$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/25292b62-98ec-35f9-8a4e-fd7d2cd02de9.roa File: 25292b62-98ec-35f9-8a4e-fd7d2cd02de9.roa (raw, json) Hash identifier: zOYVAH0mcv7lH7t12Yh2IrzvyCkpBEd7hjmbyafMRe0= Subject key identifier: 09:24:29:C3:92:74:5F:81:2E:04:17:E5:DF:B7:EA:FE:D6:0D:48:F9 Certificate issuer: /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326 Certificate serial: 010D0C9F4328584DBBA0595D2260AD0727A1E6E0 Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/25292b62-98ec-35f9-8a4e-fd7d2cd02de9.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 40788 IP address blocks: 64.140.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:59:5d:22:60:ad:07:27:a1:e6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326 Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=8dafdcc7-bce3-49cf-aeb8-2fef56d2ef2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a7:7b:c6:22:20:ef:69:79:98:c3:60:98:a3: f7:6e:79:05:17:85:44:4a:37:23:40:d3:0a:00:5c: e4:16:a2:91:5a:da:ea:40:45:6a:6a:46:f8:1e:cb: 32:05:4b:2b:e3:6f:3c:8a:44:ec:fe:1d:02:7d:4f: 30:5a:53:62:e3:d4:f4:5e:12:80:8c:e2:2f:d4:bd: 11:50:c9:b5:4e:b8:ae:d2:79:39:20:fa:97:80:fd: 08:81:d9:7a:76:54:6e:59:02:f2:99:be:22:64:f6: 5b:c5:3d:87:d1:0f:85:df:c8:2c:17:9f:d8:60:73: ce:52:81:06:38:db:3f:92:45:1d:fa:1b:b9:40:b3: 8d:95:60:75:5a:d4:db:d4:d0:3e:fa:6a:f0:69:e4: bf:d3:2b:57:a3:e1:62:d9:b9:9f:13:c0:b1:b0:71: 70:ff:4e:45:4e:d5:8d:52:56:5b:78:0f:de:c4:03: de:b3:bc:2d:93:84:eb:16:72:38:d7:d8:0d:e9:52: 86:e3:1d:2b:90:a5:99:7b:33:64:b0:04:00:19:0d: 30:41:36:67:8f:78:51:c7:7f:9c:38:80:e0:c5:5d: 68:2b:3c:45:e6:4e:ec:28:1c:7a:57:d9:5f:7d:46: 45:43:de:b9:62:cc:b2:75:b4:31:63:67:e3:0f:07: b5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:24:29:C3:92:74:5F:81:2E:04:17:E5:DF:B7:EA:FE:D6:0D:48:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/25292b62-98ec-35f9-8a4e-fd7d2cd02de9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl X509v3 Authority Key Identifier: keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer sbgp-ipAddrBlock: critical IPv4: 64.140.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b9:c8:80:02:12:8e:1c:ce:bf:7e:b6:08:bd:07:8e:59:fa: e4:94:60:65:60:3f:65:38:60:3e:66:ae:23:d9:72:8f:f0:a8: a3:1f:11:1c:67:3b:02:06:f5:c6:78:95:d6:d5:8f:00:e2:79: c9:9e:99:9d:12:9b:40:e2:63:08:a0:9c:c5:09:d8:12:f8:74: 34:cb:87:34:67:a1:1a:09:0c:4b:8f:16:20:f4:7a:11:3d:8f: 9e:52:e8:2c:5f:e0:74:39:3f:7a:74:69:76:08:8e:7e:d8:1f: 96:2f:8f:1c:7c:e2:8e:70:37:3a:1c:80:36:42:f0:eb:ed:84: a2:cd:28:b9:3c:50:7b:4e:1a:8d:7c:1e:07:49:39:c5:3e:88: 87:7e:80:1e:54:e2:44:da:cf:1e:15:85:7e:52:cf:50:73:15: 42:82:cd:d2:33:1b:1f:49:87:bb:5a:c7:bf:5d:5e:49:f6:2a: 6e:5e:50:9e:02:85:67:5b:fd:34:39:0f:3c:93:56:91:42:e3: 42:8d:33:60:d3:d3:9e:2f:d7:9a:f3:79:a9:7f:76:a5:15:90: df:22:79:a8:e4:ab:22:74:77:5e:70:11:38:43:26:4a:8e:9f: ed:82:91:9c:8f:53:b1:d5:8d:38:a0:6c:f9:c2:61:91:a3:35: db:7c:bb:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oFldImCtByeh5uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM2MDQ3MDgtM2UwZi00ZWE2LWIxNTEtNGQyZjc0MDhk MzI2MB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk OGRhZmRjYzctYmNlMy00OWNmLWFlYjgtMmZlZjU2ZDJlZjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6d7xiIg72l5mMNgmKP3bnkFF4VESjcjQNMK AFzkFqKRWtrqQEVqakb4HssyBUsr4288ikTs/h0CfU8wWlNi49T0XhKAjOIv1L0R UMm1Triu0nk5IPqXgP0Igdl6dlRuWQLymb4iZPZbxT2H0Q+F38gsF5/YYHPOUoEG ONs/kkUd+hu5QLONlWB1WtTb1NA++mrwaeS/0ytXo+Fi2bmfE8CxsHFw/05FTtWN UlZbeA/exAPes7wtk4TrFnI419gN6VKG4x0rkKWZezNksAQAGQ0wQTZnj3hRx3+c OIDgxV1oKzxF5k7sKBx6V9lffUZFQ965YsyydbQxY2fjDwe1CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkkKcOSdF+BLgQX5d+36v7WDUj5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYw NDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJmNzQwOGQzMjYvMjUyOTJiNjItOThlYy0z NWY5LThhNGUtZmQ3ZDJjZDAyZGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTM2MDQ3MDgtM2UwZi00ZWE2LWIx NTEtNGQyZjc0MDhkMzI2L2UzNjA0NzA4LTNlMGYtNGVhNi1iMTUxLTRkMmY3NDA4 ZDMyNi5jcmwwHwYDVR0jBBgwFoAU5LlVX3UhkJoYMg04VOQhuidg6RQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYwNDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJm NzQwOGQzMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQIxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHm5yIACEo4czr9+tgi9B45Z+uSUYGVgP2U4YD5mriPZco/wqKMfERxn OwIG9cZ4ldbVjwDiecmemZ0Sm0DiYwignMUJ2BL4dDTLhzRnoRoJDEuPFiD0ehE9 j55S6Cxf4HQ5P3p0aXYIjn7YH5Yvjxx84o5wNzocgDZC8OvthKLNKLk8UHtOGo18 HgdJOcU+iId+gB5U4kTazx4VhX5Sz1BzFUKCzdIzGx9Jh7tax79dXkn2Km5eUJ4C hWdb/TQ5DzyTVpFC40KNM2DT054v15rzeal/dqUVkN8ieajkqyJ0d15wEThDJkqO n+2CkZyPU7HVjTigbPnCYZGjNdt8u9k= -----END CERTIFICATE-----Generated at Wed May 13 05:06:08 2026 by rpki-client