$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/29247b77-b19f-3449-9456-b1d4b5bac0ae.roa File: 29247b77-b19f-3449-9456-b1d4b5bac0ae.roa (raw, json) Hash identifier: l7PCC9Tq0ukC1YTN0cM7eLuun+Y8Imj5l8wJKlRyqBQ= Subject key identifier: 94:CE:21:72:86:A3:61:A9:10:E4:AC:3A:85:D9:09:99:4A:FF:6A:B2 Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584D91C0160623A4D7EF3AA2C780 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/29247b77-b19f-3449-9456-b1d4b5bac0ae.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 25605 IP address blocks: 198.41.8.0/22 maxlen: 22 198.41.8.0/23 maxlen: 23 198.41.8.0/24 maxlen: 24 198.41.9.0/24 maxlen: 24 198.41.10.0/23 maxlen: 23 198.41.10.0/24 maxlen: 24 198.41.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:16:06:23:a4:d7:ef:3a:a2:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=cf4fa152-3345-451b-b87b-b722f437faf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:68:5b:76:11:7e:b2:30:8b:5a:aa:40:a4:a1: 69:8d:37:c9:13:61:47:7d:47:68:7e:d9:e7:85:02: 5c:67:e6:9f:5e:70:4a:94:aa:27:db:a9:6d:b9:77: 2d:b1:7c:25:a0:2f:aa:ce:64:22:98:6a:96:eb:e5: 96:a7:37:96:47:d9:eb:ee:93:62:f8:c4:d4:c6:bc: be:dd:d5:70:bb:ae:ff:76:69:da:fe:56:b1:46:51: f4:c7:0c:00:0d:37:64:00:8a:02:6e:bd:d2:16:57: 10:7f:8b:a4:67:77:2a:ab:29:fe:2a:50:7b:ae:05: bb:c6:c1:25:c8:c1:42:d5:f5:a8:83:f6:91:3d:dd: af:94:ae:63:21:5f:c5:e0:36:57:a7:e6:70:40:ea: 9d:f5:43:41:d8:43:b2:f8:47:05:5b:0d:26:8d:62: 60:8e:0b:de:22:8b:66:41:60:40:4f:be:8c:94:05: e4:b8:a2:c3:c8:9d:2a:cb:e2:54:ec:07:47:4b:41: d8:7e:67:16:c8:e8:a5:18:12:6f:f8:76:4d:a9:ac: a9:82:92:f2:f9:53:7a:a4:f0:62:eb:50:c0:43:db: 10:37:39:91:ce:16:83:50:b6:69:6c:3f:d9:9f:d5: 04:d5:81:e4:73:54:1a:8d:52:80:01:f5:ed:28:ad: 9b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:CE:21:72:86:A3:61:A9:10:E4:AC:3A:85:D9:09:99:4A:FF:6A:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/29247b77-b19f-3449-9456-b1d4b5bac0ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 198.41.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:53:7d:3e:e8:0c:39:b8:3c:2e:58:d4:d8:0d:dc:ff:3b:6d: 2e:60:88:65:b6:af:97:a7:fa:32:da:9f:38:8a:de:dc:64:7e: 89:1c:eb:20:e9:e9:90:2d:de:8f:3e:cb:b0:c1:33:c8:50:70: 22:47:c5:29:d4:7a:7c:f3:e3:49:0b:ae:43:bb:21:c4:b2:54: d4:b3:13:7c:ce:d2:95:fc:ce:13:28:f2:b6:c4:23:bb:21:5a: 77:f7:1c:01:f3:14:c6:52:a2:4c:53:70:5d:0c:c3:f4:71:bc: f5:2c:08:40:02:32:de:de:86:93:11:52:6c:12:52:61:72:a6: 95:0d:9d:d7:78:8f:b1:b1:d2:ab:8f:74:a7:f4:38:05:ce:cc: a0:2c:0a:95:cd:45:d8:12:f9:87:72:2b:a2:7f:50:df:b0:d1: be:19:6d:28:a5:81:b9:26:5a:fe:c0:02:5b:97:2c:fe:99:d1: 65:58:47:54:41:ee:98:85:a6:55:86:37:ca:73:22:b5:f1:94: 2c:19:15:25:a8:57:5b:f9:78:b0:11:f4:64:54:96:03:d4:bd: b4:b5:eb:1e:7f:5b:cc:bd:3f:a4:22:39:f7:bb:8a:0b:ab:63: 45:4b:95:db:38:f9:4b:1a:d6:94:5d:ac:a3:07:81:fc:03:e8: af:81:66:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwBYGI6TX7zqix4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk Y2Y0ZmExNTItMzM0NS00NTFiLWI4N2ItYjcyMmY0MzdmYWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmhbdhF+sjCLWqpApKFpjTfJE2FHfUdoftnn hQJcZ+afXnBKlKon26ltuXctsXwloC+qzmQimGqW6+WWpzeWR9nr7pNi+MTUxry+ 3dVwu67/dmna/laxRlH0xwwADTdkAIoCbr3SFlcQf4ukZ3cqqyn+KlB7rgW7xsEl yMFC1fWog/aRPd2vlK5jIV/F4DZXp+ZwQOqd9UNB2EOy+EcFWw0mjWJgjgveIotm QWBAT76MlAXkuKLDyJ0qy+JU7AdHS0HYfmcWyOilGBJv+HZNqaypgpLy+VN6pPBi 61DAQ9sQNzmRzhaDULZpbD/Zn9UE1YHkc1QajVKAAfXtKK2bTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTOIXKGo2GpEOSsOoXZCZlK/2qyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvMjkyNDdiNzctYjE5Zi0z NDQ5LTk0NTYtYjFkNGI1YmFjMGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxikIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRTfT7oDDm4PC5Y1NgN3P87bS5giGW2r5en+jLanziK3txkfokc6yDp 6ZAt3o8+y7DBM8hQcCJHxSnUenzz40kLrkO7IcSyVNSzE3zO0pX8zhMo8rbEI7sh Wnf3HAHzFMZSokxTcF0Mw/RxvPUsCEACMt7ehpMRUmwSUmFyppUNndd4j7Gx0quP dKf0OAXOzKAsCpXNRdgS+YdyK6J/UN+w0b4ZbSilgbkmWv7AAluXLP6Z0WVYR1RB 7piFplWGN8pzIrXxlCwZFSWoV1v5eLAR9GRUlgPUvbS16x5/W8y9P6QiOfe7igur Y0VLlds4+Usa1pRdrKMHgfwD6K+BZso= -----END CERTIFICATE-----Generated at Wed May 13 07:04:12 2026 by rpki-client