$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/9119fabc-90f7-3929-9c68-10927c4f5854.roa File: 9119fabc-90f7-3929-9c68-10927c4f5854.roa (raw, json) Hash identifier: FKOJv+SnFbnL0KjKWMuz8YI8Nv44Do5LLD7Ti54NNUs= Subject key identifier: 5D:D8:AF:E7:04:A1:E5:93:75:DF:C6:9A:88:76:9F:77:51:FC:73:B2 Certificate issuer: /CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c Certificate serial: 010D0C9F4328584DAAE0347DC87414A3F38F0180 Authority key identifier: 68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/9119fabc-90f7-3929-9c68-10927c4f5854.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 398774 IP address blocks: 204.108.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:34:7d:c8:74:14:a3:f3:8f:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=d97c0d7e-2049-428f-93fe-f847d34e3b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:27:d6:56:aa:06:33:02:b7:d0:c1:48:69:5e: cf:52:db:0f:51:ef:16:1b:a7:cd:32:92:d9:f0:5a: 0f:de:aa:f8:af:18:cb:28:10:b7:67:be:36:02:21: f0:8e:43:bf:fe:1e:fd:3d:17:eb:ff:bd:38:c8:44: 96:52:83:cc:c9:ae:97:d6:e9:8f:bd:64:6e:82:a5: 4e:40:ea:09:b5:91:a2:e6:df:03:a3:e1:a6:25:49: ea:c6:76:47:8d:be:e9:85:1c:f3:8f:3a:12:85:8b: 4f:f6:3b:38:4b:47:13:4f:c0:83:c7:dd:76:2a:b7: 98:8b:35:d5:c2:ad:60:b0:c8:cb:22:5c:c1:dc:58: a7:e1:1a:d2:d9:1c:21:10:70:2c:56:07:99:e6:08: b4:2e:61:09:f1:e2:99:52:1a:44:2a:66:cf:11:2e: d8:af:84:93:8a:cc:39:71:1b:69:2a:a6:55:5e:96: 26:a4:36:23:12:24:f4:48:f4:2e:64:08:a1:8e:e1: 80:58:a2:47:33:d8:ea:7b:16:23:cf:c2:93:83:30: 6b:33:94:38:b7:75:29:19:c6:fe:2a:00:8c:f3:22: d9:71:29:ee:5a:f1:bb:c7:3b:07:86:e7:df:c0:41: ec:54:07:f9:61:41:bb:cb:c8:7c:9e:77:7e:81:ae: b8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D8:AF:E7:04:A1:E5:93:75:DF:C6:9A:88:76:9F:77:51:FC:73:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/9119fabc-90f7-3929-9c68-10927c4f5854.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl X509v3 Authority Key Identifier: keyid:68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer sbgp-ipAddrBlock: critical IPv4: 204.108.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:38:f3:7f:6e:d7:d5:79:cd:8f:06:6e:7e:c3:d7:62:da:54: f2:1b:76:9b:2f:cb:11:da:a1:b3:1f:4b:9e:2d:8c:50:b6:d2: 61:c3:d8:cf:60:83:b4:95:9a:8d:1a:94:30:f9:8c:bc:35:e2: 1a:d7:62:df:94:4a:87:02:69:83:9d:b0:ba:62:0d:2d:0d:50: c5:49:c4:96:19:84:13:a9:b0:1f:17:b7:12:0c:2e:c5:d4:d5: 49:29:9d:40:fc:34:3b:05:ed:21:c8:1e:f2:7c:15:64:2f:ed: 72:e6:d9:0d:f9:fc:22:dc:c7:a6:ae:c1:8f:f1:25:30:79:af: 34:a6:d6:90:67:7c:9f:4b:e0:02:fb:cf:2f:f2:ba:7f:3b:01: a6:70:33:40:ab:68:79:dc:11:45:e8:fb:c8:c5:b6:3e:0f:ea: 37:32:19:17:f8:b1:1b:63:e5:13:8e:15:4a:a8:79:a3:3a:ba: 1c:e6:c9:61:d6:5c:f8:2f:f3:b2:a9:b3:d4:93:74:9b:a7:70: b0:24:89:83:3a:28:c0:74:c1:49:83:2d:be:6f:56:df:90:99: b4:ac:87:26:dd:bd:d3:44:f1:48:32:e4:48:2d:0e:27:03:52: a1:d6:d1:9c:3a:12:53:9f:1d:cd:03:2d:0f:35:30:22:74:9c: 94:6e:c6:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4DR9yHQUo/OPAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFmZmMxOTItZDRhOC00MTg5LWJhYjItY2U3YTM3ZWE2 ODNjMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk ZDk3YzBkN2UtMjA0OS00MjhmLTkzZmUtZjg0N2QzNGUzYjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSfWVqoGMwK30MFIaV7PUtsPUe8WG6fNMpLZ 8FoP3qr4rxjLKBC3Z742AiHwjkO//h79PRfr/704yESWUoPMya6X1umPvWRugqVO QOoJtZGi5t8Do+GmJUnqxnZHjb7phRzzjzoShYtP9js4S0cTT8CDx912KreYizXV wq1gsMjLIlzB3Fin4RrS2RwhEHAsVgeZ5gi0LmEJ8eKZUhpEKmbPES7Yr4STisw5 cRtpKqZVXpYmpDYjEiT0SPQuZAihjuGAWKJHM9jqexYjz8KTgzBrM5Q4t3UpGcb+ KgCM8yLZcSnuWvG7xzsHhuffwEHsVAf5YUG7y8h8nnd+ga64+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3Yr+cEoeWTdd/Gmoh2n3dR/HOyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWZm YzE5Mi1kNGE4LTQxODktYmFiMi1jZTdhMzdlYTY4M2MvOTExOWZhYmMtOTBmNy0z OTI5LTljNjgtMTA5MjdjNGY1ODU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTFmZmMxOTItZDRhOC00MTg5LWJh YjItY2U3YTM3ZWE2ODNjL2ExZmZjMTkyLWQ0YTgtNDE4OS1iYWIyLWNlN2EzN2Vh NjgzYy5jcmwwHwYDVR0jBBgwFoAUaLusZqgHi4Xm7ZwBPcI1vdKnq/MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWZmYzE5Mi1kNGE4LTQxODktYmFiMi1jZTdh MzdlYTY4M2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGy8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACA4839u19V5zY8Gbn7D12LaVPIbdpsvyxHaobMfS54tjFC20mHD2M9g g7SVmo0alDD5jLw14hrXYt+USocCaYOdsLpiDS0NUMVJxJYZhBOpsB8XtxIMLsXU 1UkpnUD8NDsF7SHIHvJ8FWQv7XLm2Q35/CLcx6auwY/xJTB5rzSm1pBnfJ9L4AL7 zy/yun87AaZwM0CraHncEUXo+8jFtj4P6jcyGRf4sRtj5ROOFUqoeaM6uhzmyWHW XPgv87Kps9STdJuncLAkiYM6KMB0wUmDLb5vVt+QmbSshybdvdNE8Ugy5EgtDicD UqHW0Zw6ElOfHc0DLQ81MCJ0nJRuxrE= -----END CERTIFICATE-----Generated at Wed May 13 14:39:25 2026 by rpki-client