$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d567916b-284d-37ff-bd27-7bb372493011.roa File: d567916b-284d-37ff-bd27-7bb372493011.roa (raw, json) Hash identifier: I8nPR7Fxv86c/WZRpLH3YtMFIYOreXnES2/u+jFeZFg= Subject key identifier: A5:75:A8:60:C2:4D:32:16:39:3C:C2:48:D8:CF:4F:0F:E8:D2:3B:46 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584D6EDA624D4BC5E31FF8C75F00 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d567916b-284d-37ff-bd27-7bb372493011.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 46623 IP address blocks: 96.2.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:62:4d:4b:c5:e3:1f:f8:c7:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=c3195e36-2b4f-4320-b007-50eaab0ab97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:af:85:aa:f3:b8:92:67:66:cf:e0:75:85:94: ea:e6:46:98:39:cc:26:a8:f4:8c:8a:5f:8b:97:14: b1:26:5a:5d:36:c0:5f:cc:dc:68:6f:93:86:90:42: 71:75:d1:4f:d2:05:aa:c8:d2:a8:a8:cb:11:19:14: 0f:2b:fd:60:e9:ba:ad:6b:92:b4:69:30:b4:d4:1f: 92:c7:bf:d9:47:8c:71:85:67:57:76:a6:36:aa:6a: 15:32:b3:ba:8d:ea:d3:62:31:99:58:25:9e:7a:47: 25:a5:f6:41:3d:75:97:27:27:23:9a:b1:03:e2:80: 45:74:cf:43:5f:70:9b:c4:65:c4:6a:18:f9:b4:9c: 8f:e7:5f:9e:f1:59:c4:cd:3b:1c:7a:f4:9b:6e:0f: 01:ff:24:af:c8:fe:68:8a:5e:23:ce:02:ca:61:15: c0:06:6f:f0:2e:dd:6a:61:8c:83:78:17:4b:38:ae: 0a:1c:91:79:d7:26:76:f0:80:73:19:49:6a:f1:88: 50:5a:70:cf:e8:40:e0:22:78:15:22:e9:79:c3:d9: 26:9a:04:ac:6f:79:1b:c1:c6:c3:ad:7e:38:a7:98: 8c:8b:54:7a:a5:d1:90:79:e1:9d:3f:05:65:03:09: 08:54:06:22:4d:8d:a6:63:d0:47:6b:51:37:09:30: 81:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:75:A8:60:C2:4D:32:16:39:3C:C2:48:D8:CF:4F:0F:E8:D2:3B:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d567916b-284d-37ff-bd27-7bb372493011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 96.2.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:80:3a:30:48:de:6d:6c:d6:c9:29:5d:38:ee:ad:db:ab:48: 9a:d9:a6:48:a0:f1:d6:e1:bb:31:58:cd:b6:42:96:dd:1d:03: 1c:b3:b7:ab:3c:6d:96:7f:0b:b8:c3:ca:3b:3d:ed:d4:9d:fe: fa:64:2e:43:dd:89:4f:f3:68:fc:6d:cd:8e:9d:0f:a4:11:2d: fb:73:f0:33:ce:06:1c:35:5a:e4:32:1e:2e:24:a3:ff:19:d9: d2:cc:38:a4:0b:cd:e6:c0:22:eb:52:97:f6:5c:07:fa:a0:00: 72:f8:01:bb:3f:11:87:7f:f7:46:66:fa:5a:b9:97:99:56:34: 53:e8:90:38:0c:70:43:bd:c5:87:61:5c:5b:bc:53:da:a6:80: c4:05:a3:11:7f:a5:37:bf:05:10:0c:0d:26:bc:12:a3:62:97: e8:f7:1c:2c:35:89:62:7a:d6:76:41:7c:d3:51:5a:55:ad:a9: bb:16:05:03:38:3d:a2:f8:b9:3b:00:20:1b:45:91:b2:1e:aa: b9:6f:9a:87:6b:97:48:52:3a:b4:20:c8:0f:35:1d:86:d0:69: 6a:a6:66:05:f9:36:6f:25:c7:08:57:05:97:d7:8c:70:0c:c4: e7:bd:0b:04:d6:48:eb:39:b8:84:b5:3a:3a:72:19:7f:bf:fd: f0:1b:29:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2mJNS8XjH/jHXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk YzMxOTVlMzYtMmI0Zi00MzIwLWIwMDctNTBlYWFiMGFiOTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta+FqvO4kmdmz+B1hZTq5kaYOcwmqPSMil+L lxSxJlpdNsBfzNxob5OGkEJxddFP0gWqyNKoqMsRGRQPK/1g6bqta5K0aTC01B+S x7/ZR4xxhWdXdqY2qmoVMrO6jerTYjGZWCWeekclpfZBPXWXJycjmrED4oBFdM9D X3CbxGXEahj5tJyP51+e8VnEzTscevSbbg8B/ySvyP5oil4jzgLKYRXABm/wLt1q YYyDeBdLOK4KHJF51yZ28IBzGUlq8YhQWnDP6EDgIngVIul5w9kmmgSsb3kbwcbD rX44p5iMi1R6pdGQeeGdPwVlAwkIVAYiTY2mY9BHa1E3CTCB9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKV1qGDCTTIWOTzCSNjPTw/o0jtGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZDU2NzkxNmItMjg0ZC0z N2ZmLWJkMjctN2JiMzcyNDkzMDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAL6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKAOjBI3m1s1skpXTjurdurSJrZpkig8dbhuzFYzbZClt0dAxyzt6s8 bZZ/C7jDyjs97dSd/vpkLkPdiU/zaPxtzY6dD6QRLftz8DPOBhw1WuQyHi4ko/8Z 2dLMOKQLzebAIutSl/ZcB/qgAHL4Abs/EYd/90Zm+lq5l5lWNFPokDgMcEO9xYdh XFu8U9qmgMQFoxF/pTe/BRAMDSa8EqNil+j3HCw1iWJ61nZBfNNRWlWtqbsWBQM4 PaL4uTsAIBtFkbIeqrlvmodrl0hSOrQgyA81HYbQaWqmZgX5Nm8lxwhXBZfXjHAM xOe9CwTWSOs5uIS1OjpyGX+//fAbKfs= -----END CERTIFICATE-----Generated at Thu Apr 9 08:28:44 2026 by rpki-client