$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/02940a4b-8f05-3cde-9acb-b94b17f34781.roa File: 02940a4b-8f05-3cde-9acb-b94b17f34781.roa (raw, json) Hash identifier: /7JRteG/udzJbpfDpXzaYrLGA3noP+P0VPXW1BL76sM= Subject key identifier: 4D:43:8E:75:4D:B1:DB:16:6E:3B:8B:96:27:D1:91:CE:01:96:4E:11 Certificate issuer: /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf Certificate serial: 010D0C9F4328584DB77035D8668765B860895360 Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/02940a4b-8f05-3cde-9acb-b94b17f34781.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 7922 IP address blocks: 64.84.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:35:d8:66:87:65:b8:60:89:53:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=75f53ad3-6b4e-49c0-b23a-85d670238390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:30:ea:43:2f:f9:f7:64:ae:d5:f7:3c:9f:4e: b4:3d:38:46:da:5b:42:45:d7:30:21:bd:da:74:8c: d2:16:c8:97:ee:40:1a:33:7a:ef:a5:02:d1:d0:34: 62:d1:f8:2a:19:cb:70:b1:d1:21:34:f0:4b:e1:f2: 50:9a:12:a8:f2:dd:c7:15:1b:01:08:2a:85:4d:6b: e5:68:e9:0c:0c:e2:71:f1:06:45:84:4e:51:77:d8: 46:4e:0f:33:15:ab:cc:77:60:00:f5:ef:6e:08:27: 56:1f:ec:39:18:18:54:9d:f0:fa:2a:d3:61:41:77: b4:cf:2e:a0:d4:c2:13:8e:44:84:4d:fe:84:5c:08: 28:a6:f4:f4:f2:28:7d:9e:3c:58:35:c4:95:06:09: 6b:17:10:25:4f:ef:42:7a:89:56:bb:f7:0b:9c:6d: 53:53:ff:25:d1:35:df:20:e6:67:2c:33:1f:7b:f0: 8f:a5:db:f2:0d:10:f5:c0:91:69:48:9f:9d:36:fc: 71:a9:86:e1:8a:62:ac:65:b8:08:6b:91:70:20:ea: 32:e4:95:37:3b:77:15:e2:5a:45:a8:5f:cd:7f:3b: a2:56:b0:1e:c0:47:c0:6c:7a:b4:7e:13:ac:d6:06: b8:ba:20:5c:13:ad:a4:dd:c9:e3:e2:2b:7d:8d:6e: 9b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:43:8E:75:4D:B1:DB:16:6E:3B:8B:96:27:D1:91:CE:01:96:4E:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/02940a4b-8f05-3cde-9acb-b94b17f34781.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl X509v3 Authority Key Identifier: keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer sbgp-ipAddrBlock: critical IPv4: 64.84.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:33:6e:24:e2:74:7d:62:5a:04:16:83:73:2b:84:8f:46:28: 7b:ec:38:88:64:54:37:3f:49:6c:1b:9b:b5:14:a6:12:52:b4: 98:3b:29:24:bb:02:07:b3:45:a1:77:69:52:90:45:e6:a5:d9: 55:1a:a7:4f:3c:85:18:13:4b:9e:5e:07:2d:f3:8f:8c:cb:27: 0f:14:ba:e0:78:f9:4e:e1:59:74:6e:a5:65:07:e3:30:e0:d5: 92:14:33:8f:37:85:93:cf:b4:de:e0:fb:45:a5:4c:03:74:51: f2:14:cc:f2:4c:82:00:e9:fb:1a:ff:72:1d:e1:47:f6:92:d5: 20:e8:e9:f9:a8:ec:1f:3c:4e:b0:d8:2d:2c:e5:61:10:a7:b3: 93:ca:51:b5:14:71:7a:20:35:b9:b6:0d:c4:75:b8:a1:6a:57: fc:a8:25:79:93:4b:6f:5a:19:05:f2:3d:58:9c:23:b6:84:f2: 32:5e:b3:f9:80:99:6b:01:50:65:fe:b9:89:1f:aa:91:4e:e3: c0:04:ef:83:4e:48:bc:98:b8:6d:d7:66:ca:62:c8:76:4a:7d: 5b:52:9a:7b:d3:6c:06:fb:c4:c8:c2:00:cf:c0:a7:69:ea:93: 2f:8a:27:b6:82:23:75:18:25:4d:ce:36:db:c1:3f:e0:a2:0c: f0:19:03:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cDXYZodluGCJU2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYwZjQ2ZGItYzllNi00ZDQ3LTkxMzQtMjA5NjNlYjFk YmJmMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk NzVmNTNhZDMtNmI0ZS00OWMwLWIyM2EtODVkNjcwMjM4MzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzDqQy/592Su1fc8n060PThG2ltCRdcwIb3a dIzSFsiX7kAaM3rvpQLR0DRi0fgqGctwsdEhNPBL4fJQmhKo8t3HFRsBCCqFTWvl aOkMDOJx8QZFhE5Rd9hGTg8zFavMd2AA9e9uCCdWH+w5GBhUnfD6KtNhQXe0zy6g 1MITjkSETf6EXAgopvT08ih9njxYNcSVBglrFxAlT+9CeolWu/cLnG1TU/8l0TXf IOZnLDMfe/CPpdvyDRD1wJFpSJ+dNvxxqYbhimKsZbgIa5FwIOoy5JU3O3cV4lpF qF/NfzuiVrAewEfAbHq0fhOs1ga4uiBcE62k3cnj4it9jW6bWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1DjnVNsdsWbjuLlifRkc4Blk4RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZjBm NDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2M2ViMWRiYmYvMDI5NDBhNGItOGYwNS0z Y2RlLTlhY2ItYjk0YjE3ZjM0NzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGYwZjQ2ZGItYzllNi00ZDQ3LTkx MzQtMjA5NjNlYjFkYmJmLzRmMGY0NmRiLWM5ZTYtNGQ0Ny05MTM0LTIwOTYzZWIx ZGJiZi5jcmwwHwYDVR0jBBgwFoAUcvOoLgEYY/Isv9tY40D3O4Z6l6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZjBmNDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2 M2ViMWRiYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQFR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8zbiTidH1iWgQWg3MrhI9GKHvsOIhkVDc/SWwbm7UUphJStJg7KSS7 AgezRaF3aVKQReal2VUap088hRgTS55eBy3zj4zLJw8UuuB4+U7hWXRupWUH4zDg 1ZIUM483hZPPtN7g+0WlTAN0UfIUzPJMggDp+xr/ch3hR/aS1SDo6fmo7B88TrDY LSzlYRCns5PKUbUUcXogNbm2DcR1uKFqV/yoJXmTS29aGQXyPVicI7aE8jJes/mA mWsBUGX+uYkfqpFO48AE74NOSLyYuG3XZspiyHZKfVtSmnvTbAb7xMjCAM/Ap2nq ky+KJ7aCI3UYJU3ONtvBP+CiDPAZA+s= -----END CERTIFICATE-----Generated at Wed May 13 15:29:26 2026 by rpki-client