$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/a37594dd-4a90-3345-9735-36199e690a84.roa File: a37594dd-4a90-3345-9735-36199e690a84.roa (raw, json) Hash identifier: TGwdpLTTqp3z0haDxfo7YfcWaK0X3nrSlvMjDTNjhlg= Subject key identifier: 1C:FB:FD:2A:79:8C:E7:B7:89:AE:03:1B:0F:61:2F:7B:3D:A5:8E:6F Certificate issuer: /CN=88e1646b-e1b3-42e7-8591-3a57fd436369 Certificate serial: 010D0C9F4328584D60E5071ACF96D71CEABE51C0 Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/a37594dd-4a90-3345-9735-36199e690a84.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 14513 IP address blocks: 205.221.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:07:1a:cf:96:d7:1c:ea:be:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=ef366abc-60a1-4aa8-894c-d924e1d7f8c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:22:b0:3d:fe:88:bd:36:31:63:1c:76:79:c1: b6:4c:4f:2d:85:e4:40:92:9a:db:09:02:53:86:03: 08:ec:d2:ed:03:79:a7:3c:00:fd:83:3b:00:85:b8: fc:cf:46:75:db:41:5d:4a:0b:29:5b:ee:3e:9c:ec: 3a:b8:e1:90:9c:82:84:0c:ac:4f:79:52:62:e3:45: 17:d7:72:80:8b:fe:77:42:f0:96:fd:69:10:39:22: 0f:5a:5e:21:63:24:71:47:7e:96:06:ce:71:c7:68: 26:8b:36:48:ce:7c:0e:1e:21:fd:da:cb:d1:26:14: 38:f9:45:71:99:72:f5:27:3e:8b:f4:03:b3:c5:23: 80:f1:3f:fe:98:4e:7b:2d:cb:22:81:ff:ff:ae:ef: 4e:9d:ec:35:aa:5e:62:e3:f5:61:b1:18:9c:b8:c7: a1:57:c8:5c:a5:0a:12:17:25:ae:90:a6:fa:a3:d5: dd:cf:75:e2:f6:ab:ce:59:89:bb:c5:6f:bc:71:83: 33:82:16:18:b8:b7:d2:93:f7:a4:ea:db:c0:f8:30: 7f:d7:64:0c:64:52:f6:22:2a:9f:98:bd:bc:44:c7: ec:46:4c:44:20:87:bc:f9:32:97:37:b7:c3:13:8e: 1f:60:dd:d0:42:e1:d7:ef:85:6a:c0:aa:c6:5e:2c: 46:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FB:FD:2A:79:8C:E7:B7:89:AE:03:1B:0F:61:2F:7B:3D:A5:8E:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/a37594dd-4a90-3345-9735-36199e690a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl X509v3 Authority Key Identifier: keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer sbgp-ipAddrBlock: critical IPv4: 205.221.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:62:a7:31:5a:b4:b6:bf:c1:04:22:46:94:97:71:72:d5:82: 5f:44:dc:10:f5:52:f7:c2:aa:3b:66:92:34:5d:51:26:10:0b: 37:e4:89:32:e2:11:bf:dd:83:6c:4f:8d:5c:71:34:31:61:3c: 20:8c:ce:ce:7c:6c:78:39:9f:89:bd:c1:b9:ff:e1:d8:91:03: 68:50:90:03:41:c4:fd:6a:c8:29:6c:b6:1c:1a:3e:23:01:97: 8d:b6:8b:7f:5a:2f:be:3f:25:5d:62:ba:ea:89:ed:ae:ba:ba: e9:17:7f:72:47:67:8e:1e:7a:bb:fc:ee:b1:2b:9d:f2:e1:1e: 54:a4:94:b0:1d:b7:47:d6:35:3e:44:1e:85:2a:0b:ca:c4:0c: 6d:5a:29:db:64:04:f2:05:78:2e:96:cd:ba:eb:a3:44:d7:41: 8f:1e:ae:84:cb:7e:18:cf:bd:db:29:be:0a:31:08:dc:73:30: ce:68:31:c7:8c:67:6a:3d:8c:4c:b0:44:e0:71:19:bb:0a:4c: 79:d1:e6:56:75:01:41:ff:1f:a0:9a:db:f9:c2:e7:e8:3d:ac: 22:ef:b7:da:79:3b:6b:05:71:15:9b:44:63:99:39:dd:10:4a: c9:ad:7f:4b:d6:3a:54:d9:22:89:ce:84:3b:93:4f:fa:4f:cd: a1:a8:ad:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5Qcaz5bXHOq+UcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhlMTY0NmItZTFiMy00MmU3LTg1OTEtM2E1N2ZkNDM2 MzY5MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk ZWYzNjZhYmMtNjBhMS00YWE4LTg5NGMtZDkyNGUxZDdmOGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCKwPf6IvTYxYxx2ecG2TE8theRAkprbCQJT hgMI7NLtA3mnPAD9gzsAhbj8z0Z120FdSgspW+4+nOw6uOGQnIKEDKxPeVJi40UX 13KAi/53QvCW/WkQOSIPWl4hYyRxR36WBs5xx2gmizZIznwOHiH92svRJhQ4+UVx mXL1Jz6L9AOzxSOA8T/+mE57Lcsigf//ru9Onew1ql5i4/VhsRicuMehV8hcpQoS FyWukKb6o9Xdz3Xi9qvOWYm7xW+8cYMzghYYuLfSk/ek6tvA+DB/12QMZFL2Iiqf mL28RMfsRkxEIIe8+TKXN7fDE44fYN3QQuHX74VqwKrGXixG2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBz7/Sp5jOe3ia4DGw9hL3s9pY5vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUx NjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3ZmQ0MzYzNjkvYTM3NTk0ZGQtNGE5MC0z MzQ1LTk3MzUtMzYxOTllNjkwYTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODhlMTY0NmItZTFiMy00MmU3LTg1 OTEtM2E1N2ZkNDM2MzY5Lzg4ZTE2NDZiLWUxYjMtNDJlNy04NTkxLTNhNTdmZDQz NjM2OS5jcmwwHwYDVR0jBBgwFoAUukMjcrv3l+XytBPr7L8gMlwthZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUxNjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3 ZmQ0MzYzNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzd2kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVipzFatLa/wQQiRpSXcXLVgl9E3BD1UvfCqjtmkjRdUSYQCzfkiTLi Eb/dg2xPjVxxNDFhPCCMzs58bHg5n4m9wbn/4diRA2hQkANBxP1qyClsthwaPiMB l422i39aL74/JV1iuuqJ7a66uukXf3JHZ44eerv87rErnfLhHlSklLAdt0fWNT5E HoUqC8rEDG1aKdtkBPIFeC6Wzbrro0TXQY8eroTLfhjPvdspvgoxCNxzMM5oMceM Z2o9jEywROBxGbsKTHnR5lZ1AUH/H6Ca2/nC5+g9rCLvt9p5O2sFcRWbRGOZOd0Q Ssmtf0vWOlTZIonOhDuTT/pPzaGorXY= -----END CERTIFICATE-----Generated at Tue Apr 7 16:33:46 2026 by rpki-client