$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa File: 3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa (raw, json) Hash identifier: PneL3/MxfME0ZBzZHnODil5ODBBAo1AATL61ps5Oq+0= Subject key identifier: 47:51:CD:DD:B6:6F:60:50:B9:29:06:B4:DF:92:A7:A8:C9:48:7D:AC Certificate issuer: /CN=207c40f4-33c4-478b-ae61-d3f51358881b Certificate serial: 010D0C9F4328584D8EF55EBF8D90D2E2E98094A0 Authority key identifier: 52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 40091 IP address blocks: 76.9.224.0/20 maxlen: 24 216.115.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:5e:bf:8d:90:d2:e2:e9:80:94:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207c40f4-33c4-478b-ae61-d3f51358881b Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=4e0a66b0-f11c-4559-9e93-cf1d4ebe1e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0b:57:96:06:f0:ee:e4:69:de:e3:fb:75:a9: 78:1a:99:1f:d2:f0:de:62:7b:9f:49:1c:6a:3b:fb: d6:dd:5b:3d:e7:72:4d:84:c7:f8:5d:71:27:30:0f: 39:7a:f5:37:da:7e:c4:94:e4:68:c1:0d:17:d1:0f: d0:0a:8b:23:53:97:10:cd:05:bb:6f:3f:50:9f:11: e1:8c:7b:2a:c8:2c:ab:14:53:de:80:16:5a:2d:9e: 36:69:58:bc:45:37:ca:f4:73:5e:fa:ed:15:3b:c4: f2:da:ff:0b:a6:70:0a:fc:fa:55:4c:9d:b0:db:4e: 08:c2:a8:41:27:c0:3d:ab:3b:10:d1:55:0d:8a:bd: 9f:4a:75:6b:db:d3:f6:a2:21:93:d5:5b:cd:51:c8: a3:b6:78:5b:a9:fb:d9:41:df:ed:03:aa:d3:91:ee: 98:dd:2f:39:0e:ae:aa:3a:51:e7:bd:cf:b5:8c:49: f8:67:c9:5c:f3:a5:43:0d:4a:7d:30:21:5c:2c:66: 62:45:73:ff:f9:ec:44:0f:c4:f8:89:ef:79:ad:f0: 23:1d:2c:53:ba:ae:ca:87:44:2c:90:e3:5c:75:05: aa:99:6c:96:f6:71:50:61:f3:ef:76:18:45:6a:36: 7f:a7:04:26:db:67:ff:70:1d:d7:5f:13:21:d6:6d: b3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:51:CD:DD:B6:6F:60:50:B9:29:06:B4:DF:92:A7:A8:C9:48:7D:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.crl X509v3 Authority Key Identifier: keyid:52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer sbgp-ipAddrBlock: critical IPv4: 76.9.224.0/20 216.115.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:a5:47:99:c8:5c:eb:20:b3:6d:f1:b2:f0:d9:5c:08:c3:3d: 53:16:55:d3:4e:40:36:9d:f6:22:65:04:4d:bc:f6:e8:bd:48: f5:eb:8c:36:73:c6:35:6e:5e:24:61:47:c6:bc:bc:da:b2:6d: d9:c1:ac:77:40:b3:42:fc:f0:51:9e:1c:04:9a:04:eb:00:f4: ba:02:ae:e7:25:71:96:f6:c4:3c:17:d2:bf:f8:e3:de:35:88: 18:2c:7f:39:5c:78:b5:db:f2:3a:c4:ed:ba:31:eb:90:57:86: 60:21:b5:35:e3:71:aa:8a:86:3a:b1:66:6c:bc:70:44:04:16: 56:ce:21:fb:c0:5c:cc:90:51:1c:3c:b9:5d:36:df:30:3c:c5: a6:23:ac:b1:8b:a0:7d:4e:3d:4e:c9:d9:b5:8c:f1:6a:0b:1e: 5f:d4:d7:f4:32:70:28:2a:5c:4e:85:0a:6c:ed:78:e2:23:19: a4:1d:f2:f7:f6:e0:65:18:99:b3:d1:71:7e:14:49:43:c5:04: a7:bf:91:6c:d7:96:f7:5b:cf:60:4d:9f:f9:31:00:bf:76:10: 0a:59:5c:27:d3:b9:93:42:6b:c1:34:12:17:19:8a:9c:55:d9: f2:1c:cb:67:16:4c:7e:73:0c:ff:d0:0b:92:1f:38:f9:ea:9a: bc:e6:63:88 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2O9V6/jZDS4umAlKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA3YzQwZjQtMzNjNC00NzhiLWFlNjEtZDNmNTEzNTg4 ODFiMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NGUwYTY2YjAtZjExYy00NTU5LTllOTMtY2YxZDRlYmUxZTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQtXlgbw7uRp3uP7dal4Gpkf0vDeYnufSRxq O/vW3Vs953JNhMf4XXEnMA85evU32n7ElORowQ0X0Q/QCosjU5cQzQW7bz9QnxHh jHsqyCyrFFPegBZaLZ42aVi8RTfK9HNe+u0VO8Ty2v8LpnAK/PpVTJ2w204IwqhB J8A9qzsQ0VUNir2fSnVr29P2oiGT1VvNUcijtnhbqfvZQd/tA6rTke6Y3S85Dq6q OlHnvc+1jEn4Z8lc86VDDUp9MCFcLGZiRXP/+exED8T4ie95rfAjHSxTuq7Kh0Qs kONcdQWqmWyW9nFQYfPvdhhFajZ/pwQm22f/cB3XXxMh1m2zewIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEdRzd22b2BQuSkGtN+Sp6jJSH2sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yMDdj NDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1MTM1ODg4MWIvM2M1ZjRlMWEtNGJlNy0z N2Y3LWI4NjEtOTkxZGE1MGY1N2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjA3YzQwZjQtMzNjNC00NzhiLWFl NjEtZDNmNTEzNTg4ODFiLzIwN2M0MGY0LTMzYzQtNDc4Yi1hZTYxLWQzZjUxMzU4 ODgxYi5jcmwwHwYDVR0jBBgwFoAUUgLOwO2kMddTSMx22Ig8dhzR7ewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yMDdjNDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1 MTM1ODg4MWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQETAngAwQE 2HPAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHqlR5nIXOsgs23xsvDZXAjDPVMWVdNOQDad9iJlBE289ui9 SPXrjDZzxjVuXiRhR8a8vNqybdnBrHdAs0L88FGeHASaBOsA9LoCruclcZb2xDwX 0r/44941iBgsfzlceLXb8jrE7box65BXhmAhtTXjcaqKhjqxZmy8cEQEFlbOIfvA XMyQURw8uV023zA8xaYjrLGLoH1OPU7J2bWM8WoLHl/U1/QycCgqXE6FCmzteOIj GaQd8vf24GUYmbPRcX4USUPFBKe/kWzXlvdbz2BNn/kxAL92EApZXCfTuZNCa8E0 EhcZipxV2fIcy2cWTH5zDP/QC5IfOPnqmrzmY4g= -----END CERTIFICATE-----Generated at Mon Apr 20 21:25:52 2026 by rpki-client