$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/d024c0fe-f70d-3486-bd2c-a80515d83f4a.roa File: d024c0fe-f70d-3486-bd2c-a80515d83f4a.roa (raw, json) Hash identifier: PpPU0HMOyyxKNl8WMM0j6AQ8S8pdLC9jgPIGwp16yA0= Subject key identifier: 20:67:D4:E3:4A:B7:AB:CB:49:B3:02:3B:42:FB:38:BF:E8:61:92:5E Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Certificate serial: 010D0C9F4328584DC5659FB7A1BC47B3FE590CF6 Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/d024c0fe-f70d-3486-bd2c-a80515d83f4a.roa Signing time: Sat 09 May 2026 01:00:25 +0000 ROA not before: Sat 09 May 2026 01:00:25 +0000 ROA not after: Fri 07 Aug 2026 01:00:25 +0000 asID: 16509 IP address blocks: 170.200.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c5:65:9f:b7:a1:bc:47:b3:fe:59:0c:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Validity Not Before: May 9 01:00:25 2026 GMT Not After : Aug 7 01:00:25 2026 GMT Subject: CN=25fa85c4-4088-4ec5-b330-bddae555dab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9e:e6:e0:96:ef:bf:ed:76:14:5b:c6:f2:d7: 89:19:95:fa:4b:f4:3d:b7:fd:b9:13:e8:33:a3:f8: 97:f5:38:2e:3b:08:a4:3c:3e:fd:e3:8a:e0:29:b7: 96:08:4b:06:0e:0b:29:d4:e2:13:3a:72:ab:19:9d: 0d:3f:7c:a6:b1:df:ed:32:31:08:3a:62:b8:e1:31: f3:75:4f:8e:f7:1b:dd:a1:e2:15:11:05:62:8e:50: de:b9:2d:35:97:f5:9b:0d:22:c2:3e:2e:33:98:2e: df:1e:ac:41:9c:d3:43:34:3a:81:c7:cf:b7:01:2d: 5f:02:eb:23:a6:47:88:c7:0b:5e:2a:65:88:d4:e6: 74:8d:30:2c:57:20:87:a0:68:a6:b5:eb:da:05:89: c6:d1:3d:9d:a9:19:80:44:d4:64:f8:30:0b:3d:47: 28:af:a9:1f:af:21:4d:87:b0:ba:4b:fb:2d:28:f6: 6b:5f:bd:f3:9c:04:86:2c:cf:e7:1d:fc:bc:a2:5e: 5e:b8:2b:f1:48:51:4c:e8:81:d9:37:dc:81:e4:ca: a7:85:f1:c3:0e:50:de:ac:69:1c:19:a6:03:f1:5f: 76:06:da:61:4e:76:71:2a:9d:c1:56:e4:92:2b:bc: f3:c1:44:84:97:ff:3e:eb:6d:13:1e:bc:59:d0:07: a7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:67:D4:E3:4A:B7:AB:CB:49:B3:02:3B:42:FB:38:BF:E8:61:92:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/d024c0fe-f70d-3486-bd2c-a80515d83f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl X509v3 Authority Key Identifier: keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer sbgp-ipAddrBlock: critical IPv4: 170.200.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:93:35:ec:a3:1f:39:53:8c:cb:52:69:0a:ba:b7:fe:28:de: 60:d5:e7:7d:34:5b:6d:ec:5d:52:0e:a3:ce:a1:79:d1:ee:f9: b1:d5:5a:d8:b2:8c:bc:b7:0e:45:41:ec:08:b3:87:2e:5e:c1: 23:4a:55:35:1d:47:1e:a2:a9:e8:92:09:76:7d:4a:79:9a:19: a2:38:8a:3a:9d:18:fa:9a:a9:ab:9f:e2:eb:d5:74:36:b2:dd: 08:ac:2e:91:05:91:9f:ba:71:03:39:e8:bf:5e:c7:62:e3:f5: 16:91:30:c5:78:2d:91:41:87:ab:24:5c:16:3a:c7:93:f1:76: 4d:80:e6:c1:dd:f0:11:b1:48:c6:1c:19:2c:7b:ad:9e:c3:d2: 56:50:89:ad:80:61:bc:d1:ad:0c:a2:88:7e:85:48:0d:52:a5: 63:85:28:bb:a9:a6:03:8c:c4:cd:21:f2:20:d7:c5:6b:a7:5a: 7e:e9:6a:3d:e1:56:c9:2d:32:16:5e:d1:0c:e0:63:fb:ae:ae: 7f:31:3f:ed:81:40:22:23:4f:91:2f:70:c5:5c:b3:39:33:d9: 8e:2e:55:29:54:c3:e0:ef:a2:d3:39:0a:f9:d5:de:f5:02:40: b7:a5:40:dc:3e:40:af:3b:59:ab:0c:89:ad:66:a7:d9:26:b8: 6c:c3:be:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3FZZ+3obxHs/5ZDPYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk MGJkMB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk MjVmYTg1YzQtNDA4OC00ZWM1LWIzMzAtYmRkYWU1NTVkYWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj57m4Jbvv+12FFvG8teJGZX6S/Q9t/25E+gz o/iX9TguOwikPD7944rgKbeWCEsGDgsp1OITOnKrGZ0NP3ymsd/tMjEIOmK44THz dU+O9xvdoeIVEQVijlDeuS01l/WbDSLCPi4zmC7fHqxBnNNDNDqBx8+3AS1fAusj pkeIxwteKmWI1OZ0jTAsVyCHoGimtevaBYnG0T2dqRmARNRk+DALPUcor6kfryFN h7C6S/stKPZrX73znASGLM/nHfy8ol5euCvxSFFM6IHZN9yB5MqnhfHDDlDerGkc GaYD8V92BtphTnZxKp3BVuSSK7zzwUSEl/8+620THrxZ0AenMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBn1ONKt6vLSbMCO0L7OL/oYZJeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvZDAyNGMwZmUtZjcwZC0z NDg2LWJkMmMtYTgwNTE1ZDgzZjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqsi8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOTNeyjHzlTjMtSaQq6t/4o3mDV5300W23sXVIOo86hedHu+bHVWtiy jLy3DkVB7Aizhy5ewSNKVTUdRx6iqeiSCXZ9SnmaGaI4ijqdGPqaqauf4uvVdDay 3QisLpEFkZ+6cQM56L9ex2Lj9RaRMMV4LZFBh6skXBY6x5Pxdk2A5sHd8BGxSMYc GSx7rZ7D0lZQia2AYbzRrQyiiH6FSA1SpWOFKLuppgOMxM0h8iDXxWunWn7paj3h VsktMhZe0QzgY/uurn8xP+2BQCIjT5EvcMVcszkz2Y4uVSlUw+DvotM5CvnV3vUC QLelQNw+QK87WasMia1mp9kmuGzDvtw= -----END CERTIFICATE-----Generated at Wed May 13 11:38:58 2026 by rpki-client