$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/658c0a8c-b51a-3721-9ba5-bd0cc80329d5.roa File: 658c0a8c-b51a-3721-9ba5-bd0cc80329d5.roa (raw, json) Hash identifier: h/N4RMImxjncv0QsfT5frvdl0nY9CugqVGHjWqT6POM= Subject key identifier: 33:F0:5B:AA:E6:50:D6:D5:48:84:76:3C:54:E0:DF:08:12:2B:4D:4A Certificate issuer: /CN=05a4c80a-51b6-487d-a927-afcc950c360c Certificate serial: 010D0C9F4328584D95EFEE4442EEE67EC06FAB80 Authority key identifier: A2:E5:5D:83:AB:ED:A3:FB:D1:4D:BD:CC:B8:B5:0D:57:1F:97:14:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/658c0a8c-b51a-3721-9ba5-bd0cc80329d5.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 1239 IP address blocks: 74.117.114.0/23 maxlen: 23 74.117.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/05a4c80a-51b6-487d-a927-afcc950c360c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/05a4c80a-51b6-487d-a927-afcc950c360c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:ee:44:42:ee:e6:7e:c0:6f:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05a4c80a-51b6-487d-a927-afcc950c360c Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=711ef867-2bba-4b8b-aaf5-8a79da0789ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:39:c1:b9:b0:1a:b7:78:03:96:c6:da:00:28: 83:f9:ef:9f:78:68:eb:db:56:e3:20:54:e7:7c:2e: a0:0b:f3:cd:93:06:e9:5f:1d:44:a1:09:b5:5f:86: 81:c9:e4:a2:f4:92:a4:1e:ef:97:70:84:be:d8:c7: e0:cc:13:88:55:78:17:78:18:8f:b3:7c:95:d0:a2: 7e:08:c9:3d:28:49:50:2c:69:46:e7:a1:b1:ac:0b: 32:cb:1a:58:91:f6:f3:88:db:14:47:e1:72:2e:a4: 24:ac:f0:9f:8f:32:ef:1e:2d:3d:e8:7a:da:a2:ef: d4:09:2f:10:d8:60:81:b8:6c:6e:88:f0:e8:56:d6: f6:5b:a7:41:69:bb:cf:ca:5e:3c:8a:c6:db:47:9d: cb:cf:c2:19:2e:05:3c:70:4b:81:9d:43:e8:b7:c0: 48:71:d3:5a:f3:d5:d5:06:75:87:ec:b6:e1:3d:37: d9:6e:10:e3:21:73:99:d1:d7:c2:36:dc:11:77:97: dd:14:19:37:81:fe:69:be:26:3f:99:5e:3d:6f:50: 3c:4e:50:b5:12:d0:c1:62:29:cb:5b:04:82:15:c2: 4d:c8:1c:77:4f:e8:bc:11:07:60:8f:c8:d8:d5:07: fe:bd:8b:3b:73:bd:e6:84:5b:ce:ec:d8:51:2f:80: 9d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F0:5B:AA:E6:50:D6:D5:48:84:76:3C:54:E0:DF:08:12:2B:4D:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/658c0a8c-b51a-3721-9ba5-bd0cc80329d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/05a4c80a-51b6-487d-a927-afcc950c360c.crl X509v3 Authority Key Identifier: keyid:A2:E5:5D:83:AB:ED:A3:FB:D1:4D:BD:CC:B8:B5:0D:57:1F:97:14:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c.cer sbgp-ipAddrBlock: critical IPv4: 74.117.114.0-74.117.119.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:0d:8f:53:a0:86:d9:dd:ca:1e:5b:60:57:b5:91:23:c7:f1: d4:e1:52:91:35:81:37:5b:24:42:42:70:4a:a0:0b:ea:41:67: f0:7e:e3:e3:ec:94:ad:28:9a:2a:3d:3b:e3:ad:10:c8:c2:e9: 6d:d0:87:3f:d8:5b:20:c7:c4:e4:64:b6:87:30:4c:b7:4a:05: cf:f9:36:f4:28:51:ea:a3:48:75:a8:cf:91:52:f2:25:9c:7d: 6a:75:d7:38:b0:6c:b3:05:4d:ff:ac:46:9d:f3:a2:07:72:c6: f1:27:c2:c7:5f:5e:77:bb:5b:cb:12:a9:8f:df:a3:c5:93:8a: 23:4c:b6:98:e0:76:07:a6:fa:6e:ce:6a:cc:c9:41:f0:ab:53: 99:ff:f1:aa:27:b7:6c:af:80:d3:7f:f1:9d:56:d0:85:01:12: 12:f5:97:36:39:09:2f:4e:2e:99:3a:e9:ba:08:5a:41:cb:a1: d6:f7:dc:c1:0a:85:89:88:2b:9a:b8:19:76:a4:64:2a:d6:f0: d1:26:40:05:7a:bc:61:8e:4a:63:19:e7:47:4b:2f:e4:12:95: 1d:a4:4a:1a:c0:dd:3e:83:87:98:8c:12:fd:19:10:4e:a5:29: e8:e1:09:22:b3:25:dc:fa:d9:92:94:d4:96:3f:7f:e4:14:e9: 24:e0:87:dd -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE2V7+5EQu7mfsBvq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDVhNGM4MGEtNTFiNi00ODdkLWE5MjctYWZjYzk1MGMz NjBjMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NzExZWY4NjctMmJiYS00YjhiLWFhZjUtOGE3OWRhMDc4OWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTnBubAat3gDlsbaACiD+e+feGjr21bjIFTn fC6gC/PNkwbpXx1EoQm1X4aByeSi9JKkHu+XcIS+2MfgzBOIVXgXeBiPs3yV0KJ+ CMk9KElQLGlG56GxrAsyyxpYkfbziNsUR+FyLqQkrPCfjzLvHi096Hraou/UCS8Q 2GCBuGxuiPDoVtb2W6dBabvPyl48isbbR53Lz8IZLgU8cEuBnUPot8BIcdNa89XV BnWH7LbhPTfZbhDjIXOZ0dfCNtwRd5fdFBk3gf5pviY/mV49b1A8TlC1EtDBYinL WwSCFcJNyBx3T+i8EQdgj8jY1Qf+vYs7c73mhFvO7NhRL4CdpwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFDPwW6rmUNbVSIR2PFTg3wgSK01KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNWE0 YzgwYS01MWI2LTQ4N2QtYTkyNy1hZmNjOTUwYzM2MGMvNjU4YzBhOGMtYjUxYS0z NzIxLTliYTUtYmQwY2M4MDMyOWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDVhNGM4MGEtNTFiNi00ODdkLWE5 MjctYWZjYzk1MGMzNjBjLzA1YTRjODBhLTUxYjYtNDg3ZC1hOTI3LWFmY2M5NTBj MzYwYy5jcmwwHwYDVR0jBBgwFoAUouVdg6vto/vRTb3MuLUNVx+XFLEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNWE0YzgwYS01MWI2LTQ4N2QtYTkyNy1hZmNj OTUwYzM2MGMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFKdXID BANKdXAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEALQ2PU6CG2d3KHltgV7WRI8fx1OFSkTWBN1skQkJwSqAL 6kFn8H7j4+yUrSiaKj07460QyMLpbdCHP9hbIMfE5GS2hzBMt0oFz/k29ChR6qNI dajPkVLyJZx9anXXOLBsswVN/6xGnfOiB3LG8SfCx19ed7tbyxKpj9+jxZOKI0y2 mOB2B6b6bs5qzMlB8KtTmf/xqie3bK+A03/xnVbQhQESEvWXNjkJL04umTrpugha Qcuh1vfcwQqFiYgrmrgZdqRkKtbw0SZABXq8YY5KYxnnR0sv5BKVHaRKGsDdPoOH mIwS/RkQTqUp6OEJIrMl3PrZkpTUlj9/5BTpJOCH3Q== -----END CERTIFICATE-----Generated at Wed May 13 13:59:51 2026 by rpki-client