$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/3baae0c4-63e8-3640-b573-a9277c99d98b.roa File: 3baae0c4-63e8-3640-b573-a9277c99d98b.roa (raw, json) Hash identifier: s75netWc4U2Qsu7sRfl7Gfmrng8pYBVqPtRQ//Htifg= Subject key identifier: 6B:17:CB:B5:E8:C5:02:BB:C2:C0:56:91:51:F5:86:68:0D:E0:13:3E Certificate issuer: /CN=7895ee85-2a16-4e54-9c5b-a9a05908877e Certificate serial: 010D0C9F4328584D8AC52FB4B3882B41B4BA4620 Authority key identifier: B3:A1:A3:AD:2A:8A:F8:D4:55:EF:1D:E7:A8:25:7E:11:79:B2:F5:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/3baae0c4-63e8-3640-b573-a9277c99d98b.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 53903 IP address blocks: 208.123.141.0/24 maxlen: 24 208.123.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/7895ee85-2a16-4e54-9c5b-a9a05908877e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/7895ee85-2a16-4e54-9c5b-a9a05908877e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:2f:b4:b3:88:2b:41:b4:ba:46:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7895ee85-2a16-4e54-9c5b-a9a05908877e Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=56d6d344-d794-4abd-b810-689668a766d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5b:49:d4:c0:db:9d:c8:4d:8a:b1:e5:3e:2c: e3:e9:b6:8d:ec:3e:1f:04:7d:8c:74:5e:e8:e2:ac: d3:91:7f:12:96:6c:5f:1d:b4:68:fd:68:a0:a5:95: 1d:72:db:36:53:a3:21:24:ad:54:54:45:2f:84:c1: 8d:f3:b8:58:05:94:57:d0:54:b5:c4:e6:0b:68:38: 93:bb:33:44:82:2e:ed:f6:7a:99:73:78:f4:94:5b: c0:1e:d7:e3:b9:78:d6:0c:62:d8:a3:94:58:71:08: 63:80:c1:4e:31:39:50:d2:02:e0:1b:43:63:3b:72: 69:15:9d:6d:47:c4:86:78:ee:34:b6:66:e9:dd:ab: 2b:21:97:e2:5e:31:44:ce:7b:73:e6:e3:f0:65:17: d7:db:ff:6f:7c:81:25:3d:ba:a0:94:64:c9:88:ea: bd:34:d8:60:e7:e7:e1:41:71:1b:c4:a8:2f:4d:91: 7e:95:81:4e:f8:39:ac:b6:61:7a:15:ee:31:63:49: 01:48:c1:d0:97:36:0a:d4:7f:f6:b2:bd:5c:40:1c: d6:d9:d2:05:7e:ca:65:33:55:6f:81:52:e9:21:5f: c3:df:2a:47:1f:79:c4:22:2b:3b:7e:70:74:1e:b7: 84:1d:2c:18:ba:74:a8:65:15:88:f9:a7:e4:64:88: 4b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:17:CB:B5:E8:C5:02:BB:C2:C0:56:91:51:F5:86:68:0D:E0:13:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/3baae0c4-63e8-3640-b573-a9277c99d98b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/7895ee85-2a16-4e54-9c5b-a9a05908877e.crl X509v3 Authority Key Identifier: keyid:B3:A1:A3:AD:2A:8A:F8:D4:55:EF:1D:E7:A8:25:7E:11:79:B2:F5:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e.cer sbgp-ipAddrBlock: critical IPv4: 208.123.141.0-208.123.142.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:10:aa:06:9d:a1:24:5b:d1:c6:36:d3:28:f8:a5:1b:b3:54: 44:82:9b:6e:bc:63:8a:92:a1:1c:82:8a:11:39:95:97:d9:40: 9e:ba:bf:ac:7f:99:a2:de:be:d9:e9:10:a6:79:b1:3b:c0:36: c6:41:8b:9e:84:31:b9:a4:1f:76:bb:a0:21:92:4f:a0:49:24: 04:31:93:77:2f:d0:52:0c:8f:a7:42:ee:1a:63:4c:e8:cb:c9: fb:bd:49:b0:7e:bb:a4:b2:24:34:61:89:cb:fd:7e:06:8b:44: 12:89:5b:b9:e2:26:0f:22:df:0a:68:23:0b:fc:aa:34:e3:f3: 83:be:1d:41:1a:6f:72:90:5e:3c:17:cf:71:b2:20:d5:bf:c2: be:7e:64:b2:f2:4c:5c:dd:b9:59:5a:8a:70:91:f0:43:0e:3f: 8e:7c:51:ca:8d:94:6a:c0:fe:3f:c3:ca:5f:a7:dc:5a:17:63: bd:a2:93:65:48:69:e0:d9:02:67:a7:7e:9f:7e:66:c0:9d:19: 0e:8a:e6:05:05:ed:37:eb:02:23:a5:ad:40:f6:47:94:f1:73: 7d:b3:2f:74:31:b1:e4:9d:32:6d:b5:03:2d:e5:55:a9:e3:87: 33:6a:a5:be:fa:cf:e3:40:03:32:27:03:5d:dc:63:bc:28:17: 74:6b:cf:b9 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE2KxS+0s4grQbS6RiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg5NWVlODUtMmExNi00ZTU0LTljNWItYTlhMDU5MDg4 NzdlMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk NTZkNmQzNDQtZDc5NC00YWJkLWI4MTAtNjg5NjY4YTc2NmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVtJ1MDbnchNirHlPizj6baN7D4fBH2MdF7o 4qzTkX8SlmxfHbRo/WigpZUdcts2U6MhJK1UVEUvhMGN87hYBZRX0FS1xOYLaDiT uzNEgi7t9nqZc3j0lFvAHtfjuXjWDGLYo5RYcQhjgMFOMTlQ0gLgG0NjO3JpFZ1t R8SGeO40tmbp3asrIZfiXjFEzntz5uPwZRfX2/9vfIElPbqglGTJiOq9NNhg5+fh QXEbxKgvTZF+lYFO+DmstmF6Fe4xY0kBSMHQlzYK1H/2sr1cQBzW2dIFfsplM1Vv gVLpIV/D3ypHH3nEIis7fnB0HreEHSwYunSoZRWI+afkZIhLhwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFGsXy7XoxQK7wsBWkVH1hmgN4BM+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83ODk1 ZWU4NS0yYTE2LTRlNTQtOWM1Yi1hOWEwNTkwODg3N2UvM2JhYWUwYzQtNjNlOC0z NjQwLWI1NzMtYTkyNzdjOTlkOThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzg5NWVlODUtMmExNi00ZTU0LTlj NWItYTlhMDU5MDg4NzdlLzc4OTVlZTg1LTJhMTYtNGU1NC05YzViLWE5YTA1OTA4 ODc3ZS5jcmwwHwYDVR0jBBgwFoAUs6GjrSqK+NRV7x3nqCV+EXmy9SowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83ODk1ZWU4NS0yYTE2LTRlNTQtOWM1Yi1hOWEw NTkwODg3N2UuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADQe40D BADQe44wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAgRCqBp2hJFvRxjbTKPilG7NURIKbbrxjipKhHIKKETmV l9lAnrq/rH+Zot6+2ekQpnmxO8A2xkGLnoQxuaQfdrugIZJPoEkkBDGTdy/QUgyP p0LuGmNM6MvJ+71JsH67pLIkNGGJy/1+BotEEolbueImDyLfCmgjC/yqNOPzg74d QRpvcpBePBfPcbIg1b/Cvn5ksvJMXN25WVqKcJHwQw4/jnxRyo2UasD+P8PKX6fc WhdjvaKTZUhp4NkCZ6d+n35mwJ0ZDormBQXtN+sCI6WtQPZHlPFzfbMvdDGx5J0y bbUDLeVVqeOHM2qlvvrP40ADMicDXdxjvCgXdGvPuQ== -----END CERTIFICATE-----Generated at Mon Apr 20 23:55:27 2026 by rpki-client