$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/f04a1367-afb9-3894-a806-b6b5dcbc5860.roa File: f04a1367-afb9-3894-a806-b6b5dcbc5860.roa (raw, json) Hash identifier: UXNRoJW8if49GgQs95KLRCKw459TwH7Y9Ct1Caq3xco= Subject key identifier: 6E:17:55:64:54:E2:66:4E:C4:EC:C5:BC:7E:0F:6E:F1:6D:83:00:0F Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584DA815825D13E64CB6FE0858C0 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/f04a1367-afb9-3894-a806-b6b5dcbc5860.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 10747 IP address blocks: 64.18.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:82:5d:13:e6:4c:b6:fe:08:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=f96ef9f1-c7d6-4497-9e50-6b8c7a0b1eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bc:f3:49:9f:46:2d:ea:c1:a3:8f:3c:35:bf: f6:c2:1e:3e:04:3b:40:c6:bf:b0:22:10:7e:71:6f: 87:ef:13:ee:a6:38:f3:19:a4:9a:c7:31:2c:d1:cb: 5d:27:07:b1:1d:9d:a2:9e:5a:83:59:51:5e:71:28: 91:6f:8c:43:41:62:ae:a7:25:ff:8f:cb:f6:b3:01: 64:c3:3b:06:02:85:42:19:94:23:96:e3:54:54:51: 84:09:be:08:72:50:03:47:9c:e5:f0:9f:28:92:8c: 39:01:0c:54:4f:7b:80:23:d9:53:6d:6e:b9:af:79: 4d:de:e1:80:4a:c3:c9:f0:8b:e3:39:fa:77:da:14: 07:78:ec:f1:ed:7f:60:69:25:07:34:8d:e5:9b:93: 92:df:a8:c3:3a:2f:c1:d8:c5:e5:7d:3c:70:8f:c7: 1f:d6:ca:38:10:7d:0d:0c:a7:35:4a:3d:f4:41:54: ff:97:f7:07:d0:8f:53:3f:1f:52:56:23:b2:39:0f: 2e:cc:aa:27:8b:ee:db:69:cf:04:d7:10:70:e5:4d: f9:70:cc:d3:34:94:cd:9b:98:1b:68:94:7b:dc:01: bb:da:fa:e8:67:78:2e:93:18:bc:7b:8a:7b:ee:36: 8f:99:1e:e8:8c:a3:51:ec:15:12:8d:60:68:f1:b0: 8d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:17:55:64:54:E2:66:4E:C4:EC:C5:BC:7E:0F:6E:F1:6D:83:00:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/f04a1367-afb9-3894-a806-b6b5dcbc5860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 64.18.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d0:f1:ed:08:08:07:1c:ec:48:16:c2:4a:5c:58:93:7e:19: a1:79:c7:22:97:22:6d:1a:e7:24:4e:ce:9c:41:6f:00:ea:46: f4:85:05:b7:fa:f6:af:e0:d2:73:49:c7:78:68:f2:9a:d9:cd: bb:ec:05:91:c2:32:7e:c3:9a:96:13:03:5a:3e:ff:26:7d:99: 5b:d7:8a:ab:44:11:3d:fe:b8:35:e2:c9:3e:cf:c0:31:df:35: 26:f2:69:45:03:ce:3a:75:5e:f9:d7:b6:d3:0a:cd:51:30:5d: 85:1f:73:da:ce:f5:7b:47:95:f6:5c:80:ba:fe:03:ab:94:06: 3f:e6:4e:aa:99:95:6d:f2:1f:3d:df:9a:fd:7f:f3:16:76:79: 8e:c9:b4:f3:bf:53:c9:ab:28:c9:24:9d:d7:82:f4:f3:7c:b8: b7:44:c6:0f:ff:c3:5c:b4:35:c8:4c:79:51:01:9c:b2:a5:0b: 87:06:fd:b7:81:f4:b5:62:8e:3a:9d:b8:06:4d:a2:c1:68:2b: b9:7c:6b:8c:8d:2c:18:1d:b2:7d:20:bf:06:b5:7c:98:7d:ec: af:16:98:a7:ba:11:39:eb:46:c1:79:04:75:d6:de:85:de:0e: 87:e6:1d:5b:57:8e:ad:09:f7:6f:23:54:f0:d0:29:13:6c:72: 50:00:0a:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFYJdE+ZMtv4IWMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk Zjk2ZWY5ZjEtYzdkNi00NDk3LTllNTAtNmI4YzdhMGIxZWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbzzSZ9GLerBo488Nb/2wh4+BDtAxr+wIhB+ cW+H7xPupjjzGaSaxzEs0ctdJwexHZ2inlqDWVFecSiRb4xDQWKupyX/j8v2swFk wzsGAoVCGZQjluNUVFGECb4IclADR5zl8J8okow5AQxUT3uAI9lTbW65r3lN3uGA SsPJ8IvjOfp32hQHeOzx7X9gaSUHNI3lm5OS36jDOi/B2MXlfTxwj8cf1so4EH0N DKc1Sj30QVT/l/cH0I9TPx9SViOyOQ8uzKoni+7bac8E1xBw5U35cMzTNJTNm5gb aJR73AG72vroZ3gukxi8e4p77jaPmR7ojKNR7BUSjWBo8bCNyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4XVWRU4mZOxOzFvH4PbvFtgwAPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvZjA0YTEzNjctYWZiOS0z ODk0LWE4MDYtYjZiNWRjYmM1ODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQBKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzQ8e0ICAcc7EgWwkpcWJN+GaF5xyKXIm0a5yROzpxBbwDqRvSFBbf6 9q/g0nNJx3ho8prZzbvsBZHCMn7DmpYTA1o+/yZ9mVvXiqtEET3+uDXiyT7PwDHf NSbyaUUDzjp1XvnXttMKzVEwXYUfc9rO9XtHlfZcgLr+A6uUBj/mTqqZlW3yHz3f mv1/8xZ2eY7JtPO/U8mrKMkkndeC9PN8uLdExg//w1y0NchMeVEBnLKlC4cG/beB 9LVijjqduAZNosFoK7l8a4yNLBgdsn0gvwa1fJh97K8WmKe6ETnrRsF5BHXW3oXe DofmHVtXjq0J928jVPDQKRNsclAACg0= -----END CERTIFICATE-----Generated at Wed May 13 14:21:13 2026 by rpki-client