$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/42ad508a-1d9b-3416-b900-7d41869eb2b5.roa File: 42ad508a-1d9b-3416-b900-7d41869eb2b5.roa (raw, json) Hash identifier: BH/W/lII/0BUx+Ro1/mmchMCR1zUV1x40+NGy5QFmsw= Subject key identifier: CE:19:D6:8D:32:91:7F:2E:2B:BE:5D:71:C5:51:8D:8E:9A:11:28:D6 Certificate issuer: /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Certificate serial: 010D0C9F4328584E0A6FF9DE336D6F26572EDE40 Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/42ad508a-1d9b-3416-b900-7d41869eb2b5.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 14217 IP address blocks: 64.21.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:6f:f9:de:33:6d:6f:26:57:2e:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=e3d4eb1e-acca-4a05-ad4b-db5f1ef3b9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c4:e0:cf:29:65:80:51:f3:c0:07:1f:d0:77: 63:1e:82:de:86:65:f1:3b:6d:a9:89:1b:f0:b9:a4: cd:54:41:32:74:9d:f7:5f:d1:f0:2a:1f:77:0b:74: 63:ba:3f:0b:22:30:57:a6:f7:15:6f:b2:a2:bd:45: 15:4a:91:22:4b:b3:ea:13:60:6c:2c:ba:53:24:70: 97:c1:67:57:ee:3d:bd:8e:80:9d:c3:13:df:f7:52: bc:3e:d3:2b:55:ec:62:9f:4d:80:59:96:79:c2:1f: c6:12:ea:9c:cd:bf:bb:d4:af:cb:d2:e3:5c:2d:c1: de:7a:a1:8e:ae:69:ec:3f:5d:09:b3:19:6e:fc:cc: 55:42:60:52:7f:7f:69:b3:a1:04:e2:ba:21:d9:f7: d0:bb:64:2c:68:fe:64:b7:da:8e:78:52:2a:16:02: a3:fa:99:24:69:c7:78:12:fd:06:8b:cf:55:a6:3c: 79:2a:0a:7b:7e:c0:2c:60:09:47:93:40:e3:34:39: e0:28:84:12:02:d5:5b:a8:35:40:97:69:5c:91:33: 58:27:c3:b1:95:b7:d8:f4:76:be:32:39:42:55:89: 81:3e:b2:12:ac:4a:fc:0c:b4:f4:68:b6:c7:aa:46: e8:5c:2e:e9:55:51:55:a5:79:25:94:c3:fd:9e:b4: f1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:19:D6:8D:32:91:7F:2E:2B:BE:5D:71:C5:51:8D:8E:9A:11:28:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/42ad508a-1d9b-3416-b900-7d41869eb2b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl X509v3 Authority Key Identifier: keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer sbgp-ipAddrBlock: critical IPv4: 64.21.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:38:97:9e:f4:f8:00:aa:63:31:52:7f:8e:70:82:02:93:93: 4a:54:74:e3:d3:be:f4:eb:bc:7e:59:e2:86:5d:da:d4:f7:54: df:5b:8c:4d:25:7b:b7:21:30:cd:ff:d1:7e:67:a7:b0:7f:30: 54:11:4c:cd:38:e4:1c:7b:66:e7:c0:f5:9a:65:69:52:5f:49: 42:0a:2a:dc:83:f8:84:c3:29:b2:99:4b:f6:d3:f8:89:fd:18: 68:c6:1f:0f:7d:c5:5f:38:04:fa:2f:d0:cb:20:00:4e:68:9d: e7:e0:c8:a8:7e:25:b8:43:75:b2:6f:85:fa:5d:9e:e8:f8:38: bb:2b:93:b7:34:94:c6:c4:7c:07:cd:28:7f:aa:24:42:be:69: fe:43:48:a5:86:6c:16:1e:05:7d:50:7a:99:21:02:fe:c5:9d: f6:d4:be:a7:1a:b6:40:28:62:f7:96:82:f2:d5:9a:cf:19:d3: e3:3f:9d:7e:ba:0e:1a:09:af:85:5e:20:cc:f1:60:a6:7e:59: 6f:95:66:28:3f:71:72:d8:e0:06:f9:32:03:79:76:f3:cd:71: d0:1d:a5:35:98:c8:60:ea:6c:fd:f0:26:8e:71:38:c9:23:a7: 48:12:c7:08:13:91:b6:17:44:c0:0e:df:32:32:4a:29:7b:e9: d0:82:50:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Kb/neM21vJlcu3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjNDNiNzUtMTA2Zi00OWU3LWJmM2EtNGFlYjk0NTY2 ZTkwMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk ZTNkNGViMWUtYWNjYS00YTA1LWFkNGItZGI1ZjFlZjNiOWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusTgzyllgFHzwAcf0HdjHoLehmXxO22piRvw uaTNVEEydJ33X9HwKh93C3Rjuj8LIjBXpvcVb7KivUUVSpEiS7PqE2BsLLpTJHCX wWdX7j29joCdwxPf91K8PtMrVexin02AWZZ5wh/GEuqczb+71K/L0uNcLcHeeqGO rmnsP10Jsxlu/MxVQmBSf39ps6EE4roh2ffQu2QsaP5kt9qOeFIqFgKj+pkkacd4 Ev0Gi89Vpjx5Kgp7fsAsYAlHk0DjNDngKIQSAtVbqDVAl2lckTNYJ8OxlbfY9Ha+ MjlCVYmBPrISrEr8DLT0aLbHqkboXC7pVVFVpXkllMP9nrTxSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4Z1o0ykX8uK75dccVRjY6aESjWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0 M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWViOTQ1NjZlOTAvNDJhZDUwOGEtMWQ5Yi0z NDE2LWI5MDAtN2Q0MTg2OWViMmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBjNDNiNzUtMTA2Zi00OWU3LWJm M2EtNGFlYjk0NTY2ZTkwL2IwYzQzYjc1LTEwNmYtNDllNy1iZjNhLTRhZWI5NDU2 NmU5MC5jcmwwHwYDVR0jBBgwFoAUu0SUXwFyTe65Irjq0C6iB25OIzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWVi OTQ1NjZlOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBW/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAs4l570+ACqYzFSf45wggKTk0pUdOPTvvTrvH5Z4oZd2tT3VN9bjE0l e7chMM3/0X5np7B/MFQRTM045Bx7ZufA9ZplaVJfSUIKKtyD+ITDKbKZS/bT+In9 GGjGHw99xV84BPov0MsgAE5onefgyKh+JbhDdbJvhfpdnuj4OLsrk7c0lMbEfAfN KH+qJEK+af5DSKWGbBYeBX1QepkhAv7FnfbUvqcatkAoYveWgvLVms8Z0+M/nX66 DhoJr4VeIMzxYKZ+WW+VZig/cXLY4Ab5MgN5dvPNcdAdpTWYyGDqbP3wJo5xOMkj p0gSxwgTkbYXRMAO3zIySil76dCCUGA= -----END CERTIFICATE-----Generated at Sat Jun 13 20:23:19 2026 by rpki-client