$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/3123dd87-4931-3dcf-87ea-bfa126e10ea8.roa File: 3123dd87-4931-3dcf-87ea-bfa126e10ea8.roa (raw, json) Hash identifier: SK2VuQtz4GA4fl8b+WPYdOXkDycc/pC1Iz5l+w6RhG8= Subject key identifier: F4:14:B5:1E:C6:B3:F7:B8:85:9E:9D:39:74:BD:87:4F:AE:D2:7A:7C Certificate issuer: /CN=883ca040-a898-4e47-b1e1-f2461996a058 Certificate serial: 010D0C9F4328584D6C0FB4272C43A62713A1F180 Authority key identifier: BD:0F:53:5E:2E:CC:2D:87:40:F4:DE:A1:FC:0E:1C:C9:4B:B8:70:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/3123dd87-4931-3dcf-87ea-bfa126e10ea8.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 54249 IP address blocks: 209.189.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:b4:27:2c:43:a6:27:13:a1:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883ca040-a898-4e47-b1e1-f2461996a058 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=530acea2-c84b-458e-814d-25ba56e2d11b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b1:94:46:e7:9c:a5:59:70:5b:3b:cb:d8:7a: 99:c2:3c:0d:c7:3a:af:ff:d4:48:14:c4:65:df:1a: 1a:d4:89:2d:b9:25:59:07:e0:45:5a:cb:91:d5:9d: c7:28:0f:64:c9:11:6e:d4:22:3a:1c:8c:d7:17:53: 38:7e:8a:94:33:d1:13:bc:b3:8d:4c:43:2b:fe:27: fe:a0:89:ec:67:80:2d:ce:85:c7:99:4c:3e:df:3d: 70:72:6f:9e:f4:20:25:01:bd:d9:01:e9:4b:4d:69: 62:15:05:a0:11:86:ea:f7:83:c6:3c:26:0f:54:ca: 66:46:d0:c6:da:15:fb:fd:92:f6:f5:5f:71:a3:85: 40:0f:54:51:e5:80:2b:95:68:e4:ec:85:a8:93:b4: 8a:af:b9:55:18:a6:ea:e7:7d:58:9b:63:27:1f:b8: de:b1:b7:7b:89:d9:eb:f2:68:cd:81:b5:a8:bf:41: b5:3e:4f:f0:78:52:04:b9:64:7e:81:1c:cb:ea:43: a8:7b:75:a0:49:21:2a:c0:50:d5:85:e7:70:12:c7: 52:c3:b1:c4:06:70:42:40:1d:85:8f:c3:8e:4e:07: 3c:8f:20:43:42:bc:59:36:39:63:cd:e0:0a:ab:73: 59:e6:48:8e:57:d0:d7:e5:f0:61:fd:fe:03:dd:9a: 1f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:14:B5:1E:C6:B3:F7:B8:85:9E:9D:39:74:BD:87:4F:AE:D2:7A:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/3123dd87-4931-3dcf-87ea-bfa126e10ea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.crl X509v3 Authority Key Identifier: keyid:BD:0F:53:5E:2E:CC:2D:87:40:F4:DE:A1:FC:0E:1C:C9:4B:B8:70:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058.cer sbgp-ipAddrBlock: critical IPv4: 209.189.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:94:c0:57:40:c2:b4:98:75:db:ed:85:fe:90:23:78:fc:a9: ab:f5:dd:a0:92:fd:4f:ee:f2:50:01:9f:2e:1a:6f:5f:85:dc: 24:b3:d3:ae:7d:19:d2:04:29:13:24:16:21:47:e1:3e:8e:16: e9:3e:e7:16:52:27:75:00:7d:20:bc:09:1a:86:b8:2a:75:08: 0a:25:06:85:35:b2:4f:6a:81:23:31:7d:2d:c0:a0:20:e0:d0: ba:43:6a:0d:f9:08:3b:f7:63:ac:a5:a0:6e:bf:a7:98:70:48: d5:6c:4c:9b:8b:52:50:3f:34:23:69:ca:33:b3:da:ef:a2:5a: a4:ce:4d:ee:07:70:91:9b:d2:9a:2e:89:ba:66:b5:fe:f3:12: 24:54:f9:51:27:06:cc:50:fc:64:8c:5a:bd:82:9a:33:61:2f: ce:e2:60:7e:01:74:4a:7e:62:7b:4d:72:e5:5e:f2:41:bf:d4: a0:e1:0b:b8:57:91:2d:bd:ee:64:e0:7b:68:a6:8c:2e:6e:d4: 66:19:4c:75:33:14:43:cc:10:e9:5f:9a:0a:80:c7:a6:13:30: e8:fc:f6:c8:2c:60:3c:4c:ff:fb:4a:5a:03:89:79:e7:45:92: 3b:85:4c:5d:c8:61:b3:49:0e:24:d9:6b:5e:13:7a:dd:cc:81: cd:d9:f6:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD7QnLEOmJxOh8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODgzY2EwNDAtYTg5OC00ZTQ3LWIxZTEtZjI0NjE5OTZh MDU4MB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk NTMwYWNlYTItYzg0Yi00NThlLTgxNGQtMjViYTU2ZTJkMTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbGURuecpVlwWzvL2HqZwjwNxzqv/9RIFMRl 3xoa1IktuSVZB+BFWsuR1Z3HKA9kyRFu1CI6HIzXF1M4foqUM9ETvLONTEMr/if+ oInsZ4AtzoXHmUw+3z1wcm+e9CAlAb3ZAelLTWliFQWgEYbq94PGPCYPVMpmRtDG 2hX7/ZL29V9xo4VAD1RR5YArlWjk7IWok7SKr7lVGKbq531Ym2MnH7jesbd7idnr 8mjNgbWov0G1Pk/weFIEuWR+gRzL6kOoe3WgSSEqwFDVhedwEsdSw7HEBnBCQB2F j8OOTgc8jyBDQrxZNjljzeAKq3NZ5kiOV9DX5fBh/f4D3ZofvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQUtR7Gs/e4hZ6dOXS9h0+u0np8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84ODNj YTA0MC1hODk4LTRlNDctYjFlMS1mMjQ2MTk5NmEwNTgvMzEyM2RkODctNDkzMS0z ZGNmLTg3ZWEtYmZhMTI2ZTEwZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODgzY2EwNDAtYTg5OC00ZTQ3LWIx ZTEtZjI0NjE5OTZhMDU4Lzg4M2NhMDQwLWE4OTgtNGU0Ny1iMWUxLWYyNDYxOTk2 YTA1OC5jcmwwHwYDVR0jBBgwFoAUvQ9TXi7MLYdA9N6h/A4cyUu4cJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84ODNjYTA0MC1hODk4LTRlNDctYjFlMS1mMjQ2 MTk5NmEwNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0b2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeUwFdAwrSYddvthf6QI3j8qav13aCS/U/u8lABny4ab1+F3CSz0659 GdIEKRMkFiFH4T6OFuk+5xZSJ3UAfSC8CRqGuCp1CAolBoU1sk9qgSMxfS3AoCDg 0LpDag35CDv3Y6yloG6/p5hwSNVsTJuLUlA/NCNpyjOz2u+iWqTOTe4HcJGb0pou ibpmtf7zEiRU+VEnBsxQ/GSMWr2CmjNhL87iYH4BdEp+YntNcuVe8kG/1KDhC7hX kS297mTge2imjC5u1GYZTHUzFEPMEOlfmgqAx6YTMOj89sgsYDxM//tKWgOJeedF kjuFTF3IYbNJDiTZa14Tet3Mgc3Z9ng= -----END CERTIFICATE-----Generated at Tue Apr 7 22:09:14 2026 by rpki-client