$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/9bbda97a-596d-3132-b43d-fcaf3654022d.roa File: 9bbda97a-596d-3132-b43d-fcaf3654022d.roa (raw, json) Hash identifier: 8BYdrDkhJEmwLRF6zdcgVliSpNG0O1uT4L2q1ob8ZLs= Subject key identifier: 18:1D:6C:39:BD:5B:47:17:4C:0F:A2:B2:75:A6:36:9D:35:36:4F:7F Certificate issuer: /CN=f9e87468-3770-44b8-9cdc-c0b0e117f2db Certificate serial: 010D0C9F4328584D773A8432560F4359193D2480 Authority key identifier: 5E:1A:94:DA:91:56:B9:AD:6A:2F:83:4C:8B:E8:E2:0F:E1:44:8E:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/9bbda97a-596d-3132-b43d-fcaf3654022d.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 205759 IP address blocks: 64.89.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:84:32:56:0f:43:59:19:3d:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9e87468-3770-44b8-9cdc-c0b0e117f2db Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=51f34b63-2f04-4f55-b7a6-57cdbb12bbb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:83:de:4b:c2:ee:ed:3a:54:b2:34:9c:da:a0: 9a:c9:9d:82:97:b0:6b:2b:f2:97:ac:4c:98:c1:88: 38:49:c7:b2:93:4d:81:b2:46:af:c2:5f:14:98:f8: 44:e1:37:68:df:6a:46:0c:f6:e1:0f:41:3d:ee:6a: 09:e1:5f:f7:2c:2a:cf:b1:5d:64:07:40:14:34:f9: 36:a8:0b:77:9b:90:e6:8e:1d:3b:04:f2:5b:4e:57: 46:73:78:40:cc:36:f5:de:64:fe:92:7c:81:cc:34: c1:2b:2f:dd:4c:5d:f6:eb:97:95:ae:73:05:cf:c3: 9e:a6:60:8a:7d:3e:29:15:2b:99:e7:f6:a7:0f:1b: 52:85:d1:29:e7:05:f5:ff:3f:97:76:89:7f:e8:22: 3d:5f:18:9e:69:51:87:88:a7:fd:fa:68:6c:64:48: 1f:8c:0d:b3:c7:ed:9a:9d:ed:52:92:ff:59:7e:3e: 9e:23:1b:e6:ed:1d:fb:cc:7d:21:48:8f:b4:0a:16: 4a:5c:48:b6:62:a9:5f:a1:34:7c:91:b2:2f:03:29: 23:57:92:aa:02:dc:d7:6c:a6:60:5b:91:5a:ff:28: 47:ee:dd:c9:8f:35:41:e0:0a:c6:08:1c:93:2e:15: bf:db:8e:82:e9:50:7d:fa:f5:de:17:d5:4f:69:e7: 1d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1D:6C:39:BD:5B:47:17:4C:0F:A2:B2:75:A6:36:9D:35:36:4F:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/9bbda97a-596d-3132-b43d-fcaf3654022d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.crl X509v3 Authority Key Identifier: keyid:5E:1A:94:DA:91:56:B9:AD:6A:2F:83:4C:8B:E8:E2:0F:E1:44:8E:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer sbgp-ipAddrBlock: critical IPv4: 64.89.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:d3:6f:50:04:9a:7c:a5:c2:8f:d4:c2:06:bf:b2:5e:88:6f: fe:88:ea:da:95:e0:79:f5:60:42:85:23:24:3a:13:a6:49:0f: 5a:ed:d9:e9:b6:98:1a:78:cb:ce:44:c3:a8:ce:e3:f2:ee:53: a4:9a:d8:92:1c:40:8d:ad:5f:4f:8f:8d:3e:41:b0:c5:1a:10: d1:8f:d7:01:81:84:93:26:59:d8:1e:68:66:4a:78:05:18:b5: 51:7e:82:c1:c2:67:4d:6f:33:c3:64:83:79:ce:75:14:a9:a1: 75:09:ee:43:7b:9c:22:aa:1e:34:b4:32:4b:ff:8c:0b:9b:3e: a8:ea:f0:3e:27:38:e2:b5:6c:c3:f9:3b:80:ad:5e:51:33:70: 6b:81:41:3e:20:f6:c7:dd:f7:74:27:91:09:46:71:1e:58:07: 89:3d:ed:63:76:2a:77:dd:86:4c:9e:f4:c1:c8:4f:55:01:88: db:e3:dd:ee:14:de:cd:4e:79:b4:1f:59:90:75:45:29:c6:45: 0c:0c:99:c1:fb:2e:a5:08:99:02:c5:d7:76:10:fc:bf:1f:b4: 53:d2:03:da:d6:d8:3c:e1:81:a5:b0:a8:df:63:92:e1:c8:2c: 08:59:a5:69:3b:5d:25:78:ee:ce:60:26:68:ae:44:86:90:7f: 86:d0:03:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OoQyVg9DWRk9JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjllODc0NjgtMzc3MC00NGI4LTljZGMtYzBiMGUxMTdm MmRiMB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk NTFmMzRiNjMtMmYwNC00ZjU1LWI3YTYtNTdjZGJiMTJiYmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoPeS8Lu7TpUsjSc2qCayZ2Cl7BrK/KXrEyY wYg4Sceyk02Bskavwl8UmPhE4Tdo32pGDPbhD0E97moJ4V/3LCrPsV1kB0AUNPk2 qAt3m5Dmjh07BPJbTldGc3hAzDb13mT+knyBzDTBKy/dTF3265eVrnMFz8OepmCK fT4pFSuZ5/anDxtShdEp5wX1/z+Xdol/6CI9XxieaVGHiKf9+mhsZEgfjA2zx+2a ne1Skv9Zfj6eIxvm7R37zH0hSI+0ChZKXEi2YqlfoTR8kbIvAykjV5KqAtzXbKZg W5Fa/yhH7t3JjzVB4ArGCByTLhW/246C6VB9+vXeF9VPaecdDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgdbDm9W0cXTA+isnWmNp01Nk9/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOWU4 NzQ2OC0zNzcwLTQ0YjgtOWNkYy1jMGIwZTExN2YyZGIvOWJiZGE5N2EtNTk2ZC0z MTMyLWI0M2QtZmNhZjM2NTQwMjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjllODc0NjgtMzc3MC00NGI4LTlj ZGMtYzBiMGUxMTdmMmRiL2Y5ZTg3NDY4LTM3NzAtNDRiOC05Y2RjLWMwYjBlMTE3 ZjJkYi5jcmwwHwYDVR0jBBgwFoAUXhqU2pFWua1qL4NMi+jiD+FEjrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOWU4NzQ2OC0zNzcwLTQ0YjgtOWNkYy1jMGIw ZTExN2YyZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFmhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfTb1AEmnylwo/Uwga/sl6Ib/6I6tqV4Hn1YEKFIyQ6E6ZJD1rt2em2 mBp4y85Ew6jO4/LuU6Sa2JIcQI2tX0+PjT5BsMUaENGP1wGBhJMmWdgeaGZKeAUY tVF+gsHCZ01vM8Nkg3nOdRSpoXUJ7kN7nCKqHjS0Mkv/jAubPqjq8D4nOOK1bMP5 O4CtXlEzcGuBQT4g9sfd93QnkQlGcR5YB4k97WN2Knfdhkye9MHIT1UBiNvj3e4U 3s1OebQfWZB1RSnGRQwMmcH7LqUImQLF13YQ/L8ftFPSA9rW2DzhgaWwqN9jkuHI LAhZpWk7XSV47s5gJmiuRIaQf4bQA2M= -----END CERTIFICATE-----Generated at Fri Apr 17 10:32:49 2026 by rpki-client