$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2c9575af-cc4c-380b-a190-1fe829176b88.roa File: 2c9575af-cc4c-380b-a190-1fe829176b88.roa (raw, json) Hash identifier: 35xbYmg8dD6l5YAP8igfu9C5Ir8FEH0JW89dk+FC2Iw= Subject key identifier: 3D:A2:4A:ED:67:74:1D:0A:44:A0:98:84:E2:92:17:33:9A:E4:D4:13 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584DAC457617206B5A5770CD1640 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2c9575af-cc4c-380b-a190-1fe829176b88.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 16509 IP address blocks: 69.170.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:76:17:20:6b:5a:57:70:cd:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=f2ea9043-b721-455c-93d3-8de38df52e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1c:a0:db:d5:2b:93:c9:50:76:f2:bc:df:8f: fe:6f:4b:f3:0a:1d:4c:48:fc:89:83:64:c8:4c:f9: 13:42:59:e5:b6:86:99:e1:f7:67:0c:50:97:84:96: 4e:ed:63:ae:9d:59:da:39:e3:e1:4b:0b:46:47:9d: f2:a1:a2:50:1e:5b:ad:e6:5b:59:f6:e3:fb:00:6a: 5f:0f:24:9c:2f:ab:4d:6e:f4:fe:c3:35:0b:e1:b8: b0:fc:c9:98:51:85:7b:65:e0:22:41:f4:1e:18:c2: 0a:44:9d:1a:35:d0:2e:da:d9:d8:22:bb:1a:73:bf: 68:0b:9d:c9:be:c0:a8:32:86:83:fc:58:04:5d:1a: 6c:3c:0c:fb:69:d9:0a:60:d2:61:07:f6:b5:68:82: bd:30:13:77:01:87:99:f9:54:ce:ff:e1:10:d1:96: 55:9a:31:ad:d0:bd:f0:d1:2c:52:c9:1c:36:67:c3: c7:fa:cd:02:53:8c:b0:22:f1:8f:7d:7a:92:3c:81: d6:ab:b9:98:ff:05:2d:0b:72:25:73:83:67:e2:5b: a8:4c:58:b6:fa:4b:ec:73:38:3c:9d:18:e4:b3:60: 24:95:3d:83:0d:60:dd:82:08:e2:4b:2f:c3:60:a5: f5:f3:d8:82:76:71:4a:de:f8:a9:29:1e:b2:a4:d2: cf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A2:4A:ED:67:74:1D:0A:44:A0:98:84:E2:92:17:33:9A:E4:D4:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2c9575af-cc4c-380b-a190-1fe829176b88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 69.170.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ef:af:41:ad:be:ec:92:20:c6:bf:69:bc:6f:e0:f5:7c:4c: 34:83:61:d4:8d:15:33:4b:6a:e7:c5:3a:31:2c:6a:e7:6f:3a: bb:16:d0:6c:d5:11:83:f6:2c:91:97:e9:75:e0:6e:d9:e9:9b: c9:36:75:c1:21:d1:3b:3b:7d:63:58:8d:92:aa:b9:36:03:11: b7:ad:08:d0:36:3f:05:79:48:da:7c:bf:e5:d8:37:4b:6e:6f: fa:76:f4:65:2b:d3:d0:0b:f4:63:a9:fa:2f:96:74:44:a4:6f: c4:cc:1f:79:9a:00:2d:9a:f9:ae:ab:5c:6a:97:1b:df:da:d0: f0:f8:da:fe:52:5c:7b:cd:b0:2f:f2:77:a4:f0:f3:80:7e:33: 2c:78:20:26:59:6b:be:a4:b9:3b:f2:e7:5d:c3:ca:e3:76:22: 2e:74:fe:7d:8f:0b:33:f2:03:b1:d9:14:0e:cc:c7:c9:8b:21: 60:5f:1a:78:91:4a:67:c6:91:a7:8b:eb:52:e3:26:e8:25:0a: 60:65:d8:5e:82:b5:af:7e:52:37:49:c7:fd:b8:d4:04:7a:2c: 02:dd:e8:86:25:31:f8:1b:83:b0:18:8d:7e:20:41:99:87:22: 54:ac:0c:70:9a:72:dd:4f:c6:3f:fd:b8:e6:03:fd:ed:b5:37: 52:5c:11:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRXYXIGtaV3DNFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk ZjJlYTkwNDMtYjcyMS00NTVjLTkzZDMtOGRlMzhkZjUyZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxyg29Urk8lQdvK834/+b0vzCh1MSPyJg2TI TPkTQlnltoaZ4fdnDFCXhJZO7WOunVnaOePhSwtGR53yoaJQHlut5ltZ9uP7AGpf DyScL6tNbvT+wzUL4biw/MmYUYV7ZeAiQfQeGMIKRJ0aNdAu2tnYIrsac79oC53J vsCoMoaD/FgEXRpsPAz7adkKYNJhB/a1aIK9MBN3AYeZ+VTO/+EQ0ZZVmjGt0L3w 0SxSyRw2Z8PH+s0CU4ywIvGPfXqSPIHWq7mY/wUtC3Ilc4Nn4luoTFi2+kvsczg8 nRjks2AklT2DDWDdggjiSy/DYKX189iCdnFK3vipKR6ypNLPgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2iSu1ndB0KRKCYhOKSFzOa5NQTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvMmM5NTc1YWYtY2M0Yy0z ODBiLWExOTAtMWZlODI5MTc2Yjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARaq7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7vr0GtvuySIMa/abxv4PV8TDSDYdSNFTNLaufFOjEsaudvOrsW0GzV EYP2LJGX6XXgbtnpm8k2dcEh0Ts7fWNYjZKquTYDEbetCNA2PwV5SNp8v+XYN0tu b/p29GUr09AL9GOp+i+WdESkb8TMH3maAC2a+a6rXGqXG9/a0PD42v5SXHvNsC/y d6Tw84B+Myx4ICZZa76kuTvy513DyuN2Ii50/n2PCzPyA7HZFA7Mx8mLIWBfGniR SmfGkaeL61LjJuglCmBl2F6Cta9+UjdJx/241AR6LALd6IYlMfgbg7AYjX4gQZmH IlSsDHCact1Pxj/9uOYD/e21N1JcEUM= -----END CERTIFICATE-----Generated at Wed May 13 15:53:26 2026 by rpki-client