$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/ecea8042-8c35-3aa4-93e0-27fbaee02b35.roa File: ecea8042-8c35-3aa4-93e0-27fbaee02b35.roa (raw, json) Hash identifier: 4xTuen4mho0aCf6TAqnGUFBpPXfrHc4GP6qd/bVdqgw= Subject key identifier: A2:50:ED:F2:4B:2E:F3:0E:5C:28:DA:7B:D2:35:86:94:78:B3:32:24 Certificate issuer: /CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc Certificate serial: 010D0C9F4328584D7F9AA1BBB37595E60B641280 Authority key identifier: 00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/ecea8042-8c35-3aa4-93e0-27fbaee02b35.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 38481 IP address blocks: 170.148.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:a1:bb:b3:75:95:e6:0b:64:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=5278b7e8-d6cd-42db-9c95-b2c07b1d25da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a7:7d:56:69:8c:32:34:ea:23:4d:dc:bd:97: 94:94:0f:c1:e7:fb:3f:34:2c:d1:b5:79:9c:33:81: 50:6b:5d:17:a3:22:cf:28:8f:53:29:58:90:d1:c6: 3c:25:b2:48:1d:fb:f3:d0:75:60:4a:97:5d:7f:28: c8:ae:26:60:62:a4:ed:97:1a:20:7f:7d:6f:ba:d9: e0:54:3b:c3:01:7d:e0:80:0e:dc:d3:9a:d3:10:15: 9a:ad:65:b4:cd:89:e8:52:a9:eb:7e:6c:cd:a1:6f: 2d:0a:63:b9:bc:7b:d6:de:4a:31:9e:7f:ce:6a:ff: a6:ee:26:0b:9b:b8:80:b2:43:02:3e:11:8d:e1:50: 63:64:af:e8:1b:2e:55:a4:73:10:be:79:44:1f:45: b6:69:da:32:0d:95:4d:f4:8f:da:d7:60:40:37:ee: 8b:b8:2a:ef:ee:a4:04:78:32:5f:ee:b1:fc:9e:e6: 7f:66:76:fc:8d:4d:f1:1c:8d:00:cc:ef:5d:c7:2f: 87:f0:26:25:46:02:b5:6c:2e:90:31:54:00:9e:b1: d5:85:94:98:e5:fa:50:c7:ea:5a:c5:b7:d6:63:13: 86:03:1a:6d:37:92:e5:6f:a2:8e:6c:d7:19:d1:40: 55:34:b5:90:42:bc:76:74:90:17:78:06:a5:92:d0: 48:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:50:ED:F2:4B:2E:F3:0E:5C:28:DA:7B:D2:35:86:94:78:B3:32:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/ecea8042-8c35-3aa4-93e0-27fbaee02b35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl X509v3 Authority Key Identifier: keyid:00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer sbgp-ipAddrBlock: critical IPv4: 170.148.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:60:fa:09:1b:70:3d:27:ad:88:46:73:b0:42:03:90:ae:72: 0e:b4:a5:cc:c5:8e:22:9a:7f:bd:19:b0:d0:36:04:25:69:7e: f9:7f:e3:21:65:e9:67:4f:9c:5d:d5:2e:54:1c:3c:24:71:b2: 92:ab:3f:80:82:e2:68:0b:8b:1b:b9:9f:5f:9b:c8:c6:67:97: 21:b7:7a:be:76:fe:86:e0:68:62:51:f5:e9:fb:ba:11:cd:16: fa:80:9f:5e:f3:46:52:c5:cc:05:81:c7:00:77:59:a7:9b:44: f2:cb:21:d2:30:5f:7c:da:63:69:7f:f9:cc:0e:71:1f:5c:10: e2:96:35:9c:d3:21:70:bd:fe:78:59:5d:24:56:7c:f8:60:01: f6:e6:0b:19:9f:2d:2b:f3:e6:9e:2e:c8:d8:d0:00:01:33:a4: 24:d2:b4:2e:bb:8d:ac:55:5e:ad:79:78:94:79:e2:c0:16:e2: 9e:9b:41:8e:bb:6d:fd:e5:b9:6e:e0:38:aa:0f:a2:84:3c:f2: 86:fe:63:e6:36:8d:20:12:4e:11:90:29:20:7e:33:2d:2a:fd: 1b:35:4d:72:d2:51:8a:c2:05:9d:c3:df:65:87:d1:c1:50:9f: d4:ba:bd:d7:53:35:6e:a0:4c:03:93:fd:c8:20:aa:f4:5c:3d: ad:8b:86:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mqG7s3WV5gtkEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIzZmQzZGEtOTZiMy00ZDY5LTg3ZDgtZWI3YzBhY2I4 N2ZjMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk NTI3OGI3ZTgtZDZjZC00MmRiLTljOTUtYjJjMDdiMWQyNWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjad9VmmMMjTqI03cvZeUlA/B5/s/NCzRtXmc M4FQa10XoyLPKI9TKViQ0cY8JbJIHfvz0HVgSpddfyjIriZgYqTtlxogf31vutng VDvDAX3ggA7c05rTEBWarWW0zYnoUqnrfmzNoW8tCmO5vHvW3koxnn/Oav+m7iYL m7iAskMCPhGN4VBjZK/oGy5VpHMQvnlEH0W2adoyDZVN9I/a12BAN+6LuCrv7qQE eDJf7rH8nuZ/Znb8jU3xHI0AzO9dxy+H8CYlRgK1bC6QMVQAnrHVhZSY5fpQx+pa xbfWYxOGAxptN5Llb6KObNcZ0UBVNLWQQrx2dJAXeAalktBIjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJQ7fJLLvMOXCjae9I1hpR4szIkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNm ZDNkYS05NmIzLTRkNjktODdkOC1lYjdjMGFjYjg3ZmMvZWNlYTgwNDItOGMzNS0z YWE0LTkzZTAtMjdmYmFlZTAyYjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOGIzZmQzZGEtOTZiMy00ZDY5LTg3 ZDgtZWI3YzBhY2I4N2ZjLzhiM2ZkM2RhLTk2YjMtNGQ2OS04N2Q4LWViN2MwYWNi ODdmYy5jcmwwHwYDVR0jBBgwFoAUAG53sGq0d/lKmc3OaVOxNPpvuK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNmZDNkYS05NmIzLTRkNjktODdkOC1lYjdj MGFjYjg3ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqpToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJg+gkbcD0nrYhGc7BCA5Cucg60pczFjiKaf70ZsNA2BCVpfvl/4yFl 6WdPnF3VLlQcPCRxspKrP4CC4mgLixu5n1+byMZnlyG3er52/obgaGJR9en7uhHN FvqAn17zRlLFzAWBxwB3WaebRPLLIdIwX3zaY2l/+cwOcR9cEOKWNZzTIXC9/nhZ XSRWfPhgAfbmCxmfLSvz5p4uyNjQAAEzpCTStC67jaxVXq15eJR54sAW4p6bQY67 bf3luW7gOKoPooQ88ob+Y+Y2jSASThGQKSB+My0q/Rs1TXLSUYrCBZ3D32WH0cFQ n9S6vddTNW6gTAOT/cggqvRcPa2Lhg0= -----END CERTIFICATE-----Generated at Tue Apr 14 15:51:12 2026 by rpki-client