$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa File: ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa (raw, json) Hash identifier: ez0ebBtZy70OS2Et9Up6TDv1ig1tvS54YGDfzXMRRJ4= Subject key identifier: 52:9B:F8:F9:25:D1:73:B9:8B:01:B4:9D:AA:55:76:4D:1A:22:45:CF Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F4328584D95F001D777349297D1DCA180 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 30383 IP address blocks: 198.208.9.0/24 maxlen: 24 198.208.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:01:d7:77:34:92:97:d1:dc:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=35fe7bdd-215b-4b5f-b6f7-cea6fc640ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bf:91:e7:10:59:a2:81:0e:b2:35:f2:68:3d: fd:42:3c:c0:01:67:e5:b8:ee:4d:65:09:97:08:d0: 97:a0:9f:f1:f4:33:0b:2f:a0:79:e9:08:e9:51:f9: 07:0e:f3:62:04:9b:5f:d3:a4:d3:3f:56:07:7a:a5: 79:36:58:bd:87:ad:11:cb:75:df:7f:fa:cc:4d:ff: 8b:91:27:97:ca:3f:c1:a4:0c:d4:27:89:b8:1b:d7: 41:e1:d2:c8:9d:14:8c:46:15:e8:81:3d:bf:bd:30: d3:b7:98:81:e6:a4:be:84:8e:e1:ac:4b:ad:a6:eb: 5a:98:68:2f:bc:b0:f0:72:b2:5a:15:4e:f6:b0:be: 96:f3:46:03:3d:5c:cd:0f:f6:df:94:41:a2:31:1e: ff:e9:d2:d6:62:13:74:ab:9e:5d:d0:96:45:ba:b8: 16:8a:be:1b:d3:43:32:a5:9a:53:ff:a5:0c:be:a0: d2:3a:e0:c9:8f:21:4b:d7:7b:f6:8a:1d:3a:11:4f: 35:64:6e:70:3b:a9:d5:c6:21:38:c1:ed:6a:a9:d6: 20:81:6a:f8:73:be:c0:12:7e:0d:94:97:dd:73:8a: e0:9b:e4:ee:85:ab:49:31:02:d2:2a:d5:57:9e:34: 01:fd:ba:2f:f6:de:19:e3:1d:48:57:22:64:c4:19: a4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9B:F8:F9:25:D1:73:B9:8B:01:B4:9D:AA:55:76:4D:1A:22:45:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.9.0/24 198.208.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:79:54:a1:0a:0a:84:aa:f6:c6:83:7a:2d:1e:b2:90:4d:c9: 0e:70:3b:2e:ba:9c:53:04:87:a2:c0:fb:c3:0c:c8:e6:5d:f7: 21:dc:91:c6:8d:64:22:fb:c8:f6:6f:5d:a0:89:19:e1:9a:f4: ba:6b:d0:f4:e0:63:1a:0f:13:5a:c0:79:48:fc:a5:96:1f:38: 20:21:a5:67:ea:3a:0c:f0:48:1c:57:ff:27:f5:a6:18:74:f8: 56:d6:72:f4:7e:1a:86:00:39:b3:29:55:93:c8:f4:56:e8:0d: 0f:e5:e5:48:13:d3:42:66:46:17:a7:74:05:e4:03:2b:9f:32: f2:9f:49:79:6d:e0:ed:d1:7d:47:04:bd:20:f9:d0:44:54:e0: bf:9a:0e:15:83:3a:d5:15:07:d0:93:11:69:01:29:be:30:1d: b3:4c:60:10:ba:91:cf:38:6e:eb:90:8d:74:ad:c2:cb:11:6b: 6b:2b:55:13:9f:2b:30:62:7b:56:32:64:4b:70:63:38:f8:82: bc:78:95:b2:d6:6f:d3:d6:6b:53:a4:ce:d9:fe:c3:c9:c1:1c: e0:21:f4:a6:b9:86:96:c5:74:64:70:44:0d:4c:32:15:84:8f: 75:d4:48:65:a7:46:49:40:d2:10:f6:cb:5c:b6:d9:69:96:1e: 00:2c:27:cc -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2V8AHXdzSSl9HcoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk MzVmZTdiZGQtMjE1Yi00YjVmLWI2ZjctY2VhNmZjNjQwZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7+R5xBZooEOsjXyaD39QjzAAWfluO5NZQmX CNCXoJ/x9DMLL6B56QjpUfkHDvNiBJtf06TTP1YHeqV5Nli9h60Ry3Xff/rMTf+L kSeXyj/BpAzUJ4m4G9dB4dLInRSMRhXogT2/vTDTt5iB5qS+hI7hrEutputamGgv vLDwcrJaFU72sL6W80YDPVzND/bflEGiMR7/6dLWYhN0q55d0JZFurgWir4b00My pZpT/6UMvqDSOuDJjyFL13v2ih06EU81ZG5wO6nVxiE4we1qqdYggWr4c77AEn4N lJfdc4rgm+TuhatJMQLSKtVXnjQB/bov9t4Z4x1IVyJkxBmkzwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFKb+Pkl0XO5iwG0napVdk0aIkXPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvZWJjMjRkYWMtZDA4ZS0z MzY3LWE2ZDEtNmJhMjI5NzBlMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxtAJAwQA xtDQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHF5VKEKCoSq9saDei0espBNyQ5wOy66nFMEh6LA+8MMyOZd 9yHckcaNZCL7yPZvXaCJGeGa9Lpr0PTgYxoPE1rAeUj8pZYfOCAhpWfqOgzwSBxX /yf1phh0+FbWcvR+GoYAObMpVZPI9FboDQ/l5UgT00JmRhendAXkAyufMvKfSXlt 4O3RfUcEvSD50ERU4L+aDhWDOtUVB9CTEWkBKb4wHbNMYBC6kc84buuQjXStwssR a2srVROfKzBie1YyZEtwYzj4grx4lbLWb9PWa1Okztn+w8nBHOAh9Ka5hpbFdGRw RA1MMhWEj3XUSGWnRklA0hD2y1y22WmWHgAsJ8w= -----END CERTIFICATE-----Generated at Wed May 13 02:53:36 2026 by rpki-client