$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/0bcd89c8-1190-337b-9aa2-270a3735f6a9.roa File: 0bcd89c8-1190-337b-9aa2-270a3735f6a9.roa (raw, json) Hash identifier: 1S0Bd5QTTDQ3LVKgc2vRFh8B4wm+wQlQ3mpxjeJILKc= Subject key identifier: CB:ED:A9:A6:75:A8:2B:7E:02:09:21:75:B3:B8:55:C1:5F:FA:97:68 Certificate issuer: /CN=687c869a-fd9c-4db9-8dab-54b737103513 Certificate serial: 010D0C9F4328584D492A6A285B48625F3634D340 Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/0bcd89c8-1190-337b-9aa2-270a3735f6a9.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 13335 IP address blocks: 74.112.232.0/21 maxlen: 21 74.116.95.0/24 maxlen: 24 199.19.28.0/22 maxlen: 22 208.78.48.0/21 maxlen: 21 208.91.192.0/22 maxlen: 22 2604:25c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:6a:28:5b:48:62:5f:36:34:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=4577b705-4f18-453b-bc9d-1b9fc13046d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:85:c1:2a:da:28:d9:b0:1c:13:38:64:91:f5: 92:7c:e1:ca:d2:d5:ea:f0:2c:af:2f:92:29:67:ff: e7:36:71:c2:b9:05:b3:3d:08:03:cd:20:cf:b5:a3: 1c:22:ee:ab:80:93:c5:17:3d:15:8a:21:3d:93:01: d2:2e:8c:03:87:06:36:b7:4d:e6:b4:97:ff:9c:90: 07:81:cb:b6:b0:0f:81:9c:01:73:9b:d6:e5:ad:77: bf:bb:9c:cd:7e:b4:bb:7c:aa:cf:d6:1c:d5:03:9d: e4:a0:e1:0b:a7:ab:42:cf:ed:95:64:a4:17:cb:c6: 63:6b:07:e2:23:12:e6:51:34:ea:bc:23:3c:60:a5: a6:58:e7:53:b5:be:cb:5d:34:80:30:8b:7a:84:c6: 9f:af:db:7b:5c:bc:c9:70:2e:3b:08:ad:6d:71:6b: 37:5b:7e:01:6d:05:9d:c3:b7:7b:06:fe:7d:50:3c: 3f:03:55:20:c7:36:b5:59:8f:01:90:61:15:8d:cb: cf:3a:5e:7e:3a:1b:6c:70:95:c2:05:55:b7:58:19: 5c:6f:47:39:0e:6b:fb:ba:7d:8e:5a:40:f9:28:f3: 01:c6:e5:8c:ae:26:92:92:49:15:ec:e0:10:cc:b1: 1f:58:1c:f9:d6:eb:ad:d3:c6:28:1f:a7:da:e1:4e: 8a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:ED:A9:A6:75:A8:2B:7E:02:09:21:75:B3:B8:55:C1:5F:FA:97:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/0bcd89c8-1190-337b-9aa2-270a3735f6a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl X509v3 Authority Key Identifier: keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer sbgp-ipAddrBlock: critical IPv4: 74.112.232.0/21 74.116.95.0/24 199.19.28.0/22 208.78.48.0/21 208.91.192.0/22 IPv6: 2604:25c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:6a:a5:70:11:31:b6:57:bc:27:f5:6e:2d:11:68:5e:c8:6a: be:35:65:11:1d:42:5e:ea:b9:ad:56:7a:c6:d1:4b:11:ab:02: 07:d0:c0:7a:13:0f:fb:ea:41:aa:88:93:8f:f5:20:3c:f4:7d: af:c9:94:5f:0c:3d:d2:65:8c:61:52:e7:58:27:d8:27:05:37: 43:fd:db:05:7b:4e:fa:6d:ac:70:99:7e:82:04:e6:2f:e5:3d: e7:b6:3f:3c:f0:0f:1d:d7:67:85:3c:3f:3b:c1:06:cc:76:2a: 2b:36:dd:4f:d4:08:59:3b:82:16:6c:56:ba:67:16:9f:79:c7: e4:a1:b3:5b:af:07:d3:5a:0a:c7:3c:02:06:cf:aa:f0:13:e1: e7:ce:1c:47:e0:dc:05:bd:a2:f3:72:85:32:4f:84:6c:1e:2e: 1e:88:80:89:6e:7e:50:b3:ac:fe:d4:01:0f:c0:49:fc:13:54: 4f:62:17:c6:65:16:55:75:c6:e9:f5:84:29:23:9e:93:5d:f3: d2:ef:fc:d9:c4:b4:65:9c:4f:34:f0:02:6c:1d:35:ec:52:53: 44:0a:1c:e3:29:50:b8:3b:c1:c0:70:04:2c:1e:a7:58:d6:42: f0:75:ca:e2:45:6f:29:4f:45:24:5b:9d:2e:f8:72:01:96:8d: 79:ae:21:d3 -----BEGIN CERTIFICATE----- MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWE1JKmooW0hiXzY000AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg3Yzg2OWEtZmQ5Yy00ZGI5LThkYWItNTRiNzM3MTAz NTEzMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk NDU3N2I3MDUtNGYxOC00NTNiLWJjOWQtMWI5ZmMxMzA0NmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IXBKtoo2bAcEzhkkfWSfOHK0tXq8CyvL5Ip Z//nNnHCuQWzPQgDzSDPtaMcIu6rgJPFFz0ViiE9kwHSLowDhwY2t03mtJf/nJAH gcu2sA+BnAFzm9blrXe/u5zNfrS7fKrP1hzVA53koOELp6tCz+2VZKQXy8Zjawfi IxLmUTTqvCM8YKWmWOdTtb7LXTSAMIt6hMafr9t7XLzJcC47CK1tcWs3W34BbQWd w7d7Bv59UDw/A1Ugxza1WY8BkGEVjcvPOl5+OhtscJXCBVW3WBlcb0c5Dmv7un2O WkD5KPMBxuWMriaSkkkV7OAQzLEfWBz51uut08YoH6fa4U6K1wIDAQABo4IDfDCC A3gwHQYDVR0OBBYEFMvtqaZ1qCt+AgkhdbO4VcFf+pdoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ODdj ODY5YS1mZDljLTRkYjktOGRhYi01NGI3MzcxMDM1MTMvMGJjZDg5YzgtMTE5MC0z MzdiLTlhYTItMjcwYTM3MzVmNmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjg3Yzg2OWEtZmQ5Yy00ZGI5LThk YWItNTRiNzM3MTAzNTEzLzY4N2M4NjlhLWZkOWMtNGRiOS04ZGFiLTU0YjczNzEw MzUxMy5jcmwwHwYDVR0jBBgwFoAU4uiNCUXNrgKVNNtusLIBOCL3Hl4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82ODdjODY5YS1mZDljLTRkYjktOGRhYi01NGI3 MzcxMDM1MTMuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDSnDoAwQA SnRfAwQCxxMcAwQD0E4wAwQC0FvAMA0EAgACMAcDBQAmBCXAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACdq pXARMbZXvCf1bi0RaF7Iar41ZREdQl7qua1WesbRSxGrAgfQwHoTD/vqQaqIk4/1 IDz0fa/JlF8MPdJljGFS51gn2CcFN0P92wV7TvptrHCZfoIE5i/lPee2PzzwDx3X Z4U8PzvBBsx2Kis23U/UCFk7ghZsVrpnFp95x+Shs1uvB9NaCsc8AgbPqvAT4efO HEfg3AW9ovNyhTJPhGweLh6IgIluflCzrP7UAQ/ASfwTVE9iF8ZlFlV1xun1hCkj npNd89Lv/NnEtGWcTzTwAmwdNexSU0QKHOMpULg7wcBwBCwep1jWQvB1yuJFbylP RSRbnS74cgGWjXmuIdM= -----END CERTIFICATE-----Generated at Thu Mar 26 03:53:34 2026 by rpki-client