$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/e8528204-a3c2-3176-ac99-05dfd193aaa1.roa File: e8528204-a3c2-3176-ac99-05dfd193aaa1.roa (raw, json) Hash identifier: 2Q5heILj2Y0VeQVOyVO5HROwcNxJ71DNwo2Gnmiuj08= Subject key identifier: 10:C9:88:AD:91:C2:A2:38:D8:1F:55:0E:8F:55:14:4C:D6:AC:63:7E Certificate issuer: /CN=cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3 Certificate serial: 010D0C9F4328584DA6B01BCC4DD9989ACF841800 Authority key identifier: 85:EC:6D:C5:EB:8F:FD:22:C3:A2:35:E4:1A:A6:19:F2:0B:6F:3D:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/e8528204-a3c2-3176-ac99-05dfd193aaa1.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 14618 IP address blocks: 207.241.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:1b:cc:4d:d9:98:9a:cf:84:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=1953b5bb-1320-4f2c-9c6a-9986b566c751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d5:fd:f1:61:4a:30:34:0c:c0:37:25:63:7c: d7:42:1e:f4:a6:0a:af:27:c2:ed:4c:4e:5c:9e:36: c9:7d:ee:65:aa:e7:8d:61:f4:f9:a4:70:98:43:b9: 91:1e:6b:f6:f8:49:ef:a8:bf:1a:b6:cc:df:58:52: ce:04:a0:56:31:fd:79:7a:40:e3:32:c5:1a:1a:0c: 97:0b:ca:10:b6:52:51:bd:3c:65:4b:e9:c2:f8:2f: 75:d7:d9:96:01:63:05:e5:d6:5e:d2:b7:4a:41:01: 7d:a6:ff:c4:e5:4d:64:b7:c9:1e:a4:d8:7d:bb:44: e7:99:d3:d7:cf:b3:55:b3:78:3e:d9:b2:8f:14:90: 64:60:cb:80:77:1f:c1:e0:5a:18:15:d6:1b:2b:01: a8:7e:91:97:f0:d1:9e:4f:ef:26:56:9d:0e:96:a5: 4b:81:e8:26:18:67:d0:fb:00:bc:c6:83:da:f1:59: 74:94:e9:5e:47:62:16:30:28:23:9f:60:a4:9a:b2: c4:ca:e6:0b:88:ee:38:a8:8e:40:7b:e0:f0:49:6c: ab:8a:80:13:c5:93:29:aa:ef:cd:ef:60:a5:25:91: da:75:25:2a:6d:5e:2b:20:7d:9c:fe:bf:ab:f4:c9: 5f:c1:7a:2f:c6:d6:d9:de:bf:b2:1a:12:91:bc:66: 5c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C9:88:AD:91:C2:A2:38:D8:1F:55:0E:8F:55:14:4C:D6:AC:63:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/e8528204-a3c2-3176-ac99-05dfd193aaa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.crl X509v3 Authority Key Identifier: keyid:85:EC:6D:C5:EB:8F:FD:22:C3:A2:35:E4:1A:A6:19:F2:0B:6F:3D:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.cer sbgp-ipAddrBlock: critical IPv4: 207.241.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:bd:6f:e7:10:cc:23:95:9e:e8:d1:c6:99:06:54:7e:07:e1: 21:5c:e8:06:52:07:a6:85:5e:71:37:09:03:d8:f2:fa:fe:7f: 0d:84:f0:bd:40:91:33:8b:c8:fd:d8:5e:a4:14:c0:f3:37:d4: 5b:0e:42:1f:00:d8:1b:68:2f:e1:bf:ab:28:37:0c:d9:c1:fa: 7d:f9:89:f3:a4:8c:9e:ab:4f:4f:c3:37:9f:98:2c:61:c2:33: 3a:0c:3c:4f:61:9f:e6:16:02:43:03:d7:c1:18:eb:eb:8d:d3: 6c:1f:95:c0:ce:13:84:5e:90:6b:12:0e:0b:e0:d8:8f:7f:54: fd:32:6e:81:f9:96:3f:9d:cf:18:1b:5b:8d:00:fe:df:cc:33: 12:e9:0a:0e:6a:ef:04:5c:75:42:0c:e5:e9:11:37:83:d0:d6: 62:f8:6a:38:79:99:27:c1:e3:6f:7f:0c:de:b6:bf:eb:cc:c6: 2c:0c:db:c8:75:0f:a2:d9:4e:ed:25:e1:45:02:8c:8f:81:fc: 23:a6:ff:54:29:9e:44:af:13:5c:67:2a:e2:b9:d3:f0:eb:2a: 65:f7:d5:79:04:1b:0f:28:79:34:b5:8c:42:a7:16:a7:34:b9: 20:ff:36:ac:88:1e:4a:6f:d4:8f:7e:47:a2:ce:22:27:cc:dc: 48:69:14:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msBvMTdmYms+EGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RkNWM1NzgtMjYxMi00YjFhLThjNGEtYzEyYmM3YzNh MWUzMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk MTk1M2I1YmItMTMyMC00ZjJjLTljNmEtOTk4NmI1NjZjNzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNX98WFKMDQMwDclY3zXQh70pgqvJ8LtTE5c njbJfe5lqueNYfT5pHCYQ7mRHmv2+EnvqL8atszfWFLOBKBWMf15ekDjMsUaGgyX C8oQtlJRvTxlS+nC+C9119mWAWMF5dZe0rdKQQF9pv/E5U1kt8kepNh9u0TnmdPX z7NVs3g+2bKPFJBkYMuAdx/B4FoYFdYbKwGofpGX8NGeT+8mVp0OlqVLgegmGGfQ +wC8xoPa8Vl0lOleR2IWMCgjn2CkmrLEyuYLiO44qI5Ae+DwSWyrioATxZMpqu/N 72ClJZHadSUqbV4rIH2c/r+r9MlfwXovxtbZ3r+yGhKRvGZc3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDJiK2RwqI42B9VDo9VFEzWrGN+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jZGQ1 YzU3OC0yNjEyLTRiMWEtOGM0YS1jMTJiYzdjM2ExZTMvZTg1MjgyMDQtYTNjMi0z MTc2LWFjOTktMDVkZmQxOTNhYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvY2RkNWM1NzgtMjYxMi00YjFhLThj NGEtYzEyYmM3YzNhMWUzL2NkZDVjNTc4LTI2MTItNGIxYS04YzRhLWMxMmJjN2Mz YTFlMy5jcmwwHwYDVR0jBBgwFoAUhextxeuP/SLDojXkGqYZ8gtvPRUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jZGQ1YzU3OC0yNjEyLTRiMWEtOGM0YS1jMTJi YzdjM2ExZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz/GQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMC9b+cQzCOVnujRxpkGVH4H4SFc6AZSB6aFXnE3CQPY8vr+fw2E8L1A kTOLyP3YXqQUwPM31FsOQh8A2BtoL+G/qyg3DNnB+n35ifOkjJ6rT0/DN5+YLGHC MzoMPE9hn+YWAkMD18EY6+uN02wflcDOE4RekGsSDgvg2I9/VP0yboH5lj+dzxgb W40A/t/MMxLpCg5q7wRcdUIM5ekRN4PQ1mL4ajh5mSfB429/DN62v+vMxiwM28h1 D6LZTu0l4UUCjI+B/COm/1QpnkSvE1xnKuK50/DrKmX31XkEGw8oeTS1jEKnFqc0 uSD/NqyIHkpv1I9+R6LOIifM3EhpFPI= -----END CERTIFICATE-----Generated at Sun May 3 17:51:58 2026 by rpki-client