$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cfb25938-1fe8-3fef-8d37-b7d1cddafc15.roa File: cfb25938-1fe8-3fef-8d37-b7d1cddafc15.roa (raw, json) Hash identifier: Vss7WleEM8Uws7Rxh4Ap8//j3fbkucIhwtZEFX9/Chc= Subject key identifier: 64:F9:32:9B:41:61:42:E2:B6:C8:C8:7D:EB:8D:5A:F3:FA:E7:5C:A3 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584D7A052BD1B1CC09D7E00FF600 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cfb25938-1fe8-3fef-8d37-b7d1cddafc15.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 13576 IP address blocks: 209.151.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:2b:d1:b1:cc:09:d7:e0:0f:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=c8cad885-e6b9-42d2-9187-5b7ad7e49ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:04:32:79:91:11:de:14:b6:df:00:8c:83:98: d4:bd:c3:f5:66:4f:a0:3a:fd:63:3b:81:18:82:ae: 9c:11:62:2f:c5:23:f4:3f:d1:d4:ff:0c:a2:89:fe: c7:d3:85:22:44:3e:07:c5:f0:bc:4f:2f:82:68:1e: 82:ea:1e:70:85:6c:b2:14:91:10:69:eb:8b:c2:1f: 5b:78:e2:39:93:88:9a:64:9e:59:54:96:2c:b7:8a: 69:96:1d:d3:3f:7c:67:83:e9:26:a6:7a:48:eb:27: 24:67:87:92:10:85:f9:76:61:1d:9e:57:cf:42:a6: 6a:ce:95:98:65:cc:71:2e:ba:a2:24:3a:63:f3:d9: 66:bf:bd:56:1e:b3:99:63:a2:04:28:ef:e2:a8:52: 4f:48:eb:8a:05:eb:cd:50:51:24:65:9e:d3:8b:25: a0:18:1c:8f:f0:09:39:bd:28:d1:92:cf:65:c6:dc: de:2c:8d:72:32:db:7f:58:60:d9:8c:03:17:d7:40: 71:cf:59:93:24:fc:9a:f7:57:b2:e1:cc:d1:c2:63: ea:30:9e:6e:c8:ea:c4:b2:20:e6:6a:09:9a:ad:16: 8e:a2:5e:08:20:d3:cb:ac:2f:bf:3a:f3:bf:a5:71: ee:37:3e:4d:c1:9b:7b:23:2d:51:9d:a4:10:76:a3: 61:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F9:32:9B:41:61:42:E2:B6:C8:C8:7D:EB:8D:5A:F3:FA:E7:5C:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cfb25938-1fe8-3fef-8d37-b7d1cddafc15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 209.151.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:a2:ac:1f:05:e3:76:5d:ef:5e:44:86:86:03:39:4b:2d:b0: 89:d0:0a:7d:b8:68:75:d4:3c:6e:40:78:1c:50:bc:63:44:b7: e8:e5:2a:6a:81:8f:d2:5d:14:82:c8:18:d6:00:d8:e9:ca:6b: 95:aa:f4:46:b7:8e:49:de:ea:04:93:a8:50:f6:05:60:d1:e5: 4e:16:3e:1d:26:f4:76:d5:df:07:b7:e4:b3:9c:2d:56:20:f5: 7f:dc:29:33:8b:ef:71:9b:ba:30:1e:15:7b:9f:e4:75:e5:fc: ec:ea:43:8e:58:bc:15:e1:56:62:d6:17:eb:a2:b0:33:9d:cd: f9:8b:92:9e:c9:37:73:db:2f:8e:5a:b1:d1:b8:24:e0:42:a1: d8:66:83:9d:99:3d:c7:a8:28:ce:9c:2d:6e:74:8c:e9:64:67: c9:63:37:60:80:71:d5:a2:a1:34:af:06:bc:d1:93:23:30:04: 3c:0a:dd:72:67:f4:28:70:3a:05:69:91:26:fe:db:73:3b:63: b4:dc:8c:6c:92:da:ed:b9:83:e9:1f:e7:72:0b:cc:d5:b4:a2: 1d:75:07:ed:b9:c6:16:fe:3e:14:02:8b:3b:1a:23:de:d7:00: 70:fb:3b:c9:43:89:b7:b5:d7:35:1d:16:df:5a:f1:d5:8c:55: d6:e2:38:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BSvRscwJ1+AP9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk YzhjYWQ4ODUtZTZiOS00MmQyLTkxODctNWI3YWQ3ZTQ5ZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwQyeZER3hS23wCMg5jUvcP1Zk+gOv1jO4EY gq6cEWIvxSP0P9HU/wyiif7H04UiRD4HxfC8Ty+CaB6C6h5whWyyFJEQaeuLwh9b eOI5k4iaZJ5ZVJYst4pplh3TP3xng+kmpnpI6yckZ4eSEIX5dmEdnlfPQqZqzpWY ZcxxLrqiJDpj89lmv71WHrOZY6IEKO/iqFJPSOuKBevNUFEkZZ7TiyWgGByP8Ak5 vSjRks9lxtzeLI1yMtt/WGDZjAMX10Bxz1mTJPya91ey4czRwmPqMJ5uyOrEsiDm agmarRaOol4IINPLrC+/OvO/pXHuNz5NwZt7Iy1RnaQQdqNhFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGT5MptBYULitsjIfeuNWvP651yjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvY2ZiMjU5MzgtMWZlOC0z ZmVmLThkMzctYjdkMWNkZGFmYzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ze1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMGirB8F43Zd715EhoYDOUstsInQCn24aHXUPG5AeBxQvGNEt+jlKmqB j9JdFILIGNYA2OnKa5Wq9Ea3jkne6gSTqFD2BWDR5U4WPh0m9HbV3we35LOcLVYg 9X/cKTOL73GbujAeFXuf5HXl/OzqQ45YvBXhVmLWF+uisDOdzfmLkp7JN3PbL45a sdG4JOBCodhmg52ZPceoKM6cLW50jOlkZ8ljN2CAcdWioTSvBrzRkyMwBDwK3XJn 9ChwOgVpkSb+23M7Y7TcjGyS2u25g+kf53ILzNW0oh11B+25xhb+PhQCizsaI97X AHD7O8lDibe11zUdFt9a8dWMVdbiOME= -----END CERTIFICATE-----Generated at Fri Apr 17 19:37:20 2026 by rpki-client