$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa File: 70876b56-c403-3345-8194-f6fcf917a625.roa (raw, json) Hash identifier: rOauvPPFZL0BvF359GsBlbFoWITb0ajB9KINe2oMCHM= Subject key identifier: 09:67:9F:29:5E:50:63:B5:FF:40:CE:D9:E9:D9:66:B0:DB:6E:1F:24 Certificate issuer: /CN=94543699-4d50-4a37-8000-038c38671a86 Certificate serial: 010D0C9F4328584D746FBC38BA735DEF71E5AF80 Authority key identifier: 03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 22115 IP address blocks: 172.111.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:bc:38:ba:73:5d:ef:71:e5:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94543699-4d50-4a37-8000-038c38671a86 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=6662ca12-131d-4d09-a488-b94baf76529c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:03:9d:b7:1f:7c:59:6b:bb:c2:d8:a0:ee:8f: e3:35:8d:6a:ea:98:e9:a9:77:9c:31:54:04:66:72: f3:6a:0d:5a:f9:51:48:49:60:5e:88:31:0e:f6:3e: 00:49:68:98:63:67:52:39:fd:82:0b:91:a1:44:a4: 50:f5:33:91:8e:76:99:dc:18:fe:ab:2b:70:d5:f3: 17:22:9d:32:84:92:18:52:60:dd:21:36:91:2e:6f: b5:1f:fb:e3:96:c6:dc:99:25:cb:91:49:46:e1:b1: 27:84:f3:8c:bd:e0:8e:f1:b0:0e:43:77:23:40:fb: 8e:18:5f:a6:6d:71:63:95:1f:cf:09:49:43:52:d6: 98:90:a7:88:60:76:36:30:eb:9d:72:9d:f6:01:40: 3a:1d:9b:9c:7f:7c:2e:e1:9c:15:0f:2a:2a:05:71: 14:ea:24:7e:8b:48:57:01:31:a8:45:62:95:b7:72: d4:46:9b:36:db:f2:97:33:e1:70:07:2a:c7:90:0d: 7e:83:3e:94:4a:87:d5:0d:c0:8e:af:da:38:01:a7: b6:f7:8b:2a:bb:96:3f:e5:ff:3f:d2:1d:fd:c9:8a: a3:bb:1c:19:4e:41:df:08:41:66:d7:88:20:ba:4f: 32:d7:4e:a3:80:af:66:4f:d7:3e:8f:7f:ac:8f:de: fd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:67:9F:29:5E:50:63:B5:FF:40:CE:D9:E9:D9:66:B0:DB:6E:1F:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl X509v3 Authority Key Identifier: keyid:03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer sbgp-ipAddrBlock: critical IPv4: 172.111.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:de:e6:1a:80:f3:7f:f7:19:59:58:f9:4c:95:c8:76:28:fe: 61:f4:07:7c:ef:bd:7e:35:38:b7:da:4d:0c:0d:07:7b:23:3d: ae:a4:4f:05:3a:c6:9d:50:07:e7:f5:48:59:ac:13:fa:d1:96: 1d:e2:73:ba:cf:f7:e8:7d:37:89:82:c6:76:8b:d8:9e:3d:0f: 71:6d:42:20:a1:74:b9:d7:02:14:9c:b6:7c:b2:6e:a5:ed:0f: 7f:c9:83:eb:e9:7e:c4:1a:72:44:ef:26:dd:e8:44:5b:17:a6: 34:3c:6d:74:ba:33:bd:d3:5d:7e:5f:42:ef:a5:44:14:7a:55: ef:26:ab:16:13:f9:fa:85:23:55:33:97:db:5f:c3:9b:09:f2: 39:f2:1c:ba:0d:f8:77:ca:d3:57:a6:90:5b:31:f6:b0:92:ce: 25:50:11:77:24:bc:af:62:9c:6d:12:22:a0:2d:59:96:f6:59: 8f:ba:c1:40:d7:bf:9a:56:d3:68:75:85:1b:90:f4:52:fe:99: 25:c0:cc:ce:ce:0f:f3:7f:50:23:91:dc:38:99:8b:7a:13:4c: 0b:71:19:f1:21:25:21:d3:46:49:b7:6b:f1:50:df:d5:a3:c6: 5f:47:3a:82:16:1b:35:c5:cb:92:95:24:95:bd:2a:e8:1b:81: 33:39:44:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b7w4unNd73Hlr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1NDM2OTktNGQ1MC00YTM3LTgwMDAtMDM4YzM4Njcx YTg2MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk NjY2MmNhMTItMTMxZC00ZDA5LWE0ODgtYjk0YmFmNzY1MjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQOdtx98WWu7wtig7o/jNY1q6pjpqXecMVQE ZnLzag1a+VFISWBeiDEO9j4ASWiYY2dSOf2CC5GhRKRQ9TORjnaZ3Bj+qytw1fMX Ip0yhJIYUmDdITaRLm+1H/vjlsbcmSXLkUlG4bEnhPOMveCO8bAOQ3cjQPuOGF+m bXFjlR/PCUlDUtaYkKeIYHY2MOudcp32AUA6HZucf3wu4ZwVDyoqBXEU6iR+i0hX ATGoRWKVt3LURps22/KXM+FwByrHkA1+gz6USofVDcCOr9o4Aae294squ5Y/5f8/ 0h39yYqjuxwZTkHfCEFm14gguk8y106jgK9mT9c+j3+sj979DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlnnyleUGO1/0DO2enZZrDbbh8kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0 MzY5OS00ZDUwLTRhMzctODAwMC0wMzhjMzg2NzFhODYvNzA4NzZiNTYtYzQwMy0z MzQ1LTgxOTQtZjZmY2Y5MTdhNjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTQ1NDM2OTktNGQ1MC00YTM3LTgw MDAtMDM4YzM4NjcxYTg2Lzk0NTQzNjk5LTRkNTAtNGEzNy04MDAwLTAzOGMzODY3 MWE4Ni5jcmwwHwYDVR0jBBgwFoAUA/mT0DrEyfWVfSGEZ/9sW9FWgeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0MzY5OS00ZDUwLTRhMzctODAwMC0wMzhj Mzg2NzFhODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXe5hqA83/3GVlY+UyVyHYo/mH0B3zvvX41OLfaTQwNB3sjPa6kTwU6 xp1QB+f1SFmsE/rRlh3ic7rP9+h9N4mCxnaL2J49D3FtQiChdLnXAhSctnyybqXt D3/Jg+vpfsQackTvJt3oRFsXpjQ8bXS6M73TXX5fQu+lRBR6Ve8mqxYT+fqFI1Uz l9tfw5sJ8jnyHLoN+HfK01emkFsx9rCSziVQEXckvK9inG0SIqAtWZb2WY+6wUDX v5pW02h1hRuQ9FL+mSXAzM7OD/N/UCOR3DiZi3oTTAtxGfEhJSHTRkm3a/FQ39Wj xl9HOoIWGzXFy5KVJJW9KugbgTM5RPo= -----END CERTIFICATE-----Generated at Sat Apr 18 00:34:14 2026 by rpki-client