$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/88ea6281-809c-3c51-8957-69ac4b778b8b.roa File: 88ea6281-809c-3c51-8957-69ac4b778b8b.roa (raw, json) Hash identifier: R088VYZqOZ7vMaWEqMKkmtVjJ84tc86bVBjEhDURj4o= Subject key identifier: 89:25:40:52:67:AF:26:B8:5B:F5:11:22:EC:98:DE:85:99:79:7C:BA Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584D7A052BEA9C6C93CB2BBA9500 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/88ea6281-809c-3c51-8957-69ac4b778b8b.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 13576 IP address blocks: 209.151.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:2b:ea:9c:6c:93:cb:2b:ba:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=4a40dc1d-99c1-403a-9c1a-a8fc7188d3ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:35:ee:e2:7b:d0:c7:35:24:56:1b:b7:1c:b1: 1a:70:d2:34:44:41:b3:14:ff:2a:14:7f:cc:de:80: d6:00:05:f5:9c:f9:a4:7d:1f:2c:de:f2:f8:4f:45: 6c:00:62:93:2e:96:9e:21:4e:4f:08:7a:56:db:e0: 68:e0:92:1c:df:63:6c:b3:17:22:2b:e6:11:52:17: fe:c0:ef:ef:86:08:1d:e9:cb:f0:ab:d2:d4:0f:15: e3:87:ce:d7:0c:84:4d:5e:43:ed:ec:ca:89:73:6e: 8a:bc:bb:a2:16:29:d7:fa:86:53:70:a5:b6:e7:f8: 86:ea:f8:ea:ca:49:dd:dd:85:c4:ab:60:31:88:04: 0f:d4:73:10:c0:14:95:1f:78:77:cb:45:b2:dc:b1: 4c:df:80:47:f3:5d:2a:86:bd:7c:93:49:59:d8:26: 93:d2:6c:34:1b:75:ca:74:bb:7c:b9:e7:95:17:43: c7:23:3c:62:8d:a1:90:e8:a3:50:bb:9b:9e:09:4f: 24:b0:db:96:3f:fa:20:fc:0d:b1:d1:39:d0:28:ba: da:4a:3d:14:c1:c0:2e:19:85:2b:ad:f2:a1:45:95: a0:89:e2:92:10:a7:1a:99:04:48:47:98:e4:61:46: 7f:73:e3:c2:fe:02:46:4d:65:9a:15:5b:fc:71:35: ea:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:25:40:52:67:AF:26:B8:5B:F5:11:22:EC:98:DE:85:99:79:7C:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/88ea6281-809c-3c51-8957-69ac4b778b8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 209.151.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:8d:4e:a7:b7:24:3b:bc:26:84:18:ff:24:73:92:b5:dd:18: 1f:07:3b:42:a0:b1:ab:f2:ef:ec:9d:42:11:1c:4d:2f:dc:5a: 83:d6:42:46:7d:c0:78:63:77:f2:53:05:9d:9e:fe:1a:8f:33: 9e:43:d4:3c:34:1a:64:07:04:c0:89:fa:55:93:57:1d:36:68: 64:a5:fb:58:51:ba:7e:48:81:b9:5e:13:b0:2c:03:83:db:a5: 09:ea:ba:3b:4a:7a:ea:71:8f:da:93:a0:f9:37:7c:87:05:f9: 58:89:4f:8b:61:25:05:01:7e:75:60:44:0a:9d:c3:69:b3:9a: cb:fb:b6:8d:07:32:10:e6:f1:3d:8c:cf:cb:1a:00:5c:d0:dd: ea:27:58:61:2d:d6:d9:94:15:b7:18:4f:ba:46:84:c1:a3:29: 10:7a:3d:0b:73:2e:0a:fd:b3:4e:c2:ab:7c:58:79:f9:ef:1e: 04:60:0c:eb:07:eb:66:fe:f5:cc:87:1d:b1:3e:3b:7c:f1:a5: 4c:72:69:d7:3a:c9:5d:22:0e:af:a8:6a:ab:e7:40:75:0d:7b: 07:db:ac:fe:e2:30:fe:74:59:d1:4d:1d:d7:a3:75:e5:e7:c2: 73:cd:a8:42:19:ed:14:29:9c:68:f8:a6:f6:5b:44:41:8e:f6: 39:57:0a:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BSvqnGyTyyu6lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk NGE0MGRjMWQtOTljMS00MDNhLTljMWEtYThmYzcxODhkM2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jXu4nvQxzUkVhu3HLEacNI0REGzFP8qFH/M 3oDWAAX1nPmkfR8s3vL4T0VsAGKTLpaeIU5PCHpW2+Bo4JIc32NssxciK+YRUhf+ wO/vhggd6cvwq9LUDxXjh87XDIRNXkPt7MqJc26KvLuiFinX+oZTcKW25/iG6vjq yknd3YXEq2AxiAQP1HMQwBSVH3h3y0Wy3LFM34BH810qhr18k0lZ2CaT0mw0G3XK dLt8ueeVF0PHIzxijaGQ6KNQu5ueCU8ksNuWP/og/A2x0TnQKLraSj0UwcAuGYUr rfKhRZWgieKSEKcamQRIR5jkYUZ/c+PC/gJGTWWaFVv8cTXq5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIklQFJnrya4W/URIuyY3oWZeXy6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvODhlYTYyODEtODA5Yy0z YzUxLTg5NTctNjlhYzRiNzc4YjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Ze8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqNTqe3JDu8JoQY/yRzkrXdGB8HO0Kgsavy7+ydQhEcTS/cWoPWQkZ9 wHhjd/JTBZ2e/hqPM55D1Dw0GmQHBMCJ+lWTVx02aGSl+1hRun5IgbleE7AsA4Pb pQnqujtKeupxj9qToPk3fIcF+ViJT4thJQUBfnVgRAqdw2mzmsv7to0HMhDm8T2M z8saAFzQ3eonWGEt1tmUFbcYT7pGhMGjKRB6PQtzLgr9s07Cq3xYefnvHgRgDOsH 62b+9cyHHbE+O3zxpUxyadc6yV0iDq+oaqvnQHUNewfbrP7iMP50WdFNHdejdeXn wnPNqEIZ7RQpnGj4pvZbREGO9jlXCsI= -----END CERTIFICATE-----Generated at Fri Apr 17 23:39:57 2026 by rpki-client