$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/1b78ac29-d85c-3f7e-aec2-b3537f31c1b6.roa File: 1b78ac29-d85c-3f7e-aec2-b3537f31c1b6.roa (raw, json) Hash identifier: zgI/0Dkd48/lMsnv6TsT+CvFW0OGRHTpI3JWqHri2nM= Subject key identifier: 41:45:7B:D9:04:9D:9A:C8:D7:60:C3:66:DE:57:07:21:A6:FA:F6:28 Certificate issuer: /CN=2ff5ac87-7814-4f58-a2b6-2075afc56f21 Certificate serial: 010D0C9F4328584DBFD05C00257C30E5D5E623C0 Authority key identifier: AB:2B:9D:64:9F:90:C1:18:3F:2B:2E:38:1F:79:BF:7D:93:6A:47:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/1b78ac29-d85c-3f7e-aec2-b3537f31c1b6.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 16715 IP address blocks: 67.220.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:5c:00:25:7c:30:e5:d5:e6:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff5ac87-7814-4f58-a2b6-2075afc56f21 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=c413ad29-f64f-4df7-8658-9f020f4bdc08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a7:05:ba:05:37:66:76:47:60:89:cf:e5:b5: d4:9e:71:32:67:20:05:a8:3a:97:85:31:51:76:a7: 15:54:9c:4c:1e:34:a9:4f:19:5d:4b:ac:c9:05:5f: 00:5f:f6:61:b9:71:b7:a8:09:47:10:75:b1:30:e1: 1c:5c:c0:84:2f:17:62:be:6a:e4:50:47:a5:8e:4a: 0d:91:36:b3:b4:fe:fc:f9:eb:73:8e:f9:81:a5:25: da:58:a4:13:24:01:c5:4e:4d:63:ed:1c:55:8d:37: 3f:56:cc:49:46:bf:ad:0f:0c:d5:ff:07:00:cc:f6: 00:a5:a9:18:4c:64:d4:32:55:a1:ba:65:62:b4:da: 21:5c:e5:80:43:76:6e:7f:94:95:6d:56:99:47:71: 25:1d:70:d4:89:6c:d7:e7:27:41:f7:09:16:55:c5: b4:81:b3:b5:d6:d4:df:19:51:56:a7:73:ee:04:22: bd:9d:fe:78:7d:4a:15:f1:b4:6d:c8:d8:ca:38:fe: d3:7f:f1:00:88:83:bb:82:85:8b:68:d6:a8:c7:ca: 31:d3:e0:b1:d0:5d:cc:be:ed:50:7a:ec:3f:e9:93: 6f:2d:99:32:0f:42:bf:89:11:78:57:10:c9:64:ab: 53:4e:d1:e4:b9:7d:26:f2:3c:2a:56:2c:aa:2f:3b: 80:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:45:7B:D9:04:9D:9A:C8:D7:60:C3:66:DE:57:07:21:A6:FA:F6:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/1b78ac29-d85c-3f7e-aec2-b3537f31c1b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.crl X509v3 Authority Key Identifier: keyid:AB:2B:9D:64:9F:90:C1:18:3F:2B:2E:38:1F:79:BF:7D:93:6A:47:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer sbgp-ipAddrBlock: critical IPv4: 67.220.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:17:b0:dd:c6:3c:ee:6f:bc:f7:3a:bb:8c:60:f3:da:b8:5b: 52:d5:fe:ad:87:49:80:48:50:d6:80:7d:50:97:0d:07:d3:26: 8b:3d:fe:04:08:6f:e7:ad:1a:71:88:7f:5c:09:32:0d:c0:9f: 28:ab:42:42:15:a3:b8:6c:41:b1:75:9f:dc:1b:55:3b:ed:48: 21:f7:f8:fe:5e:d4:ba:3f:5a:51:fc:08:0a:0c:88:12:72:a1: ca:da:eb:35:30:2f:9f:c4:0c:ab:0a:ef:57:89:7a:c0:ff:42: 7a:0c:36:a9:93:a6:02:a8:11:32:85:70:f3:de:f8:ef:3a:5f: 47:a2:4a:66:29:d5:bd:74:7a:c2:c1:0c:fc:ed:28:92:f2:a9: e3:c1:c2:44:97:f3:96:4d:85:f3:e5:04:21:7f:cb:35:c2:3b: ee:d0:26:db:57:05:8c:db:51:a4:3c:c6:04:e0:78:3a:0f:83: cf:e9:e9:e0:07:28:c3:97:ad:43:c9:ae:ad:c4:56:f8:4d:e2: b8:d0:f1:c2:0e:fd:0a:75:26:35:46:0b:68:90:35:9b:e2:25: 93:65:37:28:b1:82:36:b3:53:22:e5:13:01:73:20:75:f2:10: b6:0a:2e:2f:f3:ae:a9:3a:23:7b:e6:8d:9e:32:9f:a2:8a:9f: f4:07:c9:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0FwAJXww5dXmI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmNWFjODctNzgxNC00ZjU4LWEyYjYtMjA3NWFmYzU2 ZjIxMB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk YzQxM2FkMjktZjY0Zi00ZGY3LTg2NTgtOWYwMjBmNGJkYzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwacFugU3ZnZHYInP5bXUnnEyZyAFqDqXhTFR dqcVVJxMHjSpTxldS6zJBV8AX/ZhuXG3qAlHEHWxMOEcXMCELxdivmrkUEeljkoN kTaztP78+etzjvmBpSXaWKQTJAHFTk1j7RxVjTc/VsxJRr+tDwzV/wcAzPYApakY TGTUMlWhumVitNohXOWAQ3Zuf5SVbVaZR3ElHXDUiWzX5ydB9wkWVcW0gbO11tTf GVFWp3PuBCK9nf54fUoV8bRtyNjKOP7Tf/EAiIO7goWLaNaox8ox0+Cx0F3Mvu1Q euw/6ZNvLZkyD0K/iRF4VxDJZKtTTtHkuX0m8jwqViyqLzuApQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFFe9kEnZrI12DDZt5XByGm+vYoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZmY1 YWM4Ny03ODE0LTRmNTgtYTJiNi0yMDc1YWZjNTZmMjEvMWI3OGFjMjktZDg1Yy0z ZjdlLWFlYzItYjM1MzdmMzFjMWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmZmNWFjODctNzgxNC00ZjU4LWEy YjYtMjA3NWFmYzU2ZjIxLzJmZjVhYzg3LTc4MTQtNGY1OC1hMmI2LTIwNzVhZmM1 NmYyMS5jcmwwHwYDVR0jBBgwFoAUqyudZJ+QwRg/Ky44H3m/fZNqR50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZmY1YWM4Ny03ODE0LTRmNTgtYTJiNi0yMDc1 YWZjNTZmMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9wwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoXsN3GPO5vvPc6u4xg89q4W1LV/q2HSYBIUNaAfVCXDQfTJos9/gQI b+etGnGIf1wJMg3AnyirQkIVo7hsQbF1n9wbVTvtSCH3+P5e1Lo/WlH8CAoMiBJy ocra6zUwL5/EDKsK71eJesD/QnoMNqmTpgKoETKFcPPe+O86X0eiSmYp1b10esLB DPztKJLyqePBwkSX85ZNhfPlBCF/yzXCO+7QJttXBYzbUaQ8xgTgeDoPg8/p6eAH KMOXrUPJrq3EVvhN4rjQ8cIO/Qp1JjVGC2iQNZviJZNlNyixgjazUyLlEwFzIHXy ELYKLi/zrqk6I3vmjZ4yn6KKn/QHyeo= -----END CERTIFICATE-----Generated at Wed May 13 12:20:44 2026 by rpki-client