b0:0f:9b:99:83:8c:bb:18:fd:1b:35: 2e:39:5f:5a:ad:58:81:b1:e2:1e:94:a6:ea:49:23: 8d:58:bf:b2:73:b7:49:81:29:10:9a:f9:75:99:35: a8:1f:2e:27:8a:0a:e5:e2:0b:40:11:96:a7:72:63: 9d:fd:44:ce:03:89:e6:e7:3d:96:9b:26:ab:c5:06: 77:38:cb:33:77:28:c3:ba:89:a5:e5:8c:e2:f9:c7: 0b:cc:aa:d4:f7:18:0c:c2:1e:aa:c1:f4:5f:9c:87: bb:87:85:39:15:54:7f:d0:fd:6f:99:c9:36:f9:fc: 1d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5F:D0:B6:0D:43:DA:35:73:15:F5:E9:7B:13:58:B9:9F:1A:89:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/dea56328-45cc-3bf6-a7c0-a7d4b1ceb156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/e215a9e7-8c66-4e81-a077-2a73c903a0ac.crl X509v3 Authority Key Identifier: keyid:BB:CC:6E:8F:71:EE:5B:79:1C:68:18:85:B1:3F:64:3F:01:D1:C8:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac.cer sbgp-ipAddrBlock: critical IPv4: 169.224.192.0/19 IPv6: 2607:cdc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:6c:26:f9:04:35:b9:2c:23:99:1e:01:e2:d8:58:63:42:7c: e0:bf:2e:78:0c:fc:e8:ad:ec:bb:0f:92:c0:43:0a:fb:d9:cf: 8f:ac:ab:90:70:71:62:b6:bb:49:25:03:4c:94:71:d5:7e:92: db:f3:a9:95:ff:31:12:61:cc:96:0f:fb:aa:04:74:53:ac:d1: 8c:8c:29:51:cf:2e:1d:c7:71:81:a2:c9:79:00:c1:f9:81:91: 1d:57:58:46:4c:0f:70:ec:0f:8f:09:81:17:0e:b5:8c:f0:dc: 93:67:a2:09:8c:62:52:eb:1d:24:7b:7b:6e:4d:c6:df:68:22: ad:bc:50:ab:c9:64:04:fc:0a:4b:5a:61:f7:85:7a:9d:79:4a: 24:97:98:39:bb:ab:91:e9:2a:73:c0:32:37:7c:24:f5:cb:24: 44:73:77:61:ab:b4:b7:78:a1:85:de:88:75:29:39:a6:7b:32: 48:83:fc:ef:e6:f1:bb:2f:7c:9b:c2:4f:8d:09:b4:30:ff:6f: 9e:cd:52:04:82:e8:50:9d:3b:cf:29:97:4b:49:27:9c:0c:8c: ec:2a:49:1b:37:35:d7:03:ee:5b:ee:ed:79:46:92:6d:31:bc: fc:b7:d5:e4:b1:b5:e8:92:05:55:de:eb:4b:a9:09:2d:11:a9: bd:c3:bf:54 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE18z9cv/gNsBmj+lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIxNWE5ZTctOGM2Ni00ZTgxLWEwNzctMmE3M2M5MDNh MGFjMB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk ZjBhNmIxM2YtM2NjYi00OGE2LWFiOWMtZDMyNzNjMDRlNzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjxl9hvTeoJ8GwHZjkx2ZWXNhdCP4dcEdadp 91EHFhceiWaa4J0x6kehljpUDe+OVnXteKRhJ5jRY4oArC0GyKL63m4H8uqBBNUs AMnCrOQWE6EL+IxI8FyS0T1aYlVNob0vDzW1ae2hEIooasuNoZQnw6nQSvVyieC1 trOC012fAtKkj7SS9dwjsA+bmYOMuxj9GzUuOV9arViBseIelKbqSSONWL+yc7dJ gSkQmvl1mTWoHy4nigrl4gtAEZancmOd/UTOA4nm5z2WmyarxQZ3OMszdyjDuoml 5Yzi+ccLzKrU9xgMwh6qwfRfnIe7h4U5FVR/0P1vmck2+fwdVQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFEZf0LYNQ9o1cxX16XsTWLmfGonTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lMjE1 YTllNy04YzY2LTRlODEtYTA3Ny0yYTczYzkwM2EwYWMvZGVhNTYzMjgtNDVjYy0z YmY2LWE3YzAtYTdkNGIxY2ViMTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTIxNWE5ZTctOGM2Ni00ZTgxLWEw NzctMmE3M2M5MDNhMGFjL2UyMTVhOWU3LThjNjYtNGU4MS1hMDc3LTJhNzNjOTAz YTBhYy5jcmwwHwYDVR0jBBgwFoAUu8xuj3HuW3kcaBiFsT9kPwHRyCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lMjE1YTllNy04YzY2LTRlODEtYTA3Ny0yYTcz YzkwM2EwYWMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFqeDAMA0E AgACMAcDBQAmB83AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAE5sJvkENbksI5keAeLYWGNCfOC/LngM/Oit 7LsPksBDCvvZz4+sq5BwcWK2u0klA0yUcdV+ktvzqZX/MRJhzJYP+6oEdFOs0YyM KVHPLh3HcYGiyXkAwfmBkR1XWEZMD3DsD48JgRcOtYzw3JNnogmMYlLrHSR7e25N xt9oIq28UKvJZAT8CktaYfeFep15SiSXmDm7q5HpKnPAMjd8JPXLJERzd2GrtLd4 oYXeiHUpOaZ7MkiD/O/m8bsvfJvCT40JtDD/b57NUgSC6FCdO88pl0tJJ5wMjOwq SRs3NdcD7lvu7XlGkm0xvPy31eSxteiSBVXe60upCS0Rqb3Dv1Q= -----END CERTIFICATE-----Generated at Fri Apr 17 15:13:01 2026 by rpki-client