$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2899a7f7-27c2-3cf6-bbbf-8b0e833ae209.roa File: 2899a7f7-27c2-3cf6-bbbf-8b0e833ae209.roa (raw, json) Hash identifier: JYuqpkP5Fw2eeglP6GF95YcKGZti+Bo8+4wSEzWaFdI= Subject key identifier: F3:D0:B7:56:E3:03:CA:04:A6:9E:E3:3B:EB:88:83:2B:69:34:32:B2 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584D60E50CAB771EA5EC2F668C00 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2899a7f7-27c2-3cf6-bbbf-8b0e833ae209.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 13536 IP address blocks: 216.179.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:0c:ab:77:1e:a5:ec:2f:66:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=656058c0-2a2a-4e40-9fbf-b29879198ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:38:64:a5:2a:87:37:9f:bd:aa:c6:e6:ca:37: 10:05:e0:0e:80:46:e3:ef:a4:51:0b:9a:ce:bb:75: 7f:32:0c:51:5c:82:8c:b9:8c:a7:9c:d3:12:ce:cf: 63:e2:17:7c:01:be:bc:4d:1c:cd:bf:fd:1c:f3:0d: 58:03:58:86:c7:4c:25:de:42:47:ff:fc:9d:1f:e2: 01:18:3a:27:e0:ee:ca:85:ea:fe:e4:eb:6c:71:6d: b2:e7:a5:53:0d:a9:16:35:24:32:4f:3b:9d:8e:02: 10:72:c8:6b:07:02:67:b5:a1:05:b4:86:4d:39:c0: d9:98:4d:9a:84:74:d7:d2:8a:36:26:bc:53:e3:62: a8:73:e7:1e:b1:29:5a:16:32:f4:35:74:1e:55:39: 9a:1f:50:f9:60:4f:e8:da:5e:96:60:95:ff:42:09: f9:86:54:60:58:a7:6e:ee:07:b2:a9:47:3e:b0:e5: 55:18:a6:42:82:1a:64:ad:8f:da:5c:d9:7c:a3:c0: e7:7f:ac:70:ba:e8:61:14:e3:2a:6b:05:1a:97:c3: df:65:a3:f8:e8:ec:d8:8b:c6:b6:9a:2d:ee:b3:b1: e5:47:e0:34:74:60:ff:63:5c:b2:9a:1f:15:c3:22: c2:72:0a:70:22:85:a0:18:89:37:3a:dd:3a:2c:8e: f5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D0:B7:56:E3:03:CA:04:A6:9E:E3:3B:EB:88:83:2B:69:34:32:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2899a7f7-27c2-3cf6-bbbf-8b0e833ae209.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.179.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:20:1a:cf:d0:90:b4:df:d6:50:2e:dc:66:1e:63:64:a2:e3: 7b:6b:fd:fd:42:24:27:1c:5d:e4:20:80:91:29:f6:05:86:34: ad:37:ea:20:2c:33:e8:47:87:ad:af:09:fc:cb:42:0f:54:3c: a9:d0:e3:73:28:07:f8:b3:8a:58:4d:62:f3:9d:71:0a:03:26: 99:ea:d5:ee:48:f0:9e:79:20:a9:3a:04:0d:db:3c:2b:46:1a: 2d:87:bf:0c:25:4c:3a:cc:b1:fa:54:72:0c:82:57:dc:91:e5: ce:64:09:66:eb:09:7d:74:fa:7f:11:12:14:bd:7e:1b:32:be: f3:38:00:f6:91:58:fb:62:66:18:7e:4d:ea:07:95:b1:e6:9c: 1a:9a:40:c5:e0:78:01:19:fd:cb:c6:82:fa:1d:26:ff:6f:56: 13:93:f6:2d:cf:fd:d6:b6:81:e6:06:fe:6f:61:92:2a:30:19: 6d:e5:25:79:e5:8a:e6:cf:1a:8f:b9:7c:10:0d:22:44:c2:e9: 6a:fd:08:90:29:33:9c:99:d9:f4:4e:52:3b:ed:dc:36:32:a6: a0:ee:c0:6d:b8:ec:f9:74:6c:6f:3e:07:4b:31:1e:9d:cb:46: a6:df:07:59:77:26:64:08:df:bc:c0:cb:f4:1a:8d:cc:5f:ab: d8:1f:af:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5Qyrdx6l7C9mjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk NjU2MDU4YzAtMmEyYS00ZTQwLTlmYmYtYjI5ODc5MTk4YWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDhkpSqHN5+9qsbmyjcQBeAOgEbj76RRC5rO u3V/MgxRXIKMuYynnNMSzs9j4hd8Ab68TRzNv/0c8w1YA1iGx0wl3kJH//ydH+IB GDon4O7Kher+5OtscW2y56VTDakWNSQyTzudjgIQcshrBwJntaEFtIZNOcDZmE2a hHTX0oo2JrxT42Koc+cesSlaFjL0NXQeVTmaH1D5YE/o2l6WYJX/Qgn5hlRgWKdu 7geyqUc+sOVVGKZCghpkrY/aXNl8o8Dnf6xwuuhhFOMqawUal8PfZaP46OzYi8a2 mi3us7HlR+A0dGD/Y1yymh8VwyLCcgpwIoWgGIk3Ot06LI71PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPQt1bjA8oEpp7jO+uIgytpNDKyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMjg5OWE3ZjctMjdjMi0z Y2Y2LWJiYmYtOGIwZTgzM2FlMjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2LMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMkgGs/QkLTf1lAu3GYeY2Si43tr/f1CJCccXeQggJEp9gWGNK036iAs M+hHh62vCfzLQg9UPKnQ43MoB/izilhNYvOdcQoDJpnq1e5I8J55IKk6BA3bPCtG Gi2HvwwlTDrMsfpUcgyCV9yR5c5kCWbrCX10+n8REhS9fhsyvvM4APaRWPtiZhh+ TeoHlbHmnBqaQMXgeAEZ/cvGgvodJv9vVhOT9i3P/da2geYG/m9hkiowGW3lJXnl iubPGo+5fBANIkTC6Wr9CJApM5yZ2fROUjvt3DYypqDuwG247Pl0bG8+B0sxHp3L RqbfB1l3JmQI37zAy/Qajcxfq9gfryI= -----END CERTIFICATE-----Generated at Mon Apr 13 12:29:02 2026 by rpki-client