$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/472a87dc-5a34-3721-9aec-494ce65fdcb4.roa File: 472a87dc-5a34-3721-9aec-494ce65fdcb4.roa (raw, json) Hash identifier: HgDK7S/3rtsEUgo++bNa8hTnO0ORCc+mrWA1m06zDXg= Subject key identifier: 99:39:31:D3:D9:56:80:5D:FB:9A:A9:FB:EB:90:DB:8C:77:FD:EB:B1 Certificate issuer: /CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Certificate serial: 010D0C9F4328584D59EA63DAD5021C73DFBECF80 Authority key identifier: 56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/472a87dc-5a34-3721-9aec-494ce65fdcb4.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 395035 IP address blocks: 64.239.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:63:da:d5:02:1c:73:df:be:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=bfb500eb-350a-41bd-8930-8549d2550318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cb:39:9c:60:37:69:ac:93:99:1d:0b:36:85: e4:d3:d8:e8:69:2a:4c:a8:ba:65:ae:81:c9:26:df: 5a:d1:56:7b:1e:38:f9:28:f0:1a:98:3a:37:9c:7f: c3:ae:aa:46:cb:f5:33:58:5e:3f:3a:40:a1:6e:7f: 9b:58:89:54:27:bb:9a:4b:01:38:95:f0:92:11:51: d1:b9:c1:65:e7:29:8a:03:20:5b:29:84:08:40:5a: 5f:08:d3:b7:0f:fc:8a:5c:af:f1:72:64:42:a9:11: 11:0d:59:2e:01:6c:61:8b:0b:26:e1:ed:8b:c7:81: 84:ae:47:33:f9:6f:11:10:78:18:89:0e:1f:73:95: 40:f6:a6:42:0b:05:f3:1e:92:b6:9b:e0:e5:f8:8f: 47:af:0e:a5:f7:49:be:57:8f:d0:53:09:1a:04:39: 4c:91:d5:f8:c5:95:63:74:69:15:7c:c5:2b:ad:d1: 15:c6:68:fd:c6:71:a7:68:c9:a4:5f:df:8f:dc:b7: 2c:53:8a:20:20:69:37:ec:71:92:c0:0a:f0:a8:01: 66:27:ca:26:00:c3:17:ae:2e:83:4f:8a:36:08:3f: 45:90:a2:4b:33:de:98:30:9e:3f:91:4c:74:8a:4f: e7:79:59:fc:07:f0:1d:46:01:2b:56:ef:45:9e:b8: e0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:39:31:D3:D9:56:80:5D:FB:9A:A9:FB:EB:90:DB:8C:77:FD:EB:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/472a87dc-5a34-3721-9aec-494ce65fdcb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl X509v3 Authority Key Identifier: keyid:56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer sbgp-ipAddrBlock: critical IPv4: 64.239.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:20:a5:88:0d:05:5c:a3:95:3a:2c:32:88:a3:6f:f3:78:e7: 39:37:3b:a5:9a:7d:90:b7:49:6d:14:f8:4c:21:0d:a1:d2:73: 5f:4a:da:95:64:8a:99:19:af:57:11:c0:a2:4f:05:29:74:e1: 06:3a:e0:97:db:a9:39:99:51:8a:13:6d:d4:fa:35:21:3f:e7: 7c:86:46:97:1c:f4:96:a0:06:f5:71:4f:53:b6:92:fd:f1:c6: 63:07:a3:34:ea:da:2d:21:48:e1:a5:bc:20:7d:13:0b:88:5c: ee:70:8b:37:b3:54:cc:24:2f:73:1f:36:08:a9:0a:98:8e:21: c2:d6:d3:a9:c4:96:55:b4:fd:7f:7a:a3:5c:f2:5d:26:d5:10: 70:68:09:12:67:22:c0:af:89:af:f5:08:52:89:2d:15:80:d2: 02:85:93:59:0a:23:5e:0f:fb:d4:e7:0c:82:21:c5:9f:3a:83: 44:18:af:3e:87:e9:12:93:6e:e4:06:ab:b5:77:d8:29:c6:f9: 5a:64:f9:33:80:c4:23:99:5d:08:eb:5b:e3:7d:75:f6:6c:e4: 29:57:91:ed:f7:3e:15:2f:5b:0c:f7:79:6d:81:20:32:6c:db: a1:21:a1:06:7e:f9:f4:fe:91:47:c8:88:85:2a:99:c3:f0:1d: 67:92:7d:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6mPa1QIcc9++z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3MGQ1MmMtZDNhMS00Njg3LWE3MTItMjEyYTQ0ZWUw ZmIyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YmZiNTAwZWItMzUwYS00MWJkLTg5MzAtODU0OWQyNTUwMzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAics5nGA3aayTmR0LNoXk09joaSpMqLplroHJ Jt9a0VZ7Hjj5KPAamDo3nH/DrqpGy/UzWF4/OkChbn+bWIlUJ7uaSwE4lfCSEVHR ucFl5ymKAyBbKYQIQFpfCNO3D/yKXK/xcmRCqRERDVkuAWxhiwsm4e2Lx4GErkcz +W8REHgYiQ4fc5VA9qZCCwXzHpK2m+Dl+I9Hrw6l90m+V4/QUwkaBDlMkdX4xZVj dGkVfMUrrdEVxmj9xnGnaMmkX9+P3LcsU4ogIGk37HGSwArwqAFmJ8omAMMXri6D T4o2CD9FkKJLM96YMJ4/kUx0ik/neVn8B/AdRgErVu9FnrjgkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJk5MdPZVoBd+5qp++uQ24x3/euxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OTcw ZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJhNDRlZTBmYjIvNDcyYTg3ZGMtNWEzNC0z NzIxLTlhZWMtNDk0Y2U2NWZkY2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTk3MGQ1MmMtZDNhMS00Njg3LWE3 MTItMjEyYTQ0ZWUwZmIyLzk5NzBkNTJjLWQzYTEtNDY4Ny1hNzEyLTIxMmE0NGVl MGZiMi5jcmwwHwYDVR0jBBgwFoAUVtE8CMf2LAtCo8s6F+hr2dh34XYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OTcwZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJh NDRlZTBmYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQO8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQgpYgNBVyjlTosMoijb/N45zk3O6WafZC3SW0U+EwhDaHSc19K2pVk ipkZr1cRwKJPBSl04QY64JfbqTmZUYoTbdT6NSE/53yGRpcc9JagBvVxT1O2kv3x xmMHozTq2i0hSOGlvCB9EwuIXO5wizezVMwkL3MfNgipCpiOIcLW06nEllW0/X96 o1zyXSbVEHBoCRJnIsCvia/1CFKJLRWA0gKFk1kKI14P+9TnDIIhxZ86g0QYrz6H 6RKTbuQGq7V32CnG+Vpk+TOAxCOZXQjrW+N9dfZs5ClXke33PhUvWwz3eW2BIDJs 26EhoQZ++fT+kUfIiIUqmcPwHWeSfbQ= -----END CERTIFICATE-----Generated at Fri Apr 17 21:17:32 2026 by rpki-client