$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/7dae22f8-939a-3a54-b81c-8890233bc71a.roa File: 7dae22f8-939a-3a54-b81c-8890233bc71a.roa (raw, json) Hash identifier: t2dsYbJYgUXj1PKdDF1RmsujH9sLGhEYniYAhtghP5M= Subject key identifier: 79:1E:A9:5D:63:89:1B:A1:B0:8E:F4:89:AD:83:77:98:33:D6:C0:BC Certificate issuer: /CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Certificate serial: 010D0C9F4328584DA11ABAD6E3F30E9EBA3063C0 Authority key identifier: 0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/7dae22f8-939a-3a54-b81c-8890233bc71a.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 30691 IP address blocks: 65.111.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:ba:d6:e3:f3:0e:9e:ba:30:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=4da3c34d-5c86-4189-8755-c44ddfb82a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3f:0b:ff:24:9a:eb:ad:93:14:b4:fe:87:3c: 20:6f:b2:35:cc:6b:ea:de:72:e4:5b:fe:b4:dd:00: 25:eb:c1:98:29:06:a4:45:75:7b:da:d7:f9:2a:70: 78:f4:f5:03:88:03:3b:8d:28:18:9c:03:ae:2a:bd: 4b:fe:60:8d:02:85:82:bd:12:be:e1:e8:99:00:d3: da:8a:81:4e:14:06:d6:7f:bb:c0:de:2d:5e:b1:f4: 38:3e:62:9d:07:e2:d5:1f:74:4c:df:2f:db:55:14: a9:5b:3d:84:28:6a:bd:28:22:10:0f:95:35:32:54: 33:0e:9a:81:d7:c3:41:b1:42:c6:ac:5b:d0:53:de: f1:36:5a:1e:b4:3c:03:cf:6a:f0:45:d0:f8:e5:bc: e2:4f:81:3e:87:fb:d5:bc:fb:1f:db:ce:33:63:0a: be:34:d7:02:bd:30:6a:3b:aa:30:6c:ad:2d:9a:02: 67:be:ee:f3:a1:9e:7f:47:58:ac:af:49:a6:c1:ac: 66:e9:3f:11:9f:25:7a:ee:a3:3d:26:5a:cd:aa:8a: 76:c0:3a:5b:fc:65:1b:26:fa:3c:f1:ef:7c:8a:9c: 33:c4:a1:50:d7:68:1b:43:83:24:d0:83:93:b4:81: 78:78:f5:a5:a9:a5:f8:e5:68:dc:37:a4:47:e5:47: 70:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1E:A9:5D:63:89:1B:A1:B0:8E:F4:89:AD:83:77:98:33:D6:C0:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/7dae22f8-939a-3a54-b81c-8890233bc71a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl X509v3 Authority Key Identifier: keyid:0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer sbgp-ipAddrBlock: critical IPv4: 65.111.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ad:c1:7a:71:df:73:25:49:86:3f:56:12:3e:ea:2f:4e:a2: 17:1d:c4:00:54:8d:3a:75:77:a1:84:b9:53:44:d2:3b:f9:33: 7c:6e:28:33:bb:3c:ed:18:75:da:cb:28:8b:38:d7:43:f1:d3: 2f:1a:f5:4d:65:f9:88:d9:45:39:bd:b2:98:09:02:56:2e:34: cb:c9:93:4c:3f:9b:ab:e2:b5:88:75:f0:33:7a:fb:ec:bb:27: 34:35:b0:57:98:51:81:72:50:43:d1:0c:4e:b9:56:04:7f:39: 2d:3d:2d:54:db:12:c2:ed:94:61:bd:f7:67:ae:78:af:40:83: d9:5b:93:71:1c:f9:5b:84:15:c6:9c:bf:62:f5:4c:5d:3b:c6: 09:d1:ab:8f:4d:e8:72:0a:23:12:d1:5e:93:0a:75:82:3d:21: f3:67:dd:c1:80:40:2a:22:ff:37:24:1a:94:61:ed:ba:32:64: b2:41:b1:03:0c:f5:6d:43:04:ca:0f:fe:da:b6:fe:5e:74:31: 13:8f:4a:2b:9b:93:36:e2:49:15:ad:a6:1b:6a:22:6c:c9:a7: 2e:01:a6:e6:35:48:4f:96:a6:3b:b9:10:7a:71:dc:d3:b4:0f: 28:20:e6:34:08:15:64:0a:1a:d1:19:6d:e1:65:fc:88:43:b6: 89:07:31:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGrrW4/MOnrowY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyZDM3OGQtMjBlMS00YjVmLTg1YjktZThjNGNiYTVk NWQ3MB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk NGRhM2MzNGQtNWM4Ni00MTg5LTg3NTUtYzQ0ZGRmYjgyYTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz8L/ySa662TFLT+hzwgb7I1zGvq3nLkW/60 3QAl68GYKQakRXV72tf5KnB49PUDiAM7jSgYnAOuKr1L/mCNAoWCvRK+4eiZANPa ioFOFAbWf7vA3i1esfQ4PmKdB+LVH3RM3y/bVRSpWz2EKGq9KCIQD5U1MlQzDpqB 18NBsULGrFvQU97xNloetDwDz2rwRdD45bziT4E+h/vVvPsf284zYwq+NNcCvTBq O6owbK0tmgJnvu7zoZ5/R1isr0mmwaxm6T8RnyV67qM9JlrNqop2wDpb/GUbJvo8 8e98ipwzxKFQ12gbQ4Mk0IOTtIF4ePWlqaX45WjcN6RH5UdwtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkeqV1jiRuhsI70ia2Dd5gz1sC8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZjJk Mzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0Y2JhNWQ1ZDcvN2RhZTIyZjgtOTM5YS0z YTU0LWI4MWMtODg5MDIzM2JjNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2YyZDM3OGQtMjBlMS00YjVmLTg1 YjktZThjNGNiYTVkNWQ3LzNmMmQzNzhkLTIwZTEtNGI1Zi04NWI5LWU4YzRjYmE1 ZDVkNy5jcmwwHwYDVR0jBBgwFoAUCqqSCDMPCs7IDjlpf+GFY9FJSlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZjJkMzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0 Y2JhNWQ1ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQW/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEStwXpx33MlSYY/VhI+6i9OohcdxABUjTp1d6GEuVNE0jv5M3xuKDO7 PO0YddrLKIs410Px0y8a9U1l+YjZRTm9spgJAlYuNMvJk0w/m6vitYh18DN6++y7 JzQ1sFeYUYFyUEPRDE65VgR/OS09LVTbEsLtlGG992eueK9Ag9lbk3Ec+VuEFcac v2L1TF07xgnRq49N6HIKIxLRXpMKdYI9IfNn3cGAQCoi/zckGpRh7boyZLJBsQMM 9W1DBMoP/tq2/l50MROPSiubkzbiSRWtphtqImzJpy4BpuY1SE+Wpju5EHpx3NO0 Dygg5jQIFWQKGtEZbeFl/IhDtokHMbA= -----END CERTIFICATE-----Generated at Wed May 13 05:31:10 2026 by rpki-client