$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/a3b93d87-5667-328e-a14c-5284dd2687a0.roa File: a3b93d87-5667-328e-a14c-5284dd2687a0.roa (raw, json) Hash identifier: YZHTdAvy2iRAZXzzi9HRMgIo+wECP6awG0yWp5yrOy8= Subject key identifier: 9D:83:4B:FF:EE:9B:31:3C:42:92:5E:7A:A4:9D:09:BA:92:82:35:63 Certificate issuer: /CN=4c2a49a3-f083-4bc1-b402-c5d2d237b177 Certificate serial: 010D0C9F4328584DFA7077E38EE21DF20DE622A0 Authority key identifier: EB:54:33:39:59:31:88:1C:FD:96:35:A9:82:F7:FF:F4:31:CB:C9:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/a3b93d87-5667-328e-a14c-5284dd2687a0.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 21922 IP address blocks: 204.197.128.0/20 maxlen: 24 216.37.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:77:e3:8e:e2:1d:f2:0d:e6:22:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c2a49a3-f083-4bc1-b402-c5d2d237b177 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=4facab39-bd43-4fe5-af6d-4f477cc61084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:53:b4:cb:ba:c2:a3:fb:5f:fd:48:74:c6:2c: 1a:4c:af:4f:72:4a:3c:74:85:a8:83:27:1c:73:d8: 98:43:cb:f8:63:48:c9:4d:d7:85:74:f0:2b:1d:e3: 7a:e6:3b:6e:d9:ca:2c:b6:e8:02:a3:71:c3:d0:f1: bf:b0:9f:db:82:fe:51:e9:d5:90:fd:e8:58:20:a9: f2:5b:d4:40:d7:18:c3:b3:8d:12:72:d1:b7:01:1a: cd:a5:ec:95:88:fa:a5:6c:25:62:1c:61:4a:44:3a: 58:5f:2c:c4:0e:12:42:b4:5c:f1:5a:fb:03:96:0a: 68:d0:c6:85:5e:8a:6d:ea:8a:78:ff:ae:07:aa:12: 36:96:f3:5b:b2:b7:02:ef:35:e8:67:3a:fd:85:7e: 09:17:16:07:9a:97:d0:67:9e:a5:bd:f7:be:59:b5: a8:dd:de:40:94:a6:01:67:61:27:82:2d:f7:c6:97: 46:b5:74:a5:26:12:9c:9d:89:91:1c:c9:b1:90:2f: c6:c3:41:6b:a0:c2:40:3a:4c:81:9c:f5:ac:46:00: f3:d0:cc:28:06:69:e3:d6:3f:9a:ea:42:cc:99:34: da:ee:99:09:77:67:ca:d3:a1:9d:b9:d0:7b:81:7a: 85:d7:2b:06:3c:5a:46:7f:ff:02:21:4f:7c:19:2d: 34:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:83:4B:FF:EE:9B:31:3C:42:92:5E:7A:A4:9D:09:BA:92:82:35:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/a3b93d87-5667-328e-a14c-5284dd2687a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.crl X509v3 Authority Key Identifier: keyid:EB:54:33:39:59:31:88:1C:FD:96:35:A9:82:F7:FF:F4:31:CB:C9:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer sbgp-ipAddrBlock: critical IPv4: 204.197.128.0/20 216.37.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:3a:10:c8:d3:2e:5e:1d:f0:f5:e2:15:59:af:11:a0:37:4b: 82:cd:74:69:25:54:59:63:22:47:3f:b1:e3:94:98:56:2b:1c: f5:48:bb:93:9a:b9:0f:7e:1c:2f:dc:ef:27:1a:61:65:6f:7c: 3d:5d:13:b9:8a:3b:db:82:df:3c:be:9e:c4:cc:0c:71:44:21: 39:96:46:e8:b4:63:e7:07:31:6c:7f:19:5e:b6:d7:24:7c:94: 18:3c:7c:42:48:19:8f:9e:1a:76:6c:7f:d8:e0:03:d3:aa:30: b2:09:5d:d7:fd:2a:8e:09:4e:fe:fa:63:65:e3:65:f9:25:d6: 30:3c:d0:16:45:de:73:05:4b:7a:f6:4c:8b:22:dc:90:d4:6a: 22:d9:70:ee:ae:b6:10:80:76:e3:0b:48:d6:b9:a5:24:31:21: 07:e4:3f:08:59:83:7b:ea:98:42:3c:79:35:00:6c:6e:1b:ce: 94:4a:92:19:9b:fc:95:1b:e0:77:f9:ee:ae:6e:80:8c:29:d1: 68:38:1e:97:09:f7:50:62:05:7d:89:0d:cd:44:78:92:05:b4: 33:63:63:50:33:22:ad:c4:62:c5:b8:a1:56:75:26:c8:d0:84: b3:51:91:cc:22:b5:f9:5a:24:99:92:99:4e:d9:4c:45:67:ef: ec:3b:ef:4f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE36cHfjjuId8g3mIqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMyYTQ5YTMtZjA4My00YmMxLWI0MDItYzVkMmQyMzdi MTc3MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk NGZhY2FiMzktYmQ0My00ZmU1LWFmNmQtNGY0NzdjYzYxMDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFO0y7rCo/tf/Uh0xiwaTK9Pcko8dIWogycc c9iYQ8v4Y0jJTdeFdPArHeN65jtu2costugCo3HD0PG/sJ/bgv5R6dWQ/ehYIKny W9RA1xjDs40SctG3ARrNpeyViPqlbCViHGFKRDpYXyzEDhJCtFzxWvsDlgpo0MaF Xopt6op4/64HqhI2lvNbsrcC7zXoZzr9hX4JFxYHmpfQZ56lvfe+WbWo3d5AlKYB Z2Engi33xpdGtXSlJhKcnYmRHMmxkC/Gw0FroMJAOkyBnPWsRgDz0MwoBmnj1j+a 6kLMmTTa7pkJd2fK06GdudB7gXqF1ysGPFpGf/8CIU98GS00lwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJ2DS//umzE8QpJeeqSdCbqSgjVjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YzJh NDlhMy1mMDgzLTRiYzEtYjQwMi1jNWQyZDIzN2IxNzcvYTNiOTNkODctNTY2Ny0z MjhlLWExNGMtNTI4NGRkMjY4N2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGMyYTQ5YTMtZjA4My00YmMxLWI0 MDItYzVkMmQyMzdiMTc3LzRjMmE0OWEzLWYwODMtNGJjMS1iNDAyLWM1ZDJkMjM3 YjE3Ny5jcmwwHwYDVR0jBBgwFoAU61QzOVkxiBz9ljWpgvf/9DHLyeowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YzJhNDlhMy1mMDgzLTRiYzEtYjQwMi1jNWQy ZDIzN2IxNzcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEzMWAAwQF 2CVAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIs6EMjTLl4d8PXiFVmvEaA3S4LNdGklVFljIkc/seOUmFYr HPVIu5OauQ9+HC/c7ycaYWVvfD1dE7mKO9uC3zy+nsTMDHFEITmWRui0Y+cHMWx/ GV621yR8lBg8fEJIGY+eGnZsf9jgA9OqMLIJXdf9Ko4JTv76Y2XjZfkl1jA80BZF 3nMFS3r2TIsi3JDUaiLZcO6uthCAduMLSNa5pSQxIQfkPwhZg3vqmEI8eTUAbG4b zpRKkhmb/JUb4Hf57q5ugIwp0Wg4HpcJ91BiBX2JDc1EeJIFtDNjY1AzIq3EYsW4 oVZ1JsjQhLNRkcwitflaJJmSmU7ZTEVn7+w7708= -----END CERTIFICATE-----Generated at Sun Jun 14 00:08:39 2026 by rpki-client