$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52/0b40f60e-30b5-3843-ad6a-53e0375d2413.roa File: 0b40f60e-30b5-3843-ad6a-53e0375d2413.roa (raw, json) Hash identifier: C+Lby3l31l0l2pu527ieNYNkL85ixocsjtlKVqjCDaU= Subject key identifier: 7C:FE:E3:C4:3D:B0:1B:F3:70:64:C1:94:2C:C2:5E:FF:3B:D4:68:49 Certificate issuer: /CN=7af1a9d7-c226-4beb-8f1e-623878125f52 Certificate serial: 010D0C9F4328584DA28017E03B00D76171B1A740 Authority key identifier: 8A:8D:A3:93:DC:37:54:A6:B8:9A:56:2B:7D:23:6D:F6:14:8B:A9:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52/0b40f60e-30b5-3843-ad6a-53e0375d2413.roa Signing time: Sun 26 Apr 2026 13:00:30 +0000 ROA not before: Sun 26 Apr 2026 13:00:30 +0000 ROA not after: Sat 25 Jul 2026 13:00:30 +0000 asID: 19106 IP address blocks: 143.207.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52/7af1a9d7-c226-4beb-8f1e-623878125f52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52/7af1a9d7-c226-4beb-8f1e-623878125f52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a2:80:17:e0:3b:00:d7:61:71:b1:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7af1a9d7-c226-4beb-8f1e-623878125f52 Validity Not Before: Apr 26 13:00:30 2026 GMT Not After : Jul 25 13:00:30 2026 GMT Subject: CN=34aa56ea-d889-4f2a-91ad-51a1976fb3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:31:c5:88:0b:75:ac:eb:c3:ea:d4:97:db:c2: fb:0b:b4:59:02:35:31:40:db:b5:8e:61:41:28:e7: f0:21:31:73:ac:1d:61:24:e8:9d:01:7e:54:27:ba: 01:98:92:b8:e9:5b:0c:d7:8c:c9:bf:b3:20:9c:65: 58:17:31:38:12:a8:0c:7c:2d:c0:c6:d4:b9:e9:91: 91:f3:bb:c7:6c:e9:3f:39:1e:53:4c:85:a1:29:43: f8:7a:7f:7f:55:8b:5b:d7:47:ec:31:eb:ac:cc:09: 4f:76:fb:b8:10:93:7d:32:2b:65:53:70:36:e9:7b: c5:de:6a:ae:5d:69:e2:a6:db:df:7a:fc:89:b2:18: f0:76:73:3e:1d:16:45:53:84:fc:69:c7:6b:4d:15: ab:12:d1:f6:2b:ab:48:0e:78:e5:60:a5:d4:50:7d: aa:a4:f9:dd:58:8e:70:66:38:0a:60:0c:db:cd:72: dc:92:d9:4c:16:b7:89:ba:42:a4:72:af:92:19:04: 84:31:eb:4f:f3:0d:5a:27:42:91:63:10:12:7e:da: 3c:aa:f6:de:db:43:a8:84:50:d7:94:85:51:e5:de: 8e:20:67:56:40:cd:87:02:2a:1e:8c:a3:ee:d2:d6: 1c:9f:54:92:e1:d9:98:4a:12:09:6d:34:25:48:6f: 86:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FE:E3:C4:3D:B0:1B:F3:70:64:C1:94:2C:C2:5E:FF:3B:D4:68:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52/0b40f60e-30b5-3843-ad6a-53e0375d2413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52/7af1a9d7-c226-4beb-8f1e-623878125f52.crl X509v3 Authority Key Identifier: keyid:8A:8D:A3:93:DC:37:54:A6:B8:9A:56:2B:7D:23:6D:F6:14:8B:A9:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52.cer sbgp-ipAddrBlock: critical IPv4: 143.207.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c8:ab:4a:d9:46:62:07:08:2a:b6:18:43:6c:2a:9e:b5:1c: 93:f4:27:cc:cc:54:b8:13:d8:4a:ed:fd:c3:4c:7c:8e:86:5b: 25:4d:8a:3d:99:71:4d:8e:8b:16:98:e7:ab:d7:e9:c6:98:93: 64:ea:63:76:11:5c:ae:c8:77:39:82:c8:ae:45:6c:d3:15:87: ed:0e:21:a8:43:57:56:1b:7e:70:b5:43:8e:5a:49:00:bf:4e: 46:7a:c8:65:85:dd:bd:c3:52:89:ea:c0:d0:86:d7:1e:6d:b4: d6:77:6f:a4:55:fc:b2:35:26:a0:ca:23:a1:3c:cc:48:64:f6: 0a:39:81:94:44:f7:72:d8:93:a4:b8:d2:59:d4:20:fb:c0:89: 7d:69:d3:c1:91:34:bc:9d:2a:7c:58:b4:6e:e7:37:18:75:9e: be:61:2a:bd:1f:0c:ff:ff:ae:3b:f4:ad:4c:a3:9f:83:47:a6: 7c:80:aa:2b:82:42:1c:cd:6d:fc:4d:36:a3:aa:02:95:90:ea: 71:55:f5:c0:33:a4:16:59:b9:0d:fe:e5:74:ba:ad:b7:57:59: db:d9:91:7d:71:51:5c:a0:54:67:37:1b:d2:68:43:28:ef:a6: 8e:7c:25:59:77:0e:64:7a:a7:e6:ae:27:65:2a:cd:e0:7b:ea: 1d:e0:4e:91 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2igBfgOwDXYXGxp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FmMWE5ZDctYzIyNi00YmViLThmMWUtNjIzODc4MTI1 ZjUyMB4XDTI2MDQyNjEzMDAzMFoXDTI2MDcyNTEzMDAzMFowLzEtMCsGA1UEAxMk MzRhYTU2ZWEtZDg4OS00ZjJhLTkxYWQtNTFhMTk3NmZiM2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zHFiAt1rOvD6tSX28L7C7RZAjUxQNu1jmFB KOfwITFzrB1hJOidAX5UJ7oBmJK46VsM14zJv7MgnGVYFzE4EqgMfC3AxtS56ZGR 87vHbOk/OR5TTIWhKUP4en9/VYtb10fsMeuszAlPdvu4EJN9MitlU3A26XvF3mqu XWniptvfevyJshjwdnM+HRZFU4T8acdrTRWrEtH2K6tIDnjlYKXUUH2qpPndWI5w ZjgKYAzbzXLcktlMFreJukKkcq+SGQSEMetP8w1aJ0KRYxASfto8qvbe20OohFDX lIVR5d6OIGdWQM2HAioejKPu0tYcn1SS4dmYShIJbTQlSG+GbwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHz+48Q9sBvzcGTBlCzCXv871GhJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83YWYx YTlkNy1jMjI2LTRiZWItOGYxZS02MjM4NzgxMjVmNTIvMGI0MGY2MGUtMzBiNS0z ODQzLWFkNmEtNTNlMDM3NWQyNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvN2FmMWE5ZDctYzIyNi00YmViLThm MWUtNjIzODc4MTI1ZjUyLzdhZjFhOWQ3LWMyMjYtNGJlYi04ZjFlLTYyMzg3ODEy NWY1Mi5jcmwwHwYDVR0jBBgwFoAUio2jk9w3VKa4mlYrfSNt9hSLqWUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83YWYxYTlkNy1jMjI2LTRiZWItOGYxZS02MjM4 NzgxMjVmNTIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj88wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEACcirStlGYgcIKrYYQ2wqnrUck/QnzMxUuBPYSu39w0x8joZbJU2KPZlx TY6LFpjnq9fpxpiTZOpjdhFcrsh3OYLIrkVs0xWH7Q4hqENXVht+cLVDjlpJAL9O RnrIZYXdvcNSierA0IbXHm201ndvpFX8sjUmoMojoTzMSGT2CjmBlET3ctiTpLjS WdQg+8CJfWnTwZE0vJ0qfFi0buc3GHWevmEqvR8M//+uO/StTKOfg0emfICqK4JC HM1t/E02o6oClZDqcVX1wDOkFlm5Df7ldLqtt1dZ29mRfXFRXKBUZzcb0mhDKO+m jnwlWXcOZHqn5q4nZSrN4HvqHeBOkQ== -----END CERTIFICATE-----Generated at Wed May 13 14:20:43 2026 by rpki-client