$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/00fd0ec8-504c-3dfc-a5a7-b3bc21a6c0af.roa File: 00fd0ec8-504c-3dfc-a5a7-b3bc21a6c0af.roa (raw, json) Hash identifier: PXNpi2wRPFAzJiBtwsqy1T/yHBD9B0qgRpIaCF34l1M= Subject key identifier: A4:11:9C:DA:EE:F4:40:48:E5:54:5B:73:30:C5:65:16:F7:A7:8B:5A Certificate issuer: /CN=95bf95d5-1c9b-4cea-8142-cc1a4699c7a6 Certificate serial: 010D0C9F4328584D59EA6F3C9DD471414CA4EA80 Authority key identifier: 2D:1D:DA:46:69:82:E9:F8:0F:75:BE:05:B0:1D:D6:EE:83:AC:62:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/00fd0ec8-504c-3dfc-a5a7-b3bc21a6c0af.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 14325 IP address blocks: 69.64.96.0/20 maxlen: 24 209.25.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:6f:3c:9d:d4:71:41:4c:a4:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95bf95d5-1c9b-4cea-8142-cc1a4699c7a6 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=fd1f56b7-e35f-4fce-8092-00bbfcb822e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2d:0f:21:9c:4e:8d:f7:99:72:d6:73:d4:54: af:57:82:0b:49:b5:11:1f:b7:dc:0f:91:76:bc:6e: ba:eb:df:c7:8e:e5:7c:f1:de:67:4c:35:62:a9:15: 71:33:df:ac:38:eb:f6:ec:88:5f:38:4a:58:a0:3e: 44:7e:30:07:d2:7c:c8:05:fc:ea:08:a8:a0:f2:52: 78:3a:7f:08:20:c0:c1:63:e7:6e:bf:7f:7e:db:1b: 13:8b:6a:8a:41:c3:ff:b5:c5:bb:7a:6a:2a:74:68: 7b:43:a5:54:47:e9:bf:2c:5c:ff:4c:9d:42:41:c3: 07:7c:c3:0a:a5:b9:84:9a:05:ab:4d:23:55:fd:01: 41:27:87:2d:41:6a:db:b2:44:94:f0:0b:58:bf:0a: 14:87:70:9a:13:1e:35:99:97:52:65:07:5b:d9:4d: 3d:e6:48:bc:96:97:f8:4e:a9:f3:ec:c5:c6:e1:a8: cf:f7:06:71:59:51:f3:ee:13:57:89:02:c0:09:1f: af:a1:ed:95:8e:af:1a:ba:88:49:4d:43:e8:75:98: 88:86:c5:27:6f:28:24:98:71:9f:f6:d9:1b:4b:0e: fc:81:5e:d8:59:8c:fd:c8:3b:14:31:02:b0:b1:21: ea:91:94:6b:66:21:ae:34:ba:15:ef:84:3d:ff:dc: bc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:11:9C:DA:EE:F4:40:48:E5:54:5B:73:30:C5:65:16:F7:A7:8B:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/00fd0ec8-504c-3dfc-a5a7-b3bc21a6c0af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.crl X509v3 Authority Key Identifier: keyid:2D:1D:DA:46:69:82:E9:F8:0F:75:BE:05:B0:1D:D6:EE:83:AC:62:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.cer sbgp-ipAddrBlock: critical IPv4: 69.64.96.0/20 209.25.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:c2:33:b3:ef:85:c2:00:aa:53:bf:dd:d5:0e:6b:c0:51:0a: ac:ca:17:a9:ac:2a:44:e0:7c:40:32:ca:42:6b:a9:4b:1d:b8: 4c:41:fa:04:69:de:75:a2:74:33:37:81:aa:ce:0a:4c:fd:53: 7e:dd:e6:05:d3:7f:0b:bd:e5:ee:b2:c7:68:f2:19:b7:74:0a: c7:48:d4:cf:40:ab:13:07:19:cb:ec:d5:72:a1:98:87:7b:05: e2:66:68:2d:bf:65:38:cd:fb:a8:8d:11:85:2b:59:c2:40:01: 1f:cb:76:64:78:37:a7:22:17:d4:52:4d:cd:6c:c9:19:29:73: 15:ef:63:16:e3:a9:c3:7a:7e:47:1d:9d:5b:5b:a2:4b:2c:75: 3b:e9:38:7b:ea:d2:1b:3a:49:b5:9e:06:69:84:b9:48:9a:dd: a1:b9:08:84:d5:48:48:e3:40:bb:07:1a:6c:51:30:72:6b:cd: b0:f4:6d:27:a8:fd:9c:39:c9:5a:fc:a3:90:6f:a5:4c:36:11: 0e:1e:8d:05:99:d7:ac:18:fe:0d:97:d8:95:79:02:5e:15:73: c6:10:6b:cf:8f:d5:0d:e9:a5:29:9f:b4:28:65:9e:53:9a:37: 69:56:90:92:1c:95:62:88:74:65:f8:f8:27:5c:63:89:96:69: 14:f2:ca:17 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1Z6m88ndRxQUyk6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTViZjk1ZDUtMWM5Yi00Y2VhLTgxNDItY2MxYTQ2OTlj N2E2MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZmQxZjU2YjctZTM1Zi00ZmNlLTgwOTItMDBiYmZjYjgyMmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy0PIZxOjfeZctZz1FSvV4ILSbURH7fcD5F2 vG6669/HjuV88d5nTDViqRVxM9+sOOv27IhfOEpYoD5EfjAH0nzIBfzqCKig8lJ4 On8IIMDBY+duv39+2xsTi2qKQcP/tcW7emoqdGh7Q6VUR+m/LFz/TJ1CQcMHfMMK pbmEmgWrTSNV/QFBJ4ctQWrbskSU8AtYvwoUh3CaEx41mZdSZQdb2U095ki8lpf4 Tqnz7MXG4ajP9wZxWVHz7hNXiQLACR+voe2Vjq8auohJTUPodZiIhsUnbygkmHGf 9tkbSw78gV7YWYz9yDsUMQKwsSHqkZRrZiGuNLoV74Q9/9y8LQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKQRnNru9EBI5VRbczDFZRb3p4taMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWJm OTVkNS0xYzliLTRjZWEtODE0Mi1jYzFhNDY5OWM3YTYvMDBmZDBlYzgtNTA0Yy0z ZGZjLWE1YTctYjNiYzIxYTZjMGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTViZjk1ZDUtMWM5Yi00Y2VhLTgx NDItY2MxYTQ2OTljN2E2Lzk1YmY5NWQ1LTFjOWItNGNlYS04MTQyLWNjMWE0Njk5 YzdhNi5jcmwwHwYDVR0jBBgwFoAULR3aRmmC6fgPdb4FsB3W7oOsYpAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NWJmOTVkNS0xYzliLTRjZWEtODE0Mi1jYzFh NDY5OWM3YTYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQERUBgAwQC 0RnQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIPCM7PvhcIAqlO/3dUOa8BRCqzKF6msKkTgfEAyykJrqUsd uExB+gRp3nWidDM3garOCkz9U37d5gXTfwu95e6yx2jyGbd0CsdI1M9AqxMHGcvs 1XKhmId7BeJmaC2/ZTjN+6iNEYUrWcJAAR/LdmR4N6ciF9RSTc1syRkpcxXvYxbj qcN6fkcdnVtbokssdTvpOHvq0hs6SbWeBmmEuUia3aG5CITVSEjjQLsHGmxRMHJr zbD0bSeo/Zw5yVr8o5BvpUw2EQ4ejQWZ16wY/g2X2JV5Al4Vc8YQa8+P1Q3ppSmf tChlnlOaN2lWkJIclWKIdGX4+CdcY4mWaRTyyhc= -----END CERTIFICATE-----Generated at Fri Apr 17 20:49:33 2026 by rpki-client