$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e2e563df-2d29-32d7-ac6b-402dbc1f4261.roa File: e2e563df-2d29-32d7-ac6b-402dbc1f4261.roa (raw, json) Hash identifier: clXKC0EUSHCbfz5VUe9Cb1GgHu6I4Lndx+0rklNI1DM= Subject key identifier: 10:15:56:48:7E:05:4D:6F:5A:10:02:EF:0D:A6:A2:9F:0B:CE:AA:4E Certificate issuer: /CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25 Certificate serial: 010D0C9F4328584D2A74D823AECC47530166E800 Authority key identifier: 68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e2e563df-2d29-32d7-ac6b-402dbc1f4261.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 21928 IP address blocks: 204.235.252.0/24 maxlen: 24 204.235.253.0/24 maxlen: 24 204.235.254.0/24 maxlen: 24 204.235.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:d8:23:ae:cc:47:53:01:66:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=bd40bc71-6abc-4120-a1a5-1c572e287a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b1:61:c8:71:36:94:c9:0a:15:a6:51:0c:18: ba:db:12:4c:bb:4c:1e:eb:9d:4e:0a:1e:7d:c9:e1: 7c:fe:24:52:04:39:ac:6f:42:fd:47:b3:29:af:c1: a2:88:54:52:fe:b2:3d:76:33:32:62:21:8e:af:23: db:55:23:42:2b:8e:d3:62:77:cb:e4:68:07:ac:5f: ae:db:c9:2f:ff:aa:af:fc:48:a7:d1:ad:71:7c:eb: e6:9c:7f:ed:fb:77:bc:bf:21:d6:0c:f1:ad:29:da: a8:b7:2d:18:60:4a:fb:b6:3c:b7:2f:4e:57:7b:7d: 8c:77:4d:99:0b:61:92:49:7d:2e:e4:99:d0:6f:bc: 01:ba:1b:41:c8:21:e5:b8:1b:e1:56:b2:2b:7b:87: ee:08:dd:04:68:95:d0:42:37:98:33:c5:31:26:93: 75:a4:b3:b5:13:45:89:5b:63:36:a4:fd:4a:46:6c: 60:e8:a5:7d:eb:96:11:5e:ca:5e:2b:0f:5b:0f:a9: 07:49:3b:53:e1:a8:83:49:dc:ff:85:cd:d6:62:8b: 9c:56:d8:32:f7:ca:1f:fd:52:45:5a:c4:05:ed:3c: 9d:2c:73:53:2c:0b:28:19:76:41:6b:b4:2a:ce:ac: 9e:8a:c5:4b:0c:be:15:25:35:eb:41:11:39:86:6c: ff:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:15:56:48:7E:05:4D:6F:5A:10:02:EF:0D:A6:A2:9F:0B:CE:AA:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e2e563df-2d29-32d7-ac6b-402dbc1f4261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.crl X509v3 Authority Key Identifier: keyid:68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer sbgp-ipAddrBlock: critical IPv4: 204.235.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:9f:fd:20:7e:41:30:e4:72:d0:63:a6:4b:6d:37:41:1c:a4: d0:0a:80:7e:32:d4:cf:3c:de:09:66:55:b9:dd:7d:93:5e:5c: ff:07:c6:24:ef:6b:90:20:00:c5:2c:10:33:79:0b:0e:b3:df: 28:89:1c:e2:a9:33:ec:3c:a8:f3:ac:77:46:d5:aa:0e:5d:7e: 58:c7:85:ca:86:dc:7a:ac:8a:be:5b:ef:9a:90:13:39:0a:25: 69:cb:f3:c8:3f:af:f7:4a:de:1f:b8:91:15:78:2e:1a:c9:cc: a4:5c:a2:dd:5c:27:ba:91:e2:4e:18:93:eb:d2:51:44:8a:27: c8:f6:9b:3d:50:44:54:4e:34:a7:e3:b2:38:1d:2d:95:b1:1b: 9f:48:11:94:89:58:82:b7:61:e9:69:25:1d:de:b9:58:20:94: cf:fe:c1:e8:09:d4:bb:95:8f:8b:cc:e5:79:ac:57:c2:3c:18: 69:ff:2f:db:e3:36:18:c4:ae:be:f3:d0:59:d6:27:55:78:40: 8d:cb:1c:4e:04:8c:41:9c:36:59:9a:a5:93:40:e7:47:c1:61: d5:85:5f:ff:1c:8a:01:83:4a:c3:dd:b5:b3:d5:1f:7a:e7:31: 4d:2b:4b:44:cd:3d:db:50:96:f2:c4:da:2d:c7:9e:c7:84:08: b9:b2:0b:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdNgjrsxHUwFm6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTkxM2Y5MjItZTlmYy00NWVlLTgzOTYtOGE1NmMwZjVi ZDI1MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk YmQ0MGJjNzEtNmFiYy00MTIwLWExYTUtMWM1NzJlMjg3YTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrFhyHE2lMkKFaZRDBi62xJMu0we651OCh59 yeF8/iRSBDmsb0L9R7Mpr8GiiFRS/rI9djMyYiGOryPbVSNCK47TYnfL5GgHrF+u 28kv/6qv/Ein0a1xfOvmnH/t+3e8vyHWDPGtKdqoty0YYEr7tjy3L05Xe32Md02Z C2GSSX0u5JnQb7wBuhtByCHluBvhVrIre4fuCN0EaJXQQjeYM8UxJpN1pLO1E0WJ W2M2pP1KRmxg6KV965YRXspeKw9bD6kHSTtT4aiDSdz/hc3WYoucVtgy98of/VJF WsQF7TydLHNTLAsoGXZBa7QqzqyeisVLDL4VJTXrQRE5hmz/gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAVVkh+BU1vWhAC7w2mop8LzqpOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lOTEz ZjkyMi1lOWZjLTQ1ZWUtODM5Ni04YTU2YzBmNWJkMjUvZTJlNTYzZGYtMmQyOS0z MmQ3LWFjNmItNDAyZGJjMWY0MjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZTkxM2Y5MjItZTlmYy00NWVlLTgz OTYtOGE1NmMwZjViZDI1L2U5MTNmOTIyLWU5ZmMtNDVlZS04Mzk2LThhNTZjMGY1 YmQyNS5jcmwwHwYDVR0jBBgwFoAUaFY6BAHMhUHZrlazIQv/hibowYMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9lOTEzZjkyMi1lOWZjLTQ1ZWUtODM5Ni04YTU2 YzBmNWJkMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzOv8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqf/SB+QTDkctBjpkttN0EcpNAKgH4y1M883glmVbndfZNeXP8HxiTv a5AgAMUsEDN5Cw6z3yiJHOKpM+w8qPOsd0bVqg5dfljHhcqG3Hqsir5b75qQEzkK JWnL88g/r/dK3h+4kRV4LhrJzKRcot1cJ7qR4k4Yk+vSUUSKJ8j2mz1QRFRONKfj sjgdLZWxG59IEZSJWIK3YelpJR3euVgglM/+wegJ1LuVj4vM5XmsV8I8GGn/L9vj NhjErr7z0FnWJ1V4QI3LHE4EjEGcNlmapZNA50fBYdWFX/8cigGDSsPdtbPVH3rn MU0rS0TNPdtQlvLE2i3HnseECLmyCyY= -----END CERTIFICATE-----Generated at Thu Mar 26 18:53:45 2026 by rpki-client