$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/29047bdf-2f51-33de-8db8-f319ec383617.roa File: 29047bdf-2f51-33de-8db8-f319ec383617.roa (raw, json) Hash identifier: P3Y0CTqfPHXfZ/w6Ub/+iXOuDgi7soXALzRiv6vSa8w= Subject key identifier: 03:D5:DF:29:6B:82:7E:11:33:DE:19:D7:3C:2D:AC:B1:A7:E1:B1:0C Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584D8EF5756BD24C3D6B50DFB7A4 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/29047bdf-2f51-33de-8db8-f319ec383617.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 13768 IP address blocks: 64.34.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:75:6b:d2:4c:3d:6b:50:df:b7:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=aa3e9df1-3c29-4fde-bb96-a808e8153393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:61:b5:d7:39:40:17:52:0d:90:bf:da:64:97: 15:fa:0b:19:04:09:7f:35:36:ee:bf:d9:f9:cd:aa: a4:e1:fe:0f:48:ac:4b:8d:25:53:55:f6:62:6c:79: fc:94:ed:8e:96:42:53:ad:85:9a:88:06:c6:06:70: c3:07:53:c3:ec:a6:65:d8:71:38:d4:93:45:97:ed: ad:4d:c0:6d:81:91:ed:6e:13:ff:8a:39:97:06:f8: 46:63:5e:07:61:c4:1f:b4:18:85:42:08:be:fe:c1: 25:b6:a0:a4:2d:a7:1a:2a:14:62:99:99:53:d5:45: bd:d3:33:fa:0b:ae:4a:45:f3:7d:73:58:38:6b:89: 72:fb:05:e2:92:4f:35:77:f0:ec:0f:3d:4b:60:d3: ba:8e:0f:89:7c:25:9d:3c:12:9e:9c:9d:48:c0:91: 8c:fd:00:48:c4:e3:72:f0:f3:ac:22:81:54:d0:dd: da:9f:fb:db:34:2f:33:2d:98:b6:2f:c5:4d:cd:11: 78:94:bd:39:29:bd:0b:4e:4d:f7:86:45:e6:18:7c: 25:19:cc:23:04:dd:ca:e5:f6:38:44:f6:37:4d:0e: 3f:66:41:fd:0a:e4:77:af:7f:fc:0b:80:9c:3d:47: 16:e8:ce:7b:6e:a9:63:84:0a:76:94:ca:7c:2b:81: b8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D5:DF:29:6B:82:7E:11:33:DE:19:D7:3C:2D:AC:B1:A7:E1:B1:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/29047bdf-2f51-33de-8db8-f319ec383617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:4f:c6:7c:94:13:9c:83:db:1b:bb:58:46:76:5f:c0:41:76: f7:db:53:b6:9b:2e:27:70:48:b9:bd:69:37:d8:e0:a2:88:e1: 7f:a7:63:13:83:e9:96:81:6b:ab:2e:71:d8:28:4b:2c:f1:80: 53:c7:5b:43:3d:4e:3a:e5:49:a8:0f:e6:58:a8:eb:e0:d4:47: 5e:cf:23:01:d5:e0:a6:e6:60:47:03:f5:e5:ae:c3:2c:98:a6: 00:27:12:ad:dd:ef:02:e2:23:0c:68:ad:03:59:d6:9d:0f:c8: b6:7e:2e:9e:8c:fd:80:a5:8d:89:02:3e:eb:cd:42:0e:ed:87: a5:ad:b6:77:8d:a5:3a:49:e3:1a:a7:a3:14:cf:f3:20:8c:3c: 20:e5:9f:70:1f:a8:68:8b:a4:ee:f7:79:77:36:79:8c:d8:e1: 29:eb:cc:67:13:db:03:2f:b3:48:44:58:91:ec:36:00:75:6a: 88:8b:ac:b1:02:14:a6:95:c4:3e:a3:3a:55:e7:d7:ac:a2:4c: 9f:bb:28:c0:f9:d9:f1:0a:c2:84:b8:6d:29:8f:9a:2e:31:20: c3:35:d8:bd:ad:4a:63:8e:c9:07:7f:90:27:9c:6b:3b:62:0f: e7:f3:d8:71:4c:81:46:cd:0f:1d:d5:cc:09:dc:4b:32:76:09: c2:a2:b4:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9XVr0kw9a1Dft6QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YWEzZTlkZjEtM2MyOS00ZmRlLWJiOTYtYTgwOGU4MTUzMzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmG11zlAF1INkL/aZJcV+gsZBAl/NTbuv9n5 zaqk4f4PSKxLjSVTVfZibHn8lO2OlkJTrYWaiAbGBnDDB1PD7KZl2HE41JNFl+2t TcBtgZHtbhP/ijmXBvhGY14HYcQftBiFQgi+/sEltqCkLacaKhRimZlT1UW90zP6 C65KRfN9c1g4a4ly+wXikk81d/DsDz1LYNO6jg+JfCWdPBKenJ1IwJGM/QBIxONy 8POsIoFU0N3an/vbNC8zLZi2L8VNzRF4lL05Kb0LTk33hkXmGHwlGcwjBN3K5fY4 RPY3TQ4/ZkH9CuR3r3/8C4CcPUcW6M57bqljhAp2lMp8K4G4bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPV3ylrgn4RM94Z1zwtrLGn4bEMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMjkwNDdiZGYtMmY1MS0z M2RlLThkYjgtZjMxOWVjMzgzNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQCLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9PxnyUE5yD2xu7WEZ2X8BBdvfbU7abLidwSLm9aTfY4KKI4X+nYxOD 6ZaBa6sucdgoSyzxgFPHW0M9TjrlSagP5lio6+DUR17PIwHV4KbmYEcD9eWuwyyY pgAnEq3d7wLiIwxorQNZ1p0PyLZ+Lp6M/YCljYkCPuvNQg7th6WttneNpTpJ4xqn oxTP8yCMPCDln3AfqGiLpO73eXc2eYzY4SnrzGcT2wMvs0hEWJHsNgB1aoiLrLEC FKaVxD6jOlXn16yiTJ+7KMD52fEKwoS4bSmPmi4xIMM12L2tSmOOyQd/kCecazti D+fz2HFMgUbNDx3VzAncSzJ2CcKitIY= -----END CERTIFICATE-----Generated at Wed May 13 07:09:01 2026 by rpki-client