$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/dce5c758-03d9-3603-a303-530c88930fa0.roa File: dce5c758-03d9-3603-a303-530c88930fa0.roa (raw, json) Hash identifier: +cMAg+oE/7nH7WqU8mvsxdYqVDLm3o0t7RMjNSkne0U= Subject key identifier: 26:F9:B4:B4:C2:4B:12:8C:4C:07:0D:CC:EC:B4:67:4B:06:1A:30:6A Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F4328584D6C0FAC9F72558533D8735A68 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/dce5c758-03d9-3603-a303-530c88930fa0.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 11300 IP address blocks: 64.49.152.0/24 maxlen: 25 207.241.180.0/24 maxlen: 25 207.241.181.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:ac:9f:72:55:85:33:d8:73:5a:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=b1cd6466-8365-4a34-aefc-fab58a3dcf90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1b:17:a6:cd:e3:7c:c1:a2:14:73:be:17:65: af:a4:5e:47:0d:87:ec:cc:b0:0d:19:7f:ed:05:da: 6f:7e:37:81:a8:c2:7a:fe:d5:d8:53:77:07:72:bd: 20:e7:69:2f:40:96:4e:45:06:64:6a:5a:a6:92:40: 8d:a2:f6:57:6a:ad:ef:be:16:70:81:43:0d:70:2e: 67:85:e2:a7:9c:ab:79:a3:60:2d:5a:06:f8:1e:7e: 99:6b:3a:d1:2b:16:49:b5:00:82:5b:06:4f:43:ba: 50:e0:c1:39:7c:86:90:a0:a3:9c:64:ed:7b:84:38: 52:3f:ca:06:9a:95:66:87:cb:f1:e4:6a:94:3b:f0: a4:af:34:10:58:89:1f:b7:55:23:9c:e0:5e:96:26: a8:9e:06:d5:d9:8b:82:52:97:04:24:58:81:6d:a7: 57:60:a3:7a:c0:b3:c6:e0:e6:81:0b:f4:21:84:32: 2c:4c:f0:af:70:73:bd:f9:18:9a:ae:4e:28:6b:ee: ef:2a:5c:f4:b5:fe:18:b3:01:01:94:70:2c:00:2d: 2d:09:2e:26:1f:64:59:e8:b6:94:30:44:e0:51:da: e2:0b:1f:65:eb:e8:97:f6:bd:27:f1:51:c8:b5:8f: e8:01:7c:42:08:75:fd:12:e8:ec:52:32:ff:f0:24: 3a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F9:B4:B4:C2:4B:12:8C:4C:07:0D:CC:EC:B4:67:4B:06:1A:30:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/dce5c758-03d9-3603-a303-530c88930fa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 64.49.152.0/24 207.241.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:db:ab:05:f5:75:6b:a5:2b:0d:54:0a:7c:67:e4:7c:a3:41: ab:1f:2f:59:68:ff:37:7a:55:29:33:b6:7f:19:e3:43:fb:ac: eb:99:c2:26:88:04:dd:9c:7f:b1:2a:dc:81:3e:cb:61:b3:45: 0f:23:f0:bd:86:8c:97:87:59:b5:e6:21:6d:44:2a:c8:ff:aa: f0:46:92:51:d7:b1:bc:9f:6b:35:0c:4f:06:df:0a:47:cd:d4: f4:4a:b5:8c:cd:20:c5:0f:68:5e:0f:07:46:fd:ea:cb:21:c7: 77:07:d8:48:58:6a:c7:77:ea:fa:00:b1:96:da:c6:08:9d:2d: b2:55:25:e6:a8:e4:0e:ab:0a:8d:7c:d0:2d:36:e1:aa:47:03: bb:d4:1f:10:4e:9a:c1:e9:34:b2:b2:27:92:fd:21:62:59:81: ca:7e:a2:a0:f5:68:c8:33:f8:45:f9:46:ce:db:78:a1:f9:c8: 98:c8:36:03:82:d4:c6:24:39:f8:77:96:71:4e:be:d6:6e:d4: 6b:f9:ac:ac:23:40:89:65:42:68:2d:53:4c:ed:a4:fd:f2:42: df:c6:5f:31:45:f7:d8:e6:fc:3e:1e:15:b9:5e:5d:8a:fe:52: 9e:06:b3:fa:bf:45:81:43:b4:c8:db:1e:fe:5c:ac:dd:c7:b2: e6:2e:20:a7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1sD6yfclWFM9hzWmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk YjFjZDY0NjYtODM2NS00YTM0LWFlZmMtZmFiNThhM2RjZjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RsXps3jfMGiFHO+F2WvpF5HDYfszLANGX/t BdpvfjeBqMJ6/tXYU3cHcr0g52kvQJZORQZkalqmkkCNovZXaq3vvhZwgUMNcC5n heKnnKt5o2AtWgb4Hn6ZazrRKxZJtQCCWwZPQ7pQ4ME5fIaQoKOcZO17hDhSP8oG mpVmh8vx5GqUO/CkrzQQWIkft1UjnOBeliaongbV2YuCUpcEJFiBbadXYKN6wLPG 4OaBC/QhhDIsTPCvcHO9+Riark4oa+7vKlz0tf4YswEBlHAsAC0tCS4mH2RZ6LaU METgUdriCx9l6+iX9r0n8VHItY/oAXxCCHX9EujsUjL/8CQ64QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCb5tLTCSxKMTAcNzOy0Z0sGGjBqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvZGNlNWM3NTgtMDNkOS0z NjAzLWEzMDMtNTMwYzg4OTMwZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQDGYAwQB z/G0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE7bqwX1dWulKw1UCnxn5HyjQasfL1lo/zd6VSkztn8Z40P7 rOuZwiaIBN2cf7Eq3IE+y2GzRQ8j8L2GjJeHWbXmIW1EKsj/qvBGklHXsbyfazUM TwbfCkfN1PRKtYzNIMUPaF4PB0b96sshx3cH2EhYasd36voAsZbaxgidLbJVJeao 5A6rCo180C024apHA7vUHxBOmsHpNLKyJ5L9IWJZgcp+oqD1aMgz+EX5Rs7beKH5 yJjINgOC1MYkOfh3lnFOvtZu1Gv5rKwjQIllQmgtU0ztpP3yQt/GXzFF99jm/D4e FbleXYr+Up4Gs/q/RYFDtMjbHv5crN3HsuYuIKc= -----END CERTIFICATE-----Generated at Fri Apr 17 22:49:37 2026 by rpki-client