$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1d8c4af7-fe09-4693-bb2c-8985f9686ea0/aad3b4b8-0834-359b-91ad-220179e65c7c.roa File: aad3b4b8-0834-359b-91ad-220179e65c7c.roa (raw, json) Hash identifier: z7qeRzknaGcUs9WDI9msoXItuNw7BlSWkF9qZ4AWe38= Subject key identifier: F2:73:AE:02:85:83:FE:DB:3F:70:D9:95:3E:BA:34:D5:F7:2D:AA:ED Certificate issuer: /CN=1d8c4af7-fe09-4693-bb2c-8985f9686ea0 Certificate serial: 010D0C9F4328584D74701E42605F79A760A16A40 Authority key identifier: CB:C0:3B:1E:BC:D5:84:3A:B4:17:F2:3B:DB:75:4C:6A:84:7D:B2:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1d8c4af7-fe09-4693-bb2c-8985f9686ea0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1d8c4af7-fe09-4693-bb2c-8985f9686ea0/aad3b4b8-0834-359b-91ad-220179e65c7c.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 399795 IP address blocks: 198.252.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1d8c4af7-fe09-4693-bb2c-8985f9686ea0/1d8c4af7-fe09-4693-bb2c-8985f9686ea0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1d8c4af7-fe09-4693-bb2c-8985f9686ea0/1d8c4af7-fe09-4693-bb2c-8985f9686ea0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1d8c4af7-fe09-4693-bb2c-8985f9686ea0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:70:1e:42:60:5f:79:a7:60:a1:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d8c4af7-fe09-4693-bb2c-8985f9686ea0 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=7ba7ce47-38e8-4fda-a3b9-a25ab746007f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ea:bf:b7:80:dd:22:ce:ba:c4:04:04:90:1e: d9:e6:e2:79:4f:61:88:33:90:95:44:72:67:ba:2b: 70:b4:e0:9c:2c:f8:3d:7f:72:0a:84:cc:cd:12:fd: 0f:72:c8:10:7b:3b:16:f8:3b:36:cb:9c:5f:b5:cf: df:67:0d:e5:ce:51:91:af:c1:34:df:c9:05:e4:88: 37:27:c0:b2:4c:1c:fa:3d:38:ee:27:d0:74:f3:de: 37:48:20:61:8e:76:10:43:ab:cd:3e:61:ae:75:95: 51:be:d2:1e:18:64:80:4d:aa:00:82:c2:3b:0f:4b: b3:24:54:f9:e6:89:8b:7f:d9:51:6a:53:b2:00:35: 25:39:22:e9:b7:fe:16:6b:dc:55:ef:33:29:d0:e7: 06:b3:f2:29:b7:bc:82:8e:ed:2d:78:88:13:85:a6: 2c:bf:97:6c:4b:63:f8:2b:89:8f:7c:95:e0:cf:69: fa:14:9d:df:9e:c9:7a:37:1c:9b:4f:95:9c:06:d2: ac:ab:27:66:cd:bd:9f:22:1c:88:2f:65:83:c1:4d: 13:0f:06:25:5f:b7:6a:2f:7d:6a:89:95:28:7b:3f: bc:a2:1f:d7:ae:c9:f1:56:a8:93:6d:20:e1:81:1c: 03:00:21:77:eb:3f:5d:07:01:1b:05:17:13:3a:87: e0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:73:AE:02:85:83:FE:DB:3F:70:D9:95:3E:BA:34:D5:F7:2D:AA:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1d8c4af7-fe09-4693-bb2c-8985f9686ea0/aad3b4b8-0834-359b-91ad-220179e65c7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1d8c4af7-fe09-4693-bb2c-8985f9686ea0/1d8c4af7-fe09-4693-bb2c-8985f9686ea0.crl X509v3 Authority Key Identifier: keyid:CB:C0:3B:1E:BC:D5:84:3A:B4:17:F2:3B:DB:75:4C:6A:84:7D:B2:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1d8c4af7-fe09-4693-bb2c-8985f9686ea0.cer sbgp-ipAddrBlock: critical IPv4: 198.252.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:45:31:12:72:65:b9:aa:69:9b:4b:19:d4:6d:73:c0:a4:e7: 47:51:fb:b8:64:88:54:e5:5b:8b:5a:ce:a1:bb:84:bc:6e:f0: 4b:9c:d7:d4:9f:b0:b8:bc:ce:ac:a2:7d:70:dc:ca:a6:d4:dd: 56:46:4a:66:6a:a3:6f:a3:ac:1c:17:a4:77:a3:36:e1:89:a5: 16:99:a6:93:69:98:6b:8f:1d:47:1d:e3:06:2e:44:f0:ff:69: ae:5a:c6:a8:09:dc:1e:04:e5:66:10:73:bd:63:a5:87:0b:49: 58:75:0d:24:a1:17:ea:6d:ba:b2:84:a3:9d:58:26:51:a1:0b: 0a:25:31:cd:45:4d:4a:7f:d4:52:d3:65:85:89:33:24:97:72: 69:bd:57:5f:0a:a1:92:a1:28:b1:20:fd:f9:fe:89:b0:5f:29: bf:fd:96:15:56:a3:26:95:b3:24:46:25:30:8f:7d:d0:4a:20: ee:9b:53:8e:3b:89:fc:b0:00:1c:06:77:21:9f:bc:47:76:77: 41:79:33:0a:bd:d9:33:34:9f:b8:d7:7e:14:b0:df:39:f6:07: ba:05:09:08:b5:e1:c0:04:67:5c:1f:4f:58:5f:8e:8a:77:c6: 22:f3:d7:18:00:4e:41:17:98:b8:c6:43:49:89:af:36:c2:59: ca:88:cc:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10cB5CYF95p2ChakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ4YzRhZjctZmUwOS00NjkzLWJiMmMtODk4NWY5Njg2 ZWEwMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk N2JhN2NlNDctMzhlOC00ZmRhLWEzYjktYTI1YWI3NDYwMDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+q/t4DdIs66xAQEkB7Z5uJ5T2GIM5CVRHJn uitwtOCcLPg9f3IKhMzNEv0PcsgQezsW+Ds2y5xftc/fZw3lzlGRr8E038kF5Ig3 J8CyTBz6PTjuJ9B08943SCBhjnYQQ6vNPmGudZVRvtIeGGSATaoAgsI7D0uzJFT5 5omLf9lRalOyADUlOSLpt/4Wa9xV7zMp0OcGs/Ipt7yCju0teIgThaYsv5dsS2P4 K4mPfJXgz2n6FJ3fnsl6NxybT5WcBtKsqydmzb2fIhyIL2WDwU0TDwYlX7dqL31q iZUoez+8oh/XrsnxVqiTbSDhgRwDACF36z9dBwEbBRcTOofgzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJzrgKFg/7bP3DZlT66NNX3LartMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8xZDhj NGFmNy1mZTA5LTQ2OTMtYmIyYy04OTg1Zjk2ODZlYTAvYWFkM2I0YjgtMDgzNC0z NTliLTkxYWQtMjIwMTc5ZTY1YzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMWQ4YzRhZjctZmUwOS00NjkzLWJi MmMtODk4NWY5Njg2ZWEwLzFkOGM0YWY3LWZlMDktNDY5My1iYjJjLTg5ODVmOTY4 NmVhMC5jcmwwHwYDVR0jBBgwFoAUy8A7HrzVhDq0F/I723VMaoR9socwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8xZDhjNGFmNy1mZTA5LTQ2OTMtYmIyYy04OTg1 Zjk2ODZlYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxvzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9FMRJyZbmqaZtLGdRtc8Ck50dR+7hkiFTlW4tazqG7hLxu8Euc19Sf sLi8zqyifXDcyqbU3VZGSmZqo2+jrBwXpHejNuGJpRaZppNpmGuPHUcd4wYuRPD/ aa5axqgJ3B4E5WYQc71jpYcLSVh1DSShF+pturKEo51YJlGhCwolMc1FTUp/1FLT ZYWJMySXcmm9V18KoZKhKLEg/fn+ibBfKb/9lhVWoyaVsyRGJTCPfdBKIO6bU447 ifywABwGdyGfvEd2d0F5Mwq92TM0n7jXfhSw3zn2B7oFCQi14cAEZ1wfT1hfjop3 xiLz1xgATkEXmLjGQ0mJrzbCWcqIzAI= -----END CERTIFICATE-----Generated at Fri Apr 17 16:39:56 2026 by rpki-client