$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/a1f2ded0-19c5-3a97-953b-2ea126da1a8f.roa File: a1f2ded0-19c5-3a97-953b-2ea126da1a8f.roa (raw, json) Hash identifier: h7W3917HcG8inj4SDxpbbJV70UU8vSduYI2Kvv3MPfM= Subject key identifier: 27:71:6A:C1:FA:E4:35:0C:68:CE:83:0C:44:50:38:66:A9:2D:21:62 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584D95EFEF1FCA559BD0FB993AA4 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/a1f2ded0-19c5-3a97-953b-2ea126da1a8f.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 18434 IP address blocks: 216.189.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:ef:1f:ca:55:9b:d0:fb:99:3a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=d294bb22-a4bc-43d3-bdb9-1b61c763dca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bd:a4:df:18:08:ba:06:b6:8b:4a:7a:d5:17: 02:6f:b4:5d:36:a8:5a:08:16:ed:33:41:2c:19:e3: ec:53:87:b1:9b:cf:95:ec:b3:54:e6:04:c5:98:81: 3f:10:34:7d:35:b7:20:60:47:72:a7:ec:b2:a6:d9: b4:a3:fe:49:3c:e7:4c:06:61:ff:cf:ef:26:7d:07: 1f:eb:0f:c7:1b:2e:6f:36:1b:dd:42:96:40:4f:7c: b7:b4:75:85:e0:4e:eb:90:62:9a:20:6d:f4:52:a3: de:47:4b:64:a2:90:c3:48:6b:d0:61:1a:47:ef:4d: 81:73:61:e7:fa:4b:c2:ea:86:49:ec:93:fe:39:bd: 79:04:e6:39:1e:dc:e6:f6:2c:14:66:73:b4:28:8d: 7f:a2:61:30:03:a4:c1:80:22:73:e2:de:82:fb:2a: e5:a3:35:c6:89:42:2f:94:ae:18:32:84:30:8a:8f: 59:83:26:07:28:0f:54:d3:e2:99:16:d7:fa:ea:93: fb:1f:e6:2d:fe:e9:70:69:49:3a:4f:68:39:34:6a: cf:96:f2:7e:4b:8f:9e:23:08:db:bf:b7:2e:8c:68: 84:03:df:b8:e5:89:ab:66:03:07:dd:c7:e8:81:62: 7e:1b:70:ee:27:47:87:ad:12:49:a1:cb:96:d2:b0: 19:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:71:6A:C1:FA:E4:35:0C:68:CE:83:0C:44:50:38:66:A9:2D:21:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/a1f2ded0-19c5-3a97-953b-2ea126da1a8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 216.189.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:e9:c1:00:e1:ac:2d:e1:4d:04:4c:f6:04:bb:37:c9:d5:29: a4:35:a0:b2:ec:8d:39:fe:25:e5:21:07:44:1c:cd:0c:26:c7: 6f:74:31:b7:1f:5f:f8:e3:2e:90:05:f9:05:3a:ac:e1:8c:eb: 98:99:d2:7e:85:4e:4f:c9:7e:d2:6e:6e:3b:7e:ec:44:fa:6f: 03:79:87:3a:1a:eb:04:af:6f:7d:fb:68:df:0e:41:43:1c:6d: 7d:12:4e:f8:83:66:b2:c2:d0:b9:da:6b:12:55:32:f4:b0:aa: b4:1d:c2:ae:ac:d3:61:c2:52:43:87:67:e5:3b:b3:c6:0b:2b: 18:03:24:61:48:3c:eb:40:3e:7b:24:89:99:8b:65:10:89:9f: c0:cc:80:ed:74:12:3e:80:87:c6:b2:e5:68:41:e4:74:17:de: 55:6a:8d:27:0c:b0:f3:e9:1e:2a:e8:e8:63:f2:68:d6:b0:b6: f7:06:44:51:d3:81:60:27:5a:bc:a7:c7:8e:15:e1:35:1c:6e: c6:0c:4e:50:73:ed:c3:03:de:30:61:78:b0:61:19:be:d8:59: 6c:59:e3:23:b8:9b:65:06:15:4e:f5:63:81:da:ec:dc:e6:0c: d4:52:69:47:70:7a:23:fb:b5:0f:35:2b:0a:2a:ac:14:39:45: fe:f0:42:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V7+8fylWb0PuZOqQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk ZDI5NGJiMjItYTRiYy00M2QzLWJkYjktMWI2MWM3NjNkY2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b2k3xgIuga2i0p61RcCb7RdNqhaCBbtM0Es GePsU4exm8+V7LNU5gTFmIE/EDR9NbcgYEdyp+yyptm0o/5JPOdMBmH/z+8mfQcf 6w/HGy5vNhvdQpZAT3y3tHWF4E7rkGKaIG30UqPeR0tkopDDSGvQYRpH702Bc2Hn +kvC6oZJ7JP+Ob15BOY5Htzm9iwUZnO0KI1/omEwA6TBgCJz4t6C+yrlozXGiUIv lK4YMoQwio9ZgyYHKA9U0+KZFtf66pP7H+Yt/ulwaUk6T2g5NGrPlvJ+S4+eIwjb v7cujGiEA9+45YmrZgMH3cfogWJ+G3DuJ0eHrRJJocuW0rAZKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdxasH65DUMaM6DDERQOGapLSFiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvYTFmMmRlZDAtMTljNS0z YTk3LTk1M2ItMmVhMTI2ZGExYThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2L38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPpwQDhrC3hTQRM9gS7N8nVKaQ1oLLsjTn+JeUhB0QczQwmx290Mbcf X/jjLpAF+QU6rOGM65iZ0n6FTk/JftJubjt+7ET6bwN5hzoa6wSvb337aN8OQUMc bX0STviDZrLC0LnaaxJVMvSwqrQdwq6s02HCUkOHZ+U7s8YLKxgDJGFIPOtAPnsk iZmLZRCJn8DMgO10Ej6Ah8ay5WhB5HQX3lVqjScMsPPpHiro6GPyaNawtvcGRFHT gWAnWrynx44V4TUcbsYMTlBz7cMD3jBheLBhGb7YWWxZ4yO4m2UGFU71Y4Ha7Nzm DNRSaUdweiP7tQ81KwoqrBQ5Rf7wQgE= -----END CERTIFICATE-----Generated at Wed May 13 03:36:57 2026 by rpki-client