$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/8e12930e-504a-3f50-8b98-113950f808f7.roa File: 8e12930e-504a-3f50-8b98-113950f808f7.roa (raw, json) Hash identifier: kRPWT/MAev9VrbNZCDKHRRLdO4tummxRhYmPksftcJY= Subject key identifier: 02:14:80:73:A7:49:3D:A1:BC:55:11:18:EA:47:F6:D8:15:12:E9:76 Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584D93254824339D8AF09EFDC600 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/8e12930e-504a-3f50-8b98-113950f808f7.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 88 IP address blocks: 204.153.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:48:24:33:9d:8a:f0:9e:fd:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=17aa767e-41eb-4857-a8ad-c32029ca0773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:52:79:9e:42:96:75:71:99:e9:98:c1:d4:cd: 17:13:48:c0:e8:fb:6d:41:65:ef:c5:e7:35:ba:78: ab:50:e1:34:c9:59:f6:20:3f:32:5f:57:5d:dc:4d: ce:58:9b:32:71:25:c7:59:f0:7b:fb:9f:06:e2:68: dc:c1:c9:9b:c4:1c:a4:ee:94:29:d0:19:06:a5:ef: 59:92:5e:f8:59:25:56:44:d5:99:9a:cf:1f:cc:27: 51:44:7c:45:b8:56:7b:db:10:7f:2e:b7:db:a9:8d: bb:15:eb:80:eb:e4:22:02:98:8d:3c:c9:5d:92:d5: 82:ae:47:56:2a:82:c4:4d:e4:35:3b:f0:05:f6:b4: ec:09:b3:a0:ec:c9:e8:6e:54:25:2c:6b:5a:1b:fe: 86:18:8e:37:14:a7:1f:90:91:79:67:b9:98:a0:36: 33:01:30:32:08:80:46:e3:b4:42:c7:82:ec:4f:17: f4:50:b5:d0:5c:8e:ee:19:c1:5e:eb:e9:d1:b5:ad: 5f:ae:55:a8:4a:64:d8:2b:6d:55:0c:29:e1:a4:1a: e6:dc:70:99:49:cd:93:15:47:3f:ba:60:0a:e1:db: bd:1e:03:0e:0e:cb:8e:1b:20:5c:f0:25:89:dc:6b: 68:9a:9d:17:f6:62:7e:c0:50:7a:a7:07:94:5d:05: 00:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:14:80:73:A7:49:3D:A1:BC:55:11:18:EA:47:F6:D8:15:12:E9:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/8e12930e-504a-3f50-8b98-113950f808f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 204.153.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:f9:eb:a1:67:0e:51:90:f7:22:7e:28:8f:70:c7:71:ce:e3: f1:85:9d:6d:14:4f:45:ab:4e:ed:ce:59:9c:74:71:75:bc:34: 52:c9:14:cb:8a:ec:67:10:5f:7c:15:7b:fb:02:fe:61:45:a2: a3:51:46:d7:8a:1e:95:4e:61:8a:15:ca:6c:ac:51:30:8e:74: d3:40:42:7e:c3:e3:d3:be:3e:16:6a:78:fc:4c:6c:c5:cf:e1: 25:ec:a3:c5:b7:36:9c:a0:45:35:61:6e:00:e2:7d:51:13:f5: 29:19:30:c2:94:92:e3:49:97:af:bf:d5:7c:4a:10:e6:5f:c8: 49:d1:59:85:33:3b:ef:cc:02:fb:f3:d5:1f:e8:1e:f8:ee:0c: e9:85:d4:14:ca:5d:ca:65:cb:14:e5:24:5f:f5:69:24:18:bb: 0b:63:82:09:7a:8c:21:c0:24:91:16:9c:f3:7f:c6:18:8b:69: 06:79:44:39:d3:36:21:ec:84:04:ab:51:f6:30:62:7a:4b:ad: c7:2f:ad:fb:d9:37:9b:15:bc:18:40:20:db:d9:1e:7f:a4:9e: 98:cd:c8:29:cd:d0:c4:d0:c8:cd:e2:34:ee:59:ba:d8:76:25: db:71:22:b4:98:57:31:44:33:28:85:d9:9c:c5:2d:74:e2:04: b2:07:6a:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJUgkM52K8J79xgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk MTdhYTc2N2UtNDFlYi00ODU3LWE4YWQtYzMyMDI5Y2EwNzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlJ5nkKWdXGZ6ZjB1M0XE0jA6PttQWXvxec1 unirUOE0yVn2ID8yX1dd3E3OWJsycSXHWfB7+58G4mjcwcmbxByk7pQp0BkGpe9Z kl74WSVWRNWZms8fzCdRRHxFuFZ72xB/LrfbqY27FeuA6+QiApiNPMldktWCrkdW KoLETeQ1O/AF9rTsCbOg7MnoblQlLGtaG/6GGI43FKcfkJF5Z7mYoDYzATAyCIBG 47RCx4LsTxf0ULXQXI7uGcFe6+nRta1frlWoSmTYK21VDCnhpBrm3HCZSc2TFUc/ umAK4du9HgMODsuOGyBc8CWJ3Gtomp0X9mJ+wFB6pweUXQUACwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIUgHOnST2hvFURGOpH9tgVEul2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvOGUxMjkzMGUtNTA0YS0z ZjUwLThiOTgtMTEzOTUwZjgwOGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzJkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIf566FnDlGQ9yJ+KI9wx3HO4/GFnW0UT0WrTu3OWZx0cXW8NFLJFMuK 7GcQX3wVe/sC/mFFoqNRRteKHpVOYYoVymysUTCOdNNAQn7D49O+PhZqePxMbMXP 4SXso8W3NpygRTVhbgDifVET9SkZMMKUkuNJl6+/1XxKEOZfyEnRWYUzO+/MAvvz 1R/oHvjuDOmF1BTKXcplyxTlJF/1aSQYuwtjggl6jCHAJJEWnPN/xhiLaQZ5RDnT NiHshASrUfYwYnpLrccvrfvZN5sVvBhAINvZHn+knpjNyCnN0MTQyM3iNO5Zuth2 JdtxIrSYVzFEMyiF2ZzFLXTiBLIHaiU= -----END CERTIFICATE-----Generated at Wed May 13 05:01:14 2026 by rpki-client