$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/3cd92a3c-2257-3455-bef4-1fda1598d15a.roa File: 3cd92a3c-2257-3455-bef4-1fda1598d15a.roa (raw, json) Hash identifier: 7vKVwK+NNxME+8kgqbGFsQSoCRSwwC17knMh2LK55Xk= Subject key identifier: 5D:D3:F2:87:7C:61:43:C2:C5:F4:58:67:1E:C1:D9:32:C4:C5:F4:15 Certificate issuer: /CN=063abcef-47ff-4267-9198-eb628aba7842 Certificate serial: 010D0C9F4328584DA6B030E99406B023D198C580 Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/3cd92a3c-2257-3455-bef4-1fda1598d15a.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 397976 IP address blocks: 143.223.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:30:e9:94:06:b0:23:d1:98:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=ec60685b-3e1d-4fe3-8466-c26fda999de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:de:ce:71:a5:be:cc:cb:8c:2f:89:6c:de:bb: 69:19:ad:2d:6e:61:b5:7e:5c:4d:12:e4:59:56:fc: 64:eb:1e:f3:12:1c:79:70:30:03:54:9e:71:cb:9a: e6:b9:ec:33:df:fc:e3:53:17:b2:18:ba:5d:33:cc: dd:02:05:66:72:e1:cd:48:16:cd:b1:9e:9f:cd:db: 72:14:e8:ab:86:24:8d:79:8d:4b:ee:1d:e5:99:f6: aa:d0:cd:a6:25:99:98:78:de:93:be:91:cc:58:56: 9d:47:68:b5:ed:81:a6:4f:29:1a:05:a9:18:0b:da: 16:74:db:6f:65:98:bd:76:57:b8:93:bf:dc:30:ac: 91:03:ad:17:8c:cb:c7:84:37:ee:e7:d6:fb:9b:67: 22:eb:ed:a0:e0:96:01:3f:4f:37:d1:c7:ad:fb:64: c0:6a:01:c7:84:60:18:bd:fe:c7:70:89:e8:e3:f3: ad:55:e6:5f:c0:25:84:e3:a8:d6:34:38:22:94:92: 1e:9f:36:3d:33:af:ac:df:32:48:22:f3:d8:40:81: 08:ca:5d:a1:5a:78:1a:20:bf:58:6d:8d:64:64:ea: 4b:9e:b5:32:c9:d5:39:d1:2c:b8:0b:97:8b:4c:85: 18:1f:b8:c3:0b:44:b3:42:58:eb:3d:f0:10:80:95: 87:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D3:F2:87:7C:61:43:C2:C5:F4:58:67:1E:C1:D9:32:C4:C5:F4:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/3cd92a3c-2257-3455-bef4-1fda1598d15a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl X509v3 Authority Key Identifier: keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer sbgp-ipAddrBlock: critical IPv4: 143.223.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:55:d8:2a:d6:87:3f:e5:ab:37:f1:86:27:23:b2:09:9c:1d: 2d:c4:7a:ce:ba:98:4f:88:f9:25:3b:cc:a8:9f:01:b0:40:b6: 5b:38:b0:e5:99:97:71:c7:a4:f7:84:e5:ce:38:0a:4d:ba:f8: e9:67:47:ed:46:5f:d6:c1:98:c1:69:90:6f:65:08:19:f6:45: eb:b3:d7:7a:f5:ae:34:55:8a:0f:e5:d1:d0:2c:ae:55:2c:7c: 38:78:77:52:30:b3:b2:53:1c:43:38:e0:a0:7c:aa:3b:77:07: f5:28:12:48:24:c5:30:85:72:76:7c:4c:c2:a6:1c:24:dc:d3: d3:c8:53:c8:65:d5:79:ee:52:38:b2:86:3b:82:13:24:6b:3a: 59:0b:b0:f0:7d:7b:bb:ca:f8:a3:61:1d:e1:c0:2b:15:c7:cf: 7a:27:96:e4:c3:2d:04:5b:0b:66:d3:ca:6a:e5:b7:84:71:e7: ce:e6:01:c2:73:b4:48:a5:5d:24:45:38:96:74:ea:4e:95:26: 74:27:4c:53:11:6a:fb:dd:f2:6c:27:30:e2:a1:e6:f6:5f:c0: 4a:60:c8:2e:99:04:3f:99:bb:73:b4:eb:e7:b7:8d:50:7c:15: d7:89:95:97:cf:ef:a8:96:2d:10:a5:cb:05:34:47:57:f9:ce: f2:dd:13:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msDDplAawI9GYxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzYWJjZWYtNDdmZi00MjY3LTkxOTgtZWI2MjhhYmE3 ODQyMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk ZWM2MDY4NWItM2UxZC00ZmUzLTg0NjYtYzI2ZmRhOTk5ZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN7OcaW+zMuML4ls3rtpGa0tbmG1flxNEuRZ Vvxk6x7zEhx5cDADVJ5xy5rmuewz3/zjUxeyGLpdM8zdAgVmcuHNSBbNsZ6fzdty FOirhiSNeY1L7h3lmfaq0M2mJZmYeN6TvpHMWFadR2i17YGmTykaBakYC9oWdNtv ZZi9dle4k7/cMKyRA60XjMvHhDfu59b7m2ci6+2g4JYBP0830cet+2TAagHHhGAY vf7HcIno4/OtVeZfwCWE46jWNDgilJIenzY9M6+s3zJIIvPYQIEIyl2hWngaIL9Y bY1kZOpLnrUyydU50Sy4C5eLTIUYH7jDC0SzQljrPfAQgJWHnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3T8od8YUPCxfRYZx7B2TLExfQVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNh YmNlZi00N2ZmLTQyNjctOTE5OC1lYjYyOGFiYTc4NDIvM2NkOTJhM2MtMjI1Ny0z NDU1LWJlZjQtMWZkYTE1OThkMTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDYzYWJjZWYtNDdmZi00MjY3LTkx OTgtZWI2MjhhYmE3ODQyLzA2M2FiY2VmLTQ3ZmYtNDI2Ny05MTk4LWViNjI4YWJh Nzg0Mi5jcmwwHwYDVR0jBBgwFoAULT+tbVsf5f5/PtsiKw72zM1ofcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNhYmNlZi00N2ZmLTQyNjctOTE5OC1lYjYy OGFiYTc4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEj9/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtV2CrWhz/lqzfxhicjsgmcHS3Ees66mE+I+SU7zKifAbBAtls4sOWZ l3HHpPeE5c44Ck26+OlnR+1GX9bBmMFpkG9lCBn2Reuz13r1rjRVig/l0dAsrlUs fDh4d1Iws7JTHEM44KB8qjt3B/UoEkgkxTCFcnZ8TMKmHCTc09PIU8hl1XnuUjiy hjuCEyRrOlkLsPB9e7vK+KNhHeHAKxXHz3onluTDLQRbC2bTymrlt4Rx587mAcJz tEilXSRFOJZ06k6VJnQnTFMRavvd8mwnMOKh5vZfwEpgyC6ZBD+Zu3O06+e3jVB8 FdeJlZfP76iWLRClywU0R1f5zvLdEyE= -----END CERTIFICATE-----Generated at Wed May 13 10:05:27 2026 by rpki-client