$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/1dace265-d08a-36e1-8cec-c84e5147a33c.roa File: 1dace265-d08a-36e1-8cec-c84e5147a33c.roa (raw, json) Hash identifier: 33uV4dmIvKJTkDwucsFH+7EAQkDJwJoLG9W+NfPoodQ= Subject key identifier: C5:64:B0:7E:51:C3:26:4E:E3:0F:76:08:F1:3D:8E:C9:AD:34:BB:86 Certificate issuer: /CN=d1d57239-6176-4c8d-9a7e-f9fea380a1a2 Certificate serial: 010D0C9F4328584D7B6A9D482044395D98B81800 Authority key identifier: 6D:0E:19:88:64:18:83:E1:80:8D:48:79:CD:51:23:88:2E:59:37:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/1dace265-d08a-36e1-8cec-c84e5147a33c.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 26527 IP address blocks: 69.166.96.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:9d:48:20:44:39:5d:98:b8:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1d57239-6176-4c8d-9a7e-f9fea380a1a2 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=74f8f99a-4397-45dd-a855-720c04ca64b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:21:a2:71:90:ab:81:67:6d:66:32:04:3b:c2: d1:cf:20:dc:05:72:2d:1e:45:61:c6:06:70:bd:e7: a6:a8:c9:4b:b4:89:46:18:59:d7:63:c5:06:7f:51: 52:e0:ca:76:8d:7b:29:f4:4d:00:45:e5:a7:f1:00: fb:1a:ff:ee:e5:2e:0a:f4:ec:4a:ea:ee:29:b5:bd: 0a:af:7b:88:05:ff:8a:1b:c2:5d:db:fe:60:c7:13: b1:a4:55:f2:8b:09:66:c7:11:06:5a:28:2b:73:0e: 0d:bf:95:05:70:06:2f:a8:d9:2c:88:ec:25:f7:2e: 8f:a6:46:6c:f1:17:7b:6b:0e:00:07:78:d6:61:a9: 8c:d6:23:ea:a1:8d:10:2b:b9:3a:b7:3b:51:46:5f: 20:0a:3b:43:3e:59:b5:5c:da:e6:a8:cb:b3:5f:22: 87:f1:76:41:1d:a8:fa:c3:a2:40:e3:44:8c:f0:3d: c5:8a:3f:96:ea:68:34:41:f1:31:60:b3:bb:5f:1e: 58:6a:5b:90:e8:eb:80:74:d0:90:22:cb:7e:09:48: 37:44:c9:c3:dd:ae:66:fe:b0:41:41:c5:28:3a:45: eb:77:59:0a:d2:45:35:9e:00:5e:c1:4d:15:a7:ca: 20:ec:11:ed:c6:bf:40:51:9e:a4:9a:1e:31:57:4f: aa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:64:B0:7E:51:C3:26:4E:E3:0F:76:08:F1:3D:8E:C9:AD:34:BB:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/1dace265-d08a-36e1-8cec-c84e5147a33c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.crl X509v3 Authority Key Identifier: keyid:6D:0E:19:88:64:18:83:E1:80:8D:48:79:CD:51:23:88:2E:59:37:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer sbgp-ipAddrBlock: critical IPv4: 69.166.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:f9:75:30:98:e8:9b:d0:67:dc:8f:d8:ab:c7:82:37:26:4c: b4:7b:3c:88:23:a3:4e:b8:80:f4:94:b7:4e:22:78:72:4a:ad: cf:6b:ed:1c:dd:63:45:bb:36:27:0b:d2:cc:6a:fb:df:f4:2b: 31:02:bf:c8:4f:38:dc:a9:e3:25:ea:2b:33:f7:a6:70:ef:d6: cf:95:ce:7e:30:fb:57:c8:c6:4f:9c:a8:f2:66:76:79:a4:6a: ae:d6:49:04:92:e3:ab:b2:94:48:15:57:6c:cc:be:8b:19:68: 4c:bc:5c:00:94:a9:60:7c:3a:08:bb:29:bb:08:a0:e6:42:48: 0d:f5:2b:7d:4b:b1:8d:16:85:73:b5:28:9b:fd:d4:bc:fb:e0: a8:86:eb:ca:88:73:22:fa:22:2a:28:dd:91:d1:b9:13:eb:87: 3d:c3:2f:b2:5a:59:58:5d:54:c5:db:6a:b5:7e:f5:dd:45:28: 23:6e:21:f0:0a:5d:2a:6a:a3:c3:85:14:33:b5:1b:57:2c:06: 57:f2:d2:09:e7:62:29:50:31:12:e4:ae:2b:24:b1:20:dc:5b: 6f:a3:32:9b:c4:e0:16:f3:07:bd:2e:0f:69:56:6e:6d:30:28: da:d7:76:94:60:27:36:f6:64:ea:fc:db:f1:e3:51:83:b3:32: 73:d9:c7:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17ap1IIEQ5XZi4GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFkNTcyMzktNjE3Ni00YzhkLTlhN2UtZjlmZWEzODBh MWEyMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk NzRmOGY5OWEtNDM5Ny00NWRkLWE4NTUtNzIwYzA0Y2E2NGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSGicZCrgWdtZjIEO8LRzyDcBXItHkVhxgZw veemqMlLtIlGGFnXY8UGf1FS4Mp2jXsp9E0AReWn8QD7Gv/u5S4K9OxK6u4ptb0K r3uIBf+KG8Jd2/5gxxOxpFXyiwlmxxEGWigrcw4Nv5UFcAYvqNksiOwl9y6PpkZs 8Rd7aw4AB3jWYamM1iPqoY0QK7k6tztRRl8gCjtDPlm1XNrmqMuzXyKH8XZBHaj6 w6JA40SM8D3Fij+W6mg0QfExYLO7Xx5YaluQ6OuAdNCQIst+CUg3RMnD3a5m/rBB QcUoOkXrd1kK0kU1ngBewU0Vp8og7BHtxr9AUZ6kmh4xV0+qlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVksH5RwyZO4w92CPE9jsmtNLuGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMWQ1 NzIzOS02MTc2LTRjOGQtOWE3ZS1mOWZlYTM4MGExYTIvMWRhY2UyNjUtZDA4YS0z NmUxLThjZWMtYzg0ZTUxNDdhMzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDFkNTcyMzktNjE3Ni00YzhkLTlh N2UtZjlmZWEzODBhMWEyL2QxZDU3MjM5LTYxNzYtNGM4ZC05YTdlLWY5ZmVhMzgw YTFhMi5jcmwwHwYDVR0jBBgwFoAUbQ4ZiGQYg+GAjUh5zVEjiC5ZN6EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMWQ1NzIzOS02MTc2LTRjOGQtOWE3ZS1mOWZl YTM4MGExYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRaZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJj5dTCY6JvQZ9yP2KvHgjcmTLR7PIgjo064gPSUt04ieHJKrc9r7Rzd Y0W7NicL0sxq+9/0KzECv8hPONyp4yXqKzP3pnDv1s+Vzn4w+1fIxk+cqPJmdnmk aq7WSQSS46uylEgVV2zMvosZaEy8XACUqWB8Ogi7KbsIoOZCSA31K31LsY0WhXO1 KJv91Lz74KiG68qIcyL6Iioo3ZHRuRPrhz3DL7JaWVhdVMXbarV+9d1FKCNuIfAK XSpqo8OFFDO1G1csBlfy0gnnYilQMRLkrisksSDcW2+jMpvE4BbzB70uD2lWbm0w KNrXdpRgJzb2ZOr82/HjUYOzMnPZx7Q= -----END CERTIFICATE-----Generated at Sat Apr 18 06:28:13 2026 by rpki-client