$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/cf8140ef-63de-3420-af2d-b86be24b6d5a.roa File: cf8140ef-63de-3420-af2d-b86be24b6d5a.roa (raw, json) Hash identifier: GF3QTXEgX7hcXhyvCsrN+3y3b0wyVC+R/wic8VxJTh8= Subject key identifier: A1:B5:97:A1:ED:0E:12:26:57:2B:93:BA:00:77:8F:2E:C5:5E:F5:3B Certificate issuer: /CN=88e1646b-e1b3-42e7-8591-3a57fd436369 Certificate serial: 010D0C9F4328584D67DFC6562686CF9394679800 Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/cf8140ef-63de-3420-af2d-b86be24b6d5a.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 26946 IP address blocks: 216.159.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:c6:56:26:86:cf:93:94:67:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=7a360e2f-b28e-4dc6-8761-5ea118a809f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9f:94:4a:96:87:8e:c7:ef:fd:2c:f8:28:7d: ef:b8:08:35:e4:90:22:50:d5:a4:96:46:81:95:45: b0:aa:7c:83:d5:63:3a:fe:1f:98:98:b0:0c:68:37: fb:d6:fb:7c:f8:b6:c0:25:66:d6:4e:fa:4e:c6:41: b9:14:ff:ca:4a:cd:79:08:84:63:29:19:4b:73:5f: 2f:5e:3a:aa:22:57:df:4d:56:a3:8e:bb:f7:d8:47: 1c:73:ac:91:01:47:70:d0:13:d8:4c:f3:3d:68:a4: d1:09:bb:af:70:49:51:73:35:3e:de:a4:64:31:36: d2:83:dd:8a:dc:47:da:8e:b8:77:15:c4:f2:2b:aa: a5:e3:63:3b:ea:15:bf:85:af:b4:11:c3:79:a2:c7: f9:3e:63:ae:c0:79:75:70:53:59:e4:6c:b7:6d:da: 39:0c:75:05:4e:ca:39:c9:5d:72:be:2e:0d:79:e3: cc:7a:c2:23:80:d8:97:c4:b4:26:7f:f0:f3:fe:1c: 4e:b8:8f:7d:6a:8b:60:20:0f:49:2d:0c:d6:66:48: 24:3b:09:12:6e:c2:33:d1:af:d5:8d:94:23:ae:8c: 80:87:ab:2d:d3:fd:b7:42:ed:6b:82:ce:9e:a0:17: 83:e3:0f:7b:10:c9:e1:f2:8e:be:e7:53:e4:b9:e6: 82:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B5:97:A1:ED:0E:12:26:57:2B:93:BA:00:77:8F:2E:C5:5E:F5:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/cf8140ef-63de-3420-af2d-b86be24b6d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl X509v3 Authority Key Identifier: keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer sbgp-ipAddrBlock: critical IPv4: 216.159.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:6b:71:99:d4:19:25:76:42:b1:17:5a:6d:f4:d0:d3:8b:c6: 4a:7e:6e:a8:1a:48:d7:61:3a:3b:fc:20:27:61:f0:8b:7c:ba: c3:ed:35:79:2a:2d:12:98:79:d5:90:1d:72:4a:99:60:64:bb: f0:b2:6b:95:5e:a7:e3:27:9c:51:07:fe:c0:a9:45:f2:31:bf: d2:b9:d3:71:9a:20:28:8b:62:d0:38:06:28:75:6a:d9:6e:06: 12:99:6f:0c:91:25:8a:2b:7c:0e:8a:bc:d3:dc:6e:04:12:1e: 49:1a:8d:b9:a2:d6:a1:c6:b9:da:f7:71:64:17:d0:55:8e:9b: 11:5b:dd:da:47:15:da:c6:93:f5:40:30:f6:7b:a6:ce:10:6b: b5:21:17:69:05:f9:29:af:16:f2:cd:a3:f6:1f:2e:72:c9:d0: 02:96:87:34:e4:a0:80:46:54:0e:23:a9:3b:f0:1e:cd:f9:bb: dd:66:fd:b3:fc:8d:96:26:58:72:39:e3:59:a1:b1:1d:c4:17: 56:54:0b:2a:64:08:f7:81:2d:5d:f4:5f:9b:6a:67:01:3e:78: f2:f0:64:18:53:d6:c7:12:c6:5b:46:25:30:f6:e6:5f:b0:bf: d0:8c:90:cd:92:7f:28:df:c3:f6:a7:56:2f:ff:a5:ed:db:cd: 3f:e0:64:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n38ZWJobPk5RnmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhlMTY0NmItZTFiMy00MmU3LTg1OTEtM2E1N2ZkNDM2 MzY5MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk N2EzNjBlMmYtYjI4ZS00ZGM2LTg3NjEtNWVhMTE4YTgwOWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5+USpaHjsfv/Sz4KH3vuAg15JAiUNWklkaB lUWwqnyD1WM6/h+YmLAMaDf71vt8+LbAJWbWTvpOxkG5FP/KSs15CIRjKRlLc18v XjqqIlffTVajjrv32Eccc6yRAUdw0BPYTPM9aKTRCbuvcElRczU+3qRkMTbSg92K 3Efajrh3FcTyK6ql42M76hW/ha+0EcN5osf5PmOuwHl1cFNZ5Gy3bdo5DHUFTso5 yV1yvi4NeePMesIjgNiXxLQmf/Dz/hxOuI99aotgIA9JLQzWZkgkOwkSbsIz0a/V jZQjroyAh6st0/23Qu1rgs6eoBeD4w97EMnh8o6+51PkueaCAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKG1l6HtDhImVyuTugB3jy7FXvU7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUx NjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3ZmQ0MzYzNjkvY2Y4MTQwZWYtNjNkZS0z NDIwLWFmMmQtYjg2YmUyNGI2ZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODhlMTY0NmItZTFiMy00MmU3LTg1 OTEtM2E1N2ZkNDM2MzY5Lzg4ZTE2NDZiLWUxYjMtNDJlNy04NTkxLTNhNTdmZDQz NjM2OS5jcmwwHwYDVR0jBBgwFoAUukMjcrv3l+XytBPr7L8gMlwthZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUxNjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3 ZmQ0MzYzNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J+1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZrcZnUGSV2QrEXWm300NOLxkp+bqgaSNdhOjv8ICdh8It8usPtNXkq LRKYedWQHXJKmWBku/Cya5Vep+MnnFEH/sCpRfIxv9K503GaICiLYtA4Bih1atlu BhKZbwyRJYorfA6KvNPcbgQSHkkajbmi1qHGudr3cWQX0FWOmxFb3dpHFdrGk/VA MPZ7ps4Qa7UhF2kF+SmvFvLNo/YfLnLJ0AKWhzTkoIBGVA4jqTvwHs35u91m/bP8 jZYmWHI541mhsR3EF1ZUCypkCPeBLV30X5tqZwE+ePLwZBhT1scSxltGJTD25l+w v9CMkM2Sfyjfw/anVi//pe3bzT/gZCA= -----END CERTIFICATE-----Generated at Tue Apr 7 16:32:33 2026 by rpki-client