$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710/c51b086f-87b8-314b-a8e9-bb4db249b1c4.roa File: c51b086f-87b8-314b-a8e9-bb4db249b1c4.roa (raw, json) Hash identifier: qg8/6RC7xaR6GO+yLCRsDOeGfXoAUn2rOE8IQxBEAC8= Subject key identifier: A7:C8:B6:DE:D1:D9:41:50:93:09:61:C9:AD:17:4F:A8:CB:9F:C8:36 Certificate issuer: /CN=7470f73a-61d0-4b9c-80ff-a407cc438710 Certificate serial: 010D0C9F4328584D44FA3FC02D05029658365180 Authority key identifier: 1D:52:3F:BE:0B:2A:AE:E8:90:D7:B1:5A:EA:9B:77:79:8D:E7:2F:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710/c51b086f-87b8-314b-a8e9-bb4db249b1c4.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 10821 IP address blocks: 24.224.0.0/19 maxlen: 24 206.253.32.0/19 maxlen: 24 209.42.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710/7470f73a-61d0-4b9c-80ff-a407cc438710.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710/7470f73a-61d0-4b9c-80ff-a407cc438710.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:3f:c0:2d:05:02:96:58:36:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7470f73a-61d0-4b9c-80ff-a407cc438710 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=892c698c-fe0a-49e3-aa6a-0ee92ec84586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:be:be:53:48:a2:92:d2:a7:fb:fa:3e:1a:7f: e1:f6:96:45:06:70:e9:8c:59:2b:0b:7a:80:9f:d9: d1:d0:dd:11:2f:9e:2e:c7:f6:f2:59:cc:7c:df:1b: d6:11:ac:e5:28:6e:3c:dc:d2:57:29:b3:0d:9f:ed: de:91:2d:76:c2:ce:61:61:49:46:cf:e2:8a:dc:70: e2:a0:da:24:08:b7:1a:31:d2:58:dc:c7:9c:38:e3: 4a:25:2d:4c:60:1d:5d:73:b3:ba:9c:e3:3b:62:51: 2b:ef:fd:15:48:d5:ed:32:f1:d2:d1:3d:78:51:66: 95:a0:0c:82:2b:f9:47:e2:29:9d:bb:11:04:87:50: ad:11:ff:0d:c8:22:66:f1:37:0c:85:63:f0:eb:a2: f8:d3:ed:ea:66:a3:84:07:fa:c1:b8:0f:cd:51:16: c0:df:38:9d:be:35:13:a7:27:88:2d:23:cd:db:6c: 18:06:2a:7e:35:78:50:da:75:96:fe:17:8a:c3:7d: 0d:b5:ba:41:db:ef:1e:7c:b0:2f:d1:81:61:85:24: 14:72:5d:b7:67:26:07:4b:99:ba:45:a0:62:5c:08: 3f:be:a7:68:c7:ca:98:bf:34:cd:26:38:1c:4f:96: bd:2f:b3:a7:c6:36:4b:6c:21:9c:60:76:0a:42:7b: 37:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C8:B6:DE:D1:D9:41:50:93:09:61:C9:AD:17:4F:A8:CB:9F:C8:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710/c51b086f-87b8-314b-a8e9-bb4db249b1c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710/7470f73a-61d0-4b9c-80ff-a407cc438710.crl X509v3 Authority Key Identifier: keyid:1D:52:3F:BE:0B:2A:AE:E8:90:D7:B1:5A:EA:9B:77:79:8D:E7:2F:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710.cer sbgp-ipAddrBlock: critical IPv4: 24.224.0.0/19 206.253.32.0/19 209.42.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c0:da:8d:d1:2c:5b:3b:89:15:74:9e:20:c8:80:5e:00:43: 90:88:87:e4:bb:0d:bc:6a:10:ee:0b:ca:ee:f6:43:bc:dd:42: da:9f:dd:6c:2b:2e:ef:87:d6:9e:55:48:6a:41:3b:e7:46:f7: 48:4f:34:3f:f7:7f:9d:d2:41:a1:95:9e:c7:8b:44:ae:66:b3: 7f:d2:ce:7c:38:39:e4:fc:9c:02:62:b7:18:60:48:32:00:bb: e7:dc:15:d2:b7:d4:df:19:f0:9c:dd:2c:3f:e4:46:40:8d:8b: 7a:3a:0d:7c:3f:1b:e3:22:da:04:a8:46:09:9c:5f:64:4a:63: 79:ab:95:45:3b:ed:d6:9a:8a:6d:41:53:3c:bd:4e:56:c1:1d: 96:46:2a:a6:ed:8b:a8:63:5a:34:24:1f:12:b1:bc:9b:4d:6b: d4:eb:73:09:d7:5f:2b:29:b7:5a:f6:0c:83:4f:55:15:ee:43: 2e:e4:42:2a:f7:72:52:ac:d7:24:d8:5f:e5:bb:91:ca:6c:76: 77:ce:ee:7e:37:e6:b4:9e:1c:e5:a4:a6:88:a6:6c:2d:58:b4: be:63:f5:ca:72:13:1c:3c:ee:dc:df:89:52:0e:82:b1:39:2e: d7:81:ca:2e:f1:45:5b:70:80:a9:97:3c:71:d9:56:60:4f:b4: 63:d5:23:17 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE1E+j/ALQUCllg2UYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ3MGY3M2EtNjFkMC00YjljLTgwZmYtYTQwN2NjNDM4 NzEwMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ODkyYzY5OGMtZmUwYS00OWUzLWFhNmEtMGVlOTJlYzg0NTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb6+U0iiktKn+/o+Gn/h9pZFBnDpjFkrC3qA n9nR0N0RL54ux/byWcx83xvWEazlKG483NJXKbMNn+3ekS12ws5hYUlGz+KK3HDi oNokCLcaMdJY3MecOONKJS1MYB1dc7O6nOM7YlEr7/0VSNXtMvHS0T14UWaVoAyC K/lH4imduxEEh1CtEf8NyCJm8TcMhWPw66L40+3qZqOEB/rBuA/NURbA3zidvjUT pyeILSPN22wYBip+NXhQ2nWW/heKw30NtbpB2+8efLAv0YFhhSQUcl23ZyYHS5m6 RaBiXAg/vqdox8qYvzTNJjgcT5a9L7OnxjZLbCGcYHYKQns3ywIDAQABo4IDYTCC A10wHQYDVR0OBBYEFKfItt7R2UFQkwlhya0XT6jLn8g2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83NDcw ZjczYS02MWQwLTRiOWMtODBmZi1hNDA3Y2M0Mzg3MTAvYzUxYjA4NmYtODdiOC0z MTRiLWE4ZTktYmI0ZGIyNDliMWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzQ3MGY3M2EtNjFkMC00YjljLTgw ZmYtYTQwN2NjNDM4NzEwLzc0NzBmNzNhLTYxZDAtNGI5Yy04MGZmLWE0MDdjYzQz ODcxMC5jcmwwHwYDVR0jBBgwFoAUHVI/vgsqruiQ17Fa6pt3eY3nL7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83NDcwZjczYS02MWQwLTRiOWMtODBmZi1hNDA3 Y2M0Mzg3MTAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFGOAAAwQF zv0gAwQF0SpAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEHA2o3RLFs7iRV0niDIgF4AQ5CIh+S7DbxqEO4L yu72Q7zdQtqf3WwrLu+H1p5VSGpBO+dG90hPND/3f53SQaGVnseLRK5ms3/Sznw4 OeT8nAJitxhgSDIAu+fcFdK31N8Z8JzdLD/kRkCNi3o6DXw/G+Mi2gSoRgmcX2RK Y3mrlUU77daaim1BUzy9TlbBHZZGKqbti6hjWjQkHxKxvJtNa9TrcwnXXyspt1r2 DINPVRXuQy7kQir3clKs1yTYX+W7kcpsdnfO7n435rSeHOWkpoimbC1YtL5j9cpy Exw87tzfiVIOgrE5LteByi7xRVtwgKmXPHHZVmBPtGPVIxc= -----END CERTIFICATE-----Generated at Thu Mar 26 03:41:35 2026 by rpki-client