$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/f6720a31-8263-3bb2-b646-ce9236139a67.roa File: f6720a31-8263-3bb2-b646-ce9236139a67.roa (raw, json) Hash identifier: b3ASVFqbhWYA5UH7l8nQV9ASwK6pFk0B/wGaqLMcDsY= Subject key identifier: 49:CB:8E:6A:2A:4D:FC:F9:A0:0F:5E:A0:B3:F0:97:9B:A6:F4:17:53 Certificate issuer: /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f Certificate serial: 010D0C9F4328584D6BD9B520365750CE899181D8 Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/f6720a31-8263-3bb2-b646-ce9236139a67.roa Signing time: Mon 06 Apr 2026 23:11:43 +0000 ROA not before: Mon 06 Apr 2026 23:11:43 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 26341 IP address blocks: 198.29.16.0/22 maxlen: 24 198.29.22.0/24 maxlen: 24 198.29.23.0/24 maxlen: 24 198.29.24.0/24 maxlen: 24 198.29.25.0/24 maxlen: 24 198.29.26.0/24 maxlen: 24 2602:f9e7:20::/45 maxlen: 48 2602:f9e7:28::/46 maxlen: 48 2602:f9e7:2c::/46 maxlen: 48 2602:f9e7:40::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6b:d9:b5:20:36:57:50:ce:89:91:81:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f Validity Not Before: Apr 6 23:11:43 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=0933cd51-c874-44a8-85bb-c01afe248f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:da:d7:83:14:df:f3:61:57:af:36:47:24:0e: 7b:b2:37:35:e7:3b:c2:10:c0:a0:47:15:2c:12:00: 61:0d:5a:20:c1:d9:88:12:56:5a:f7:15:97:c1:8a: 30:7b:37:2c:c9:6c:e8:e9:e9:5b:57:d4:59:1d:75: bd:c8:cc:88:d2:3f:01:e7:32:23:95:4a:b4:2c:2b: 6f:80:ad:93:dc:7b:05:8f:91:b0:89:2f:7c:c2:da: 1b:1a:4d:0c:2d:c0:c3:54:da:0d:8c:21:e6:c8:ab: 8b:90:4c:b0:3e:3b:b6:74:f2:94:a0:1d:3e:f6:12: 38:c8:a8:67:95:e2:56:8a:fe:2c:c8:15:30:37:6c: fd:8b:2c:e5:16:c4:c0:2e:87:e3:de:fa:6f:c0:2d: 76:09:58:fe:5d:92:72:97:da:70:69:5d:fd:02:22: 5a:55:9e:5e:97:cc:b4:3f:53:f7:b2:7e:f7:dc:5e: 3f:b7:23:cc:16:d9:39:43:4b:50:f4:f0:80:8a:7b: 45:13:03:1a:8b:c1:03:32:8b:d5:f1:2d:cb:e1:f9: ba:05:12:fa:bd:a1:e0:78:5b:4d:59:70:68:e7:c2: 9d:96:5d:02:08:64:14:51:ec:d3:88:6f:c6:a8:ca: 9e:be:a2:1f:9a:c9:43:e1:33:da:27:a4:02:f1:71: aa:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CB:8E:6A:2A:4D:FC:F9:A0:0F:5E:A0:B3:F0:97:9B:A6:F4:17:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/f6720a31-8263-3bb2-b646-ce9236139a67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl X509v3 Authority Key Identifier: keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer sbgp-ipAddrBlock: critical IPv4: 198.29.16.0/22 198.29.22.0-198.29.26.255 IPv6: 2602:f9e7:20::/44 2602:f9e7:40::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:92:e8:f1:b4:ec:0b:a4:b5:a2:67:54:5c:be:27:c8:d5:15: 65:57:1c:45:f9:92:f8:fe:20:62:92:5b:b7:62:da:72:e2:9a: 7d:41:a8:56:ca:4d:77:3b:8b:14:96:47:0d:9b:04:0f:44:b7: b8:73:24:85:bf:8b:de:75:e1:5d:da:54:8e:87:35:e5:07:ed: f5:09:7f:0a:ac:b3:d5:ee:c6:37:f3:95:f0:8b:ed:89:a0:95: 4d:79:55:ad:fb:fe:da:66:a5:b5:6c:3d:63:b8:9f:e0:df:3d: 1a:f2:44:af:a3:82:53:64:e8:d1:8f:cd:dd:19:c2:bb:67:d4: f5:61:1c:6b:1d:f6:bf:8d:f7:f6:dd:09:64:87:88:44:72:cf: 1c:3b:97:2e:d3:8a:6b:11:8d:8c:61:f1:40:5f:50:a5:8a:cd: 99:3d:10:42:01:69:2e:34:38:7b:09:20:2e:6d:27:d8:de:a1: 85:82:1a:e4:d2:82:e8:c4:2b:9f:f7:cd:b8:3f:f1:26:21:1c: 85:8e:a9:0a:bc:34:f3:c9:ca:d1:bd:5f:e5:9e:8d:cc:5b:11: 2a:b4:45:65:57:a1:4a:c6:9a:b0:7a:c9:f4:e1:8c:cd:10:d1: 0d:58:40:7d:7a:ef:8f:b2:f9:26:fa:7f:b0:3a:5d:b5:a9:ef: 71:c1:62:d4 -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWE1r2bUgNldQzomRgdgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFkMDg2NWUtNzc4Ni00YzY2LTlmOTEtYmMxZjQ2ZjJj MzRmMB4XDTI2MDQwNjIzMTE0M1oXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk MDkzM2NkNTEtYzg3NC00NGE4LTg1YmItYzAxYWZlMjQ4ZjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldrXgxTf82FXrzZHJA57sjc15zvCEMCgRxUs EgBhDVogwdmIElZa9xWXwYowezcsyWzo6elbV9RZHXW9yMyI0j8B5zIjlUq0LCtv gK2T3HsFj5GwiS98wtobGk0MLcDDVNoNjCHmyKuLkEywPju2dPKUoB0+9hI4yKhn leJWiv4syBUwN2z9iyzlFsTALofj3vpvwC12CVj+XZJyl9pwaV39AiJaVZ5el8y0 P1P3sn733F4/tyPMFtk5Q0tQ9PCAintFEwMai8EDMovV8S3L4fm6BRL6vaHgeFtN WXBo58Kdll0CCGQUUezTiG/GqMqevqIfmslD4TPaJ6QC8XGq6QIDAQABo4IDfTCC A3kwHQYDVR0OBBYEFEnLjmoqTfz5oA9eoLPwl5um9BdTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQw ODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFmNDZmMmMzNGYvZjY3MjBhMzEtODI2My0z YmIyLWI2NDYtY2U5MjM2MTM5YTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWFkMDg2NWUtNzc4Ni00YzY2LTlm OTEtYmMxZjQ2ZjJjMzRmLzVhZDA4NjVlLTc3ODYtNGM2Ni05ZjkxLWJjMWY0NmYy YzM0Zi5jcmwwHwYDVR0jBBgwFoAUOq+U75raoImJh13K6GCGyUDjDbgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQwODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFm NDZmMmMzNGYuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjAaBAIAATAUAwQCxh0QMAwD BAHGHRYDBADGHRowGAQCAAIwEgMHBCYC+ecAIAMHAiYC+ecAQDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCE kujxtOwLpLWiZ1RcvifI1RVlVxxF+ZL4/iBiklu3Ytpy4pp9QahWyk13O4sUlkcN mwQPRLe4cySFv4vedeFd2lSOhzXlB+31CX8KrLPV7sY385Xwi+2JoJVNeVWt+/7a ZqW1bD1juJ/g3z0a8kSvo4JTZOjRj83dGcK7Z9T1YRxrHfa/jff23Qlkh4hEcs8c O5cu04prEY2MYfFAX1Clis2ZPRBCAWkuNDh7CSAubSfY3qGFghrk0oLoxCuf9824 P/EmIRyFjqkKvDTzycrRvV/lno3MWxEqtEVlV6FKxpqwesn04YzNENENWEB9eu+P svkm+n+wOl21qe9xwWLU -----END CERTIFICATE-----Generated at Tue Apr 7 13:31:58 2026 by rpki-client