$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/460a070d-2ded-3e86-9735-47539cf8b568.roa File: 460a070d-2ded-3e86-9735-47539cf8b568.roa (raw, json) Hash identifier: j+ab0IKorcPqIOdLuZZUbvRXvq9d2tHnA4jJ4iVXKtc= Subject key identifier: 25:EA:45:F3:69:E6:76:7A:B1:E0:10:FD:C6:F2:D2:4D:CD:FC:1D:85 Certificate issuer: /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f Certificate serial: 010D0C9F4328584D6BD9916CF29B4A1298218100 Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/460a070d-2ded-3e86-9735-47539cf8b568.roa Signing time: Mon 06 Apr 2026 23:11:26 +0000 ROA not before: Mon 06 Apr 2026 23:11:26 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 16509 IP address blocks: 198.29.16.0/22 maxlen: 24 198.29.22.0/24 maxlen: 24 198.29.23.0/24 maxlen: 24 198.29.24.0/24 maxlen: 24 198.29.25.0/24 maxlen: 24 198.29.26.0/24 maxlen: 24 2602:f9e7:20::/45 maxlen: 48 2602:f9e7:28::/46 maxlen: 48 2602:f9e7:2c::/46 maxlen: 48 2602:f9e7:40::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6b:d9:91:6c:f2:9b:4a:12:98:21:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f Validity Not Before: Apr 6 23:11:26 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=3e5b102b-3a32-4218-9257-108d9b399e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a8:2c:e5:d9:4b:a1:8b:1b:67:69:f5:78:af: ed:d5:06:5e:00:51:40:e6:12:c2:47:b6:f5:c9:0e: 3b:0a:b3:3a:36:b9:e3:f7:be:5e:37:cf:87:ff:2d: 44:a6:d0:73:8b:a1:14:21:a9:85:df:50:aa:01:9c: 79:14:9f:4e:4f:37:a6:ea:f5:ff:a0:ba:fd:9d:3b: dc:69:28:bc:2e:d0:ad:00:b3:4f:f8:cb:12:a2:ea: 36:02:3f:c9:16:10:f3:51:ee:7f:3d:12:31:10:93: 69:85:5f:b7:26:ed:83:0d:3b:0d:5d:79:dd:f8:0a: 4f:b7:30:a4:b7:38:50:92:84:06:66:b6:b0:22:d5: c0:a3:31:b0:31:a1:6e:0a:9e:24:db:84:d2:7d:94: 6b:73:0d:48:59:19:d1:26:37:dd:e6:40:22:59:04: 00:96:c0:2b:11:b5:1f:fa:ef:cc:3a:ca:a2:a4:cf: d3:d3:58:68:a8:a6:29:2d:67:a8:dc:db:c2:8a:60: d3:45:ba:1f:37:b6:d8:3e:b9:2c:85:e7:50:50:f7: 02:a5:44:14:bc:cc:46:b8:13:22:24:fd:56:2f:32: 38:dc:46:ff:de:0e:86:d3:dc:55:90:be:38:3a:74: f9:a1:b5:b1:01:9d:bd:89:03:3f:43:8a:fe:55:01: e4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EA:45:F3:69:E6:76:7A:B1:E0:10:FD:C6:F2:D2:4D:CD:FC:1D:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/460a070d-2ded-3e86-9735-47539cf8b568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl X509v3 Authority Key Identifier: keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer sbgp-ipAddrBlock: critical IPv4: 198.29.16.0/22 198.29.22.0-198.29.26.255 IPv6: 2602:f9e7:20::/44 2602:f9e7:40::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e8:53:df:7f:ce:0e:db:31:7a:20:d1:c9:1d:a5:c6:9a:06: 32:54:0a:38:48:8b:50:5c:28:b5:45:8e:74:a7:8e:48:f4:3f: 5f:98:5e:47:23:1b:dd:a9:75:33:89:dc:35:89:db:5d:98:8e: 59:bc:bc:c9:59:06:b0:bc:15:96:c1:f7:ea:be:b3:fd:ba:61: 41:fd:7d:e8:a8:0c:95:2f:a7:c9:c4:b8:ae:7e:6b:6e:93:6f: ae:1d:97:9f:15:0f:06:f1:31:37:c9:aa:de:fa:90:f2:54:1b: 21:6d:78:42:3b:3c:48:4d:da:f1:46:a3:ad:55:6c:10:ca:9e: 6e:d1:3b:da:37:70:b8:90:a8:57:64:7d:74:f5:bb:8b:30:cb: 3a:66:31:40:60:30:df:35:97:1a:a3:a6:c9:b3:68:32:c3:9e: d5:95:0c:bb:4a:c1:0c:b7:9c:ec:92:85:44:90:8d:4a:e1:cd: a6:74:77:0f:67:fd:fa:43:50:1e:a9:13:7b:59:95:31:59:ad: 9b:5e:f3:a5:a5:76:6a:ef:b1:76:a9:7f:31:59:47:18:8d:80: ab:4d:35:30:22:1d:e1:21:b9:ce:97:32:67:b2:78:15:e0:44: 76:5e:1f:16:19:7a:ac:28:09:08:e7:f0:68:06:0d:ff:b5:16: 3c:a1:31:4e -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWE1r2ZFs8ptKEpghgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFkMDg2NWUtNzc4Ni00YzY2LTlmOTEtYmMxZjQ2ZjJj MzRmMB4XDTI2MDQwNjIzMTEyNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk M2U1YjEwMmItM2EzMi00MjE4LTkyNTctMTA4ZDliMzk5ZTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6gs5dlLoYsbZ2n1eK/t1QZeAFFA5hLCR7b1 yQ47CrM6Nrnj975eN8+H/y1EptBzi6EUIamF31CqAZx5FJ9OTzem6vX/oLr9nTvc aSi8LtCtALNP+MsSouo2Aj/JFhDzUe5/PRIxEJNphV+3Ju2DDTsNXXnd+ApPtzCk tzhQkoQGZrawItXAozGwMaFuCp4k24TSfZRrcw1IWRnRJjfd5kAiWQQAlsArEbUf +u/MOsqipM/T01hoqKYpLWeo3NvCimDTRbofN7bYPrkshedQUPcCpUQUvMxGuBMi JP1WLzI43Eb/3g6G09xVkL44OnT5obWxAZ29iQM/Q4r+VQHkpwIDAQABo4IDfTCC A3kwHQYDVR0OBBYEFCXqRfNp5nZ6seAQ/cby0k3N/B2FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQw ODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFmNDZmMmMzNGYvNDYwYTA3MGQtMmRlZC0z ZTg2LTk3MzUtNDc1MzljZjhiNTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWFkMDg2NWUtNzc4Ni00YzY2LTlm OTEtYmMxZjQ2ZjJjMzRmLzVhZDA4NjVlLTc3ODYtNGM2Ni05ZjkxLWJjMWY0NmYy YzM0Zi5jcmwwHwYDVR0jBBgwFoAUOq+U75raoImJh13K6GCGyUDjDbgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQwODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFm NDZmMmMzNGYuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjAaBAIAATAUAwQCxh0QMAwD BAHGHRYDBADGHRowGAQCAAIwEgMHBCYC+ecAIAMHAiYC+ecAQDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAh 6FPff84O2zF6INHJHaXGmgYyVAo4SItQXCi1RY50p45I9D9fmF5HIxvdqXUzidw1 idtdmI5ZvLzJWQawvBWWwffqvrP9umFB/X3oqAyVL6fJxLiufmtuk2+uHZefFQ8G 8TE3yare+pDyVBshbXhCOzxITdrxRqOtVWwQyp5u0TvaN3C4kKhXZH109buLMMs6 ZjFAYDDfNZcao6bJs2gyw57VlQy7SsEMt5zskoVEkI1K4c2mdHcPZ/36Q1AeqRN7 WZUxWa2bXvOlpXZq77F2qX8xWUcYjYCrTTUwIh3hIbnOlzJnsngV4ER2Xh8WGXqs KAkI5/BoBg3/tRY8oTFO -----END CERTIFICATE-----Generated at Tue Apr 7 13:31:15 2026 by rpki-client