$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8948e1f8-0caa-38a0-a596-5b6a7802bf37.roa File: 8948e1f8-0caa-38a0-a596-5b6a7802bf37.roa (raw, json) Hash identifier: pY9jDNrXHZdyLq5hIJjxQf8oBdszEtg5QcxK7KaZBsM= Subject key identifier: D5:F1:F4:2D:9D:86:74:E8:DA:E3:AF:41:FD:7A:A9:9C:7A:18:F8:D0 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584DA3E55F5B8C7007DC55874D80 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8948e1f8-0caa-38a0-a596-5b6a7802bf37.roa Signing time: Mon 27 Apr 2026 01:00:24 +0000 ROA not before: Mon 27 Apr 2026 01:00:24 +0000 ROA not after: Sun 26 Jul 2026 01:00:24 +0000 asID: 22781 IP address blocks: 173.195.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:e5:5f:5b:8c:70:07:dc:55:87:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Apr 27 01:00:24 2026 GMT Not After : Jul 26 01:00:24 2026 GMT Subject: CN=b7a22697-d114-434f-84d1-7befd1a6e660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2c:1a:5d:4d:0c:a9:c1:a7:98:27:de:7e:01: 99:41:62:c6:c6:ea:c3:8a:ee:98:73:cd:69:09:34: 14:b9:d5:70:a0:2f:7b:2e:ab:a0:3f:67:5c:85:2a: 49:35:04:41:7f:20:5f:26:e6:db:cf:bb:3b:60:30: ca:26:81:5a:60:eb:7d:0c:7f:47:6f:23:42:ac:54: 08:90:55:b0:0c:79:c4:3f:9d:69:45:36:39:3b:49: c8:90:38:1c:71:2e:d1:fa:b7:37:f9:3a:44:b2:ee: e2:3c:2f:e4:56:25:79:5d:fe:7e:f7:d2:06:ef:92: ca:a5:23:14:58:70:61:b3:da:24:ff:e5:b4:a8:9c: f9:9f:b9:0e:00:e1:e4:83:cf:15:7e:8c:51:8a:63: 52:74:bf:7b:32:78:aa:73:b6:38:e1:b5:95:73:a2: ed:54:8f:12:03:62:36:05:68:50:60:f5:41:7a:f3: c8:dc:96:28:9b:6c:09:b2:47:d5:fc:b1:a3:84:d8: 66:56:c5:b0:14:1b:91:9e:25:73:e7:6a:f9:05:8a: aa:06:b0:9b:7b:0e:f0:59:33:45:ec:54:e4:f4:bd: 52:b8:de:b0:e5:91:63:8e:f4:85:0e:d6:d4:45:92: e1:9a:6b:49:20:c3:d1:75:75:20:40:3b:8b:67:fe: 58:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F1:F4:2D:9D:86:74:E8:DA:E3:AF:41:FD:7A:A9:9C:7A:18:F8:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8948e1f8-0caa-38a0-a596-5b6a7802bf37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 173.195.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:81:4e:85:72:f7:b5:2e:a5:db:82:b9:76:d3:08:59:a4:29: 84:9f:55:69:31:ab:dc:36:24:84:07:38:31:39:f5:d7:a4:1a: 82:88:94:44:b5:ae:65:8f:59:32:b6:6a:16:ee:8e:fb:73:50: c7:7c:f0:94:30:fd:24:35:ab:1f:70:22:cc:b4:1b:e6:cf:81: 44:36:e1:18:c8:73:91:11:fd:d2:d9:64:9f:91:da:51:01:00: e0:af:b4:b5:74:d9:70:68:b5:41:77:e1:46:77:41:7f:89:cc: 9b:30:6b:72:34:cd:c4:7e:77:84:49:b7:07:95:f2:83:5a:57: 61:35:53:eb:78:ac:8a:2a:75:09:ce:16:67:a0:e0:b7:73:03: c0:38:a2:f5:34:e6:7e:4a:81:c3:72:6b:c5:88:2d:a4:f2:4a: e5:da:92:fe:54:d4:dc:61:1f:77:6d:4b:a3:21:c2:5d:7d:1a: 46:58:a6:59:d5:da:81:3b:1c:b2:6d:05:9f:fb:0e:65:55:03: 5a:9b:e9:bc:20:8f:86:fb:19:13:dc:18:b4:e3:04:36:e2:d1: 67:a4:3d:f1:99:98:25:bc:f2:af:3c:34:ae:09:99:18:5d:f4: ab:fb:ca:2e:78:3b:df:a6:8c:ac:ca:9b:bc:39:7e:15:b5:80: dc:db:b1:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2j5V9bjHAH3FWHTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk YjdhMjI2OTctZDExNC00MzRmLTg0ZDEtN2JlZmQxYTZlNjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CwaXU0MqcGnmCfefgGZQWLGxurDiu6Yc81p CTQUudVwoC97LqugP2dchSpJNQRBfyBfJubbz7s7YDDKJoFaYOt9DH9HbyNCrFQI kFWwDHnEP51pRTY5O0nIkDgccS7R+rc3+TpEsu7iPC/kViV5Xf5+99IG75LKpSMU WHBhs9ok/+W0qJz5n7kOAOHkg88VfoxRimNSdL97Mniqc7Y44bWVc6LtVI8SA2I2 BWhQYPVBevPI3JYom2wJskfV/LGjhNhmVsWwFBuRniVz52r5BYqqBrCbew7wWTNF 7FTk9L1SuN6w5ZFjjvSFDtbURZLhmmtJIMPRdXUgQDuLZ/5YYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXx9C2dhnTo2uOvQf16qZx6GPjQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvODk0OGUxZjgtMGNhYS0z OGEwLWE1OTYtNWI2YTc4MDJiZjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErcMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqBToVy97UupduCuXbTCFmkKYSfVWkxq9w2JIQHODE59dekGoKIlES1 rmWPWTK2ahbujvtzUMd88JQw/SQ1qx9wIsy0G+bPgUQ24RjIc5ER/dLZZJ+R2lEB AOCvtLV02XBotUF34UZ3QX+JzJswa3I0zcR+d4RJtweV8oNaV2E1U+t4rIoqdQnO Fmeg4LdzA8A4ovU05n5KgcNya8WILaTySuXakv5U1NxhH3dtS6Mhwl19GkZYplnV 2oE7HLJtBZ/7DmVVA1qb6bwgj4b7GRPcGLTjBDbi0WekPfGZmCW88q88NK4JmRhd 9Kv7yi54O9+mjKzKm7w5fhW1gNzbsfk= -----END CERTIFICATE-----Generated at Wed May 13 15:08:12 2026 by rpki-client