$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/d3a2508e-0220-3c1b-9180-e11c07412c6c.roa File: d3a2508e-0220-3c1b-9180-e11c07412c6c.roa (raw, json) Hash identifier: 9DEQaV5CY+8WmE8kl1vLSbY7G4jwPtvrpQyT1bVxEZo= Subject key identifier: 98:B6:EB:E4:4B:0B:37:1C:99:99:D3:21:D1:20:04:A0:B7:B6:5A:94 Certificate issuer: /CN=7c74b511-7d11-4209-84c2-f7b800242a7b Certificate serial: 010D0C9F4328584D932545743C86A450CE6B37A0 Authority key identifier: 76:B9:36:87:B8:4E:A3:D9:B3:51:34:02:21:D6:12:2F:82:E4:2C:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/d3a2508e-0220-3c1b-9180-e11c07412c6c.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 21976 IP address blocks: 192.231.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:45:74:3c:86:a4:50:ce:6b:37:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c74b511-7d11-4209-84c2-f7b800242a7b Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=157f607a-766c-495c-b5ea-e473e5c0edb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2d:68:d0:70:ae:db:f0:9e:b2:83:65:00:a7: c5:39:df:49:a3:08:0f:3a:fc:08:46:c5:e1:55:45: 3a:21:fc:04:cc:ab:b3:51:e9:71:20:37:3a:07:5e: 54:3f:31:ec:43:38:5c:31:e8:a1:68:d2:91:c1:41: 47:2f:5b:02:ee:58:30:30:4d:aa:b9:c4:99:4c:d8: ad:0d:4f:02:f8:14:05:c9:f4:14:5d:ae:fd:63:97: bd:42:70:df:14:4b:a4:d5:3d:60:e0:4c:67:7f:dd: 6b:52:53:9a:fd:84:f4:9d:f5:0d:f8:f7:27:00:a3: 4b:9b:04:58:33:b3:d7:00:82:a0:29:b2:ae:3a:37: 75:9d:3b:2d:78:7a:1f:ab:af:c9:40:ca:e1:53:4f: 6c:96:bd:6a:d1:c8:4b:2d:3a:a3:e1:66:9d:99:35: 56:02:59:80:d8:d5:b1:a5:cb:31:33:c8:8d:8d:27: 17:91:03:b7:28:47:6a:9b:da:b4:1e:d4:dd:ca:63: df:b1:1d:e1:66:4c:34:0c:27:ac:09:99:bb:0b:77: 9b:84:e8:c7:b7:6f:2d:08:eb:83:ee:c1:b1:52:cf: ce:d9:a7:a0:81:16:73:cc:58:ed:e5:3d:b4:b6:d0: 0f:3c:e0:64:d4:74:e7:a9:31:6b:d7:4a:cb:65:ff: f2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B6:EB:E4:4B:0B:37:1C:99:99:D3:21:D1:20:04:A0:B7:B6:5A:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/d3a2508e-0220-3c1b-9180-e11c07412c6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.crl X509v3 Authority Key Identifier: keyid:76:B9:36:87:B8:4E:A3:D9:B3:51:34:02:21:D6:12:2F:82:E4:2C:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b.cer sbgp-ipAddrBlock: critical IPv4: 192.231.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:45:25:e4:f3:59:d4:ff:5f:b8:77:40:93:4c:98:2c:88:25: f4:29:f3:cc:06:5d:16:50:64:9c:a5:f4:51:4b:fe:64:21:9f: 20:aa:61:b7:dd:d2:b8:cf:47:39:67:22:cb:c8:2a:d3:a1:54: 4f:48:46:f9:0f:83:f4:91:0e:ef:f1:24:de:b4:d3:eb:a6:64: a3:0a:54:40:fb:69:cf:a1:b5:a6:bd:a8:f2:99:56:7a:5b:67: 3b:36:d4:34:7e:de:72:84:71:58:93:8e:84:65:83:04:1e:27: 98:5c:f3:b0:12:42:f2:f7:fe:22:9f:5f:29:87:9b:31:68:07: 69:95:a8:ed:13:fc:1e:9e:87:83:ba:c5:90:09:4e:a6:ba:2f: 00:43:e4:d3:cd:0f:1c:51:a3:c4:12:e4:7b:f6:c4:19:8c:34: 06:b9:64:79:d3:47:6a:3d:bb:2e:e5:88:42:79:31:0d:5e:cb: 3e:33:08:7f:f4:f3:78:81:d5:9b:55:29:d4:01:fc:b1:74:c8: 2e:69:dc:aa:e4:af:2c:b5:27:54:48:dd:b0:4e:68:2d:6e:0e: 98:08:40:9d:59:51:69:38:65:76:cd:b5:12:70:fd:30:0f:93: 8d:9d:0d:c6:ce:bd:43:bd:ca:44:3f:91:14:88:92:58:58:69: 49:22:4c:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJUV0PIakUM5rN6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2M3NGI1MTEtN2QxMS00MjA5LTg0YzItZjdiODAwMjQy YTdiMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk MTU3ZjYwN2EtNzY2Yy00OTVjLWI1ZWEtZTQ3M2U1YzBlZGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3i1o0HCu2/CesoNlAKfFOd9JowgPOvwIRsXh VUU6IfwEzKuzUelxIDc6B15UPzHsQzhcMeihaNKRwUFHL1sC7lgwME2qucSZTNit DU8C+BQFyfQUXa79Y5e9QnDfFEuk1T1g4Exnf91rUlOa/YT0nfUN+PcnAKNLmwRY M7PXAIKgKbKuOjd1nTsteHofq6/JQMrhU09slr1q0chLLTqj4WadmTVWAlmA2NWx pcsxM8iNjScXkQO3KEdqm9q0HtTdymPfsR3hZkw0DCesCZm7C3ebhOjHt28tCOuD 7sGxUs/O2aeggRZzzFjt5T20ttAPPOBk1HTnqTFr10rLZf/ynwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJi26+RLCzccmZnTIdEgBKC3tlqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Yzc0 YjUxMS03ZDExLTQyMDktODRjMi1mN2I4MDAyNDJhN2IvZDNhMjUwOGUtMDIyMC0z YzFiLTkxODAtZTExYzA3NDEyYzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2M3NGI1MTEtN2QxMS00MjA5LTg0 YzItZjdiODAwMjQyYTdiLzdjNzRiNTExLTdkMTEtNDIwOS04NGMyLWY3YjgwMDI0 MmE3Yi5jcmwwHwYDVR0jBBgwFoAUdrk2h7hOo9mzUTQCIdYSL4LkLOgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83Yzc0YjUxMS03ZDExLTQyMDktODRjMi1mN2I4 MDAyNDJhN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOfKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANFJeTzWdT/X7h3QJNMmCyIJfQp88wGXRZQZJyl9FFL/mQhnyCqYbfd 0rjPRzlnIsvIKtOhVE9IRvkPg/SRDu/xJN600+umZKMKVED7ac+htaa9qPKZVnpb Zzs21DR+3nKEcViTjoRlgwQeJ5hc87ASQvL3/iKfXymHmzFoB2mVqO0T/B6eh4O6 xZAJTqa6LwBD5NPNDxxRo8QS5Hv2xBmMNAa5ZHnTR2o9uy7liEJ5MQ1eyz4zCH/0 83iB1ZtVKdQB/LF0yC5p3Krkryy1J1RI3bBOaC1uDpgIQJ1ZUWk4ZXbNtRJw/TAP k42dDcbOvUO9ykQ/kRSIklhYaUkiTNc= -----END CERTIFICATE-----Generated at Mon Apr 27 13:57:57 2026 by rpki-client