$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a401becd-3ae1-3b96-8178-8f59dad578c9.roa File: a401becd-3ae1-3b96-8178-8f59dad578c9.roa (raw, json) Hash identifier: 7oYNB+Rk/tfmIEEsKa6CIkSZvIwJOWsW9YCc5kBQcFY= Subject key identifier: F9:99:97:4E:8B:B7:F1:C7:53:62:A9:B0:1B:73:E0:ED:EF:E4:7C:B5 Certificate issuer: /CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Certificate serial: 010D0C9F4328584DA81576CC18AD06922E3B3180 Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a401becd-3ae1-3b96-8178-8f59dad578c9.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 803 IP address blocks: 216.197.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:76:cc:18:ad:06:92:2e:3b:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=4c4636e7-b71e-490b-9e06-6db3eb41d6d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5f:0c:9c:2b:77:bd:e2:4a:5e:b6:c2:8f:f9: 4f:fb:57:9d:09:34:c1:28:13:b2:d6:3e:10:b9:eb: 80:da:b0:f5:2a:3b:19:42:9b:e2:bd:83:a8:a6:69: ac:77:21:f1:06:b2:dd:eb:2c:21:b0:db:f4:f6:85: 65:8a:10:a5:02:fb:ea:ee:59:2a:b2:54:df:ed:33: c6:eb:ef:a2:55:66:ba:c2:f7:24:f9:2f:76:67:b2: 91:e0:9f:33:ca:8b:9d:e1:7e:0f:a6:ed:97:26:0d: a2:bd:79:e8:73:ee:f9:c7:24:92:b9:89:4d:28:bf: e4:bf:66:2f:dc:a6:01:f4:b7:06:23:dd:dd:3a:04: a9:3a:63:9e:8f:f6:a2:8e:06:fd:4c:82:c7:bd:a9: 6f:87:67:6a:81:54:cd:45:9f:e4:76:60:c8:7a:94: 51:cb:9a:21:d3:ac:bf:c4:65:9a:5e:70:d1:8b:40: 43:d4:3e:fa:9a:f5:54:71:a6:b9:96:45:c6:fa:d1: fc:85:eb:54:90:a4:0a:17:9d:7c:7b:60:eb:91:d1: 06:21:1b:92:a7:ac:00:5f:b3:5b:b9:33:af:1b:64: 4e:1f:05:11:84:51:5b:66:e4:b0:7b:d9:55:46:17: 23:16:5e:fe:77:df:89:2a:87:0e:76:8d:8d:d6:24: bd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:99:97:4E:8B:B7:F1:C7:53:62:A9:B0:1B:73:E0:ED:EF:E4:7C:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a401becd-3ae1-3b96-8178-8f59dad578c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl X509v3 Authority Key Identifier: keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer sbgp-ipAddrBlock: critical IPv4: 216.197.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:37:8d:b1:25:34:e9:18:8d:20:2c:43:f8:91:b8:a8:2e:53: ab:3f:08:99:60:c5:e9:a2:03:da:06:fe:f4:5a:e5:c1:f6:30: ac:03:d7:cf:2a:6a:af:8e:d3:97:4f:a6:c6:8a:c0:59:e5:35: 1c:49:13:dc:41:5f:b5:7e:c2:8e:27:e2:00:e7:52:ad:fd:8b: a6:1f:05:30:4d:f0:62:76:4e:26:7c:1d:50:4a:46:92:27:b9: 96:0d:6b:d7:93:34:1f:58:49:76:d3:49:80:e2:82:b7:70:5c: 1f:c4:57:33:90:04:cb:eb:fc:df:e6:9b:5e:9b:fd:d5:f6:d1: c6:f3:fe:33:93:3c:db:9f:06:88:25:a9:16:f1:88:d2:ea:f2: 2c:29:57:2f:db:5b:85:a9:01:59:60:1f:40:80:ba:bf:0d:4a: a8:ee:64:2b:d9:b1:31:3b:66:db:3f:3c:77:8d:71:7f:c6:51: ea:19:6c:c2:8c:70:e7:81:d3:1e:87:37:0b:77:50:f0:a7:f2: 56:d6:b7:eb:3d:82:a2:e6:6e:09:eb:05:85:56:bd:ea:ad:51: af:c0:ef:9c:fd:fe:46:81:1b:15:21:43:fa:96:6e:fe:25:55: bc:a9:e6:ed:07:f5:5f:44:40:42:83:4f:5e:fa:df:a6:e0:e5: d0:d1:f6:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFXbMGK0Gki47MYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA2MmEyMTktOWVlOC00OGEzLTg5N2EtODQxMGI2ZGE5 NGExMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk NGM0NjM2ZTctYjcxZS00OTBiLTllMDYtNmRiM2ViNDFkNmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV8MnCt3veJKXrbCj/lP+1edCTTBKBOy1j4Q ueuA2rD1KjsZQpvivYOopmmsdyHxBrLd6ywhsNv09oVlihClAvvq7lkqslTf7TPG 6++iVWa6wvck+S92Z7KR4J8zyoud4X4Ppu2XJg2ivXnoc+75xySSuYlNKL/kv2Yv 3KYB9LcGI93dOgSpOmOej/aijgb9TILHvalvh2dqgVTNRZ/kdmDIepRRy5oh06y/ xGWaXnDRi0BD1D76mvVUcaa5lkXG+tH8hetUkKQKF518e2DrkdEGIRuSp6wAX7Nb uTOvG2ROHwURhFFbZuSwe9lVRhcjFl7+d9+JKocOdo2N1iS92wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmZl06Lt/HHU2KpsBtz4O3v5Hy1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYy YTIxOS05ZWU4LTQ4YTMtODk3YS04NDEwYjZkYTk0YTEvYTQwMWJlY2QtM2FlMS0z Yjk2LTgxNzgtOGY1OWRhZDU3OGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTA2MmEyMTktOWVlOC00OGEzLTg5 N2EtODQxMGI2ZGE5NGExL2EwNjJhMjE5LTllZTgtNDhhMy04OTdhLTg0MTBiNmRh OTRhMS5jcmwwHwYDVR0jBBgwFoAUFCgnZgWdJKC08ogP76ns4OluhhgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYyYTIxOS05ZWU4LTQ4YTMtODk3YS04NDEw YjZkYTk0YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2MWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIw3jbElNOkYjSAsQ/iRuKguU6s/CJlgxemiA9oG/vRa5cH2MKwD188q aq+O05dPpsaKwFnlNRxJE9xBX7V+wo4n4gDnUq39i6YfBTBN8GJ2TiZ8HVBKRpIn uZYNa9eTNB9YSXbTSYDigrdwXB/EVzOQBMvr/N/mm16b/dX20cbz/jOTPNufBogl qRbxiNLq8iwpVy/bW4WpAVlgH0CAur8NSqjuZCvZsTE7Zts/PHeNcX/GUeoZbMKM cOeB0x6HNwt3UPCn8lbWt+s9gqLmbgnrBYVWveqtUa/A75z9/kaBGxUhQ/qWbv4l Vbyp5u0H9V9EQEKDT17636bg5dDR9hU= -----END CERTIFICATE-----Generated at Wed May 13 11:55:04 2026 by rpki-client