$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/856820c0-94f0-388f-8125-843a0216e0bc.roa File: 856820c0-94f0-388f-8125-843a0216e0bc.roa (raw, json) Hash identifier: 7dcY4XKcC9+FOKqgioNvj8YgJvu9U7E2bvax5AuKqmg= Subject key identifier: D5:E2:4B:13:70:54:BF:3C:C0:BE:20:D9:BD:99:32:F9:CA:83:DD:0D Certificate issuer: /CN=ebf567a0-4cf8-429d-82b3-3d284a246421 Certificate serial: 010D0C9F4328584D571FC2928079EBC776B726A0 Authority key identifier: BC:DC:60:56:34:F7:B9:03:E6:E5:5E:C5:FD:4D:EE:CC:69:95:41:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/856820c0-94f0-388f-8125-843a0216e0bc.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 1421 IP address blocks: 199.47.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:c2:92:80:79:eb:c7:76:b7:26:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebf567a0-4cf8-429d-82b3-3d284a246421 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=9da1d2ab-ce67-4ca9-9fc4-530fd7c93d12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:19:a9:6d:99:eb:a9:be:f7:c0:dc:cc:94:91: 25:00:9d:17:96:c2:d9:89:27:1f:77:63:4d:69:02: 46:82:54:0b:61:85:ec:b9:0a:6e:ae:d4:76:b0:98: 7d:ce:25:c0:22:b7:52:4a:ec:7f:05:c7:7c:b9:06: 4c:c6:ec:85:4d:8b:f4:e4:ed:68:bd:cd:7b:39:ec: c2:65:e4:b8:d7:d9:37:43:3b:39:18:1e:ce:0d:89: 3b:29:29:dd:2c:4a:fa:9f:77:6f:37:0b:ae:08:51: bd:a4:3d:09:60:66:3e:12:eb:88:1a:cb:e4:b4:0c: 23:80:a8:85:7d:0b:4a:6b:96:74:65:0d:27:df:ee: ad:d6:a4:80:52:cc:fc:a9:3a:c1:01:2c:03:5e:44: d3:79:3a:37:7f:f7:02:0f:39:69:27:2a:21:45:e3: a2:37:46:a8:a7:28:ba:a8:cc:f5:27:2f:d8:ad:a9: 54:6f:4e:73:4e:3e:bb:da:71:3a:97:07:c6:ce:70: a0:d4:a0:0d:6c:0a:53:33:3b:54:61:5f:45:5e:d5: 11:6c:de:09:9e:25:87:31:7d:20:61:54:b8:c2:60: 68:95:a7:de:ed:93:de:dc:f7:65:72:12:b7:cc:eb: 03:a2:3a:34:58:cb:87:df:99:f7:65:6c:92:43:c4: 44:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E2:4B:13:70:54:BF:3C:C0:BE:20:D9:BD:99:32:F9:CA:83:DD:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/856820c0-94f0-388f-8125-843a0216e0bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.crl X509v3 Authority Key Identifier: keyid:BC:DC:60:56:34:F7:B9:03:E6:E5:5E:C5:FD:4D:EE:CC:69:95:41:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer sbgp-ipAddrBlock: critical IPv4: 199.47.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:75:42:f8:53:50:24:0a:36:a5:29:2b:52:af:f8:fc:96:2b: 3f:e5:51:f3:01:39:3b:74:30:3e:f4:56:3c:5e:ae:aa:97:f5: 7b:99:42:89:87:22:36:2b:9f:b7:42:8e:e2:86:11:c5:c9:63: 0a:c3:03:7f:18:6d:2e:64:4b:16:29:4d:51:c1:e3:71:41:0d: 16:99:85:59:41:46:a7:66:8a:d7:62:1f:13:74:cd:f7:8b:b1: 2e:2e:00:74:f4:ea:4b:a6:c7:51:38:80:b4:ef:d6:9a:c4:d4: ce:f3:59:f2:26:4f:93:74:26:13:46:bc:ff:5b:b4:64:f1:33: 96:c9:a7:85:51:35:77:ff:bb:5a:e4:04:95:06:53:54:3e:e1: 43:eb:03:97:02:5e:e4:5b:18:b2:63:dd:f1:84:c0:db:2b:be: 55:ca:53:fb:5c:43:6a:37:2a:06:32:88:26:43:8c:f0:30:9f: 0c:f2:fe:59:2f:df:ef:c0:ee:b4:f8:9e:ad:c8:ea:17:aa:67: 19:b9:98:07:11:6f:d3:ff:a1:15:5f:46:8a:0e:79:0a:9e:b6: f9:5d:db:f0:72:15:49:ca:2b:c2:4c:83:0e:6a:e5:d7:af:63: 15:db:ac:0f:85:d6:61:b1:75:2b:b5:57:44:e5:cd:37:80:34: 93:3a:a6:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH8KSgHnrx3a3JqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJmNTY3YTAtNGNmOC00MjlkLTgyYjMtM2QyODRhMjQ2 NDIxMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk OWRhMWQyYWItY2U2Ny00Y2E5LTlmYzQtNTMwZmQ3YzkzZDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhmpbZnrqb73wNzMlJElAJ0XlsLZiScfd2NN aQJGglQLYYXsuQpurtR2sJh9ziXAIrdSSux/Bcd8uQZMxuyFTYv05O1ovc17OezC ZeS419k3Qzs5GB7ODYk7KSndLEr6n3dvNwuuCFG9pD0JYGY+EuuIGsvktAwjgKiF fQtKa5Z0ZQ0n3+6t1qSAUsz8qTrBASwDXkTTeTo3f/cCDzlpJyohReOiN0aopyi6 qMz1Jy/YralUb05zTj672nE6lwfGznCg1KANbApTMztUYV9FXtURbN4JniWHMX0g YVS4wmBolafe7ZPe3PdlchK3zOsDojo0WMuH35n3ZWySQ8RECQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXiSxNwVL88wL4g2b2ZMvnKg90NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lYmY1 NjdhMC00Y2Y4LTQyOWQtODJiMy0zZDI4NGEyNDY0MjEvODU2ODIwYzAtOTRmMC0z ODhmLTgxMjUtODQzYTAyMTZlMGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZWJmNTY3YTAtNGNmOC00MjlkLTgy YjMtM2QyODRhMjQ2NDIxL2ViZjU2N2EwLTRjZjgtNDI5ZC04MmIzLTNkMjg0YTI0 NjQyMS5jcmwwHwYDVR0jBBgwFoAUvNxgVjT3uQPm5V7F/U3uzGmVQTcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lYmY1NjdhMC00Y2Y4LTQyOWQtODJiMy0zZDI4 NGEyNDY0MjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxy/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAR1QvhTUCQKNqUpK1Kv+PyWKz/lUfMBOTt0MD70VjxerqqX9XuZQomH IjYrn7dCjuKGEcXJYwrDA38YbS5kSxYpTVHB43FBDRaZhVlBRqdmitdiHxN0zfeL sS4uAHT06kumx1E4gLTv1prE1M7zWfImT5N0JhNGvP9btGTxM5bJp4VRNXf/u1rk BJUGU1Q+4UPrA5cCXuRbGLJj3fGEwNsrvlXKU/tcQ2o3KgYyiCZDjPAwnwzy/lkv 3+/A7rT4nq3I6heqZxm5mAcRb9P/oRVfRooOeQqetvld2/ByFUnKK8JMgw5q5dev YxXbrA+F1mGxdSu1V0TlzTeANJM6psA= -----END CERTIFICATE-----Generated at Fri Apr 17 15:23:17 2026 by rpki-client