$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/09fac336-7359-3a0e-aaf5-7677dfa3d9a7.roa File: 09fac336-7359-3a0e-aaf5-7677dfa3d9a7.roa (raw, json) Hash identifier: Oeu2wJG+UA15T6jncUxNn/Ul6dyM/v/2Kyb2CWISNLo= Subject key identifier: 50:C7:57:AA:13:17:72:A4:40:EB:F8:9C:BD:4B:08:06:FB:B3:EA:D9 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584D93253C5CFEF64F4C544E17E0 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/09fac336-7359-3a0e-aaf5-7677dfa3d9a7.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 26967 IP address blocks: 64.136.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:3c:5c:fe:f6:4f:4c:54:4e:17:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=1b4c35c6-7436-4084-af76-2bbf65cc19ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9b:50:3e:3e:d2:00:37:37:b1:46:82:c2:a9: 33:a1:ab:f4:0c:ea:48:79:bc:3c:bc:8e:50:44:c8: 32:b5:50:aa:6f:a8:a0:19:ee:1a:81:fc:57:fc:b9: e9:55:26:01:d8:8f:76:8f:69:22:f2:cf:23:0f:0a: c3:11:b0:4c:94:d8:f1:73:14:e8:5d:a9:fd:75:99: 44:b6:5d:9f:69:94:c2:e0:ce:eb:15:56:c8:05:49: 18:fd:91:e4:ef:43:56:61:9f:f3:1d:ae:ac:a5:f7: ff:10:8e:fd:2c:9c:c6:f3:28:0e:4d:08:1c:31:d4: 46:62:d5:ac:dd:5a:13:c9:df:f2:2c:23:7b:00:4c: 62:fe:b0:67:14:af:e2:6a:87:f4:0d:30:f0:25:c5: 22:0b:b8:cb:bb:a3:ba:51:f0:5a:00:2f:8d:12:c3: 84:0a:42:21:f5:75:55:2f:6c:51:f1:d4:31:88:76: 13:f7:5d:82:1f:b1:57:b4:3f:27:8d:18:ae:4e:15: 79:5e:8d:6d:28:98:24:5d:9e:6a:ac:7e:b8:56:11: c0:55:3b:a7:62:82:51:81:98:45:db:5d:7e:a5:1a: 22:2d:ab:f0:56:57:de:ff:94:5b:ab:90:6f:08:9b: b1:40:b4:0f:73:28:37:ed:79:b5:f3:e7:f6:81:37: 20:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C7:57:AA:13:17:72:A4:40:EB:F8:9C:BD:4B:08:06:FB:B3:EA:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/09fac336-7359-3a0e-aaf5-7677dfa3d9a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 64.136.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:e1:aa:f0:f3:07:6a:e1:73:9a:3d:ee:d2:2b:24:43:34:ae: 0d:e8:ad:22:44:c8:92:c5:38:7b:75:46:f7:ce:88:42:30:83: 08:ad:f3:3a:ff:38:c4:60:06:73:d9:8c:9c:33:68:f4:3f:91: 56:1f:0b:1d:a8:7b:f2:9b:a2:f0:c1:c8:38:78:50:89:c4:04: 34:71:fc:98:82:9c:5a:9d:b5:86:9a:ec:5c:74:be:53:58:32: 9b:d7:c5:f6:0c:84:65:69:ab:d8:c1:11:ba:ca:4e:66:21:ff: 81:fc:15:c3:f0:0e:bf:3d:1f:c0:1f:4c:61:c3:31:70:b4:6a: 9c:6a:eb:fd:b3:74:36:a5:e0:23:ea:aa:ba:63:07:8c:73:fc: d1:a4:aa:12:00:72:fd:04:4e:47:dc:8e:63:eb:fe:ac:78:62: 97:59:e0:67:15:b3:eb:76:5b:db:ee:bc:99:69:2f:ae:41:f9: 39:68:af:62:04:51:24:7a:ed:36:3a:9b:d0:73:cb:dc:98:b5: 58:41:37:45:8b:c1:8d:c2:4e:f5:11:c0:82:11:02:ac:33:e4: d2:69:e7:0d:86:48:99:b3:d8:78:74:71:58:e6:94:4a:56:65: 2d:25:1e:5e:df:73:20:ab:05:22:1a:b2:b8:5e:73:46:32:31: b1:8b:39:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJTxc/vZPTFROF+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk MWI0YzM1YzYtNzQzNi00MDg0LWFmNzYtMmJiZjY1Y2MxOWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJtQPj7SADc3sUaCwqkzoav0DOpIebw8vI5Q RMgytVCqb6igGe4agfxX/LnpVSYB2I92j2ki8s8jDwrDEbBMlNjxcxToXan9dZlE tl2faZTC4M7rFVbIBUkY/ZHk70NWYZ/zHa6spff/EI79LJzG8ygOTQgcMdRGYtWs 3VoTyd/yLCN7AExi/rBnFK/iaof0DTDwJcUiC7jLu6O6UfBaAC+NEsOECkIh9XVV L2xR8dQxiHYT912CH7FXtD8njRiuThV5Xo1tKJgkXZ5qrH64VhHAVTunYoJRgZhF 211+pRoiLavwVlfe/5Rbq5BvCJuxQLQPcyg37Xm18+f2gTcgCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDHV6oTF3KkQOv4nL1LCAb7s+rZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvMDlmYWMzMzYtNzM1OS0z YTBlLWFhZjUtNzY3N2RmYTNkOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQIikMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXhqvDzB2rhc5o97tIrJEM0rg3orSJEyJLFOHt1RvfOiEIwgwit8zr/ OMRgBnPZjJwzaPQ/kVYfCx2oe/KbovDByDh4UInEBDRx/JiCnFqdtYaa7Fx0vlNY MpvXxfYMhGVpq9jBEbrKTmYh/4H8FcPwDr89H8AfTGHDMXC0apxq6/2zdDal4CPq qrpjB4xz/NGkqhIAcv0ETkfcjmPr/qx4YpdZ4GcVs+t2W9vuvJlpL65B+Tlor2IE USR67TY6m9Bzy9yYtVhBN0WLwY3CTvURwIIRAqwz5NJp5w2GSJmz2Hh0cVjmlEpW ZS0lHl7fcyCrBSIasrhec0YyMbGLORg= -----END CERTIFICATE-----Generated at Wed May 13 16:09:30 2026 by rpki-client