$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/40c9501a-2aa7-30a5-b202-677f56dc9fa3.roa File: 40c9501a-2aa7-30a5-b202-677f56dc9fa3.roa (raw, json) Hash identifier: QcINyBeJWagy5/q5wZ1wE3TnK2J+711pgS6OOFZD/5A= Subject key identifier: DE:21:72:71:50:A7:C0:2D:53:D4:8A:8C:D3:96:B4:D5:50:2B:8E:11 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584D7CCFD4AC8493411163779D00 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/40c9501a-2aa7-30a5-b202-677f56dc9fa3.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 13768 IP address blocks: 216.187.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:d4:ac:84:93:41:11:63:77:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=a1d9b38b-2bc7-4338-936c-1c17fab4fb4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6c:ab:8b:df:b4:54:e0:ae:6c:ac:30:84:da: 61:8c:51:c1:12:83:7c:39:00:bd:0b:f6:8f:d7:74: 85:de:6a:2b:1b:e2:22:31:75:35:81:79:45:e9:16: cb:8d:62:2d:cb:1d:91:23:ff:84:7c:45:2b:f3:de: 07:ab:54:fe:89:b7:7c:13:49:4f:24:66:e4:af:39: 76:8c:c8:37:64:43:d9:a0:b5:ff:42:51:29:61:2c: fe:a7:78:1c:b2:7d:48:39:5e:33:e5:d1:d4:56:1f: 05:9a:0d:fd:3c:bb:d7:a1:15:3b:47:68:1a:fc:f0: 6c:e0:40:ee:cb:ed:e0:7b:6e:e8:fd:24:22:48:0a: 5d:e8:e0:96:af:22:bc:9f:29:1e:0a:52:1d:10:53: ff:85:ba:4c:ea:3f:69:70:95:12:ad:bd:19:43:8c: b3:45:22:b6:e5:16:8f:b1:0c:b3:12:70:10:f3:b9: 3c:2b:a2:85:c2:cd:11:25:20:8c:d1:d9:3c:80:0e: 9d:70:7b:0b:cc:3c:01:ea:7f:66:66:1b:08:70:cc: f4:fb:83:d6:98:2a:85:37:45:bf:cb:e8:0b:38:04: 40:be:e2:f6:54:40:dc:d6:8b:39:97:e4:a0:4f:c3: 69:9a:19:a3:6b:08:7b:94:ff:0f:99:11:a2:a1:a4: 7b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:21:72:71:50:A7:C0:2D:53:D4:8A:8C:D3:96:B4:D5:50:2B:8E:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/40c9501a-2aa7-30a5-b202-677f56dc9fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 216.187.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:42:e0:73:b9:0b:fa:c9:b1:90:c1:a7:f1:3a:72:39:86:63: b8:58:b1:e6:4c:c9:c5:bb:29:e7:af:ec:01:77:9a:f0:9c:e6: 66:e2:3f:a6:ac:13:0f:64:a3:fd:2e:b3:67:8c:6d:71:64:02: 8a:dc:74:da:df:32:c3:dd:7a:4f:f0:a9:27:f5:6c:d5:d0:fd: 1d:3d:28:90:cb:2a:4f:5e:ba:36:da:14:1c:6f:b4:4a:4a:3a: 5f:3e:16:20:03:60:e8:94:00:28:30:80:78:f3:f5:fe:ff:1b: 43:77:fc:f2:aa:92:2a:7f:8a:e1:97:d6:8d:b7:92:ea:54:82: 55:64:a7:6a:69:a0:86:48:b0:6f:cb:46:08:5d:21:fd:bd:6a: 91:20:e0:a8:0c:9e:a0:bf:42:7d:64:9a:11:ec:50:20:50:fa: 60:cf:e7:d9:df:68:c5:05:4a:8e:3b:1c:51:49:9f:84:7b:76: 72:8a:7d:83:d0:a0:20:5e:e0:8d:ad:25:4b:ee:9d:25:41:44: 77:17:84:81:80:0d:ca:e6:b6:f8:fb:f9:57:4a:5c:5b:d0:a0: 19:7c:0f:9c:c1:11:7e:ed:ab:3d:4d:c4:bb:1f:e4:e2:24:7e: 19:fe:cd:70:c2:21:9b:2a:d0:b5:cc:0c:41:9f:70:b5:22:d5: c5:db:a9:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z9SshJNBEWN3nQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk YTFkOWIzOGItMmJjNy00MzM4LTkzNmMtMWMxN2ZhYjRmYjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGyri9+0VOCubKwwhNphjFHBEoN8OQC9C/aP 13SF3morG+IiMXU1gXlF6RbLjWItyx2RI/+EfEUr894Hq1T+ibd8E0lPJGbkrzl2 jMg3ZEPZoLX/QlEpYSz+p3gcsn1IOV4z5dHUVh8Fmg39PLvXoRU7R2ga/PBs4EDu y+3ge27o/SQiSApd6OCWryK8nykeClIdEFP/hbpM6j9pcJUSrb0ZQ4yzRSK25RaP sQyzEnAQ87k8K6KFws0RJSCM0dk8gA6dcHsLzDwB6n9mZhsIcMz0+4PWmCqFN0W/ y+gLOARAvuL2VEDc1os5l+SgT8Npmhmjawh7lP8PmRGioaR7PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4hcnFQp8AtU9SKjNOWtNVQK44RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNDBjOTUwMWEtMmFhNy0z MGE1LWIyMDItNjc3ZjU2ZGM5ZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2Lt6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdC4HO5C/rJsZDBp/E6cjmGY7hYseZMycW7Keev7AF3mvCc5mbiP6as Ew9ko/0us2eMbXFkAorcdNrfMsPdek/wqSf1bNXQ/R09KJDLKk9eujbaFBxvtEpK Ol8+FiADYOiUACgwgHjz9f7/G0N3/PKqkip/iuGX1o23kupUglVkp2ppoIZIsG/L RghdIf29apEg4KgMnqC/Qn1kmhHsUCBQ+mDP59nfaMUFSo47HFFJn4R7dnKKfYPQ oCBe4I2tJUvunSVBRHcXhIGADcrmtvj7+VdKXFvQoBl8D5zBEX7tqz1NxLsf5OIk fhn+zXDCIZsq0LXMDEGfcLUi1cXbqVM= -----END CERTIFICATE-----Generated at Fri Apr 17 18:15:41 2026 by rpki-client