$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/952be825-45a2-31b9-be3f-703b38227bd4.roa File: 952be825-45a2-31b9-be3f-703b38227bd4.roa (raw, json) Hash identifier: 7yyCutXKJg2KYhsHl2BD5RmaBfFX8dOYcHyhVqyzJAw= Subject key identifier: A7:63:D2:C4:36:2E:56:57:DB:A5:04:A1:2F:30:59:62:46:29:C6:7A Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584E0A6FF76E3B04C0F02D26B8A0 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/952be825-45a2-31b9-be3f-703b38227bd4.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 398420 IP address blocks: 74.126.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:6f:f7:6e:3b:04:c0:f0:2d:26:b8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=7a90952c-f977-4df6-a9e7-cceed3f6870b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c9:cf:94:f0:11:18:58:9b:12:90:e1:1b:46: f9:eb:ee:d7:fd:59:04:bf:f6:51:80:73:cc:44:b3: 1c:43:31:e9:dc:06:9c:99:c7:f1:ec:fe:0e:04:c3: 17:4e:b6:cf:aa:f2:0c:a3:04:2d:b5:c6:1d:e3:cb: 0d:4b:d4:0c:6e:25:1e:b0:39:06:ec:d9:ca:f3:82: 0f:74:73:85:88:2a:b2:a1:83:43:28:8b:d2:36:31: 4c:53:56:79:9e:9d:0d:d6:0e:60:ed:96:63:22:ca: 29:2d:c1:d9:36:d7:84:62:62:62:e7:c5:bc:4c:9a: 04:52:36:b0:30:bb:b1:23:ae:97:02:81:b5:6d:5f: 7f:7a:b0:3a:b1:66:9a:0c:94:a5:44:09:ff:12:ec: e4:7a:0d:93:a2:fd:41:40:77:80:05:61:b3:d1:93: 55:70:a4:f3:45:1a:75:40:52:b6:9d:94:34:80:bd: 34:9c:4b:b6:88:e0:8e:c2:89:c3:35:ad:7c:cf:3b: a1:41:a6:a9:a1:c2:d2:29:27:22:e4:70:5d:fc:f6: 14:c2:4b:2a:d3:dc:f8:81:03:9a:02:43:8b:30:77: 55:01:7c:b6:3f:8b:ff:98:7b:ec:f4:f4:0d:85:4a: 23:dd:93:23:21:96:f4:bb:ad:3a:d3:dc:71:d3:85: 51:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:63:D2:C4:36:2E:56:57:DB:A5:04:A1:2F:30:59:62:46:29:C6:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/952be825-45a2-31b9-be3f-703b38227bd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.126.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:4c:b1:15:b3:36:c1:8c:2e:8c:f2:6d:0a:fb:cb:51:7c:98: 72:bf:d8:72:9b:59:1d:28:68:e1:a7:cd:e2:05:b8:f0:9e:31: 80:0e:2b:66:d6:2e:36:d2:4e:91:c8:9d:8f:6c:d6:fd:5c:64: 5c:3a:c3:ab:b7:d1:42:4f:ea:8e:77:0c:f7:da:a9:b9:8e:6a: e6:28:ed:43:8b:c9:6c:0d:ca:5e:55:de:67:01:e9:21:c4:9d: b2:07:c4:89:b4:4c:c5:95:e5:04:ad:8a:b3:26:f3:26:23:3f: b8:1a:d4:65:ac:8c:71:2e:fe:96:fb:52:72:1e:46:95:85:93: bd:6d:fc:de:ac:d9:0e:85:5c:1c:4f:10:f5:81:44:b3:d3:d9: d3:89:56:0f:41:81:7c:4d:ca:33:93:78:45:86:66:54:fe:53: 97:50:c9:a0:bf:75:08:b1:5a:dc:f9:16:43:ea:7f:39:bb:76: 7c:52:81:9d:f1:ad:c9:a2:b2:17:77:12:49:c7:09:ba:81:c9: 38:79:00:cf:2d:ef:8e:eb:59:f8:31:d2:0c:b5:68:8b:61:2f: a4:2a:be:12:23:b7:a4:ae:00:12:46:63:72:63:56:10:62:cb: 9b:71:bf:1d:cd:7a:aa:31:8f:52:01:31:9b:5c:23:4e:12:1e: 6a:df:ac:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Kb/duOwTA8C0muKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk N2E5MDk1MmMtZjk3Ny00ZGY2LWE5ZTctY2NlZWQzZjY4NzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMnPlPARGFibEpDhG0b56+7X/VkEv/ZRgHPM RLMcQzHp3Aacmcfx7P4OBMMXTrbPqvIMowQttcYd48sNS9QMbiUesDkG7NnK84IP dHOFiCqyoYNDKIvSNjFMU1Z5np0N1g5g7ZZjIsopLcHZNteEYmJi58W8TJoEUjaw MLuxI66XAoG1bV9/erA6sWaaDJSlRAn/Euzkeg2Tov1BQHeABWGz0ZNVcKTzRRp1 QFK2nZQ0gL00nEu2iOCOwonDNa18zzuhQaapocLSKSci5HBd/PYUwksq09z4gQOa AkOLMHdVAXy2P4v/mHvs9PQNhUoj3ZMjIZb0u60609xx04VRUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdj0sQ2LlZX26UEoS8wWWJGKcZ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvOTUyYmU4MjUtNDVhMi0z MWI5LWJlM2YtNzAzYjM4MjI3YmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESn6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1MsRWzNsGMLozybQr7y1F8mHK/2HKbWR0oaOGnzeIFuPCeMYAOK2bW LjbSTpHInY9s1v1cZFw6w6u30UJP6o53DPfaqbmOauYo7UOLyWwNyl5V3mcB6SHE nbIHxIm0TMWV5QStirMm8yYjP7ga1GWsjHEu/pb7UnIeRpWFk71t/N6s2Q6FXBxP EPWBRLPT2dOJVg9BgXxNyjOTeEWGZlT+U5dQyaC/dQixWtz5FkPqfzm7dnxSgZ3x rcmishd3EknHCbqByTh5AM8t747rWfgx0gy1aIthL6QqvhIjt6SuABJGY3JjVhBi y5txvx3Neqoxj1IBMZtcI04SHmrfrEA= -----END CERTIFICATE-----Generated at Sun Jun 14 00:05:57 2026 by rpki-client