$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b3c70c6-7546-4f4f-a22d-687b96c25de3/dfa3ebd0-7488-3117-86cd-51f5cdf7e640.roa File: dfa3ebd0-7488-3117-86cd-51f5cdf7e640.roa (raw, json) Hash identifier: x9Yy5mr54tafa6HFzvvjdYVzkor2ez9pSSy7iFbn7O8= Subject key identifier: E7:4B:DA:DC:D5:9D:CC:12:59:C9:D6:E4:06:69:19:AC:8C:84:C4:BD Certificate issuer: /CN=9b3c70c6-7546-4f4f-a22d-687b96c25de3 Certificate serial: 010D0C9F4328584D703FFB7C79F8080207028D80 Authority key identifier: F7:EF:67:1B:30:26:9F:60:50:95:84:A7:EA:E6:DB:88:F4:7A:1B:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b3c70c6-7546-4f4f-a22d-687b96c25de3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b3c70c6-7546-4f4f-a22d-687b96c25de3/dfa3ebd0-7488-3117-86cd-51f5cdf7e640.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 204902 IP address blocks: 162.12.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b3c70c6-7546-4f4f-a22d-687b96c25de3/9b3c70c6-7546-4f4f-a22d-687b96c25de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b3c70c6-7546-4f4f-a22d-687b96c25de3/9b3c70c6-7546-4f4f-a22d-687b96c25de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b3c70c6-7546-4f4f-a22d-687b96c25de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:fb:7c:79:f8:08:02:07:02:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b3c70c6-7546-4f4f-a22d-687b96c25de3 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=c68d07be-e86d-4b6b-878f-77e5d9b26958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:00:19:85:a4:44:b4:19:ba:7a:a3:6b:64:b8: 41:a9:05:fd:8d:c6:be:eb:c8:01:27:6f:53:6b:17: 4d:7e:d0:1f:f8:72:6a:32:8e:15:49:ea:75:d1:13: a0:2b:f8:ad:17:9a:cb:ff:43:dc:59:ec:d5:df:37: 33:59:94:eb:69:48:85:21:96:b1:91:6f:7f:69:22: 4c:9b:30:a2:a2:d3:ba:44:73:85:31:b8:91:c0:b1: bd:a9:0b:7c:83:11:04:a3:0a:03:89:ee:4a:4e:7c: 9f:59:2b:f6:90:cf:64:7e:21:77:76:39:69:44:bf: 8e:6d:14:83:61:df:2d:06:a0:89:67:44:ea:e7:fa: 85:1a:74:4b:08:8a:2b:43:a8:94:9e:bf:79:db:ee: 8e:4b:6a:1a:2b:50:c6:31:c9:fb:3f:16:1e:29:81: 83:d6:10:bd:81:ae:32:80:71:2a:9b:f2:86:58:2f: 55:01:5a:ee:78:e4:3a:6c:ee:3d:55:e4:63:90:8d: af:0e:38:53:ca:87:b9:3b:19:44:02:9e:9a:4c:b0: 95:a8:bb:86:b0:57:05:30:e9:39:d5:da:1e:3b:13: d9:db:d2:79:6d:7e:29:b3:a1:e5:7b:b9:7f:bb:5a: f2:9d:a9:4f:67:d4:2b:18:73:1a:c1:97:c4:fc:dc: 83:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4B:DA:DC:D5:9D:CC:12:59:C9:D6:E4:06:69:19:AC:8C:84:C4:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b3c70c6-7546-4f4f-a22d-687b96c25de3/dfa3ebd0-7488-3117-86cd-51f5cdf7e640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b3c70c6-7546-4f4f-a22d-687b96c25de3/9b3c70c6-7546-4f4f-a22d-687b96c25de3.crl X509v3 Authority Key Identifier: keyid:F7:EF:67:1B:30:26:9F:60:50:95:84:A7:EA:E6:DB:88:F4:7A:1B:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b3c70c6-7546-4f4f-a22d-687b96c25de3.cer sbgp-ipAddrBlock: critical IPv4: 162.12.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:c7:03:7b:5a:a0:84:58:d3:00:a8:41:bc:11:eb:6b:ca:22: 55:f6:16:e4:3a:e6:2b:f8:e0:32:74:b8:1d:09:b6:71:c3:36: 0a:41:45:e4:70:1f:bb:e7:72:c5:15:09:e8:29:a9:d1:21:f6: 73:2f:62:88:cb:06:6a:d4:62:cb:bd:d3:8c:3f:d5:b2:f1:9b: 52:e8:c7:8f:48:e6:8b:91:3c:ad:1d:8b:0f:7f:97:59:3f:16: 48:96:93:4a:75:80:a1:fe:b7:68:5c:5e:02:11:3a:53:d5:5b: a3:c9:db:04:d9:db:67:38:2b:49:10:1c:25:a0:a0:a9:e7:5b: cb:bd:dd:77:04:b6:de:9a:11:c6:17:6c:6a:e8:eb:54:56:5e: 7b:f8:a4:d8:3f:61:fd:1b:95:9e:ef:e6:48:42:1a:ec:6f:44: da:52:bd:21:5c:a1:19:6d:ca:0d:75:d4:bc:14:95:5b:56:14: 69:c2:60:e0:69:ff:5b:6d:1d:d1:ff:95:a9:10:59:90:a9:8d: 1d:47:85:68:8e:fe:c8:06:94:a6:93:3f:b4:e5:71:d2:b4:d5: 6d:8f:06:3a:22:01:ee:01:98:a3:c1:9a:65:11:cf:b3:ae:96: 7b:52:89:08:5c:18:62:d0:9d:c7:fc:87:5c:ca:54:a1:d9:51: 22:c5:5a:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP/t8efgIAgcCjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWIzYzcwYzYtNzU0Ni00ZjRmLWEyMmQtNjg3Yjk2YzI1 ZGUzMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk YzY4ZDA3YmUtZTg2ZC00YjZiLTg3OGYtNzdlNWQ5YjI2OTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwAZhaREtBm6eqNrZLhBqQX9jca+68gBJ29T axdNftAf+HJqMo4VSep10ROgK/itF5rL/0PcWezV3zczWZTraUiFIZaxkW9/aSJM mzCiotO6RHOFMbiRwLG9qQt8gxEEowoDie5KTnyfWSv2kM9kfiF3djlpRL+ObRSD Yd8tBqCJZ0Tq5/qFGnRLCIorQ6iUnr952+6OS2oaK1DGMcn7PxYeKYGD1hC9ga4y gHEqm/KGWC9VAVrueOQ6bO49VeRjkI2vDjhTyoe5OxlEAp6aTLCVqLuGsFcFMOk5 1doeOxPZ29J5bX4ps6Hle7l/u1rynalPZ9QrGHMawZfE/NyD4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdL2tzVncwSWcnW5AZpGayMhMS9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85YjNj NzBjNi03NTQ2LTRmNGYtYTIyZC02ODdiOTZjMjVkZTMvZGZhM2ViZDAtNzQ4OC0z MTE3LTg2Y2QtNTFmNWNkZjdlNjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWIzYzcwYzYtNzU0Ni00ZjRmLWEy MmQtNjg3Yjk2YzI1ZGUzLzliM2M3MGM2LTc1NDYtNGY0Zi1hMjJkLTY4N2I5NmMy NWRlMy5jcmwwHwYDVR0jBBgwFoAU9+9nGzAmn2BQlYSn6ubbiPR6G8IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85YjNjNzBjNi03NTQ2LTRmNGYtYTIyZC02ODdi OTZjMjVkZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAogzZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPHA3taoIRY0wCoQbwR62vKIlX2FuQ65iv44DJ0uB0JtnHDNgpBReRw H7vncsUVCegpqdEh9nMvYojLBmrUYsu904w/1bLxm1Lox49I5ouRPK0diw9/l1k/ FkiWk0p1gKH+t2hcXgIROlPVW6PJ2wTZ22c4K0kQHCWgoKnnW8u93XcEtt6aEcYX bGro61RWXnv4pNg/Yf0blZ7v5khCGuxvRNpSvSFcoRltyg111LwUlVtWFGnCYOBp /1ttHdH/lakQWZCpjR1HhWiO/sgGlKaTP7TlcdK01W2PBjoiAe4BmKPBmmURz7Ou lntSiQhcGGLQncf8h1zKVKHZUSLFWu4= -----END CERTIFICATE-----Generated at Sun Apr 19 12:19:47 2026 by rpki-client