$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/65b1ad36-cbe9-3771-9c96-e700744e68f2.roa File: 65b1ad36-cbe9-3771-9c96-e700744e68f2.roa (raw, json) Hash identifier: qlMMy6WI3EGZzz9YUdISv4KLD5QOrE+MDthhRqMigQs= Subject key identifier: CA:7A:E8:16:44:92:B2:DB:28:AD:58:8F:0D:77:9F:29:F6:D4:AA:69 Certificate issuer: /CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Certificate serial: 010D0C9F4328584DBD059B59B5CDAF1F4171CC80 Authority key identifier: FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/65b1ad36-cbe9-3771-9c96-e700744e68f2.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 21902 IP address blocks: 64.110.16.0/21 maxlen: 21 108.163.68.0/22 maxlen: 22 216.189.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:9b:59:b5:cd:af:1f:41:71:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=f503903f-999e-4ffe-9eab-f6ef15966139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:82:67:08:c7:d2:67:42:52:26:5c:91:23:5a: dd:70:79:17:d4:3a:2f:96:f9:6e:cd:8c:0c:46:87: f6:3a:12:c1:d0:78:55:ab:1b:49:a3:c1:d0:ec:ae: 50:1b:de:f5:40:59:f4:a6:0a:16:65:9e:b4:10:dd: 0c:41:dc:1f:43:bb:19:a9:81:0f:f8:eb:2f:0c:5d: c9:01:91:97:f2:f7:57:cd:22:2d:36:74:06:3a:c1: 32:64:e4:3f:fb:18:92:03:07:88:38:13:15:de:b0: bf:0f:65:14:de:87:1f:07:87:f7:ea:20:10:e2:75: f6:06:a3:bd:05:14:9b:24:9c:02:a0:62:a8:9e:3c: 3a:e0:2d:2e:c8:63:0b:25:c5:5d:45:10:f3:27:5c: 5d:61:1c:b0:63:31:15:c9:53:f7:45:1f:5b:e3:24: 47:7a:85:7b:b8:16:b8:29:e0:7b:83:af:3a:ae:c4: c4:89:0b:53:eb:23:c7:a6:80:1c:48:e5:b6:f2:6a: b3:2a:57:a6:9a:a1:9a:b1:51:67:d7:67:74:8d:ba: e2:55:8a:ee:6d:f1:de:e8:f4:48:12:10:20:a3:16: be:f5:9c:ef:26:02:20:d0:30:20:a4:13:f8:c9:bb: e0:36:ac:34:00:6f:59:20:c1:ec:14:1d:6b:e2:c1: fd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7A:E8:16:44:92:B2:DB:28:AD:58:8F:0D:77:9F:29:F6:D4:AA:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/65b1ad36-cbe9-3771-9c96-e700744e68f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl X509v3 Authority Key Identifier: keyid:FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer sbgp-ipAddrBlock: critical IPv4: 64.110.16.0/21 108.163.68.0/22 216.189.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:52:8a:14:6d:eb:2d:11:fc:9d:e4:67:2a:02:d1:d4:f0:8a: 7a:96:a4:e7:c5:ae:0e:91:1b:4c:b9:71:af:e3:41:e7:0e:58: 3d:79:5f:8f:1d:22:d0:9f:27:fb:c8:09:c6:ad:11:f4:0a:1a: a7:9b:52:60:a3:d0:95:9f:fb:d5:c2:ee:ca:61:a5:31:77:00: 9d:5d:b1:3d:51:20:37:e4:fd:ca:47:ee:d5:c6:4c:b7:d8:ba: 9a:22:f4:16:32:17:d5:92:49:26:76:8c:d3:95:f4:e6:83:d1: c2:b1:e1:92:10:0c:13:e6:c1:76:48:89:a5:61:3f:5a:ed:b4: 9b:d8:7b:89:88:9f:1a:db:64:ea:00:0f:0e:ab:e5:06:51:53: a6:b4:38:00:48:6f:0c:d4:ab:4d:8d:3f:af:ce:59:8e:10:16: 3a:55:11:ca:a3:91:69:e3:07:72:af:74:8c:d2:1d:81:e1:1c: a1:5e:88:d4:03:f8:25:5a:5c:b7:b6:e9:05:d9:a7:a2:ca:fa: 41:f9:c2:36:19:99:67:90:43:6c:c0:a4:09:d6:30:4d:85:e8: 23:0f:1d:ce:da:1e:c6:9b:bf:a5:86:5f:80:40:03:0a:97:7c: 87:d6:de:53:fa:c6:ee:12:34:79:ca:ce:19:e2:ac:db:08:9e: c1:a2:e7:20 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE29BZtZtc2vH0FxzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlOGVjYWQtZDVhZi00MTRlLTg1NzMtZjY5OGJiYjIz MjYzMB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk ZjUwMzkwM2YtOTk5ZS00ZmZlLTllYWItZjZlZjE1OTY2MTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74JnCMfSZ0JSJlyRI1rdcHkX1DovlvluzYwM Rof2OhLB0HhVqxtJo8HQ7K5QG971QFn0pgoWZZ60EN0MQdwfQ7sZqYEP+OsvDF3J AZGX8vdXzSItNnQGOsEyZOQ/+xiSAweIOBMV3rC/D2UU3ocfB4f36iAQ4nX2BqO9 BRSbJJwCoGKonjw64C0uyGMLJcVdRRDzJ1xdYRywYzEVyVP3RR9b4yRHeoV7uBa4 KeB7g686rsTEiQtT6yPHpoAcSOW28mqzKlemmqGasVFn12d0jbriVYrubfHe6PRI EhAgoxa+9ZzvJgIg0DAgpBP4ybvgNqw0AG9ZIMHsFB1r4sH9kQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFMp66BZEkrLbKK1Yjw13nyn21KppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4 ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4YmJiMjMyNjMvNjViMWFkMzYtY2JlOS0z NzcxLTljOTYtZTcwMDc0NGU2OGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTFlOGVjYWQtZDVhZi00MTRlLTg1 NzMtZjY5OGJiYjIzMjYzL2ExZThlY2FkLWQ1YWYtNDE0ZS04NTczLWY2OThiYmIy MzI2My5jcmwwHwYDVR0jBBgwFoAU/pDueYs1Lgg7rqxn8AHMp8b7B5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4 YmJiMjMyNjMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDQG4QAwQC bKNEAwQE2L2AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADtSihRt6y0R/J3kZyoC0dTwinqWpOfFrg6RG0y5 ca/jQecOWD15X48dItCfJ/vICcatEfQKGqebUmCj0JWf+9XC7sphpTF3AJ1dsT1R IDfk/cpH7tXGTLfYupoi9BYyF9WSSSZ2jNOV9OaD0cKx4ZIQDBPmwXZIiaVhP1rt tJvYe4mInxrbZOoADw6r5QZRU6a0OABIbwzUq02NP6/OWY4QFjpVEcqjkWnjB3Kv dIzSHYHhHKFeiNQD+CVaXLe26QXZp6LK+kH5wjYZmWeQQ2zApAnWME2F6CMPHc7a Hsabv6WGX4BAAwqXfIfW3lP6xu4SNHnKzhnirNsInsGi5yA= -----END CERTIFICATE-----Generated at Wed May 13 16:12:33 2026 by rpki-client