$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/fdef4dfe-785c-327d-b08a-efd834f24f40.roa File: fdef4dfe-785c-327d-b08a-efd834f24f40.roa (raw, json) Hash identifier: mgNV9H+gSMLP5hoNaZMfG5FcueeFZvQ/smy86DwgIvc= Subject key identifier: A7:F2:AC:6D:97:44:54:F2:8A:5A:6D:33:01:10:8D:76:0C:F2:6C:8B Certificate issuer: /CN=ea4790bc-4699-4a2d-8cae-17f809013230 Certificate serial: 010D0C9F4328584D60E4F84677BC250D4591C7E0 Authority key identifier: BB:7E:52:56:B2:3A:0C:40:CC:7F:81:32:9E:48:87:05:56:80:E9:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/fdef4dfe-785c-327d-b08a-efd834f24f40.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 54749 IP address blocks: 199.231.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/ea4790bc-4699-4a2d-8cae-17f809013230.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/ea4790bc-4699-4a2d-8cae-17f809013230.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e4:f8:46:77:bc:25:0d:45:91:c7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea4790bc-4699-4a2d-8cae-17f809013230 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=84693bd9-54a5-4931-a213-9e5ea99eec9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:30:16:46:1a:71:c2:f2:2e:43:04:2e:ed:a2: 5a:41:fc:09:65:75:d5:ef:1c:b4:16:3a:32:86:2e: ae:6c:ce:10:80:ab:7c:4e:c6:7b:1f:ec:f8:b1:72: 26:c7:d6:1b:37:66:a0:e3:5f:cd:e9:b0:ec:89:d9: ab:a5:cd:04:73:f9:fd:59:70:f5:1c:3e:f4:98:fe: 34:ca:20:84:86:33:6b:c8:5f:fa:2c:08:39:31:f7: 58:25:b2:5c:ba:43:ae:04:3a:c5:19:a1:c6:84:d1: 98:62:f5:1d:62:08:cf:24:37:63:d2:03:21:60:aa: 81:90:46:59:54:05:14:44:d2:bc:da:ba:c6:17:0a: 20:e1:64:d3:23:95:83:ca:9c:8c:55:af:cb:52:d8: 52:c5:22:2b:e9:95:c5:f6:ed:25:2d:ca:04:c9:39: 69:2b:bc:c6:62:31:85:df:47:9c:44:b7:88:62:de: 85:2d:d8:3a:2c:8a:b4:71:34:87:7e:7b:1a:0d:db: 5c:db:47:f3:62:61:4d:0a:c5:58:42:23:a8:ab:90: c5:6c:06:e3:cb:70:78:1d:2a:ff:d5:ff:31:94:27: ba:3b:92:1f:89:08:1a:37:de:33:ea:69:06:cb:8b: ec:3a:87:46:36:f0:6a:3a:a0:30:ea:3a:99:13:b0: 3d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F2:AC:6D:97:44:54:F2:8A:5A:6D:33:01:10:8D:76:0C:F2:6C:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/fdef4dfe-785c-327d-b08a-efd834f24f40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/ea4790bc-4699-4a2d-8cae-17f809013230.crl X509v3 Authority Key Identifier: keyid:BB:7E:52:56:B2:3A:0C:40:CC:7F:81:32:9E:48:87:05:56:80:E9:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230.cer sbgp-ipAddrBlock: critical IPv4: 199.231.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ab:f5:6f:74:35:4e:8f:be:5c:fe:59:6b:38:e1:b6:bd:5b: a9:11:7b:8f:79:e7:76:48:85:15:30:67:4b:a7:26:43:b9:a1: b1:4a:23:ea:8b:52:6e:36:d9:68:8f:d7:f3:09:f9:88:18:5a: e9:6b:00:0a:e8:2f:aa:e7:a4:2f:09:3c:04:fe:7c:38:26:78: 73:7e:18:de:73:ed:19:e5:b4:71:26:32:c9:1a:14:84:53:60: ae:ff:b7:6c:b3:33:6c:e2:12:6c:e6:c3:f0:13:e7:fb:30:73: c8:5f:24:ee:76:e1:38:44:1a:54:57:12:73:80:61:0f:c2:21: 62:93:45:14:f1:a7:53:22:f7:c6:26:f6:0f:0e:ed:e0:cc:17: 48:b6:52:32:ac:12:53:cc:cd:b0:56:88:8c:a6:c2:3f:81:56: c0:4c:24:03:37:03:2e:d3:2f:bd:a6:fc:4f:e7:17:96:cf:c3: 20:15:6e:7d:77:9b:6f:2b:75:99:c8:2b:da:dc:50:42:b1:7b: d6:29:63:91:7d:48:e8:96:0f:90:bd:3e:77:8c:28:69:3d:15: f6:d0:e6:04:03:bb:4a:b2:b2:cc:f6:da:08:07:14:2c:ce:2d: 06:53:77:58:e6:e6:e6:40:90:0f:9a:80:42:9d:2e:06:e2:66: 04:21:97:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5PhGd7wlDUWRx+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE0NzkwYmMtNDY5OS00YTJkLThjYWUtMTdmODA5MDEz MjMwMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk ODQ2OTNiZDktNTRhNS00OTMxLWEyMTMtOWU1ZWE5OWVlYzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzAWRhpxwvIuQwQu7aJaQfwJZXXV7xy0Fjoy hi6ubM4QgKt8TsZ7H+z4sXImx9YbN2ag41/N6bDsidmrpc0Ec/n9WXD1HD70mP40 yiCEhjNryF/6LAg5MfdYJbJcukOuBDrFGaHGhNGYYvUdYgjPJDdj0gMhYKqBkEZZ VAUURNK82rrGFwog4WTTI5WDypyMVa/LUthSxSIr6ZXF9u0lLcoEyTlpK7zGYjGF 30ecRLeIYt6FLdg6LIq0cTSHfnsaDdtc20fzYmFNCsVYQiOoq5DFbAbjy3B4HSr/ 1f8xlCe6O5IfiQgaN94z6mkGy4vsOodGNvBqOqAw6jqZE7A9ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfyrG2XRFTyilptMwEQjXYM8myLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYTQ3 OTBiYy00Njk5LTRhMmQtOGNhZS0xN2Y4MDkwMTMyMzAvZmRlZjRkZmUtNzg1Yy0z MjdkLWIwOGEtZWZkODM0ZjI0ZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWE0NzkwYmMtNDY5OS00YTJkLThj YWUtMTdmODA5MDEzMjMwL2VhNDc5MGJjLTQ2OTktNGEyZC04Y2FlLTE3ZjgwOTAx MzIzMC5jcmwwHwYDVR0jBBgwFoAUu35SVrI6DEDMf4EynkiHBVaA6cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYTQ3OTBiYy00Njk5LTRhMmQtOGNhZS0xN2Y4 MDkwMTMyMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+d4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyr9W90NU6Pvlz+WWs44ba9W6kRe49553ZIhRUwZ0unJkO5obFKI+qL Um422WiP1/MJ+YgYWulrAAroL6rnpC8JPAT+fDgmeHN+GN5z7RnltHEmMskaFIRT YK7/t2yzM2ziEmzmw/AT5/swc8hfJO524ThEGlRXEnOAYQ/CIWKTRRTxp1Mi98Ym 9g8O7eDMF0i2UjKsElPMzbBWiIymwj+BVsBMJAM3Ay7TL72m/E/nF5bPwyAVbn13 m28rdZnIK9rcUEKxe9YpY5F9SOiWD5C9PneMKGk9FfbQ5gQDu0qyssz22ggHFCzO LQZTd1jm5uZAkA+agEKdLgbiZgQhl04= -----END CERTIFICATE-----Generated at Thu Apr 9 02:30:09 2026 by rpki-client