$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d7cffb20-68b0-3efb-aae8-136dc8e4fbc9.roa File: d7cffb20-68b0-3efb-aae8-136dc8e4fbc9.roa (raw, json) Hash identifier: 9m49Ttq57Ob8Y6GxvtrGEwdJKKgXxXPyyiX4sY2jR+I= Subject key identifier: E6:7D:10:35:F1:69:59:54:BE:4E:4A:86:D2:7B:D4:00:0A:8C:2A:99 Certificate issuer: /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Certificate serial: 010D0C9F4328584DB1DACBC6645B2AC617083A80 Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d7cffb20-68b0-3efb-aae8-136dc8e4fbc9.roa Signing time: Sat 02 May 2026 01:00:24 +0000 ROA not before: Sat 02 May 2026 01:00:24 +0000 ROA not after: Fri 31 Jul 2026 01:00:24 +0000 asID: 14090 IP address blocks: 64.21.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b1:da:cb:c6:64:5b:2a:c6:17:08:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Validity Not Before: May 2 01:00:24 2026 GMT Not After : Jul 31 01:00:24 2026 GMT Subject: CN=4388aa05-1573-4cbb-a8bd-a21d3336fa54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ea:33:05:f0:85:f8:7e:2d:1b:4f:cc:10:69: 51:5e:17:75:02:a2:09:18:eb:01:fa:32:56:61:5f: 6f:b5:64:97:e0:27:bc:43:00:f0:63:03:41:ef:21: 68:24:ce:44:25:0c:dd:af:97:9a:ec:67:58:62:01: f3:25:73:7d:63:91:31:ca:c1:71:52:1d:e1:be:91: 06:a5:2a:d1:bb:62:53:5e:2f:dd:30:25:65:28:90: cb:32:27:d0:40:a5:d0:bb:c4:ce:8b:55:55:b7:1d: b0:d4:4a:b1:48:c2:9a:29:f2:84:ab:0e:e8:1f:62: 16:89:b4:54:d9:ec:3f:76:41:f9:e2:90:92:34:58: 68:12:a3:6c:91:f4:f4:49:73:14:9e:83:e5:31:70: c2:2b:5a:92:c7:2b:97:5c:2c:20:3a:0a:04:5d:30: 7e:f1:e8:0c:9b:19:70:0e:7f:f0:93:3f:eb:ab:72: 28:8f:66:f8:6f:ab:bc:f3:18:92:bf:ce:2d:d9:c1: 78:a1:8e:da:17:a2:69:b4:a9:78:58:ad:3b:89:f9: 57:3b:1e:1e:4e:ba:61:cb:57:35:8b:7e:97:d4:35: 01:b0:0d:3a:50:c5:3d:6b:a2:ab:b4:da:c5:9f:2c: b9:83:dd:66:58:02:e9:4a:4f:9c:99:3d:65:dc:ae: 0b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7D:10:35:F1:69:59:54:BE:4E:4A:86:D2:7B:D4:00:0A:8C:2A:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d7cffb20-68b0-3efb-aae8-136dc8e4fbc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl X509v3 Authority Key Identifier: keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer sbgp-ipAddrBlock: critical IPv4: 64.21.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a0:b5:49:43:8e:7f:0f:c6:b7:e7:f3:6b:7c:22:9a:94:83: 84:d6:2d:31:b2:3c:6f:d3:9f:81:93:36:1b:3a:ae:58:d0:9d: 7b:f1:9f:a3:f6:bc:b5:76:c5:ab:51:6b:9b:5a:8f:03:67:14: e8:ec:67:92:5c:4a:50:0c:5b:d4:c2:f9:e8:07:a4:66:14:55: a3:6c:d3:67:04:d5:a3:77:ca:15:ed:9f:28:1b:34:e0:d9:d9: 4e:af:9e:39:c5:a0:71:1d:4d:60:19:10:5f:fa:af:bb:df:48: 45:fd:2a:a6:2b:98:cb:f0:bb:6d:2e:a8:16:52:dc:79:dd:fb: 0b:53:6e:bc:3f:32:6f:00:22:41:f6:fa:6c:0b:d4:14:d2:50: d9:84:7b:a4:38:af:27:84:4f:be:c9:5a:b4:ba:9d:52:c3:8d: c5:a4:28:4c:25:4a:b9:92:ab:60:fe:98:66:59:56:6b:50:ad: 13:a5:3a:51:17:e8:10:45:c3:49:aa:13:03:b2:26:01:43:db: 08:c6:2a:b7:df:25:69:8b:f8:8e:82:91:43:5f:36:60:6e:3d: b1:12:58:89:ce:f2:6a:42:19:e1:ec:01:52:b0:56:ca:93:d7: e1:c3:ad:0c:d2:2f:21:99:a5:dc:72:2e:e4:70:b9:41:96:7f: 62:c7:2f:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2x2svGZFsqxhcIOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk ZTYxMB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk NDM4OGFhMDUtMTU3My00Y2JiLWE4YmQtYTIxZDMzMzZmYTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+ozBfCF+H4tG0/MEGlRXhd1AqIJGOsB+jJW YV9vtWSX4Ce8QwDwYwNB7yFoJM5EJQzdr5ea7GdYYgHzJXN9Y5ExysFxUh3hvpEG pSrRu2JTXi/dMCVlKJDLMifQQKXQu8TOi1VVtx2w1EqxSMKaKfKEqw7oH2IWibRU 2ew/dkH54pCSNFhoEqNskfT0SXMUnoPlMXDCK1qSxyuXXCwgOgoEXTB+8egMmxlw Dn/wkz/rq3Ioj2b4b6u88xiSv84t2cF4oY7aF6JptKl4WK07iflXOx4eTrphy1c1 i36X1DUBsA06UMU9a6KrtNrFnyy5g91mWALpSk+cmT1l3K4LWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZ9EDXxaVlUvk5KhtJ71AAKjCqZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3 ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvZDdjZmZiMjAtNjhiMC0z ZWZiLWFhZTgtMTM2ZGM4ZTRmYmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1 NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5 ZGQ0ZWRlNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBX5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmgtUlDjn8Pxrfn82t8IpqUg4TWLTGyPG/Tn4GTNhs6rljQnXvxn6P2 vLV2xatRa5tajwNnFOjsZ5JcSlAMW9TC+egHpGYUVaNs02cE1aN3yhXtnygbNODZ 2U6vnjnFoHEdTWAZEF/6r7vfSEX9KqYrmMvwu20uqBZS3Hnd+wtTbrw/Mm8AIkH2 +mwL1BTSUNmEe6Q4ryeET77JWrS6nVLDjcWkKEwlSrmSq2D+mGZZVmtQrROlOlEX 6BBFw0mqEwOyJgFD2wjGKrffJWmL+I6CkUNfNmBuPbESWInO8mpCGeHsAVKwVsqT 1+HDrQzSLyGZpdxyLuRwuUGWf2LHL/0= -----END CERTIFICATE-----Generated at Wed May 13 05:08:22 2026 by rpki-client