$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc/2555f178-71cc-3474-9ddf-9a67c03604ca.roa File: 2555f178-71cc-3474-9ddf-9a67c03604ca.roa (raw, json) Hash identifier: e7UarTfg2U2T2GNYCUZ5ZlNtwgs8+buBTnBQag+R+LA= Subject key identifier: 10:0D:91:E3:4B:B7:54:51:8F:F4:F3:E7:0E:DE:57:FD:C2:2C:85:C2 Certificate issuer: /CN=21790efa-5999-44a6-9c3e-1ce70307f8cc Certificate serial: 010D0C9F4328584D5234FE4C4FE86A5037A4B340 Authority key identifier: 32:94:FF:27:32:41:9D:3E:BE:2A:09:34:F3:26:D1:C1:AD:C0:87:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc/2555f178-71cc-3474-9ddf-9a67c03604ca.roa Signing time: Sat 28 Mar 2026 18:44:38 +0000 ROA not before: Sat 28 Mar 2026 18:44:38 +0000 ROA not after: Mon 25 May 2026 14:50:02 +0000 asID: 36658 IP address blocks: 172.87.96.0/19 maxlen: 19 172.87.96.0/21 maxlen: 21 172.87.104.0/21 maxlen: 21 172.87.112.0/21 maxlen: 21 172.87.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc/21790efa-5999-44a6-9c3e-1ce70307f8cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc/21790efa-5999-44a6-9c3e-1ce70307f8cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:fe:4c:4f:e8:6a:50:37:a4:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21790efa-5999-44a6-9c3e-1ce70307f8cc Validity Not Before: Mar 28 18:44:38 2026 GMT Not After : May 25 14:50:02 2026 GMT Subject: CN=cca3ce3d-3335-4887-ad44-e4a122e8265a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8e:08:26:f5:a0:1a:9a:4f:07:ae:61:78:ec: d3:a2:f8:c6:87:a3:5f:6b:49:eb:b3:01:45:14:fe: 08:e7:cf:93:7b:f8:67:b4:30:d7:22:1a:46:02:0a: 69:9d:dc:1a:66:ab:e3:55:4e:02:a0:6f:bf:68:bd: 2d:1b:0c:27:f6:77:8a:d9:bf:3d:87:d6:cd:70:a2: 99:7d:ac:b3:d1:c7:09:53:94:fa:48:ff:5a:92:4a: 8e:b4:8c:0e:b3:fd:e4:54:a4:ce:37:0e:0d:99:01: 74:01:01:82:96:b7:ef:3f:f0:86:96:1c:67:0c:c0: 36:36:6e:76:48:02:b1:4d:96:ad:3f:07:b9:bc:01: 64:a6:73:e6:fd:27:a0:8b:c3:90:c6:73:40:f9:ff: 7c:29:86:23:8b:38:17:9a:5e:8e:7d:7b:96:d0:57: bb:7d:f0:bc:21:3f:ed:b8:6f:c0:1a:9c:f0:3e:03: 8c:a1:7f:39:62:97:1b:96:d4:2b:75:a4:40:ba:71: bb:bf:21:d6:60:81:02:71:e2:a0:a3:76:b5:b1:47: f5:5f:fe:91:d1:97:8c:4e:32:07:44:d8:17:cc:7a: f1:27:e3:1d:67:f5:62:29:d9:c4:f0:e0:23:8f:a3: 9d:3a:e5:54:21:f3:c7:a3:cc:25:5d:9c:1f:be:c4: 0b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0D:91:E3:4B:B7:54:51:8F:F4:F3:E7:0E:DE:57:FD:C2:2C:85:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc/2555f178-71cc-3474-9ddf-9a67c03604ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc/21790efa-5999-44a6-9c3e-1ce70307f8cc.crl X509v3 Authority Key Identifier: keyid:32:94:FF:27:32:41:9D:3E:BE:2A:09:34:F3:26:D1:C1:AD:C0:87:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc.cer sbgp-ipAddrBlock: critical IPv4: 172.87.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:11:4c:63:28:1d:26:1f:5c:9f:29:39:c4:6e:10:77:18:db: ae:f3:09:8a:2c:b5:59:b4:0a:dc:99:5a:c7:0c:47:a6:9e:3e: a7:b0:51:78:a6:89:32:f2:83:36:07:a7:d7:a3:21:32:fa:db: 4d:88:4e:54:34:d9:6a:35:b6:64:15:b4:27:31:61:e1:40:17: 28:ad:48:62:9e:5c:96:67:35:8b:ec:84:7e:e4:c8:f8:da:90: 60:7b:b2:92:d5:80:b6:8b:ac:56:11:2b:5f:0d:0c:0b:30:25: 19:91:14:67:65:19:2f:6b:3b:81:39:40:a2:2d:6a:e3:01:af: 35:cd:f6:93:ad:ea:3a:b2:a5:8c:7d:49:4d:21:3a:c3:16:10: 90:aa:3d:01:7f:0c:53:c5:65:f8:bd:c5:16:46:88:6f:33:5c: 41:7f:30:ee:c9:df:a2:33:fa:f1:d9:51:d0:ad:82:60:f9:2a: fd:ed:12:99:99:a8:7b:1f:2b:67:11:7d:14:83:73:70:83:d5: 37:bc:18:fa:77:0f:bf:00:ad:79:64:e8:8f:f1:1a:be:9e:42: 27:2c:cd:d4:17:89:1e:a7:aa:55:d8:b8:1e:53:f1:46:a4:19: d3:89:c4:54:dc:1e:18:57:3b:94:02:98:2d:bf:80:5b:d6:63: f6:d6:ee:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SNP5MT+hqUDeks0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE3OTBlZmEtNTk5OS00NGE2LTljM2UtMWNlNzAzMDdm OGNjMB4XDTI2MDMyODE4NDQzOFoXDTI2MDUyNTE0NTAwMlowLzEtMCsGA1UEAxMk Y2NhM2NlM2QtMzMzNS00ODg3LWFkNDQtZTRhMTIyZTgyNjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn44IJvWgGppPB65heOzTovjGh6Nfa0nrswFF FP4I58+Te/hntDDXIhpGAgppndwaZqvjVU4CoG+/aL0tGwwn9neK2b89h9bNcKKZ fayz0ccJU5T6SP9akkqOtIwOs/3kVKTONw4NmQF0AQGClrfvP/CGlhxnDMA2Nm52 SAKxTZatPwe5vAFkpnPm/Segi8OQxnNA+f98KYYjizgXml6OfXuW0Fe7ffC8IT/t uG/AGpzwPgOMoX85YpcbltQrdaRAunG7vyHWYIECceKgo3a1sUf1X/6R0ZeMTjIH RNgXzHrxJ+MdZ/ViKdnE8OAjj6OdOuVUIfPHo8wlXZwfvsQLRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBANkeNLt1RRj/Tz5w7eV/3CLIXCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yMTc5 MGVmYS01OTk5LTQ0YTYtOWMzZS0xY2U3MDMwN2Y4Y2MvMjU1NWYxNzgtNzFjYy0z NDc0LTlkZGYtOWE2N2MwMzYwNGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMjE3OTBlZmEtNTk5OS00NGE2LTlj M2UtMWNlNzAzMDdmOGNjLzIxNzkwZWZhLTU5OTktNDRhNi05YzNlLTFjZTcwMzA3 ZjhjYy5jcmwwHwYDVR0jBBgwFoAUMpT/JzJBnT6+Kgk08ybRwa3AhxUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yMTc5MGVmYS01OTk5LTQ0YTYtOWMzZS0xY2U3 MDMwN2Y4Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrFdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsRTGMoHSYfXJ8pOcRuEHcY267zCYostVm0CtyZWscMR6aePqewUXim iTLygzYHp9ejITL6202ITlQ02Wo1tmQVtCcxYeFAFyitSGKeXJZnNYvshH7kyPja kGB7spLVgLaLrFYRK18NDAswJRmRFGdlGS9rO4E5QKItauMBrzXN9pOt6jqypYx9 SU0hOsMWEJCqPQF/DFPFZfi9xRZGiG8zXEF/MO7J36Iz+vHZUdCtgmD5Kv3tEpmZ qHsfK2cRfRSDc3CD1Te8GPp3D78ArXlk6I/xGr6eQicszdQXiR6nqlXYuB5T8Uak GdOJxFTcHhhXO5QCmC2/gFvWY/bW7p0= -----END CERTIFICATE-----Generated at Fri Apr 17 20:33:19 2026 by rpki-client