$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380/e98ae2aa-4cef-394d-b27a-16dd94b1a79e.roa File: e98ae2aa-4cef-394d-b27a-16dd94b1a79e.roa (raw, json) Hash identifier: q5wBOl+PFec2s+mHFoikOQokMH/o7rfmXI2F4kXcMCs= Subject key identifier: 92:D9:60:20:3F:0C:95:13:03:60:5C:AB:23:D4:0E:54:E9:E1:20:97 Certificate issuer: /CN=5c7a2328-dcf6-422c-86d8-1338335ce380 Certificate serial: 010D0C9F4328584D6C0FAB954D571741101920C0 Authority key identifier: 3D:92:EA:B1:35:C9:66:55:3C:1A:19:BE:AC:96:B7:C7:7B:92:45:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380/e98ae2aa-4cef-394d-b27a-16dd94b1a79e.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 38439 IP address blocks: 199.127.129.0/24 maxlen: 24 2602:f831::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380/5c7a2328-dcf6-422c-86d8-1338335ce380.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380/5c7a2328-dcf6-422c-86d8-1338335ce380.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Apr 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:ab:95:4d:57:17:41:10:19:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c7a2328-dcf6-422c-86d8-1338335ce380 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=b89c0b9e-3f24-4153-b4c8-e3f1dad3cf72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:29:fc:0f:ba:ac:1f:72:78:52:d5:2e:3c:2b: 4f:c3:b8:6a:be:10:54:20:e1:34:b7:35:d7:6e:9f: d2:fc:30:a2:93:d9:a8:ed:dc:44:d9:06:95:8d:43: b9:a5:a1:91:57:bd:40:9a:ea:00:5c:cc:6a:73:8e: 8f:7b:c1:29:43:9a:96:73:01:2c:14:80:36:b3:af: 99:6a:fc:4f:6a:ea:89:3f:24:58:7d:f9:22:e2:0e: 61:00:1f:c6:81:f5:6f:fe:bb:0d:2a:49:10:06:d6: 01:56:44:ed:e3:1d:8b:59:91:ba:ba:be:5c:b4:bf: 7c:55:2b:d7:68:f0:ff:ef:4f:59:09:53:43:b0:65: fb:47:38:f7:16:87:b4:12:df:12:f5:c4:12:c5:e2: d3:68:33:e1:8b:7c:6d:c4:26:50:20:09:05:b1:84: b5:15:b5:66:c6:21:f7:ce:01:1d:65:13:99:8f:b0: 8d:58:fb:7e:1e:53:6f:02:0d:26:e3:c4:d5:5f:2f: 86:e4:e6:02:10:81:c1:29:6d:a0:89:1d:70:5e:5c: c2:12:bb:b1:eb:63:e2:90:c7:51:53:86:3d:62:f3: 08:12:df:fa:46:9d:97:27:bf:b4:9b:5f:f0:4d:64: cf:06:01:86:a0:c4:65:99:af:5e:2f:59:70:be:d4: 39:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D9:60:20:3F:0C:95:13:03:60:5C:AB:23:D4:0E:54:E9:E1:20:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380/e98ae2aa-4cef-394d-b27a-16dd94b1a79e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380/5c7a2328-dcf6-422c-86d8-1338335ce380.crl X509v3 Authority Key Identifier: keyid:3D:92:EA:B1:35:C9:66:55:3C:1A:19:BE:AC:96:B7:C7:7B:92:45:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380.cer sbgp-ipAddrBlock: critical IPv4: 199.127.129.0/24 IPv6: 2602:f831::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:5f:80:74:85:fa:22:a0:bf:5d:01:4a:fe:23:fb:de:89:1f: 82:cc:83:31:84:13:16:92:b5:da:36:ca:58:13:59:d0:ee:1d: 83:3e:2e:0c:8f:82:a2:14:90:7a:12:da:7e:a2:dc:f8:72:c0: 77:50:a4:d0:81:4c:9b:c4:b5:c5:49:f0:fa:44:07:3a:37:db: 75:2d:45:bc:1a:38:51:40:b7:84:e7:16:f1:8e:66:75:08:b6: 34:7a:5c:ca:a1:4d:cf:a5:a3:02:eb:96:db:46:53:74:bb:a3: 2b:0c:69:c1:7f:60:8f:cb:3c:c3:8a:7d:02:2a:d7:b8:19:b0: ca:d5:02:0a:f2:6d:86:e2:cd:a5:aa:83:7a:99:22:1c:f8:7c: 68:0a:c0:83:5c:e5:1d:a4:64:d7:b9:36:5c:f2:0b:1d:4b:f2: 1d:d3:2a:46:0f:b5:10:5c:b4:e8:11:12:0e:85:70:d9:d6:62: c5:e4:fc:69:26:b4:1b:df:a8:3b:cf:8b:44:1e:14:ed:d6:bc: 93:4a:e9:86:7c:bb:b2:fe:89:65:e8:97:24:66:d1:94:61:7d: 89:46:c2:1d:0e:2f:ea:0a:8d:7b:fc:6f:7a:5a:cb:db:ee:9c: 33:73:65:a6:cd:90:78:94:8d:84:ff:be:fb:c9:32:9a:44:94: 71:c7:ec:eb -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE1sD6uVTVcXQRAZIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM3YTIzMjgtZGNmNi00MjJjLTg2ZDgtMTMzODMzNWNl MzgwMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk Yjg5YzBiOWUtM2YyNC00MTUzLWI0YzgtZTNmMWRhZDNjZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyn8D7qsH3J4UtUuPCtPw7hqvhBUIOE0tzXX bp/S/DCik9mo7dxE2QaVjUO5paGRV71AmuoAXMxqc46Pe8EpQ5qWcwEsFIA2s6+Z avxPauqJPyRYffki4g5hAB/GgfVv/rsNKkkQBtYBVkTt4x2LWZG6ur5ctL98VSvX aPD/709ZCVNDsGX7Rzj3Foe0Et8S9cQSxeLTaDPhi3xtxCZQIAkFsYS1FbVmxiH3 zgEdZROZj7CNWPt+HlNvAg0m48TVXy+G5OYCEIHBKW2giR1wXlzCErux62PikMdR U4Y9YvMIEt/6Rp2XJ7+0m1/wTWTPBgGGoMRlma9eL1lwvtQ5IQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFJLZYCA/DJUTA2BcqyPUDlTp4SCXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81Yzdh MjMyOC1kY2Y2LTQyMmMtODZkOC0xMzM4MzM1Y2UzODAvZTk4YWUyYWEtNGNlZi0z OTRkLWIyN2EtMTZkZDk0YjFhNzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWM3YTIzMjgtZGNmNi00MjJjLTg2 ZDgtMTMzODMzNWNlMzgwLzVjN2EyMzI4LWRjZjYtNDIyYy04NmQ4LTEzMzgzMzVj ZTM4MC5jcmwwHwYDVR0jBBgwFoAUPZLqsTXJZlU8Ghm+rJa3x3uSRQwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YzdhMjMyOC1kY2Y2LTQyMmMtODZkOC0xMzM4 MzM1Y2UzODAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAx3+BMA8E AgACMAkDBwAmAvgxAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAe1+AdIX6IqC/XQFK/iP73okfgsyDMYQT FpK12jbKWBNZ0O4dgz4uDI+CohSQehLafqLc+HLAd1Ck0IFMm8S1xUnw+kQHOjfb dS1FvBo4UUC3hOcW8Y5mdQi2NHpcyqFNz6WjAuuW20ZTdLujKwxpwX9gj8s8w4p9 AirXuBmwytUCCvJthuLNpaqDepkiHPh8aArAg1zlHaRk17k2XPILHUvyHdMqRg+1 EFy06BESDoVw2dZixeT8aSa0G9+oO8+LRB4U7da8k0rphny7sv6JZeiXJGbRlGF9 iUbCHQ4v6gqNe/xvelrL2+6cM3Nlps2QeJSNhP+++8kymkSUccfs6w== -----END CERTIFICATE-----Generated at Sat Apr 11 17:53:26 2026 by rpki-client