$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/3873425f-0330-3da6-b372-5e44dd7a2deb.roa File: 3873425f-0330-3da6-b372-5e44dd7a2deb.roa (raw, json) Hash identifier: P5+ioqt5PteoISJP5uFpR/DHU/Jh+hqXdmb3KBOzUMc= Subject key identifier: AA:BA:8A:2D:F5:9A:3C:01:D9:BE:D0:92:B6:66:E1:0E:A9:10:5C:72 Certificate issuer: /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Certificate serial: 010D0C9F4328584D44FA41F7338B4494A57870C0 Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/3873425f-0330-3da6-b372-5e44dd7a2deb.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 35847 IP address blocks: 74.51.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:41:f7:33:8b:44:94:a5:78:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=9aad0478-98ed-4df6-8e90-e7428a8ddd20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6c:c5:11:f2:95:5c:68:aa:d7:ad:a2:a3:49: 11:11:76:34:bc:d9:7e:e5:9f:05:11:0a:0a:17:7e: f6:40:7f:8b:e2:1e:87:05:35:c0:17:69:f9:79:ba: 2d:b9:04:26:9a:96:32:fa:e0:95:bc:7b:ae:6d:31: 00:c1:8f:1e:1b:fa:93:dc:7f:05:3f:23:ae:b3:eb: 42:d3:be:f7:92:6f:67:3c:31:f1:fa:30:0d:ec:62: b7:90:37:fb:40:08:29:f8:f4:53:04:b5:68:6d:40: 60:5a:31:87:5e:48:75:ff:b0:22:84:1d:ce:2f:42: 6d:ce:f7:85:d5:72:8d:fa:f2:4b:17:61:79:ac:52: 9c:40:ce:f2:13:88:a0:3b:e7:d1:c6:8b:3a:7e:b5: 27:2a:99:e8:2f:c4:0f:ad:bb:52:99:c6:54:a3:74: 99:47:c3:aa:a9:e4:44:cb:6d:b4:35:29:3b:79:f4: 0a:0e:de:e2:7e:d8:57:c3:20:49:08:c3:e5:3c:5f: 17:a9:3e:28:fa:39:46:48:f3:bd:4c:94:58:85:a8: 53:b4:8c:8d:3f:a3:e3:81:70:84:0d:1f:ce:36:bc: 5c:61:3d:58:a8:63:e8:62:43:7d:80:23:a1:43:6b: 9b:17:34:eb:9a:98:cc:47:b3:a0:3e:33:f9:63:f3: 8e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BA:8A:2D:F5:9A:3C:01:D9:BE:D0:92:B6:66:E1:0E:A9:10:5C:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/3873425f-0330-3da6-b372-5e44dd7a2deb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl X509v3 Authority Key Identifier: keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer sbgp-ipAddrBlock: critical IPv4: 74.51.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:20:70:c5:b8:a4:cb:bb:05:e8:2e:be:c7:e1:df:85:d6:4b: b9:fd:13:fe:c8:fa:93:80:94:62:c2:b9:06:e8:88:10:05:66: be:76:af:ad:cf:23:b3:b1:5c:f4:2e:c8:f4:8a:a9:dd:1d:26: c3:82:22:bd:98:4a:37:13:6a:31:90:ea:e6:2c:52:42:00:6d: 90:21:4c:35:dc:b0:2f:11:5c:40:80:9e:5d:75:47:35:d2:1f: 23:e0:77:95:1c:ea:22:83:6c:f4:c2:dd:93:f4:34:94:d8:90: b1:be:61:50:28:bc:51:fe:95:f2:09:94:e2:ae:49:c6:90:41: 8c:3f:0d:ef:0e:a0:9e:7c:53:d1:22:5e:c2:32:b8:a1:4e:a2: 39:b0:89:15:57:54:94:09:f5:21:f5:21:9a:b0:90:13:fb:06: 4e:7a:2d:fa:1e:8d:9f:85:82:58:55:86:d0:b3:a9:0a:29:6e: 14:d7:92:1d:b4:42:c1:49:56:6c:23:94:2a:bb:14:e1:4f:35: 98:0e:03:59:0a:1e:ca:de:2a:54:77:f8:3c:62:68:4f:92:c9: 17:4d:a8:c4:06:13:f8:a2:08:68:4c:12:a5:a8:4f:ed:7f:c1: fb:e2:5b:24:14:a0:a9:c6:97:a0:b2:2c:2d:a6:d5:7a:43:0d: 27:b7:8f:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+kH3M4tElKV4cMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U0YTQ2MDktNmMyZS00N2Q4LThjNjktMWQ4MGEyY2Yz ZjExMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OWFhZDA0NzgtOThlZC00ZGY2LThlOTAtZTc0MjhhOGRkZDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWzFEfKVXGiq162io0kREXY0vNl+5Z8FEQoK F372QH+L4h6HBTXAF2n5ebotuQQmmpYy+uCVvHuubTEAwY8eG/qT3H8FPyOus+tC 0773km9nPDHx+jAN7GK3kDf7QAgp+PRTBLVobUBgWjGHXkh1/7AihB3OL0JtzveF 1XKN+vJLF2F5rFKcQM7yE4igO+fRxos6frUnKpnoL8QPrbtSmcZUo3SZR8OqqeRE y220NSk7efQKDt7ifthXwyBJCMPlPF8XqT4o+jlGSPO9TJRYhahTtIyNP6PjgXCE DR/ONrxcYT1YqGPoYkN9gCOhQ2ubFzTrmpjMR7OgPjP5Y/OOqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKq6ii31mjwB2b7QkrZm4Q6pEFxyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTRh NDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgwYTJjZjNmMTEvMzg3MzQyNWYtMDMzMC0z ZGE2LWIzNzItNWU0NGRkN2EyZGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2U0YTQ2MDktNmMyZS00N2Q4LThj NjktMWQ4MGEyY2YzZjExL2NlNGE0NjA5LTZjMmUtNDdkOC04YzY5LTFkODBhMmNm M2YxMS5jcmwwHwYDVR0jBBgwFoAUaO+Qh8HxiFXOXjq3/4RHO8hZ6c0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTRhNDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgw YTJjZjNmMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESjPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsgcMW4pMu7Beguvsfh34XWS7n9E/7I+pOAlGLCuQboiBAFZr52r63P I7OxXPQuyPSKqd0dJsOCIr2YSjcTajGQ6uYsUkIAbZAhTDXcsC8RXECAnl11RzXS HyPgd5Uc6iKDbPTC3ZP0NJTYkLG+YVAovFH+lfIJlOKuScaQQYw/De8OoJ58U9Ei XsIyuKFOojmwiRVXVJQJ9SH1IZqwkBP7Bk56LfoejZ+FglhVhtCzqQopbhTXkh20 QsFJVmwjlCq7FOFPNZgOA1kKHsreKlR3+DxiaE+SyRdNqMQGE/iiCGhMEqWoT+1/ wfviWyQUoKnGl6CyLC2m1XpDDSe3j2o= -----END CERTIFICATE-----Generated at Thu Mar 26 18:18:18 2026 by rpki-client