$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/1d2b4342-0945-32da-94ae-d69a5ae08fe4.roa File: 1d2b4342-0945-32da-94ae-d69a5ae08fe4.roa (raw, json) Hash identifier: d4LSPc+ecx7MCXR+QFs9MCx/huyiQmzU3d4dTpq1rFE= Subject key identifier: B0:03:8F:1B:3F:EB:AA:37:5B:31:84:13:CC:D7:AD:45:EC:E1:14:A0 Certificate issuer: /CN=0a9d33e4-ed4d-4b47-b363-b42110f88557 Certificate serial: 010D0C9F4328584D8EF55C22A4207E4B5AD34C00 Authority key identifier: 8B:65:0F:A5:8E:C3:A9:0D:82:74:8D:DA:2E:95:21:E2:D7:FD:DA:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/1d2b4342-0945-32da-94ae-d69a5ae08fe4.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 395214 IP address blocks: 172.82.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:5c:22:a4:20:7e:4b:5a:d3:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a9d33e4-ed4d-4b47-b363-b42110f88557 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=d94bb46b-7555-4451-92c6-8107c189bd75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:60:42:78:90:4d:0d:d5:bd:23:76:b3:82:31: 05:62:16:47:4d:b8:58:d1:17:db:3a:b3:ba:d4:cf: 9d:d6:d5:10:86:a5:f0:72:f1:33:05:75:90:a2:d4: 09:a8:ed:d7:af:85:33:0a:14:6a:ff:4a:8c:ef:b8: fd:27:4e:07:cf:db:5e:44:e8:26:77:ab:ea:9d:d2: 62:20:2f:8f:88:91:69:09:77:a2:b3:c3:83:80:8d: a4:0e:2f:6d:c1:b8:0e:6c:5e:ee:49:8c:02:a9:52: 29:f2:97:69:17:af:7d:25:00:77:af:1b:58:42:04: fc:2f:3b:4a:da:ba:40:d6:8b:88:43:e8:33:8e:f5: d8:39:77:56:a8:75:f3:f4:0c:16:f2:d1:23:ac:d5: 90:5c:99:69:8f:ef:b3:05:a5:b7:fd:1a:52:23:58: 18:a7:00:48:9a:75:bf:37:25:3b:44:ff:78:6b:27: 12:1b:bf:94:34:42:78:f1:f5:84:ff:30:30:a4:76: 7d:e8:b5:72:82:79:fc:d0:c8:df:b3:97:fe:27:a3: d2:6a:13:40:4a:2b:a1:20:89:0f:a2:d0:9d:9d:87: c3:7c:76:6e:14:3f:46:3f:c6:fb:71:f5:b1:a3:1d: b1:02:a6:f5:dd:64:c9:a9:3d:cf:5a:7e:dd:c8:2b: aa:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:03:8F:1B:3F:EB:AA:37:5B:31:84:13:CC:D7:AD:45:EC:E1:14:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/1d2b4342-0945-32da-94ae-d69a5ae08fe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.crl X509v3 Authority Key Identifier: keyid:8B:65:0F:A5:8E:C3:A9:0D:82:74:8D:DA:2E:95:21:E2:D7:FD:DA:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer sbgp-ipAddrBlock: critical IPv4: 172.82.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:a1:e7:67:f2:03:3d:5c:2a:08:3c:5c:98:c4:33:63:6c:8f: 3b:bf:d4:54:fd:9e:fd:72:57:4f:d5:5c:43:6a:c8:6e:02:24: ff:06:df:08:80:78:0f:71:07:1c:38:88:02:9c:b7:f9:1a:42: 74:70:d4:3b:48:ba:20:d8:47:dd:8b:32:00:cb:ed:0c:66:db: 32:dd:e3:5f:fb:e8:47:11:e0:13:50:aa:ab:44:44:ab:93:da: 49:94:26:4f:54:44:e3:5c:ce:87:44:cb:37:c5:bb:01:60:76: 6f:34:4c:e4:6f:2e:0a:2f:5d:84:73:41:73:19:da:76:40:e0: 9e:e6:a0:ab:85:bf:5a:5d:0d:e0:a1:50:e0:77:21:77:2b:c0: 21:dd:16:cb:66:7a:11:b6:ba:4e:24:ec:db:de:c5:17:e1:59: af:c5:fb:92:1c:c0:86:4c:ea:69:23:05:65:0f:35:d9:b2:43: 78:49:51:4d:2e:5a:65:cc:66:e5:3b:bf:72:a2:c9:a8:38:e7: 97:76:1a:20:22:47:d2:82:00:fa:21:b3:0e:78:01:03:9f:6c: d1:11:36:7a:75:ec:63:f8:e1:94:a3:48:66:c6:6b:15:f7:13: 97:1e:e5:a5:d9:77:15:65:f7:e4:2b:24:45:79:d5:bd:74:a0: 50:f5:56:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9VwipCB+S1rTTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE5ZDMzZTQtZWQ0ZC00YjQ3LWIzNjMtYjQyMTEwZjg4 NTU3MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZDk0YmI0NmItNzU1NS00NDUxLTkyYzYtODEwN2MxODliZDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mBCeJBNDdW9I3azgjEFYhZHTbhY0RfbOrO6 1M+d1tUQhqXwcvEzBXWQotQJqO3Xr4UzChRq/0qM77j9J04Hz9teROgmd6vqndJi IC+PiJFpCXeis8ODgI2kDi9twbgObF7uSYwCqVIp8pdpF699JQB3rxtYQgT8LztK 2rpA1ouIQ+gzjvXYOXdWqHXz9AwW8tEjrNWQXJlpj++zBaW3/RpSI1gYpwBImnW/ NyU7RP94aycSG7+UNEJ48fWE/zAwpHZ96LVygnn80Mjfs5f+J6PSahNASiuhIIkP otCdnYfDfHZuFD9GP8b7cfWxox2xAqb13WTJqT3PWn7dyCuqkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLADjxs/66o3WzGEE8zXrUXs4RSgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYTlk MzNlNC1lZDRkLTRiNDctYjM2My1iNDIxMTBmODg1NTcvMWQyYjQzNDItMDk0NS0z MmRhLTk0YWUtZDY5YTVhZTA4ZmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGE5ZDMzZTQtZWQ0ZC00YjQ3LWIz NjMtYjQyMTEwZjg4NTU3LzBhOWQzM2U0LWVkNGQtNGI0Ny1iMzYzLWI0MjExMGY4 ODU1Ny5jcmwwHwYDVR0jBBgwFoAUi2UPpY7DqQ2CdI3aLpUh4tf92n4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYTlkMzNlNC1lZDRkLTRiNDctYjM2My1iNDIx MTBmODg1NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFJsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeh52fyAz1cKgg8XJjEM2Nsjzu/1FT9nv1yV0/VXENqyG4CJP8G3wiA eA9xBxw4iAKct/kaQnRw1DtIuiDYR92LMgDL7Qxm2zLd41/76EcR4BNQqqtERKuT 2kmUJk9URONczodEyzfFuwFgdm80TORvLgovXYRzQXMZ2nZA4J7moKuFv1pdDeCh UOB3IXcrwCHdFstmehG2uk4k7NvexRfhWa/F+5IcwIZM6mkjBWUPNdmyQ3hJUU0u WmXMZuU7v3Kiyag455d2GiAiR9KCAPohsw54AQOfbNERNnp17GP44ZSjSGbGaxX3 E5ce5aXZdxVl9+QrJEV51b10oFD1Vm8= -----END CERTIFICATE-----Generated at Mon Apr 27 11:19:58 2026 by rpki-client