$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8/7f422755-4d8d-3be0-9e1c-60ad1f5996e7.roa File: 7f422755-4d8d-3be0-9e1c-60ad1f5996e7.roa (raw, json) Hash identifier: h/HrGCJygLGKnjIUcnLNIAuDyoNjXKe30E77i4w9YdM= Subject key identifier: 7B:F7:42:F6:A8:CA:29:BB:B2:AB:46:AF:82:9C:EF:C1:38:09:9D:A7 Certificate issuer: /CN=f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8 Certificate serial: 010D0C9F4328584D6AAA863EDE9F6104300EF600 Authority key identifier: 7D:3C:6F:EE:64:A5:DD:6E:94:A6:94:A7:7D:7E:19:2C:46:EF:3D:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8/7f422755-4d8d-3be0-9e1c-60ad1f5996e7.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 53848 IP address blocks: 23.252.176.0/20 maxlen: 20 52.124.22.0/23 maxlen: 23 64.45.182.0/23 maxlen: 23 104.254.40.0/22 maxlen: 22 104.255.160.0/21 maxlen: 21 199.202.0.0/19 maxlen: 19 209.127.128.0/21 maxlen: 21 216.211.144.0/20 maxlen: 20 2607:a80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:86:3e:de:9f:61:04:30:0e:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=d89d46b3-078d-4caa-a065-1b208ccaecc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d4:9b:49:fe:7e:67:57:98:5a:42:e1:e0:30: 78:6f:1d:d9:3e:f2:2b:14:d1:06:0d:bd:df:71:0a: 53:ad:c2:5d:e2:5a:23:cc:eb:68:b4:24:5c:a7:2d: a9:e3:90:c0:91:da:d4:52:fb:e7:b9:f0:1d:9d:56: 11:25:27:0f:da:ba:e6:90:2d:4f:b3:42:7b:d3:88: 16:87:07:7e:8c:c8:72:97:6b:8b:01:2c:01:89:c2: f1:90:40:e3:fc:50:14:bb:b6:ec:81:7c:41:52:66: ec:0f:52:58:db:02:c3:81:11:d3:e6:89:8c:e2:88: 1f:a3:50:6a:83:3b:75:7b:c2:d8:e8:fe:11:a2:5c: 2e:f5:bd:eb:72:68:4f:62:67:d9:91:54:72:30:f1: f8:45:d3:a5:1d:51:4d:c6:35:55:66:c4:14:07:d9: d5:f0:3a:a8:0d:44:b9:69:c6:c4:74:09:88:2a:5c: a7:0d:81:4c:c2:69:04:4e:af:f2:ca:0d:f1:16:ec: d4:62:21:ea:0b:fa:81:37:ba:f4:8a:52:2f:89:d1: 05:49:51:d7:53:0a:61:a2:f0:79:28:20:9b:90:dd: 25:3f:6c:af:6a:67:57:02:db:c8:90:10:d6:5f:c7: 26:33:66:85:4c:e3:3b:be:6e:06:f1:ec:4d:4e:d7: ba:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F7:42:F6:A8:CA:29:BB:B2:AB:46:AF:82:9C:EF:C1:38:09:9D:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8/7f422755-4d8d-3be0-9e1c-60ad1f5996e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8.crl X509v3 Authority Key Identifier: keyid:7D:3C:6F:EE:64:A5:DD:6E:94:A6:94:A7:7D:7E:19:2C:46:EF:3D:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8.cer sbgp-ipAddrBlock: critical IPv4: 23.252.176.0/20 52.124.22.0/23 64.45.182.0/23 104.254.40.0/22 104.255.160.0/21 199.202.0.0/19 209.127.128.0/21 216.211.144.0/20 IPv6: 2607:a80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:9f:1a:6b:c5:b6:78:39:58:0a:32:e7:cb:c0:3a:b3:8c:8f: fa:4d:82:87:74:ec:be:ea:17:f7:6f:6b:67:db:47:39:16:bb: e4:25:d8:9c:ea:10:87:33:1b:46:81:a6:d7:f7:3c:3f:e1:18: b4:00:eb:37:5e:c2:66:e3:b7:16:38:9a:0e:51:ff:2d:12:85: f4:be:bb:9c:cf:57:66:ec:d5:76:86:e5:6e:40:ff:0e:09:e6: c6:66:99:ec:ed:3e:c4:f2:dd:32:4f:ca:9c:93:56:6a:ce:b5: 0d:5e:be:dd:c7:e0:87:c3:c1:29:1c:43:00:ce:c2:74:33:9e: 96:96:e1:30:92:22:f1:61:7e:a2:4c:44:6f:54:86:7a:95:1e: 5d:75:ab:13:1e:d2:c0:da:78:5e:66:3e:cd:23:94:c3:98:09: df:3b:06:e5:42:fc:ce:b8:91:f9:33:2b:a4:89:72:ea:83:9e: 62:bd:a5:7d:d5:fe:03:a5:6b:0a:b4:00:8a:db:06:90:03:3f: 4e:86:47:8f:37:9f:6e:cc:1f:e6:8a:f6:11:41:17:75:35:73: 3f:ef:67:e5:f2:f4:c4:47:01:f0:f8:e4:09:8f:ed:d5:87:bb: dd:22:03:d4:38:bd:ca:3a:99:46:c5:a6:e3:27:4b:32:36:dd: 7f:48:96:4f -----BEGIN CERTIFICATE----- MIIGfDCCBWSgAwIBAgIUAQ0Mn0MoWE1qqoY+3p9hBDAO9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjE0ZWI2YmYtNTE0MS00ZTlkLWEwZmEtNTcxYWEyNGFk NWI4MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk ZDg5ZDQ2YjMtMDc4ZC00Y2FhLWEwNjUtMWIyMDhjY2FlY2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNSbSf5+Z1eYWkLh4DB4bx3ZPvIrFNEGDb3f cQpTrcJd4lojzOtotCRcpy2p45DAkdrUUvvnufAdnVYRJScP2rrmkC1Ps0J704gW hwd+jMhyl2uLASwBicLxkEDj/FAUu7bsgXxBUmbsD1JY2wLDgRHT5omM4ogfo1Bq gzt1e8LY6P4Rolwu9b3rcmhPYmfZkVRyMPH4RdOlHVFNxjVVZsQUB9nV8DqoDUS5 acbEdAmIKlynDYFMwmkETq/yyg3xFuzUYiHqC/qBN7r0ilIvidEFSVHXUwphovB5 KCCbkN0lP2yvamdXAtvIkBDWX8cmM2aFTOM7vm4G8exNTte6bQIDAQABo4IDjjCC A4owHQYDVR0OBBYEFHv3Qvaoyim7sqtGr4Kc78E4CZ2nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMTRl YjZiZi01MTQxLTRlOWQtYTBmYS01NzFhYTI0YWQ1YjgvN2Y0MjI3NTUtNGQ4ZC0z YmUwLTllMWMtNjBhZDFmNTk5NmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjE0ZWI2YmYtNTE0MS00ZTlkLWEw ZmEtNTcxYWEyNGFkNWI4L2YxNGViNmJmLTUxNDEtNGU5ZC1hMGZhLTU3MWFhMjRh ZDViOC5jcmwwHwYDVR0jBBgwFoAUfTxv7mSl3W6UppSnfX4ZLEbvPYwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMTRlYjZiZi01MTQxLTRlOWQtYTBmYS01NzFh YTI0YWQ1YjguY2VyMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQEF/ywAwQB NHwWAwQBQC22AwQCaP4oAwQDaP+gAwQFx8oAAwQD0X+AAwQE2NOQMA0EAgACMAcD BQAmBwqAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAFyfGmvFtng5WAoy58vAOrOMj/pNgod07L7qF/dva2fb RzkWu+Ql2JzqEIczG0aBptf3PD/hGLQA6zdewmbjtxY4mg5R/y0ShfS+u5zPV2bs 1XaG5W5A/w4J5sZmmeztPsTy3TJPypyTVmrOtQ1evt3H4IfDwSkcQwDOwnQznpaW 4TCSIvFhfqJMRG9UhnqVHl11qxMe0sDaeF5mPs0jlMOYCd87BuVC/M64kfkzK6SJ cuqDnmK9pX3V/gOlawq0AIrbBpADP06GR483n27MH+aK9hFBF3U1cz/vZ+Xy9MRH AfD45AmP7dWHu90iA9Q4vco6mUbFpuMnSzI23X9Ilk8= -----END CERTIFICATE-----Generated at Fri Apr 17 11:53:37 2026 by rpki-client