$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/7281ae23-867a-34c7-a504-aa8437b8e969.roa File: 7281ae23-867a-34c7-a504-aa8437b8e969.roa (raw, json) Hash identifier: D0J8Rx8zqkT+JgxghUPfGh7CyS5LHD5nV5rGE3OgGiQ= Subject key identifier: D3:BA:25:6F:BC:A0:B0:CB:1D:BE:4A:E8:68:6B:BC:2A:CA:5B:03:2A Certificate issuer: /CN=874e86b5-586f-43d7-be6f-cf21e434b31a Certificate serial: 010D0C9F4328584D91C010C87664F2016D139180 Authority key identifier: 79:4D:42:84:C9:BB:D7:67:10:53:9F:15:75:82:DC:D4:12:C4:FE:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/7281ae23-867a-34c7-a504-aa8437b8e969.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 55270 IP address blocks: 204.154.142.0/23 maxlen: 23 2602:ff43::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:10:c8:76:64:f2:01:6d:13:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874e86b5-586f-43d7-be6f-cf21e434b31a Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=8e315784-ba69-49d5-a4ff-b2b08d01129e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8b:4a:bf:a0:1f:58:65:ab:b2:20:8c:a1:92: 2a:c4:dc:c0:ba:64:41:6b:d6:08:a2:fe:0d:a3:5e: b8:47:39:24:ec:ae:f1:4f:ae:32:76:99:0f:68:08: 43:4a:56:40:50:41:3e:0e:7d:ce:0b:fd:c1:b1:41: 53:ed:c9:49:87:b8:ba:e6:b9:03:50:8a:0f:03:8c: 52:99:97:ca:b8:73:17:6c:74:c9:48:f2:69:4b:22: e0:97:b6:36:ec:bd:2e:9a:4f:df:7c:bf:58:9f:b1: 31:46:c5:6a:2d:94:39:6d:e8:3f:df:09:88:25:44: 14:6d:b9:ef:9a:7d:07:2e:5a:55:38:70:20:bf:aa: 68:7a:20:69:70:2c:90:78:75:14:33:0e:1c:ee:62: 15:2f:6e:dc:da:fb:8a:ff:80:f3:b9:c3:18:c2:76: 13:8e:ad:9d:80:18:e9:dd:11:9d:4a:c5:05:d8:76: c7:e5:7d:66:ae:93:18:1f:b7:37:94:b2:50:0e:d9: c6:41:fa:f9:69:a3:dd:8e:a4:3f:50:7e:55:fb:67: fb:f9:93:30:96:92:92:b1:79:b0:2d:b6:f7:a0:9c: 9f:d2:f0:61:65:f5:d8:b9:8b:9c:81:9d:f9:0b:26: 8f:50:8e:42:07:8d:c9:e7:50:dc:5a:26:c6:27:2a: 55:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BA:25:6F:BC:A0:B0:CB:1D:BE:4A:E8:68:6B:BC:2A:CA:5B:03:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/7281ae23-867a-34c7-a504-aa8437b8e969.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.crl X509v3 Authority Key Identifier: keyid:79:4D:42:84:C9:BB:D7:67:10:53:9F:15:75:82:DC:D4:12:C4:FE:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a.cer sbgp-ipAddrBlock: critical IPv4: 204.154.142.0/23 IPv6: 2602:ff43::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:13:2d:2d:0e:50:7e:d5:ae:9d:d0:1b:8c:1b:b2:bc:74:eb: d2:b6:0e:67:3b:18:24:b8:50:64:96:31:24:3d:77:93:e6:ee: fb:a9:6f:e5:ea:d7:04:35:59:97:70:54:56:d3:0d:94:33:ed: a5:5e:52:c5:b6:ba:d8:e5:a1:38:e7:23:8a:c5:0d:7a:a5:89: 94:36:11:42:ac:58:34:dd:8b:ff:fb:27:93:ff:74:cb:ee:86: 3b:81:be:ad:cf:c1:65:ec:76:a9:13:c3:06:41:df:89:00:9a: 93:88:b1:f5:2b:f1:4d:34:f1:f2:14:ae:84:a8:30:05:50:73: 27:91:b2:52:04:4e:87:8b:7c:65:9c:85:89:bb:ec:07:46:47: f8:40:2f:13:a1:06:2e:8c:f4:6e:d4:cc:25:d7:4b:c7:81:d1: eb:5b:47:90:ec:8f:ca:1d:c4:5c:f5:97:ed:3b:1a:ca:f8:af: fc:99:16:4e:e9:d3:f5:d0:d8:b3:e7:58:e0:cc:ad:db:e8:9e: 8a:9d:0c:9f:a5:56:f2:26:13:01:be:67:72:8c:29:d1:94:74: 82:da:52:60:d3:70:4f:bc:f4:b1:d7:97:3b:88:6b:7a:15:32: c8:40:31:3f:a2:ea:7c:a0:38:7b:a8:6a:54:a2:1c:3d:28:16: 95:7f:4b:3d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2RwBDIdmTyAW0TkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc0ZTg2YjUtNTg2Zi00M2Q3LWJlNmYtY2YyMWU0MzRi MzFhMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk OGUzMTU3ODQtYmE2OS00OWQ1LWE0ZmYtYjJiMDhkMDExMjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4tKv6AfWGWrsiCMoZIqxNzAumRBa9YIov4N o164Rzkk7K7xT64ydpkPaAhDSlZAUEE+Dn3OC/3BsUFT7clJh7i65rkDUIoPA4xS mZfKuHMXbHTJSPJpSyLgl7Y27L0umk/ffL9Yn7ExRsVqLZQ5beg/3wmIJUQUbbnv mn0HLlpVOHAgv6poeiBpcCyQeHUUMw4c7mIVL27c2vuK/4DzucMYwnYTjq2dgBjp 3RGdSsUF2HbH5X1mrpMYH7c3lLJQDtnGQfr5aaPdjqQ/UH5V+2f7+ZMwlpKSsXmw Lbb3oJyf0vBhZfXYuYucgZ35CyaPUI5CB43J51DcWibGJypVHwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFNO6JW+8oLDLHb5K6GhrvCrKWwMqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84NzRl ODZiNS01ODZmLTQzZDctYmU2Zi1jZjIxZTQzNGIzMWEvNzI4MWFlMjMtODY3YS0z NGM3LWE1MDQtYWE4NDM3YjhlOTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvODc0ZTg2YjUtNTg2Zi00M2Q3LWJl NmYtY2YyMWU0MzRiMzFhLzg3NGU4NmI1LTU4NmYtNDNkNy1iZTZmLWNmMjFlNDM0 YjMxYS5jcmwwHwYDVR0jBBgwFoAUeU1ChMm712cQU58VdYLc1BLE/u0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84NzRlODZiNS01ODZmLTQzZDctYmU2Zi1jZjIx ZTQzNGIzMWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBzJqOMA4E AgACMAgDBgQmAv9DADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABEy0tDlB+1a6d0BuMG7K8dOvStg5nOxgk uFBkljEkPXeT5u77qW/l6tcENVmXcFRW0w2UM+2lXlLFtrrY5aE45yOKxQ16pYmU NhFCrFg03Yv/+yeT/3TL7oY7gb6tz8Fl7HapE8MGQd+JAJqTiLH1K/FNNPHyFK6E qDAFUHMnkbJSBE6Hi3xlnIWJu+wHRkf4QC8ToQYujPRu1Mwl10vHgdHrW0eQ7I/K HcRc9ZftOxrK+K/8mRZO6dP10Niz51jgzK3b6J6KnQyfpVbyJhMBvmdyjCnRlHSC 2lJg03BPvPSx15c7iGt6FTLIQDE/oup8oDh7qGpUohw9KBaVf0s9 -----END CERTIFICATE-----Generated at Wed May 13 08:19:09 2026 by rpki-client