$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/87e72f4e-fc53-35f0-bac7-94e575b586a5.roa File: 87e72f4e-fc53-35f0-bac7-94e575b586a5.roa (raw, json) Hash identifier: KnlYWBUZWO8Yuyy3M6RzodNV3t8u0dgLRDN3ee5oLho= Subject key identifier: 53:9E:A2:B3:D9:A9:23:41:EB:BE:CD:DE:69:6F:18:0B:B3:5D:9C:C9 Certificate issuer: /CN=41911571-6038-4a97-80ce-9611c78f050e Certificate serial: 010D0C9F4328584DCF2B07675B4578B0940DE600 Authority key identifier: DF:70:D5:B4:88:0A:71:C0:02:2C:D8:5B:C3:90:48:DE:FF:9B:53:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/87e72f4e-fc53-35f0-bac7-94e575b586a5.roa Signing time: Tue 12 May 2026 13:00:30 +0000 ROA not before: Tue 12 May 2026 13:00:30 +0000 ROA not after: Mon 10 Aug 2026 13:00:30 +0000 asID: 33574 IP address blocks: 64.255.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/41911571-6038-4a97-80ce-9611c78f050e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/41911571-6038-4a97-80ce-9611c78f050e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2b:07:67:5b:45:78:b0:94:0d:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41911571-6038-4a97-80ce-9611c78f050e Validity Not Before: May 12 13:00:30 2026 GMT Not After : Aug 10 13:00:30 2026 GMT Subject: CN=6ad5b51e-2862-4424-a679-de281b416333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ce:c1:af:b0:de:c9:97:83:5a:51:95:6f:be: fe:96:5f:e4:8b:b6:8d:73:54:fa:75:1c:f8:40:13: 06:bc:f7:38:7a:f2:d6:1c:02:64:55:a2:74:9e:7d: c4:ab:20:bf:db:c1:31:c8:72:0b:91:c7:e0:8a:df: 35:52:b1:f9:b8:94:62:a1:5e:63:c2:e3:e0:fb:30: 99:65:8e:90:cb:69:13:d7:d2:0c:88:f1:be:b4:c9: de:2c:80:59:15:30:49:00:b0:d0:e8:1c:90:31:39: 1f:42:d8:e6:4e:c0:c8:0f:d9:d8:ff:7b:d2:0d:c9: 55:cb:05:76:a7:58:6e:9e:f9:85:12:c5:5d:57:92: d6:63:bd:fc:73:cb:4e:e5:af:96:fa:8f:58:6a:84: 46:63:e7:1c:a4:58:34:5a:b2:0d:ad:17:88:50:8b: 56:49:ac:fd:1c:5f:1f:05:8d:fb:8a:a5:48:92:24: a5:dc:c7:6d:39:b6:70:6e:87:47:0a:13:9a:7b:d4: 51:1e:ce:a7:fd:1d:28:a1:e5:70:cc:08:e9:da:43: 5b:44:87:50:a3:1d:b6:01:f5:23:3f:65:1c:dc:c1: e4:6b:eb:98:52:7b:52:66:1c:a6:85:ff:50:ee:17: 92:ce:0e:46:5d:b4:a2:86:cc:d9:19:60:f4:1f:0b: 16:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9E:A2:B3:D9:A9:23:41:EB:BE:CD:DE:69:6F:18:0B:B3:5D:9C:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/87e72f4e-fc53-35f0-bac7-94e575b586a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/41911571-6038-4a97-80ce-9611c78f050e.crl X509v3 Authority Key Identifier: keyid:DF:70:D5:B4:88:0A:71:C0:02:2C:D8:5B:C3:90:48:DE:FF:9B:53:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e.cer sbgp-ipAddrBlock: critical IPv4: 64.255.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ef:6e:fd:0f:ee:7a:e7:2e:c5:a5:cf:8a:a0:0b:48:b9:68: ff:ee:b9:06:85:dd:16:fe:68:85:92:5f:85:ad:bf:d6:16:ad: 01:70:40:e5:8d:8f:62:05:6a:06:9f:f3:a3:86:c3:2f:61:5b: 9d:b7:a6:73:07:68:1b:b3:8d:5d:45:bc:9d:34:c0:d2:d5:37: 1c:ab:78:29:f6:e5:36:95:ee:31:6a:94:8d:ec:18:49:18:ba: c8:cd:c5:71:b9:35:4e:28:50:b2:54:03:0f:2a:72:3c:ca:6f: c3:b7:49:5f:64:76:07:2f:86:bc:b3:55:66:91:d1:96:2c:cb: 1a:2f:64:6f:7e:44:b7:d8:ec:98:68:46:1f:ec:a0:7b:70:5b: dc:ac:c5:3f:4f:25:f8:e1:ca:ea:b1:c7:6e:40:75:c8:be:ca: 17:90:43:fb:87:7c:e3:3f:61:da:15:3d:08:bc:15:a4:48:cf: f5:e5:57:d7:a2:00:3e:14:cb:41:b1:50:6f:68:3c:ca:ed:cb: 2e:4b:ef:73:8b:6a:c6:7d:25:5f:a3:c5:69:f4:87:6c:d9:7b: 55:df:1e:08:78:2d:8a:d3:18:f7:5c:9a:6f:8d:1e:ec:c7:91: c0:dd:71:8b:a3:63:68:9d:10:bf:ee:cc:44:6e:48:f6:1f:ca: c5:1f:82:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PKwdnW0V4sJQN5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE5MTE1NzEtNjAzOC00YTk3LTgwY2UtOTYxMWM3OGYw NTBlMB4XDTI2MDUxMjEzMDAzMFoXDTI2MDgxMDEzMDAzMFowLzEtMCsGA1UEAxMk NmFkNWI1MWUtMjg2Mi00NDI0LWE2NzktZGUyODFiNDE2MzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc7Br7DeyZeDWlGVb77+ll/ki7aNc1T6dRz4 QBMGvPc4evLWHAJkVaJ0nn3EqyC/28ExyHILkcfgit81UrH5uJRioV5jwuPg+zCZ ZY6Qy2kT19IMiPG+tMneLIBZFTBJALDQ6ByQMTkfQtjmTsDID9nY/3vSDclVywV2 p1hunvmFEsVdV5LWY738c8tO5a+W+o9YaoRGY+ccpFg0WrINrReIUItWSaz9HF8f BY37iqVIkiSl3MdtObZwbodHChOae9RRHs6n/R0ooeVwzAjp2kNbRIdQox22AfUj P2Uc3MHka+uYUntSZhymhf9Q7heSzg5GXbSihszZGWD0HwsWZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOeorPZqSNB677N3mlvGAuzXZzJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MTkx MTU3MS02MDM4LTRhOTctODBjZS05NjExYzc4ZjA1MGUvODdlNzJmNGUtZmM1My0z NWYwLWJhYzctOTRlNTc1YjU4NmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDE5MTE1NzEtNjAzOC00YTk3LTgw Y2UtOTYxMWM3OGYwNTBlLzQxOTExNTcxLTYwMzgtNGE5Ny04MGNlLTk2MTFjNzhm MDUwZS5jcmwwHwYDVR0jBBgwFoAU33DVtIgKccACLNhbw5BI3v+bU2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MTkxMTU3MS02MDM4LTRhOTctODBjZS05NjEx Yzc4ZjA1MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQP/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInvbv0P7nrnLsWlz4qgC0i5aP/uuQaF3Rb+aIWSX4Wtv9YWrQFwQOWN j2IFagaf86OGwy9hW523pnMHaBuzjV1FvJ00wNLVNxyreCn25TaV7jFqlI3sGEkY usjNxXG5NU4oULJUAw8qcjzKb8O3SV9kdgcvhryzVWaR0ZYsyxovZG9+RLfY7Jho Rh/soHtwW9ysxT9PJfjhyuqxx25Adci+yheQQ/uHfOM/YdoVPQi8FaRIz/XlV9ei AD4Uy0GxUG9oPMrtyy5L73OLasZ9JV+jxWn0h2zZe1XfHgh4LYrTGPdcmm+NHuzH kcDdcYujY2idEL/uzERuSPYfysUfgkQ= -----END CERTIFICATE-----Generated at Wed May 13 12:54:44 2026 by rpki-client