$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/84339d5a-c571-36e5-befa-38c9a65890dd.roa File: 84339d5a-c571-36e5-befa-38c9a65890dd.roa (raw, json) Hash identifier: YqpsTVmL0vmeuG7UyQ1cI8PHVSbBOwAKRkHt4M5cLn4= Subject key identifier: A9:C8:49:CF:7C:53:2B:53:9D:37:6F:92:82:B1:9D:1B:4F:E2:C2:E7 Certificate issuer: /CN=10fde7ec-a369-497a-a493-87b3e2e08143 Certificate serial: 010D0C9F4328584D386A499F3F331A97FAF78780 Authority key identifier: 3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/84339d5a-c571-36e5-befa-38c9a65890dd.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 397606 IP address blocks: 64.52.102.0/23 maxlen: 24 170.39.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:49:9f:3f:33:1a:97:fa:f7:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10fde7ec-a369-497a-a493-87b3e2e08143 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=19190703-4249-44a9-8fe2-8857c3598f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:a8:ad:b5:63:73:6a:41:35:4e:e9:b8:88: 70:88:f6:46:77:22:0f:36:5a:fa:82:ec:9b:c4:c0: 5e:72:d1:71:59:00:f8:37:2f:8f:6b:97:ae:03:d7: b7:5a:96:61:82:a0:be:2f:24:0e:02:4c:b0:b9:bb: 40:19:2a:f2:e1:11:56:21:5a:47:88:50:37:f2:e1: 2a:ce:1e:0a:4a:48:d5:16:b4:52:36:7d:cd:2a:0b: ec:aa:90:1a:cf:7c:0a:66:99:d4:95:7f:f1:b3:72: 89:7f:4c:a4:25:15:89:f5:fb:10:40:51:15:7f:5a: 8c:db:5b:8e:70:a6:30:3d:e2:ee:cf:c9:85:c9:33: c7:eb:f6:00:98:e5:98:f5:7b:9e:d1:60:34:79:6f: c0:2f:63:95:9b:cd:aa:ee:4b:c1:82:34:91:23:f6: 9e:dd:15:ef:e4:ec:8d:b3:72:e0:97:4f:77:b6:78: 10:14:14:fd:2a:7a:99:68:9b:1e:a4:42:03:ce:ea: 5c:63:9b:31:18:d3:33:ff:83:8d:cd:fb:b9:4a:45: e3:d2:82:dd:24:18:d2:51:46:53:a9:82:7e:08:4a: 56:03:17:a6:50:57:91:d8:ae:e1:d3:eb:75:44:3c: a4:82:1b:d5:28:2c:eb:9a:8f:cc:35:2c:29:4d:09: 23:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C8:49:CF:7C:53:2B:53:9D:37:6F:92:82:B1:9D:1B:4F:E2:C2:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/84339d5a-c571-36e5-befa-38c9a65890dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl X509v3 Authority Key Identifier: keyid:3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer sbgp-ipAddrBlock: critical IPv4: 64.52.102.0/23 170.39.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:85:8b:ef:bd:88:e7:1c:5e:83:72:14:8d:29:75:08:67:31: 7c:bb:29:31:50:9b:2a:79:8b:91:23:ab:53:62:9a:27:a2:c2: 1a:3c:50:b1:6f:fb:64:95:24:f0:48:bb:cb:b1:a5:89:e9:af: 36:d9:02:26:7c:71:66:b7:7b:a4:58:1c:1f:20:7a:22:b4:ad: 0c:60:90:34:4a:82:2c:27:b8:c4:d1:e5:ca:7c:ad:c5:00:67: f6:9e:f1:f0:45:c8:96:d3:6d:ed:bd:32:3f:c5:a8:81:46:5c: 30:f1:04:03:17:dc:aa:37:ab:7b:c9:b4:69:96:36:44:7a:ea: 4c:bc:38:c6:4b:56:67:de:a1:e4:d4:09:53:9f:2d:26:a7:ec: 03:de:e2:37:0a:02:f2:f8:18:37:30:74:43:e3:68:65:ae:bc: 60:54:2f:3b:ff:38:f9:ff:77:fe:ae:5b:d8:41:50:b5:fe:c1: e1:bc:56:96:5b:f6:e6:5a:2f:e4:bd:9a:1c:fc:11:c5:af:c5: 78:8c:48:d7:76:ad:4d:df:8b:46:82:55:d1:e0:df:f9:41:18: ee:f4:75:21:49:c4:40:26:07:8a:76:9d:ef:8d:07:c5:65:fc: 97:b9:3e:6d:38:59:e7:2e:b8:51:4e:9d:2a:c1:50:08:ce:01: 9d:9d:d1:76 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE04akmfPzMal/r3h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBmZGU3ZWMtYTM2OS00OTdhLWE0OTMtODdiM2UyZTA4 MTQzMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk MTkxOTA3MDMtNDI0OS00NGE5LThmZTItODg1N2MzNTk4ZjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb2orbVjc2pBNU7puIhwiPZGdyIPNlr6guyb xMBectFxWQD4Ny+Pa5euA9e3WpZhgqC+LyQOAkywubtAGSry4RFWIVpHiFA38uEq zh4KSkjVFrRSNn3NKgvsqpAaz3wKZpnUlX/xs3KJf0ykJRWJ9fsQQFEVf1qM21uO cKYwPeLuz8mFyTPH6/YAmOWY9Xue0WA0eW/AL2OVm82q7kvBgjSRI/ae3RXv5OyN s3Lgl093tngQFBT9KnqZaJsepEIDzupcY5sxGNMz/4ONzfu5SkXj0oLdJBjSUUZT qYJ+CEpWAxemUFeR2K7h0+t1RDykghvVKCzrmo/MNSwpTQkjEQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKnISc98UytTnTdvkoKxnRtP4sLnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMGZk ZTdlYy1hMzY5LTQ5N2EtYTQ5My04N2IzZTJlMDgxNDMvODQzMzlkNWEtYzU3MS0z NmU1LWJlZmEtMzhjOWE2NTg5MGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTBmZGU3ZWMtYTM2OS00OTdhLWE0 OTMtODdiM2UyZTA4MTQzLzEwZmRlN2VjLWEzNjktNDk3YS1hNDkzLTg3YjNlMmUw ODE0My5jcmwwHwYDVR0jBBgwFoAUPexB37hn1p9jivfrHah4kZhKpJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMGZkZTdlYy1hMzY5LTQ5N2EtYTQ5My04N2Iz ZTJlMDgxNDMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBQDRmAwQC qifQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD6Fi++9iOccXoNyFI0pdQhnMXy7KTFQmyp5i5Ejq1Nimiei who8ULFv+2SVJPBIu8uxpYnprzbZAiZ8cWa3e6RYHB8geiK0rQxgkDRKgiwnuMTR 5cp8rcUAZ/ae8fBFyJbTbe29Mj/FqIFGXDDxBAMX3Ko3q3vJtGmWNkR66ky8OMZL VmfeoeTUCVOfLSan7APe4jcKAvL4GDcwdEPjaGWuvGBULzv/OPn/d/6uW9hBULX+ weG8VpZb9uZaL+S9mhz8EcWvxXiMSNd2rU3fi0aCVdHg3/lBGO70dSFJxEAmB4p2 ne+NB8Vl/Je5Pm04WecuuFFOnSrBUAjOAZ2d0XY= -----END CERTIFICATE-----Generated at Thu Mar 26 17:36:05 2026 by rpki-client