$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/34b7440f-fa9d-3f40-9c87-f4e7484c5286.roa File: 34b7440f-fa9d-3f40-9c87-f4e7484c5286.roa (raw, json) Hash identifier: P3OYVR9RgX51adzOtCLXCVk7zrgk4X4V8CH7udrDlug= Subject key identifier: 4D:17:97:1D:AD:02:BB:13:00:B2:50:34:2D:AD:91:42:29:DA:2F:D1 Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584D60E4F39873A4263982ACBD00 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/34b7440f-fa9d-3f40-9c87-f4e7484c5286.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 21766 IP address blocks: 69.8.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e4:f3:98:73:a4:26:39:82:ac:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=0acd46d2-20cb-4387-bdb4-acd23ddba05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b9:b5:9c:46:c5:94:9b:07:41:aa:3e:d1:4b: 21:28:47:1c:68:3c:c2:02:a0:42:be:ff:ac:c1:19: cf:1c:fc:8d:29:54:33:95:d5:71:2b:cd:d9:18:04: ff:b0:4f:b0:a6:39:23:24:e7:4e:e5:1a:23:18:18: 1b:59:84:b7:fc:36:82:5d:ec:a4:2f:6c:97:89:37: 1f:af:6c:d2:0c:d1:37:79:9e:94:99:c9:2e:dd:e2: 5b:e5:c2:c6:4f:dc:9b:dd:84:c1:05:11:78:1d:66: 96:5f:c1:9c:e1:cc:9e:ec:ed:6e:f4:f0:10:df:37: bb:e3:99:97:1f:d5:df:d0:ed:24:cc:81:1a:2b:8c: 2c:cf:c1:17:b5:bd:71:25:59:a1:b5:14:a2:1d:98: 6d:21:91:f4:21:91:1e:bc:41:7b:c9:d3:33:19:16: 53:34:e0:b1:7f:91:35:06:3c:38:0d:f7:c5:b6:62: db:fe:d6:5d:d3:da:24:b1:81:ef:96:7d:df:07:2f: ca:1a:74:eb:1e:26:23:9f:ea:c8:25:c6:ca:c5:a9: aa:20:77:16:82:48:e9:10:fc:ac:69:2d:67:5d:6b: de:dc:7e:f0:bc:65:af:ff:49:ac:4a:c5:75:25:76: 1f:27:ab:71:da:31:a4:84:f2:2a:71:4e:8f:2e:ae: 19:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:17:97:1D:AD:02:BB:13:00:B2:50:34:2D:AD:91:42:29:DA:2F:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/34b7440f-fa9d-3f40-9c87-f4e7484c5286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 69.8.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:0c:bd:d8:bb:b4:d8:7f:b2:70:5f:49:ff:8f:57:2b:60:1e: 7f:aa:ab:74:f1:60:ea:8c:b9:c8:a5:87:2f:63:79:dd:72:5e: 22:55:0c:94:c4:a5:a6:31:a6:07:5e:27:1f:c8:2c:92:e0:21: 62:ac:b3:29:80:06:04:5f:18:9d:d4:57:f9:10:91:1a:09:58: 07:6f:ae:ad:3d:21:64:f3:f1:15:74:9d:66:3d:df:a0:b2:91: e8:5d:aa:34:ee:c8:26:cb:65:41:2f:ed:b5:40:84:ca:67:62: af:65:7d:5f:23:b8:8c:a1:2a:56:3f:36:a5:2b:18:e8:8e:c9: 75:99:4f:88:01:7e:98:0d:20:00:30:a6:a8:f3:31:46:29:b4: 1e:9b:ce:89:23:59:47:45:cb:60:22:d1:df:6a:72:b0:35:d0: 54:b7:0a:0e:10:93:8b:5d:d7:0d:f6:d5:33:90:78:65:36:62: c7:c1:2e:5c:1a:f0:14:d7:f2:10:a6:5d:17:11:18:bd:e6:16: ad:6a:5b:99:ae:f3:45:b8:33:8d:0a:c2:d3:d4:94:25:79:67: 69:e8:fd:a4:b3:f0:99:63:c9:89:9c:5f:14:6c:83:c1:b1:10: 88:87:06:c1:01:02:ea:53:9e:b5:45:25:48:eb:32:4e:70:b6: 53:d0:fc:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5POYc6QmOYKsvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk MGFjZDQ2ZDItMjBjYi00Mzg3LWJkYjQtYWNkMjNkZGJhMDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbm1nEbFlJsHQao+0UshKEccaDzCAqBCvv+s wRnPHPyNKVQzldVxK83ZGAT/sE+wpjkjJOdO5RojGBgbWYS3/DaCXeykL2yXiTcf r2zSDNE3eZ6Umcku3eJb5cLGT9yb3YTBBRF4HWaWX8Gc4cye7O1u9PAQ3ze745mX H9Xf0O0kzIEaK4wsz8EXtb1xJVmhtRSiHZhtIZH0IZEevEF7ydMzGRZTNOCxf5E1 Bjw4DffFtmLb/tZd09oksYHvln3fBy/KGnTrHiYjn+rIJcbKxamqIHcWgkjpEPys aS1nXWve3H7wvGWv/0msSsV1JXYfJ6tx2jGkhPIqcU6PLq4ZqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0Xlx2tArsTALJQNC2tkUIp2i/RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvMzRiNzQ0MGYtZmE5ZC0z ZjQwLTljODctZjRlNzQ4NGM1Mjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERQigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgMvdi7tNh/snBfSf+PVytgHn+qq3TxYOqMucilhy9jed1yXiJVDJTE paYxpgdeJx/ILJLgIWKssymABgRfGJ3UV/kQkRoJWAdvrq09IWTz8RV0nWY936Cy kehdqjTuyCbLZUEv7bVAhMpnYq9lfV8juIyhKlY/NqUrGOiOyXWZT4gBfpgNIAAw pqjzMUYptB6bzokjWUdFy2Ai0d9qcrA10FS3Cg4Qk4td1w321TOQeGU2YsfBLlwa 8BTX8hCmXRcRGL3mFq1qW5mu80W4M40KwtPUlCV5Z2no/aSz8JljyYmcXxRsg8Gx EIiHBsEBAupTnrVFJUjrMk5wtlPQ/MM= -----END CERTIFICATE-----Generated at Fri Apr 17 13:21:18 2026 by rpki-client