$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1f44119d-afb2-31eb-8419-9ede30a7fbe8.roa File: 1f44119d-afb2-31eb-8419-9ede30a7fbe8.roa (raw, json) Hash identifier: MGldpVrxE/Ba1ZTnQm+fo46pZJNHgpQ2rJJvT894EAs= Subject key identifier: 16:90:F7:17:DA:CE:91:F1:B7:D1:C2:75:A2:1A:E1:3C:6E:3E:D5:E3 Certificate issuer: /CN=1246a6a7-1908-49e7-9777-16290e028fb7 Certificate serial: 010D0C9F4328584D4D5A726168F1142BF5ACD400 Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1f44119d-afb2-31eb-8419-9ede30a7fbe8.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 13638 IP address blocks: 64.186.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:72:61:68:f1:14:2b:f5:ac:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=7a52e53c-a5fd-4a4d-ad6d-67294f0a8fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:02:84:7d:1d:b0:6a:d5:6b:79:55:10:bc:56: 3b:c2:10:1d:24:13:28:78:db:65:4e:55:4f:fb:57: ee:9f:3a:81:8f:22:ae:a2:bc:a6:7e:01:16:c4:dd: 20:4c:48:a9:3f:85:ef:e0:b2:d3:06:d8:27:04:1e: ab:82:ba:13:25:a9:f1:90:58:e4:ac:da:c0:b3:45: db:25:d6:65:36:ce:4b:cf:59:b9:e3:f3:c2:e0:d3: 76:b6:91:4f:76:6d:11:d9:9b:48:41:8a:96:9d:5d: c0:16:c2:00:5a:97:26:29:a9:0e:c2:cb:5a:06:f2: 33:9a:f6:18:c1:e4:a3:45:b5:ab:2c:66:1d:06:09: 39:b4:ec:b1:d0:ae:e5:4c:0b:eb:d4:73:e3:33:e0: 25:23:4d:3a:e0:53:d4:b1:22:e9:93:3d:d8:9c:d8: c7:3b:c2:6e:cb:12:92:90:ae:4a:f7:e9:87:0c:e0: c1:4d:f6:96:e6:11:e3:3f:96:2e:45:f1:07:bc:ee: cd:84:e6:1f:e5:e3:a5:88:73:c2:ed:93:69:57:af: 5c:1b:9d:d9:96:53:63:cc:ad:a0:5e:74:d1:22:ff: 46:90:89:8c:8c:86:df:7b:9f:9c:67:5a:09:93:51: ae:f2:3a:7e:12:bf:4f:8e:5a:72:27:1e:0d:a2:6e: 91:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:90:F7:17:DA:CE:91:F1:B7:D1:C2:75:A2:1A:E1:3C:6E:3E:D5:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1f44119d-afb2-31eb-8419-9ede30a7fbe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl X509v3 Authority Key Identifier: keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer sbgp-ipAddrBlock: critical IPv4: 64.186.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:78:9c:f6:e9:f4:a7:20:58:ae:6d:16:c9:c0:28:b2:31:5a: a9:23:4f:35:be:81:fb:81:1a:71:ca:2e:77:5b:37:53:02:53: cd:5d:dc:03:c1:3c:2d:75:b7:cc:45:91:a8:e8:62:d8:42:e0: 9f:71:bd:3e:16:cd:24:7a:1f:7d:ce:d4:6d:5a:5b:af:47:5e: 53:a5:d9:d7:a1:5f:c1:cf:05:1a:6d:36:da:2b:8e:76:16:95: 22:f3:d9:79:5d:4b:90:7b:5c:c5:6f:81:e4:54:eb:72:fe:3e: bb:70:6a:bd:39:fe:22:e4:0f:42:2e:21:dc:56:b4:29:f8:f6: 90:11:50:05:77:89:48:98:b4:ab:4e:d1:a6:95:5e:d1:2c:98: da:d5:86:64:41:bd:3f:0d:e8:f0:07:26:fb:72:f8:9c:c3:39: a0:63:a4:4d:57:1d:d3:21:08:df:20:55:51:e7:95:55:e1:66: 8c:d3:e9:5e:16:45:36:89:54:2e:28:fb:ed:58:ac:58:76:9d: 8c:59:b8:2f:72:c8:d1:ad:de:de:b7:19:3b:a3:68:ba:4f:4e: 71:36:1d:d2:bd:e5:73:12:a5:27:9f:e5:42:96:e1:bc:bf:b9: f8:8f:6d:a7:fc:fe:8e:bc:bd:31:9e:a5:8f:c3:d6:56:02:3a: bd:25:a3:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWnJhaPEUK/Ws1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0NmE2YTctMTkwOC00OWU3LTk3NzctMTYyOTBlMDI4 ZmI3MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk N2E1MmU1M2MtYTVmZC00YTRkLWFkNmQtNjcyOTRmMGE4ZmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgKEfR2watVreVUQvFY7whAdJBMoeNtlTlVP +1funzqBjyKuorymfgEWxN0gTEipP4Xv4LLTBtgnBB6rgroTJanxkFjkrNrAs0Xb JdZlNs5Lz1m54/PC4NN2tpFPdm0R2ZtIQYqWnV3AFsIAWpcmKakOwstaBvIzmvYY weSjRbWrLGYdBgk5tOyx0K7lTAvr1HPjM+AlI0064FPUsSLpkz3YnNjHO8JuyxKS kK5K9+mHDODBTfaW5hHjP5YuRfEHvO7NhOYf5eOliHPC7ZNpV69cG53ZllNjzK2g XnTRIv9GkImMjIbfe5+cZ1oJk1Gu8jp+Er9PjlpyJx4Nom6R/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaQ9xfazpHxt9HCdaIa4TxuPtXjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2 YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5MGUwMjhmYjcvMWY0NDExOWQtYWZiMi0z MWViLTg0MTktOWVkZTMwYTdmYmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI0NmE2YTctMTkwOC00OWU3LTk3 NzctMTYyOTBlMDI4ZmI3LzEyNDZhNmE3LTE5MDgtNDllNy05Nzc3LTE2MjkwZTAy OGZiNy5jcmwwHwYDVR0jBBgwFoAUiHR7NSkK+xF7li5+uh5bOX3olmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5 MGUwMjhmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQLpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABV4nPbp9KcgWK5tFsnAKLIxWqkjTzW+gfuBGnHKLndbN1MCU81d3APB PC11t8xFkajoYthC4J9xvT4WzSR6H33O1G1aW69HXlOl2dehX8HPBRptNtorjnYW lSLz2XldS5B7XMVvgeRU63L+Prtwar05/iLkD0IuIdxWtCn49pARUAV3iUiYtKtO 0aaVXtEsmNrVhmRBvT8N6PAHJvty+JzDOaBjpE1XHdMhCN8gVVHnlVXhZozT6V4W RTaJVC4o++1YrFh2nYxZuC9yyNGt3t63GTujaLpPTnE2HdK95XMSpSef5UKW4by/ ufiPbaf8/o68vTGepY/D1lYCOr0lo+w= -----END CERTIFICATE-----Generated at Fri Apr 17 15:20:49 2026 by rpki-client