$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa File: d474896b-8f19-3b64-a77d-131cf6524395.roa (raw, json) Hash identifier: /Bc4lAtNHlRVbg3/hV4Ndl++XECt8xeAlalbX0YZzwY= Subject key identifier: 22:B6:78:DC:AB:21:85:24:F9:39:80:8D:59:D5:38:97:B0:29:8E:D0 Certificate issuer: /CN=7b840891-ef20-464d-970d-ffec736f7949 Certificate serial: 010D0C9F4328584D75D52758AC561C94AB375180 Authority key identifier: 54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 30500 IP address blocks: 74.123.68.0/22 maxlen: 24 198.134.28.0/22 maxlen: 24 208.77.196.0/22 maxlen: 24 208.123.208.0/24 maxlen: 24 208.123.210.0/23 maxlen: 24 208.123.212.0/22 maxlen: 24 208.123.216.0/22 maxlen: 24 2605:e680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:27:58:ac:56:1c:94:ab:37:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b840891-ef20-464d-970d-ffec736f7949 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=1723b788-83fe-4f82-9597-8fd27005d13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:89:72:ed:e3:16:7e:74:40:9a:0a:9b:38:54: 79:94:b5:5b:8d:fe:a5:c9:07:d4:27:b7:51:5f:34: f9:96:e2:cb:27:ef:c1:f8:16:85:1c:a5:90:7b:a3: 38:96:5a:4e:df:0c:9c:7e:27:85:78:fc:23:1e:e3: 42:23:79:f0:22:ad:75:85:dc:03:25:1b:4c:0a:41: 22:a7:68:98:bb:74:ee:39:78:29:9c:54:b6:4c:60: c9:4f:51:86:c7:13:d1:d8:c5:80:a2:8d:4e:e2:31: bd:d5:23:92:30:8d:24:65:3d:3d:15:f4:e9:2f:1d: ca:7d:b3:e1:e6:77:3a:f0:67:a6:91:5c:7a:75:ba: a4:58:43:c4:50:39:9b:96:53:03:d3:e1:c5:8b:18: 7c:30:57:d9:9a:3d:49:8b:9b:dc:1c:3b:f8:33:10: 2c:64:d9:0b:a6:b1:31:35:d6:2b:41:17:1e:71:ed: 4c:b2:f5:26:7f:af:a0:2c:d4:8e:46:d0:63:71:88: b2:83:43:20:0a:b9:6d:40:22:50:b9:7f:b0:16:d2: c6:48:4b:6a:aa:30:cc:78:84:43:80:30:3d:de:a5: 64:12:ba:5b:dd:8d:3f:b0:3a:38:ef:80:7a:ae:ac: ba:a1:2d:b4:e5:77:88:85:b3:d0:98:3d:31:57:f2: 13:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B6:78:DC:AB:21:85:24:F9:39:80:8D:59:D5:38:97:B0:29:8E:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl X509v3 Authority Key Identifier: keyid:54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer sbgp-ipAddrBlock: critical IPv4: 74.123.68.0/22 198.134.28.0/22 208.77.196.0/22 208.123.208.0/24 208.123.210.0-208.123.219.255 IPv6: 2605:e680::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:90:c9:18:06:85:02:26:4f:1e:b4:e3:90:4b:14:a0:c9:c9: 9a:27:9d:57:20:37:9f:04:5d:9d:c2:f4:c8:5d:ae:a6:53:13: 09:00:57:b3:67:a5:b2:a8:91:3a:fd:87:fa:3b:50:0f:2f:6f: 5f:be:d0:a4:8c:f6:a8:3e:09:c8:77:91:64:8f:64:46:e8:1f: 78:88:f4:e3:15:41:39:d0:ea:18:b7:4d:3a:4f:b4:04:c8:9f: a1:09:dd:f8:17:04:6f:59:be:16:0e:c5:87:60:3d:dc:11:37: 6d:9c:4f:40:45:96:45:ae:4d:f3:24:63:87:fd:c0:5f:13:0a: df:1b:62:37:47:53:a5:8a:2a:f0:e8:ad:e6:84:cb:d0:8c:89: 22:1d:c1:5f:fc:34:66:e2:71:fc:37:e2:8e:5d:33:a2:db:a1: 57:5e:42:21:28:17:99:8c:07:d5:f8:f2:be:22:33:44:97:50: e3:f3:74:28:b4:93:3a:a9:5b:43:55:71:5d:15:26:cc:05:bb: 84:c3:16:32:43:c7:ad:ac:51:de:e9:47:d4:c3:03:d1:5d:c2: 1c:40:8f:e1:01:44:c1:53:d4:16:ab:85:7c:d1:82:d0:3d:f5: 62:1c:30:e3:7d:22:49:e6:9d:eb:86:60:58:5c:87:eb:71:ab: af:c3:26:92 -----BEGIN CERTIFICATE----- MIIGcjCCBVqgAwIBAgIUAQ0Mn0MoWE111SdYrFYclKs3UYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I4NDA4OTEtZWYyMC00NjRkLTk3MGQtZmZlYzczNmY3 OTQ5MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk MTcyM2I3ODgtODNmZS00ZjgyLTk1OTctOGZkMjcwMDVkMTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoly7eMWfnRAmgqbOFR5lLVbjf6lyQfUJ7dR XzT5luLLJ+/B+BaFHKWQe6M4llpO3wycfieFePwjHuNCI3nwIq11hdwDJRtMCkEi p2iYu3TuOXgpnFS2TGDJT1GGxxPR2MWAoo1O4jG91SOSMI0kZT09FfTpLx3KfbPh 5nc68GemkVx6dbqkWEPEUDmbllMD0+HFixh8MFfZmj1Ji5vcHDv4MxAsZNkLprEx NdYrQRcece1MsvUmf6+gLNSORtBjcYiyg0MgCrltQCJQuX+wFtLGSEtqqjDMeIRD gDA93qVkErpb3Y0/sDo474B6rqy6oS205XeIhbPQmD0xV/ITXQIDAQABo4IDhDCC A4AwHQYDVR0OBBYEFCK2eNyrIYUk+TmAjVnVOJewKY7QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Yjg0 MDg5MS1lZjIwLTQ2NGQtOTcwZC1mZmVjNzM2Zjc5NDkvZDQ3NDg5NmItOGYxOS0z YjY0LWE3N2QtMTMxY2Y2NTI0Mzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2I4NDA4OTEtZWYyMC00NjRkLTk3 MGQtZmZlYzczNmY3OTQ5LzdiODQwODkxLWVmMjAtNDY0ZC05NzBkLWZmZWM3MzZm Nzk0OS5jcmwwHwYDVR0jBBgwFoAUVJrTOw8GTIGZDMgH+o0kE8Of9tAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83Yjg0MDg5MS1lZjIwLTQ2NGQtOTcwZC1mZmVj NzM2Zjc5NDkuY2VyME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQCSntEAwQC xoYcAwQC0E3EAwQA0HvQMAwDBAHQe9IDBALQe9gwDQQCAAIwBwMFACYF5oAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAO5DJGAaFAiZPHrTjkEsUoMnJmiedVyA3nwRdncL0yF2uplMTCQBXs2el sqiROv2H+jtQDy9vX77QpIz2qD4JyHeRZI9kRugfeIj04xVBOdDqGLdNOk+0BMif oQnd+BcEb1m+Fg7Fh2A93BE3bZxPQEWWRa5N8yRjh/3AXxMK3xtiN0dTpYoq8Oit 5oTL0IyJIh3BX/w0ZuJx/Dfijl0zotuhV15CISgXmYwH1fjyviIzRJdQ4/N0KLST OqlbQ1VxXRUmzAW7hMMWMkPHraxR3ulH1MMD0V3CHECP4QFEwVPUFquFfNGC0D31 Yhww430iSead64ZgWFyH63Grr8Mmkg== -----END CERTIFICATE-----Generated at Sat Apr 18 01:40:48 2026 by rpki-client