$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4589e72d-f5fb-3630-abff-6eee8d21d9e0.roa File: 4589e72d-f5fb-3630-abff-6eee8d21d9e0.roa (raw, json) Hash identifier: +f/7YKek6sn23mvJliuZUYaxfzwB3krNhUtRpiJEtV0= Subject key identifier: D2:2E:1B:AA:5F:3B:71:77:55:03:65:97:1D:F2:AE:25:91:A1:E0:D6 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584DD090708B5858C01B8B6F3910 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4589e72d-f5fb-3630-abff-6eee8d21d9e0.roa Signing time: Wed 13 May 2026 01:00:24 +0000 ROA not before: Wed 13 May 2026 01:00:24 +0000 ROA not after: Tue 11 Aug 2026 01:00:24 +0000 asID: 26967 IP address blocks: 64.136.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:90:70:8b:58:58:c0:1b:8b:6f:39:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: May 13 01:00:24 2026 GMT Not After : Aug 11 01:00:24 2026 GMT Subject: CN=a3311c10-200f-4c84-b9a1-7f5f0ae85a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1a:bf:7c:d1:39:33:ed:3a:96:9a:30:31:80: a5:5c:08:0e:e1:75:25:31:72:44:55:4f:82:b8:9f: 8b:9a:c1:70:59:33:3b:a0:a5:3c:0a:29:25:19:d2: 06:ae:1f:3d:1a:c1:17:6f:73:74:b1:45:59:f3:2d: 5d:b9:7c:a1:e4:79:a8:e6:61:9f:c4:7e:a1:b8:18: d8:48:47:54:78:ef:f1:71:12:3c:f3:bc:6d:37:25: 22:4f:37:ea:e0:94:d5:aa:c6:fa:d4:dd:26:4d:6c: 7c:65:e0:15:f5:c8:bd:8b:18:63:35:43:b9:f5:c3: bd:fe:9e:9f:3b:2a:30:55:cf:3f:39:d1:ff:9b:76: 1e:8f:81:6f:5a:94:06:ed:a1:06:9e:ca:d0:d2:68: eb:cf:27:98:9c:88:db:5f:09:26:d1:30:be:ee:6f: 91:95:6e:dd:cd:c5:92:c0:77:83:63:b4:09:26:20: 62:04:fc:8e:60:e6:6d:8c:d9:b9:70:3c:9d:1b:b5: 35:6e:dd:39:87:1d:01:53:d0:f9:29:72:ec:77:ff: 83:01:fe:66:5c:1d:1d:cb:21:8f:1c:9e:59:72:ca: 17:1d:32:2d:22:2c:9c:ce:da:bb:a2:92:4c:08:99: f1:61:db:55:85:23:e9:b6:b0:a4:cc:f7:ce:cd:15: db:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2E:1B:AA:5F:3B:71:77:55:03:65:97:1D:F2:AE:25:91:A1:E0:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4589e72d-f5fb-3630-abff-6eee8d21d9e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 64.136.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:cd:2b:2d:99:9b:29:50:02:7d:96:b4:ba:8f:0a:59:ba:86: 2d:71:65:15:28:e2:a1:98:3d:2f:02:4b:e1:4c:e7:5c:f2:24: c0:01:75:ec:68:75:69:af:2c:7a:84:94:fe:e5:2d:07:8c:b6: 93:02:a7:8a:32:9f:e4:71:bb:2a:c0:dd:a9:12:64:10:a3:14: ed:f3:2b:a6:42:33:8b:96:74:a5:ae:e0:13:2f:c0:c2:f1:d1: 4a:80:04:6b:86:39:84:00:c2:e8:d1:1a:df:56:c3:86:24:69: 0b:60:18:c3:3b:f4:e4:bd:e0:03:d8:fc:e5:b7:79:f6:2f:13: ba:e2:b1:0e:7e:fc:ef:ca:81:07:48:ad:76:23:23:86:f4:69: d4:13:af:18:51:ff:c0:ba:2c:82:0d:3e:20:1f:37:88:4a:58: 28:38:2a:6e:b4:a5:8f:d1:9a:d0:3a:3c:16:10:9d:ed:55:59: 5e:4d:33:bf:f1:bf:d1:ec:8e:34:c7:30:32:6f:97:56:e5:67: 6d:eb:b4:07:2f:ce:5d:28:43:33:9b:af:40:2f:0b:ea:58:12: 0c:c7:8d:6c:b6:c8:d6:19:e6:fb:07:39:5f:0c:a5:53:76:a7: 23:7a:b0:b4:3c:6b:08:c9:18:c7:78:9d:9b:13:18:f4:4f:e6: 72:8e:4d:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3QkHCLWFjAG4tvORAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk YTMzMTFjMTAtMjAwZi00Yzg0LWI5YTEtN2Y1ZjBhZTg1YTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhq/fNE5M+06lpowMYClXAgO4XUlMXJEVU+C uJ+LmsFwWTM7oKU8CiklGdIGrh89GsEXb3N0sUVZ8y1duXyh5Hmo5mGfxH6huBjY SEdUeO/xcRI887xtNyUiTzfq4JTVqsb61N0mTWx8ZeAV9ci9ixhjNUO59cO9/p6f OyowVc8/OdH/m3Yej4FvWpQG7aEGnsrQ0mjrzyeYnIjbXwkm0TC+7m+RlW7dzcWS wHeDY7QJJiBiBPyOYOZtjNm5cDydG7U1bt05hx0BU9D5KXLsd/+DAf5mXB0dyyGP HJ5ZcsoXHTItIiycztq7opJMCJnxYdtVhSPptrCkzPfOzRXbNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIuG6pfO3F3VQNllx3yriWRoeDWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvNDU4OWU3MmQtZjVmYi0z NjMwLWFiZmYtNmVlZThkMjFkOWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQIiuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHNKy2ZmylQAn2WtLqPClm6hi1xZRUo4qGYPS8CS+FM51zyJMABdexo dWmvLHqElP7lLQeMtpMCp4oyn+RxuyrA3akSZBCjFO3zK6ZCM4uWdKWu4BMvwMLx 0UqABGuGOYQAwujRGt9Ww4YkaQtgGMM79OS94APY/OW3efYvE7risQ5+/O/KgQdI rXYjI4b0adQTrxhR/8C6LIINPiAfN4hKWCg4Km60pY/RmtA6PBYQne1VWV5NM7/x v9HsjjTHMDJvl1blZ23rtAcvzl0oQzObr0AvC+pYEgzHjWy2yNYZ5vsHOV8MpVN2 pyN6sLQ8awjJGMd4nZsTGPRP5nKOTRU= -----END CERTIFICATE-----Generated at Wed May 13 16:09:11 2026 by rpki-client