$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262/bb95430e-8b80-392c-8296-34539bd6cb9e.roa File: bb95430e-8b80-392c-8296-34539bd6cb9e.roa (raw, json) Hash identifier: qDtjDixjkxm/SZR6TetwyhSKIVaiuTE3Y78f0S3rdU0= Subject key identifier: 86:91:E5:FF:FF:32:06:5C:78:20:42:A2:EB:C4:3C:6D:C7:2A:3B:2F Certificate issuer: /CN=9f263856-ae8c-471f-bea5-ef7480840262 Certificate serial: 010D0C9F4328584D7F9A74D3DF94340DAF224480 Authority key identifier: FF:2E:01:66:79:76:80:AB:1E:2E:5A:47:7C:2F:BE:9F:4F:40:37:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262/bb95430e-8b80-392c-8296-34539bd6cb9e.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 394473 IP address blocks: 158.120.88.0/22 maxlen: 24 192.190.154.0/23 maxlen: 24 192.190.156.0/22 maxlen: 24 199.250.224.0/20 maxlen: 24 199.250.251.0/24 maxlen: 24 199.250.252.0/23 maxlen: 24 209.16.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262/9f263856-ae8c-471f-bea5-ef7480840262.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262/9f263856-ae8c-471f-bea5-ef7480840262.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:74:d3:df:94:34:0d:af:22:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f263856-ae8c-471f-bea5-ef7480840262 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=c1724cc8-6968-4b85-bf78-b0b21e4e9856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d9:62:fd:82:1a:0f:fc:ac:95:da:c7:ad:f7: 6c:c1:5e:08:f4:36:c1:19:f9:36:14:06:4e:e0:57: 67:66:8e:2d:e4:99:92:79:6f:02:ea:49:75:1f:ca: f8:93:54:5c:8a:b6:1b:97:d7:88:a6:8c:79:7b:dc: b1:a6:f0:6e:44:5d:97:32:f9:62:38:15:62:8e:51: 26:4f:aa:40:d5:48:79:6e:1d:e5:67:9b:c1:8a:a4: fb:80:33:3e:dd:86:33:7b:29:02:88:3d:09:b7:37: b0:fc:33:28:2f:ac:c9:87:a9:c9:d0:75:dd:f8:df: d9:e2:39:e8:f8:d7:94:2f:53:25:d0:92:d3:cd:56: 33:62:fe:15:e8:f9:66:9e:6b:f5:3e:8f:3a:0f:26: 9c:46:46:3c:02:cf:c8:6c:f8:9d:ae:72:26:90:39: f6:01:73:a3:9c:ea:53:b4:40:f9:fd:59:2f:c7:dc: 1b:3c:e5:1d:48:3b:da:5f:db:1f:33:52:24:fb:a6: bf:f1:71:d6:0e:25:6b:2f:8b:94:ea:3c:e9:31:f0: 50:29:a3:0d:ae:e8:dd:a0:8f:7a:41:64:ac:b1:cb: c6:e1:23:1c:be:7b:96:82:b8:81:d3:5b:c6:0f:77: 85:79:ab:c9:2f:b8:be:11:0b:6f:43:10:24:15:f9: 00:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:91:E5:FF:FF:32:06:5C:78:20:42:A2:EB:C4:3C:6D:C7:2A:3B:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262/bb95430e-8b80-392c-8296-34539bd6cb9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262/9f263856-ae8c-471f-bea5-ef7480840262.crl X509v3 Authority Key Identifier: keyid:FF:2E:01:66:79:76:80:AB:1E:2E:5A:47:7C:2F:BE:9F:4F:40:37:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262.cer sbgp-ipAddrBlock: critical IPv4: 158.120.88.0/22 192.190.154.0-192.190.159.255 199.250.224.0/20 199.250.251.0-199.250.253.255 209.16.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:57:55:b5:7f:dc:29:29:92:44:4a:35:a5:18:5c:dd:19:15: 1a:f8:0e:c4:22:01:8f:b7:fe:43:e9:2b:a6:fa:07:dc:98:79: 26:39:a9:78:84:e7:28:15:fe:9b:43:20:88:40:5f:c9:10:55: f3:92:09:df:8a:16:90:67:57:8d:c6:3b:8e:b7:6e:62:50:8f: 4e:96:70:7f:ba:ac:23:ad:0d:51:2f:a6:76:fb:ea:b6:1f:f4: 68:44:b6:e1:8b:7f:f5:0b:e9:65:f1:00:14:1b:b6:a9:2c:87: c3:ad:39:f6:15:db:57:36:c3:17:46:ee:18:37:e7:df:b2:2a: 39:f8:8d:7e:8c:2d:01:ec:83:10:62:c6:c9:26:fb:78:fe:a6: e3:04:18:f6:0b:05:cb:d7:23:69:44:47:85:e6:85:72:b6:3b: 2d:b3:4f:03:9b:bc:e2:00:76:61:76:e5:2a:bd:a6:36:c7:73: dc:1e:88:f7:5f:1a:39:a2:aa:aa:65:bd:c3:13:ea:04:25:0f: e4:80:31:87:38:20:76:f9:62:b5:12:79:3e:ff:7c:99:c2:0f: 92:31:e5:19:8c:9b:c4:9d:48:8a:69:78:c9:f2:28:03:70:93: 23:54:2b:3b:9b:28:c1:a6:b3:e7:52:ea:fb:69:99:f2:49:ac: 9f:56:e4:3a -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWE1/mnTT35Q0Da8iRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWYyNjM4NTYtYWU4Yy00NzFmLWJlYTUtZWY3NDgwODQw MjYyMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk YzE3MjRjYzgtNjk2OC00Yjg1LWJmNzgtYjBiMjFlNGU5ODU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNli/YIaD/ysldrHrfdswV4I9DbBGfk2FAZO 4FdnZo4t5JmSeW8C6kl1H8r4k1RcirYbl9eIpox5e9yxpvBuRF2XMvliOBVijlEm T6pA1Uh5bh3lZ5vBiqT7gDM+3YYzeykCiD0Jtzew/DMoL6zJh6nJ0HXd+N/Z4jno +NeUL1Ml0JLTzVYzYv4V6Plmnmv1Po86DyacRkY8As/IbPidrnImkDn2AXOjnOpT tED5/Vkvx9wbPOUdSDvaX9sfM1Ik+6a/8XHWDiVrL4uU6jzpMfBQKaMNrujdoI96 QWSsscvG4SMcvnuWgriB01vGD3eFeavJL7i+EQtvQxAkFfkAUQIDAQABo4IDfTCC A3kwHQYDVR0OBBYEFIaR5f//MgZceCBCouvEPG3HKjsvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ZjI2 Mzg1Ni1hZThjLTQ3MWYtYmVhNS1lZjc0ODA4NDAyNjIvYmI5NTQzMGUtOGI4MC0z OTJjLTgyOTYtMzQ1MzliZDZjYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWYyNjM4NTYtYWU4Yy00NzFmLWJl YTUtZWY3NDgwODQwMjYyLzlmMjYzODU2LWFlOGMtNDcxZi1iZWE1LWVmNzQ4MDg0 MDI2Mi5jcmwwHwYDVR0jBBgwFoAU/y4BZnl2gKseLlpHfC++n09ANxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ZjI2Mzg1Ni1hZThjLTQ3MWYtYmVhNS1lZjc0 ODA4NDAyNjIuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQCnnhYMAwD BAHAvpoDBAXAvoADBATH+uAwDAMEAMf6+wMEAcf6/AMEAtEQlDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBE V1W1f9wpKZJESjWlGFzdGRUa+A7EIgGPt/5D6Sum+gfcmHkmOal4hOcoFf6bQyCI QF/JEFXzkgnfihaQZ1eNxjuOt25iUI9OlnB/uqwjrQ1RL6Z2++q2H/RoRLbhi3/1 C+ll8QAUG7apLIfDrTn2FdtXNsMXRu4YN+ffsio5+I1+jC0B7IMQYsbJJvt4/qbj BBj2CwXL1yNpREeF5oVytjsts08Dm7ziAHZhduUqvaY2x3PcHoj3Xxo5oqqqZb3D E+oEJQ/kgDGHOCB2+WK1Enk+/3yZwg+SMeUZjJvEnUiKaXjJ8igDcJMjVCs7myjB prPnUur7aZnySayfVuQ6 -----END CERTIFICATE-----Generated at Fri Apr 17 20:34:40 2026 by rpki-client