$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/378c976a-d982-36d5-a250-f2a0fedc1089.roa File: 378c976a-d982-36d5-a250-f2a0fedc1089.roa (raw, json) Hash identifier: JKh9q9XNUOva5/syYTrBUsekPl6UnCggwSnJ5wenxAU= Subject key identifier: 75:18:86:16:5D:33:71:DE:CE:75:96:A1:8B:55:37:D4:C4:93:E9:26 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584D9FB589D00FB081BDE132A400 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/378c976a-d982-36d5-a250-f2a0fedc1089.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 26967 IP address blocks: 64.136.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:89:d0:0f:b0:81:bd:e1:32:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=4d5a2364-3947-4158-b7e5-2f3cd95db9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:60:60:5d:37:5f:5c:a0:f4:56:3d:81:98:b0: 4c:94:8d:64:60:b4:d6:b1:15:bf:22:70:ce:17:5e: ec:a3:93:d0:7b:4d:7e:7f:d1:27:8e:1b:90:a6:aa: 50:f7:9b:63:fc:a9:e4:13:a2:e7:b8:45:4d:76:24: 77:4d:02:20:f1:fb:23:7e:08:3f:d4:35:5f:ba:7e: 7f:0d:d0:a5:22:19:77:1c:aa:c8:f2:01:9b:79:6e: 85:a1:f6:85:c4:b5:30:36:d4:f7:1c:76:3a:5b:0e: b4:e4:cc:32:9a:bc:3c:7c:f8:d9:10:34:ad:3a:1b: c6:ec:b7:d3:4e:5a:de:40:dc:27:3a:21:9b:3f:3d: d4:d3:cb:2d:b4:b4:40:63:cd:e3:9b:e4:fc:a5:2f: 5a:71:04:cc:5f:6e:54:29:7e:3b:dc:46:84:11:64: 8f:7e:d7:a4:db:1f:04:1e:02:ac:71:6b:08:54:52: 12:63:97:5f:91:bd:2f:ec:f6:cf:cc:ed:6a:3f:6b: d8:57:58:1d:d9:24:f5:8c:79:63:33:b2:a4:de:f5: 0a:e4:df:a7:39:0c:ef:15:d1:7b:04:4a:3b:05:57: b0:ac:b0:02:57:51:37:17:12:53:66:96:85:07:20: ee:15:32:a2:ff:ca:2f:69:8b:e2:fb:19:74:19:70: ce:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:18:86:16:5D:33:71:DE:CE:75:96:A1:8B:55:37:D4:C4:93:E9:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/378c976a-d982-36d5-a250-f2a0fedc1089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 64.136.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:97:c8:c2:cd:69:8b:06:d5:74:a6:19:8d:48:81:ec:85:0a: 90:35:86:64:22:ad:30:bc:30:88:a6:58:56:06:77:2a:45:a8: c6:1d:95:40:09:b1:02:60:d9:ae:4a:52:20:92:46:ef:35:66: 96:47:54:6a:6c:5d:23:91:d2:fa:bf:2f:6b:7c:95:55:d5:f4: 50:3e:d4:5c:df:7f:ee:9d:b8:d0:60:2b:13:92:fa:0b:ce:01: 3a:2b:89:87:a4:20:87:ce:ee:aa:37:40:6d:0b:53:a5:b1:a0: 15:20:db:66:27:02:1b:60:17:01:f9:b3:02:74:07:35:52:b1: 72:4c:f9:3f:60:ac:76:4d:00:69:f5:76:25:79:bd:00:2b:da: 31:9e:1a:f2:3a:99:7b:5a:20:46:43:0c:80:67:72:37:28:e9: 95:75:0e:f3:1a:5b:2e:c5:2f:d5:02:90:46:bc:1c:dc:1e:17: 6d:40:bd:c0:49:aa:ea:43:98:14:0f:b0:1b:fe:1b:a2:c1:d1: 14:51:d7:67:93:bf:3c:2d:64:8f:d2:44:5d:1d:89:2b:13:49: eb:00:8c:7b:87:87:9e:87:66:93:c5:5f:a1:cf:f2:1b:f0:47: 35:27:46:ca:d0:b3:ea:26:11:cc:b5:5a:f3:5c:7a:50:85:e7: 6a:5b:70:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftYnQD7CBveEypAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk NGQ1YTIzNjQtMzk0Ny00MTU4LWI3ZTUtMmYzY2Q5NWRiOWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmBgXTdfXKD0Vj2BmLBMlI1kYLTWsRW/InDO F17so5PQe01+f9EnjhuQpqpQ95tj/KnkE6LnuEVNdiR3TQIg8fsjfgg/1DVfun5/ DdClIhl3HKrI8gGbeW6FofaFxLUwNtT3HHY6Ww605Mwymrw8fPjZEDStOhvG7LfT TlreQNwnOiGbPz3U08sttLRAY83jm+T8pS9acQTMX25UKX473EaEEWSPftek2x8E HgKscWsIVFISY5dfkb0v7PbPzO1qP2vYV1gd2ST1jHljM7Kk3vUK5N+nOQzvFdF7 BEo7BVewrLACV1E3FxJTZpaFByDuFTKi/8ovaYvi+xl0GXDOMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUYhhZdM3HeznWWoYtVN9TEk+kmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvMzc4Yzk3NmEtZDk4Mi0z NmQ1LWEyNTAtZjJhMGZlZGMxMDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQIitMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6XyMLNaYsG1XSmGY1IgeyFCpA1hmQirTC8MIimWFYGdypFqMYdlUAJ sQJg2a5KUiCSRu81ZpZHVGpsXSOR0vq/L2t8lVXV9FA+1Fzff+6duNBgKxOS+gvO AToriYekIIfO7qo3QG0LU6WxoBUg22YnAhtgFwH5swJ0BzVSsXJM+T9grHZNAGn1 diV5vQAr2jGeGvI6mXtaIEZDDIBncjco6ZV1DvMaWy7FL9UCkEa8HNweF21AvcBJ qupDmBQPsBv+G6LB0RRR12eTvzwtZI/SRF0diSsTSesAjHuHh56HZpPFX6HP8hvw RzUnRsrQs+omEcy1WvNcelCF52pbcKU= -----END CERTIFICATE-----Generated at Wed May 13 16:02:14 2026 by rpki-client