$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a69335c8-4002-37eb-a447-6cfc324cebfe.roa File: a69335c8-4002-37eb-a447-6cfc324cebfe.roa (raw, json) Hash identifier: kkIWyk6uzjGsZbUfJ4LFBvJVzEhZi2bPYjqj52e9484= Subject key identifier: 65:E6:D6:1B:7C:40:55:7A:27:32:0E:67:83:36:1B:67:81:E4:91:1E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D8133F1495630328680A40880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a69335c8-4002-37eb-a447-6cfc324cebfe.roa Signing time: Tue 14 Apr 2026 14:45:31 +0000 ROA not before: Tue 14 Apr 2026 14:45:31 +0000 ROA not after: Mon 13 Jul 2026 14:45:31 +0000 asID: 30060 IP address blocks: 216.87.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:33:f1:49:56:30:32:86:80:a4:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 14 14:45:31 2026 GMT Not After : Jul 13 14:45:31 2026 GMT Subject: CN=dd70be4a-f943-45e1-adda-5561ee77a06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ae:2b:95:c4:fd:8f:44:e6:90:4c:c9:81:b1: 2c:c9:ff:a4:9f:0c:cd:45:cb:68:68:de:f9:2d:e7: 72:7b:6a:c6:64:d8:5f:f1:89:2d:29:56:ee:83:f7: 87:de:49:10:6d:0e:43:b6:c3:b3:f3:90:c6:ed:7f: 9a:d9:e4:18:7d:3b:99:3b:3c:50:ac:15:69:a1:11: 6f:86:3e:fc:c3:b8:b8:6b:0b:6e:a6:ae:18:90:26: e2:a4:8b:d7:a0:4c:e0:3a:97:7f:c3:60:8c:ff:1d: 35:74:8f:6f:15:0a:ab:73:3f:23:01:65:88:de:c3: b1:d4:1c:04:a1:1e:dd:e3:26:a1:60:2c:2b:21:8b: 23:26:8f:3c:ca:92:76:7d:43:61:20:3c:85:62:de: ef:dd:ca:ab:e5:5f:fb:fb:58:5d:6c:b4:46:85:70: 2f:11:4c:d4:ee:f8:37:56:5f:42:89:8c:b8:72:9d: 3d:d2:48:8d:8d:b9:56:b6:c2:7d:68:7e:a0:9b:79: 07:f1:97:46:35:47:b9:bc:e4:e4:5d:e3:70:21:43: 86:fc:10:39:d4:47:c0:4a:96:d6:a8:70:92:19:4b: c9:3b:93:17:d7:2f:73:bf:60:52:9d:e1:e8:09:48: 9c:5c:7f:9a:3b:23:9f:f4:c1:e5:4d:6b:59:8e:9f: b4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E6:D6:1B:7C:40:55:7A:27:32:0E:67:83:36:1B:67:81:E4:91:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a69335c8-4002-37eb-a447-6cfc324cebfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d0:0f:c2:fa:4e:9b:28:18:96:8b:b2:69:11:ce:86:78:ff: 89:56:62:96:98:d9:cc:88:1e:6d:00:42:15:ba:3e:80:ab:86: 7e:73:53:51:85:48:08:72:b2:7e:82:85:0d:73:f8:e9:d9:7e: 84:28:75:a1:c2:b1:b0:27:f4:91:f3:cb:0f:b8:43:43:e6:31: f5:06:f9:ca:6a:b5:20:3d:a5:3d:fc:ca:44:a9:60:2a:98:74: ba:aa:cd:7a:9b:c2:bc:73:75:96:aa:74:8e:ad:bd:8e:72:2b: 62:44:52:de:8a:f9:8b:54:c8:24:e6:07:7e:c7:a0:a0:3a:48: 08:e8:57:bc:71:82:19:e7:93:24:0e:b2:d4:ea:00:41:6c:4e: 64:51:e3:bf:79:18:e6:04:c4:8d:92:21:9b:d9:4d:06:62:4b: 9e:00:49:0d:67:65:6d:d0:73:d0:a4:89:63:e1:5b:52:74:9f: e4:e4:56:29:70:03:a9:32:eb:b1:2a:85:e0:67:0e:11:5b:5b: 27:0e:9e:50:55:b7:0b:75:ef:e0:9f:9b:d1:4b:33:f8:55:33: 3f:d7:27:bc:21:0e:94:c5:d8:0f:9d:eb:51:2e:53:b5:34:6b: 82:ca:79:03:30:97:7d:8a:2e:51:d2:ef:ea:e4:2d:c3:20:14: 7c:b1:ce:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2BM/FJVjAyhoCkCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxNDE0NDUzMVoXDTI2MDcxMzE0NDUzMVowLzEtMCsGA1UEAxMk ZGQ3MGJlNGEtZjk0My00NWUxLWFkZGEtNTU2MWVlNzdhMDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr64rlcT9j0TmkEzJgbEsyf+knwzNRctoaN75 Ledye2rGZNhf8YktKVbug/eH3kkQbQ5DtsOz85DG7X+a2eQYfTuZOzxQrBVpoRFv hj78w7i4awtupq4YkCbipIvXoEzgOpd/w2CM/x01dI9vFQqrcz8jAWWI3sOx1BwE oR7d4yahYCwrIYsjJo88ypJ2fUNhIDyFYt7v3cqr5V/7+1hdbLRGhXAvEUzU7vg3 Vl9CiYy4cp090kiNjblWtsJ9aH6gm3kH8ZdGNUe5vOTkXeNwIUOG/BA51EfASpbW qHCSGUvJO5MX1y9zv2BSneHoCUicXH+aOyOf9MHlTWtZjp+0ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXm1ht8QFV6JzIOZ4M2G2eB5JEeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTY5MzM1YzgtNDAwMi0z N2ViLWE0NDctNmNmYzMyNGNlYmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7QD8L6TpsoGJaLsmkRzoZ4/4lWYpaY2cyIHm0AQhW6PoCrhn5zU1GF SAhysn6ChQ1z+OnZfoQodaHCsbAn9JHzyw+4Q0PmMfUG+cpqtSA9pT38ykSpYCqY dLqqzXqbwrxzdZaqdI6tvY5yK2JEUt6K+YtUyCTmB37HoKA6SAjoV7xxghnnkyQO stTqAEFsTmRR4795GOYExI2SIZvZTQZiS54ASQ1nZW3Qc9CkiWPhW1J0n+TkVilw A6ky67EqheBnDhFbWycOnlBVtwt17+Cfm9FLM/hVMz/XJ7whDpTF2A+d61EuU7U0 a4LKeQMwl32KLlHS7+rkLcMgFHyxzmA= -----END CERTIFICATE-----Generated at Fri Apr 17 03:07:01 2026 by rpki-client