$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa File: 288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa (raw, json) Hash identifier: Cw8nJS/W/x7UDljg2Zx95ZJvXk1hweDyiBLmKQQlCds= Subject key identifier: 4B:57:CB:B6:E2:59:6C:7F:1C:34:D1:64:E8:F1:AC:C9:2D:3D:F0:E0 Certificate issuer: /CN=194b4d95-965d-467f-835c-6cdeececce61 Certificate serial: 010D0C9F4328584DADAADECAEB08987B24DED100 Authority key identifier: 2F:A3:C7:92:60:1D:0F:77:6B:A7:06:EE:E1:9E:D2:34:E7:F8:90:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 1062 IP address blocks: 23.166.216.0/24 maxlen: 24 104.166.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/194b4d95-965d-467f-835c-6cdeececce61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/194b4d95-965d-467f-835c-6cdeececce61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:de:ca:eb:08:98:7b:24:de:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194b4d95-965d-467f-835c-6cdeececce61 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=621237a9-ca2c-4fb5-a394-85d7677c407f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fd:cc:90:9c:eb:14:cd:db:f3:21:be:dd:dc: 24:98:4e:33:03:1b:4c:2a:be:84:e3:5d:e9:3b:ef: 31:ed:56:71:1d:cd:4c:e9:f5:14:69:47:8a:30:12: ee:3c:c0:5e:03:40:c1:cb:1e:61:bc:76:0d:7a:2f: cd:3a:fa:ce:f8:a8:fc:ad:d3:6a:2f:ae:bf:c8:fe: a5:81:d7:c9:98:a9:14:8d:18:15:bd:e2:aa:fd:8b: 29:4e:86:f0:78:3e:43:78:61:c9:f4:7e:67:41:dc: 62:61:93:a2:34:0b:6f:21:a2:b6:82:22:63:9b:2d: 9d:4e:91:d9:2f:97:b2:18:0e:47:63:86:ff:43:eb: b7:8c:21:2f:28:94:fc:fc:08:82:7c:8b:c0:e5:4f: 70:f3:8f:9c:e2:e5:31:b1:c8:5e:e8:18:be:65:d8: 14:16:bb:11:0f:d1:fd:ed:47:c3:1a:78:19:99:4e: 54:56:9b:5e:9c:bc:d8:9b:e1:dc:4c:ec:c5:11:fe: 25:7c:0f:5a:ca:d5:d4:d5:c5:6a:7a:4b:ec:c4:cd: 42:30:fd:d3:54:fa:45:33:c5:6c:96:5d:56:27:04: 2c:35:88:76:2f:8e:95:24:da:13:55:b8:3e:fb:1a: 45:2b:d3:df:c9:a1:b6:a2:68:4d:5e:95:51:88:d6: f2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:57:CB:B6:E2:59:6C:7F:1C:34:D1:64:E8:F1:AC:C9:2D:3D:F0:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/194b4d95-965d-467f-835c-6cdeececce61.crl X509v3 Authority Key Identifier: keyid:2F:A3:C7:92:60:1D:0F:77:6B:A7:06:EE:E1:9E:D2:34:E7:F8:90:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61.cer sbgp-ipAddrBlock: critical IPv4: 23.166.216.0/24 104.166.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:ee:21:dc:69:6b:a3:00:48:be:1a:42:04:38:71:4e:43:84: d8:e8:ea:f1:7d:69:a5:b2:85:39:03:f4:6e:ee:a0:c8:74:ad: 5c:67:72:9a:63:54:01:7a:83:bb:f1:0c:dd:a3:59:88:0f:45: 1b:ae:9e:21:d0:96:be:8a:ed:33:c5:8d:34:09:db:b2:23:b1: 63:ed:73:7a:10:91:cb:20:00:81:90:52:1f:22:26:0c:6e:d4: c9:1d:e8:6a:fe:11:86:23:e4:23:08:9a:da:a5:6a:70:52:2d: 6a:ba:29:b0:81:3b:7a:55:54:bd:0d:c3:5b:94:98:4a:e6:97: b6:52:d5:95:41:c1:56:d2:c1:1f:0e:17:0a:5b:e4:23:80:b9: a5:21:e0:ee:4c:35:ee:23:19:f4:00:bd:a9:f0:c0:9b:cd:15: 34:e7:29:1f:33:34:7e:14:a6:cb:14:9f:4a:08:6a:a8:c8:b3: d5:0b:69:25:8e:34:3b:24:b4:8b:9b:58:1d:fe:f3:13:09:17: 63:dd:cc:e0:b0:7e:30:c3:7c:ab:44:6d:cb:c3:87:81:a2:bf: 7c:c4:e0:86:ca:c1:98:9f:a3:ae:0d:2c:4c:18:4e:48:de:46: 6b:ab:4d:f1:81:4f:ed:8c:86:25:af:d5:0f:50:f0:02:8d:e4: 9c:05:88:86 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2tqt7K6wiYeyTe0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTk0YjRkOTUtOTY1ZC00NjdmLTgzNWMtNmNkZWVjZWNj ZTYxMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk NjIxMjM3YTktY2EyYy00ZmI1LWEzOTQtODVkNzY3N2M0MDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/3MkJzrFM3b8yG+3dwkmE4zAxtMKr6E413p O+8x7VZxHc1M6fUUaUeKMBLuPMBeA0DByx5hvHYNei/NOvrO+Kj8rdNqL66/yP6l gdfJmKkUjRgVveKq/YspTobweD5DeGHJ9H5nQdxiYZOiNAtvIaK2giJjmy2dTpHZ L5eyGA5HY4b/Q+u3jCEvKJT8/AiCfIvA5U9w84+c4uUxsche6Bi+ZdgUFrsRD9H9 7UfDGngZmU5UVptenLzYm+HcTOzFEf4lfA9aytXU1cVqekvsxM1CMP3TVPpFM8Vs ll1WJwQsNYh2L46VJNoTVbg++xpFK9PfyaG2omhNXpVRiNby/wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEtXy7biWWx/HDTRZOjxrMktPfDgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xOTRi NGQ5NS05NjVkLTQ2N2YtODM1Yy02Y2RlZWNlY2NlNjEvMjg4YzEzNzctZDQ1Yy0z Y2U3LTg4YzktMWViYmZhNDFlNzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTk0YjRkOTUtOTY1ZC00NjdmLTgz NWMtNmNkZWVjZWNjZTYxLzE5NGI0ZDk1LTk2NWQtNDY3Zi04MzVjLTZjZGVlY2Vj Y2U2MS5jcmwwHwYDVR0jBBgwFoAUL6PHkmAdD3drpwbu4Z7SNOf4kFcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xOTRiNGQ5NS05NjVkLTQ2N2YtODM1Yy02Y2Rl ZWNlY2NlNjEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF6bYAwQA aKZ5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJDuIdxpa6MASL4aQgQ4cU5DhNjo6vF9aaWyhTkD9G7uoMh0 rVxncppjVAF6g7vxDN2jWYgPRRuuniHQlr6K7TPFjTQJ27IjsWPtc3oQkcsgAIGQ Uh8iJgxu1Mkd6Gr+EYYj5CMImtqlanBSLWq6KbCBO3pVVL0Nw1uUmErml7ZS1ZVB wVbSwR8OFwpb5COAuaUh4O5MNe4jGfQAvanwwJvNFTTnKR8zNH4UpssUn0oIaqjI s9ULaSWONDsktIubWB3+8xMJF2PdzOCwfjDDfKtEbcvDh4Giv3zE4IbKwZifo64N LEwYTkjeRmurTfGBT+2MhiWv1Q9Q8AKN5JwFiIY= -----END CERTIFICATE-----Generated at Wed May 13 09:19:08 2026 by rpki-client