$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa File: 9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa (raw, json) Hash identifier: a0LiXaDyN5WKRehyJs7m+TOLmy/7oXtdMaDfgurFtPI= Subject key identifier: 09:A9:68:FF:18:88:E5:64:57:CF:77:B1:E5:BF:E9:47:07:C5:84:25 Certificate issuer: /CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Certificate serial: 010D0C9F4328584D7CCFDA00FE6F85D2CD73B100 Authority key identifier: 4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 54579 IP address blocks: 65.255.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:da:00:fe:6f:85:d2:cd:73:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=ac952f7f-ad3a-4109-872b-adbb96060090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7c:ab:62:83:3c:db:d1:78:fe:1f:31:38:41: ff:9f:42:29:ad:b1:d9:8a:56:10:2b:e1:77:f2:cf: ba:6b:50:8f:c9:5d:0d:13:8d:fe:cf:21:c0:f9:62: bc:8d:8d:6c:d8:c3:b3:10:df:ae:b0:0d:c4:ef:4c: b0:a9:a9:14:1e:00:9c:c5:b1:89:b7:b9:32:56:9e: c9:6f:67:2f:36:39:df:b5:0f:15:0d:03:0b:fc:19: d5:49:2d:c3:5c:50:f7:00:ac:ee:da:0d:f7:f3:0c: fc:8b:55:71:63:36:b8:1b:7d:36:d8:66:6d:01:ff: 87:68:47:2d:5e:15:20:4a:c5:10:19:1d:31:2d:89: 37:bd:9b:33:44:9e:5e:dc:ad:a5:a7:1a:81:85:d8: 41:1b:82:8a:f0:f0:6c:d9:48:dc:00:15:ce:03:a4: 18:16:9a:3d:43:64:c5:ae:14:85:07:a0:19:58:94: d8:1e:d9:b1:6e:9b:10:3f:df:bf:4c:d6:73:40:14: 4f:06:a0:8a:27:14:9a:ab:c2:d1:9d:6e:6e:de:ac: 2e:a9:cf:c9:a0:47:83:ba:92:5f:9a:ad:28:5b:ac: 85:13:9f:87:f9:03:3d:c4:18:1a:02:9c:b3:68:7b: 09:9f:ca:fa:57:1b:e3:fb:31:88:99:db:fb:3e:ed: 69:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A9:68:FF:18:88:E5:64:57:CF:77:B1:E5:BF:E9:47:07:C5:84:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl X509v3 Authority Key Identifier: keyid:4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer sbgp-ipAddrBlock: critical IPv4: 65.255.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:b5:51:06:5d:f9:cf:ae:0b:16:c7:12:22:8f:e4:10:7d:3d: c9:a1:6a:3f:aa:ab:7d:d1:20:02:4b:68:29:c6:d8:56:ff:e2: 42:b4:54:7b:39:3b:08:19:9d:d3:f1:43:d2:eb:e9:45:04:57: 2f:70:be:15:8d:43:72:f4:c9:29:d7:be:a9:e3:2b:19:3e:9a: 38:a4:b8:00:03:7d:d2:0e:b8:35:bb:75:5d:90:c6:fb:17:b5: 7d:74:f7:d0:8e:79:0a:cf:68:40:10:1d:6a:d5:43:f1:3d:11: b0:bc:49:53:d5:f9:68:f5:6e:2f:cb:6b:3e:2f:10:5e:53:e6: 98:a0:fb:5b:80:67:a7:f6:6d:b3:ec:52:f2:d7:e1:90:51:fd: 78:0d:42:ab:ee:e6:e1:25:79:8a:d3:e1:3b:cb:21:d5:e8:1f: 04:b6:67:58:3a:76:ac:45:6b:ee:99:e8:5b:87:2a:37:9f:99: 66:57:9c:a3:a2:75:8d:e0:4a:0f:61:13:46:d4:ef:6d:45:32: 37:ba:44:70:d9:c1:38:a5:c3:c5:0b:e2:45:ea:83:05:f0:e9: 12:5a:75:35:f2:20:4e:cf:4e:bc:a0:cf:ef:c2:de:9a:1a:26: 3b:54:c5:fd:19:95:71:bd:5e:74:22:22:e2:a5:96:9a:f8:6a: 23:ee:cd:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z9oA/m+F0s1zsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM4NWU0MmQtMjE3MS00ZjZkLTgzN2YtM2Y3YmFjOWQ5 YTNkMB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk YWM5NTJmN2YtYWQzYS00MTA5LTg3MmItYWRiYjk2MDYwMDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXyrYoM829F4/h8xOEH/n0IprbHZilYQK+F3 8s+6a1CPyV0NE43+zyHA+WK8jY1s2MOzEN+usA3E70ywqakUHgCcxbGJt7kyVp7J b2cvNjnftQ8VDQML/BnVSS3DXFD3AKzu2g338wz8i1VxYza4G3022GZtAf+HaEct XhUgSsUQGR0xLYk3vZszRJ5e3K2lpxqBhdhBG4KK8PBs2UjcABXOA6QYFpo9Q2TF rhSFB6AZWJTYHtmxbpsQP9+/TNZzQBRPBqCKJxSaq8LRnW5u3qwuqc/JoEeDupJf mq0oW6yFE5+H+QM9xBgaApyzaHsJn8r6Vxvj+zGImdv7Pu1pVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmpaP8YiOVkV893seW/6UcHxYQlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1 ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdiYWM5ZDlhM2QvOWM4ZTE3YTAtYjYyNC0z Yjk4LTkyZTctZmJkNDBmMWY1ZWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGM4NWU0MmQtMjE3MS00ZjZkLTgz N2YtM2Y3YmFjOWQ5YTNkLzRjODVlNDJkLTIxNzEtNGY2ZC04MzdmLTNmN2JhYzlk OWEzZC5jcmwwHwYDVR0jBBgwFoAUTDFDQUt7GHUNpYNAQhF9TZUOowwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdi YWM5ZDlhM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQf+CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGm1UQZd+c+uCxbHEiKP5BB9Pcmhaj+qq33RIAJLaCnG2Fb/4kK0VHs5 OwgZndPxQ9Lr6UUEVy9wvhWNQ3L0ySnXvqnjKxk+mjikuAADfdIOuDW7dV2QxvsX tX1099COeQrPaEAQHWrVQ/E9EbC8SVPV+Wj1bi/Laz4vEF5T5pig+1uAZ6f2bbPs UvLX4ZBR/XgNQqvu5uEleYrT4TvLIdXoHwS2Z1g6dqxFa+6Z6FuHKjefmWZXnKOi dY3gSg9hE0bU721FMje6RHDZwTilw8UL4kXqgwXw6RJadTXyIE7PTrygz+/C3poa JjtUxf0ZlXG9XnQiIuKllpr4aiPuzSM= -----END CERTIFICATE-----Generated at Fri Apr 17 14:13:48 2026 by rpki-client