$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa File: 23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa (raw, json) Hash identifier: k9TE2ZpJzwKcv2NCehOKbG8YxF5qEq4g5C+Rgar9yFA= Subject key identifier: AB:4A:D2:7A:3E:F3:30:18:12:FC:9F:44:D7:9D:04:28:B0:B4:95:AC Certificate issuer: /CN=604a49f2-58d6-4709-bdaf-e7181b613801 Certificate serial: 010D0C9F4328584DC6CB122A289029573C19ABB0 Authority key identifier: 85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 13886 IP address blocks: 65.75.205.0/24 maxlen: 24 65.75.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:cb:12:2a:28:90:29:57:3c:19:ab:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604a49f2-58d6-4709-bdaf-e7181b613801 Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=467a1221-b757-49db-ae06-fd3912477184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:87:cd:ad:4e:0f:d6:7c:4a:8a:70:4f:0e:2d: f6:52:07:62:1b:ab:b6:d0:b1:ec:88:72:af:bc:71: 83:f4:b0:4f:04:46:00:0c:f8:2d:44:ec:21:b3:fa: b6:a7:54:d5:f4:9e:1a:96:df:a2:00:c8:b7:a1:f9: d3:44:e9:3d:10:3a:8c:04:2a:6c:6c:9e:09:5e:d1: 1f:86:5b:55:8b:4f:ec:4e:40:3d:60:67:23:f3:01: b0:81:dd:f3:e3:12:49:99:83:ad:7f:2b:36:5c:70: 38:6f:57:e8:a7:51:0c:86:cb:8c:2d:b6:5c:86:e9: ae:3f:47:86:51:f9:91:92:ca:2d:e8:13:d1:52:05: 18:07:47:7e:98:87:c7:74:cb:be:54:f1:73:c7:8f: 25:ed:74:f2:03:e7:63:61:a9:d3:56:e5:de:52:10: fd:1a:55:8a:a3:5f:15:5d:ca:60:77:0c:eb:f4:83: 05:b5:8b:bb:fe:d4:a0:2f:51:e9:57:86:f0:52:70: 2b:d9:5d:82:7d:dd:0f:6a:fb:aa:ab:e0:b3:d9:3a: 0e:f5:0c:e3:88:47:3f:9c:1d:2b:c0:a8:8a:99:9c: 02:19:66:5e:42:e3:51:59:73:8b:14:00:74:7c:cc: d1:0b:7e:4a:01:a4:3f:5f:d8:8f:32:e1:2c:8a:ee: 16:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4A:D2:7A:3E:F3:30:18:12:FC:9F:44:D7:9D:04:28:B0:B4:95:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl X509v3 Authority Key Identifier: keyid:85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer sbgp-ipAddrBlock: critical IPv4: 65.75.205.0-65.75.206.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:c3:47:8f:e5:ff:07:08:dd:50:02:5b:96:94:48:2e:6b:37: 02:8f:7c:7e:97:26:cd:60:84:10:58:8b:19:f4:15:65:03:f7: 53:18:9c:8c:ce:41:77:e6:be:85:bd:c8:83:e1:42:6f:1d:84: ce:6a:c5:c1:ea:95:d1:7c:1c:54:5b:c7:55:ef:43:3e:1a:9f: ab:cd:77:e9:a5:f8:dd:01:0c:74:f7:2b:80:cd:1e:b9:98:5b: c4:35:37:70:08:49:a2:11:dd:b7:e5:b0:75:02:61:5e:1c:46: 85:f4:a6:88:c2:a5:4d:d8:be:5c:d9:e6:b2:87:c6:35:ec:39: bd:02:20:8b:db:62:52:d3:06:44:aa:8a:c2:c8:16:35:e5:23: a4:4c:d1:a6:c6:20:fc:92:44:6a:63:94:12:e4:84:75:1f:dc: 04:74:94:14:6d:fe:ff:19:c1:79:d9:36:87:c5:39:c9:c4:8f: 17:55:20:e4:10:91:1d:f2:bb:b0:3c:2f:e9:24:82:55:02:59: ce:a7:d5:5f:61:70:27:88:83:c7:6a:3e:db:eb:5b:65:26:13: f6:21:c9:93:38:83:51:04:23:93:5c:9f:25:52:6d:67:9f:dc: 9b:33:b8:2c:5f:33:ec:6a:1f:99:18:85:87:9d:6e:a0:88:da: 4d:a1:53:f6 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE3GyxIqKJApVzwZq7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0YTQ5ZjItNThkNi00NzA5LWJkYWYtZTcxODFiNjEz ODAxMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk NDY3YTEyMjEtYjc1Ny00OWRiLWFlMDYtZmQzOTEyNDc3MTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YfNrU4P1nxKinBPDi32UgdiG6u20LHsiHKv vHGD9LBPBEYADPgtROwhs/q2p1TV9J4alt+iAMi3ofnTROk9EDqMBCpsbJ4JXtEf hltVi0/sTkA9YGcj8wGwgd3z4xJJmYOtfys2XHA4b1fop1EMhsuMLbZchumuP0eG UfmRksot6BPRUgUYB0d+mIfHdMu+VPFzx48l7XTyA+djYanTVuXeUhD9GlWKo18V Xcpgdwzr9IMFtYu7/tSgL1HpV4bwUnAr2V2Cfd0Pavuqq+Cz2ToO9QzjiEc/nB0r wKiKmZwCGWZeQuNRWXOLFAB0fMzRC35KAaQ/X9iPMuEsiu4WzwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFKtK0no+8zAYEvyfRNedBCiwtJWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRh NDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4MWI2MTM4MDEvMjNkODI1ZmEtYWJmNC0z ZjVjLWExMzgtZGVhNWM1Yzc0N2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0YTQ5ZjItNThkNi00NzA5LWJk YWYtZTcxODFiNjEzODAxLzYwNGE0OWYyLTU4ZDYtNDcwOS1iZGFmLWU3MTgxYjYx MzgwMS5jcmwwHwYDVR0jBBgwFoAUhXgilXZb/+aBIDuDsD+ssXR0R3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRhNDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4 MWI2MTM4MDEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABBS80D BABBS84wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAJsNHj+X/BwjdUAJblpRILms3Ao98fpcmzWCEEFiLGfQV ZQP3UxicjM5Bd+a+hb3Ig+FCbx2EzmrFweqV0XwcVFvHVe9DPhqfq8136aX43QEM dPcrgM0euZhbxDU3cAhJohHdt+WwdQJhXhxGhfSmiMKlTdi+XNnmsofGNew5vQIg i9tiUtMGRKqKwsgWNeUjpEzRpsYg/JJEamOUEuSEdR/cBHSUFG3+/xnBedk2h8U5 ycSPF1Ug5BCRHfK7sDwv6SSCVQJZzqfVX2FwJ4iDx2o+2+tbZSYT9iHJkziDUQQj k1yfJVJtZ5/cmzO4LF8z7GofmRiFh51uoIjaTaFT9g== -----END CERTIFICATE-----Generated at Wed May 13 08:12:34 2026 by rpki-client