$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3/e919f5d7-15f4-3d9a-aad1-94f19ddb2962.roa File: e919f5d7-15f4-3d9a-aad1-94f19ddb2962.roa (raw, json) Hash identifier: 1V28LLVHLRym4FIyvYvV7xaL7MZmre4kWzdy6HTgBbs= Subject key identifier: 17:2E:95:9B:51:2A:05:F3:21:01:41:77:3B:40:D7:A4:9D:48:99:27 Certificate issuer: /CN=02858587-45de-40d7-9b70-faa916db9aa3 Certificate serial: 010D0C9F4328584DA73F6301F27B057DA96E2480 Authority key identifier: 9A:41:4F:AC:FA:D0:57:64:41:03:CC:99:A8:DC:AA:AE:ED:30:07:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3/e919f5d7-15f4-3d9a-aad1-94f19ddb2962.roa Signing time: Tue 28 Apr 2026 05:49:17 +0000 ROA not before: Tue 28 Apr 2026 05:49:17 +0000 ROA not after: Mon 27 Jul 2026 05:49:17 +0000 asID: 31898 IP address blocks: 65.20.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3/02858587-45de-40d7-9b70-faa916db9aa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3/02858587-45de-40d7-9b70-faa916db9aa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a7:3f:63:01:f2:7b:05:7d:a9:6e:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02858587-45de-40d7-9b70-faa916db9aa3 Validity Not Before: Apr 28 05:49:17 2026 GMT Not After : Jul 27 05:49:17 2026 GMT Subject: CN=4c759ca8-5406-4dfc-9a99-9658ed1fb31d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:78:84:44:9f:4d:fe:f7:66:10:9b:fb:81:32: e1:d1:4a:ec:15:e9:d7:54:37:4b:7c:20:a8:f1:d4: 1e:c7:f2:4c:f0:0b:79:f1:83:15:b8:6c:73:2a:13: d3:fc:cf:0e:5f:e8:c2:2d:08:62:69:04:c7:7e:1f: 4f:63:15:79:ac:ba:24:a3:43:9a:ac:1f:d2:e8:18: 01:a9:4e:3c:dd:00:13:14:c9:da:8e:3e:da:72:18: 98:10:fb:3e:41:86:61:65:7b:ff:2c:16:95:74:be: e5:ef:bf:9c:13:01:10:de:eb:89:4c:ac:ed:72:86: 43:89:07:d1:e7:dc:0a:a9:12:bb:90:02:2e:2c:8a: 7b:1c:ba:72:65:a4:24:53:9b:ba:c3:4f:b6:f3:31: 82:38:9e:1e:21:47:5c:f0:d4:63:ea:8c:c3:de:bc: 50:78:3c:0f:bf:6f:7c:13:27:4e:03:52:1c:6c:9c: c0:67:38:f8:58:f6:2e:d0:66:00:8f:eb:23:c8:c4: 91:ae:43:07:fd:63:6b:20:ca:1d:61:d9:2e:d8:06: 47:df:c6:5f:1b:2d:60:db:fc:0f:e9:6d:04:6c:82: ef:dc:24:de:7a:f5:80:d6:ba:7b:a1:7a:fc:d9:97: 12:1f:ac:31:75:e6:e2:d0:aa:59:46:3d:06:f8:02: c8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2E:95:9B:51:2A:05:F3:21:01:41:77:3B:40:D7:A4:9D:48:99:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3/e919f5d7-15f4-3d9a-aad1-94f19ddb2962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3/02858587-45de-40d7-9b70-faa916db9aa3.crl X509v3 Authority Key Identifier: keyid:9A:41:4F:AC:FA:D0:57:64:41:03:CC:99:A8:DC:AA:AE:ED:30:07:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3.cer sbgp-ipAddrBlock: critical IPv4: 65.20.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:71:09:ef:7e:fe:cf:17:2c:6e:90:45:0c:e6:9a:1d:79:f7: 6a:63:0d:da:eb:35:66:81:bd:bc:fb:f4:e8:21:47:c4:55:d6: 2c:27:b5:62:8c:be:b6:c3:f3:c2:e9:63:44:4c:da:a9:67:c7: 80:33:02:9a:1e:bb:38:3c:d9:0c:a5:19:c8:c7:9e:ba:14:98: 13:65:f5:e6:f5:34:46:67:67:6d:29:40:34:d9:bf:2a:91:88: 49:a9:43:86:5a:63:5b:21:4c:56:b7:87:c2:cc:7a:d4:06:72: a1:50:18:8b:e9:56:52:ff:7b:58:df:31:ab:38:ae:b4:cd:a6: 2b:d3:8b:7c:67:71:1a:ba:f6:94:02:5d:a3:7b:25:0d:2e:51: 5a:1d:1f:82:01:59:e3:c4:24:11:04:01:07:e5:08:a1:93:f5: 88:a5:d5:5e:43:11:ec:a7:ff:27:e4:3b:e2:4a:ce:26:d8:48: 70:8d:f7:98:86:b4:e9:f2:98:cd:90:84:ed:0a:05:1b:1a:24: ee:0b:c2:b2:8f:8b:d4:c9:5a:64:70:6f:36:56:d7:93:1d:06: 99:16:bc:e7:8c:d3:f3:aa:d7:de:9b:f6:ac:11:d0:37:80:90: ac:08:3b:36:7f:2b:d9:2c:bf:95:e3:1f:e1:12:18:7b:6d:e4: af:e7:78:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2nP2MB8nsFfaluJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI4NTg1ODctNDVkZS00MGQ3LTliNzAtZmFhOTE2ZGI5 YWEzMB4XDTI2MDQyODA1NDkxN1oXDTI2MDcyNzA1NDkxN1owLzEtMCsGA1UEAxMk NGM3NTljYTgtNTQwNi00ZGZjLTlhOTktOTY1OGVkMWZiMzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXiERJ9N/vdmEJv7gTLh0UrsFenXVDdLfCCo 8dQex/JM8At58YMVuGxzKhPT/M8OX+jCLQhiaQTHfh9PYxV5rLoko0OarB/S6BgB qU483QATFMnajj7achiYEPs+QYZhZXv/LBaVdL7l77+cEwEQ3uuJTKztcoZDiQfR 59wKqRK7kAIuLIp7HLpyZaQkU5u6w0+28zGCOJ4eIUdc8NRj6ozD3rxQeDwPv298 EydOA1IcbJzAZzj4WPYu0GYAj+sjyMSRrkMH/WNrIModYdku2AZH38ZfGy1g2/wP 6W0EbILv3CTeevWA1rp7oXr82ZcSH6wxdebi0KpZRj0G+ALIoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBculZtRKgXzIQFBdztA16SdSJknMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wMjg1 ODU4Ny00NWRlLTQwZDctOWI3MC1mYWE5MTZkYjlhYTMvZTkxOWY1ZDctMTVmNC0z ZDlhLWFhZDEtOTRmMTlkZGIyOTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDI4NTg1ODctNDVkZS00MGQ3LTli NzAtZmFhOTE2ZGI5YWEzLzAyODU4NTg3LTQ1ZGUtNDBkNy05YjcwLWZhYTkxNmRi OWFhMy5jcmwwHwYDVR0jBBgwFoAUmkFPrPrQV2RBA8yZqNyqru0wBzAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wMjg1ODU4Ny00NWRlLTQwZDctOWI3MC1mYWE5 MTZkYjlhYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRQ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVxCe9+/s8XLG6QRQzmmh1592pjDdrrNWaBvbz79OghR8RV1iwntWKM vrbD88LpY0RM2qlnx4AzApoeuzg82QylGcjHnroUmBNl9eb1NEZnZ20pQDTZvyqR iEmpQ4ZaY1shTFa3h8LMetQGcqFQGIvpVlL/e1jfMas4rrTNpivTi3xncRq69pQC XaN7JQ0uUVodH4IBWePEJBEEAQflCKGT9Yil1V5DEeyn/yfkO+JKzibYSHCN95iG tOnymM2QhO0KBRsaJO4LwrKPi9TJWmRwbzZW15MdBpkWvOeM0/Oq196b9qwR0DeA kKwIOzZ/K9ksv5XjH+ESGHtt5K/neJI= -----END CERTIFICATE-----Generated at Wed May 13 12:29:05 2026 by rpki-client