$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/11f88e34-07bc-3f95-9191-762ad2f8559d.roa File: 11f88e34-07bc-3f95-9191-762ad2f8559d.roa (raw, json) Hash identifier: xYFT3EImk79UJH3iMRBU+0eNWg7VDiTCRdhIdL9dw0w= Subject key identifier: D8:87:8B:08:0B:A8:9F:A7:0E:CA:C5:2E:B1:3D:9C:90:6A:59:80:E2 Certificate issuer: /CN=9acebd4e-10d7-44b3-802e-4efe607dd4e3 Certificate serial: 010D0C9F4328584DCDC5AB2018506E2A9D15D4C0 Authority key identifier: AA:97:35:3D:93:AC:AD:D5:70:FB:DB:56:2D:A5:D4:0F:56:55:74:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/11f88e34-07bc-3f95-9191-762ad2f8559d.roa Signing time: Tue 12 May 2026 01:00:24 +0000 ROA not before: Tue 12 May 2026 01:00:24 +0000 ROA not after: Mon 10 Aug 2026 01:00:24 +0000 asID: 16509 IP address blocks: 65.38.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/9acebd4e-10d7-44b3-802e-4efe607dd4e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/9acebd4e-10d7-44b3-802e-4efe607dd4e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:c5:ab:20:18:50:6e:2a:9d:15:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9acebd4e-10d7-44b3-802e-4efe607dd4e3 Validity Not Before: May 12 01:00:24 2026 GMT Not After : Aug 10 01:00:24 2026 GMT Subject: CN=7764bceb-e6f2-455f-8b23-2422a10620ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:52:25:14:ee:8e:fc:48:e1:06:6d:92:7f:4c: 3c:6a:53:85:c8:b0:db:9e:5f:80:86:57:e5:ce:f2: 59:0b:2c:51:c9:aa:e7:d5:fe:b4:68:56:6f:b9:10: ad:e2:84:8d:81:bb:f3:6e:33:fd:a5:3f:63:42:fd: 05:73:fe:74:56:42:ea:d8:c7:60:10:03:90:0d:ad: 74:45:cd:36:e4:0e:21:04:31:b7:77:19:ea:06:57: 82:9f:4f:fa:02:6c:11:c6:f2:3f:01:97:08:a2:d3: 67:0b:48:e3:70:90:c6:9c:51:1f:80:92:86:0b:03: 8a:5d:6a:12:f1:35:8c:1a:78:98:06:19:c8:de:a8: 9d:55:7d:48:85:02:5c:31:58:08:66:74:a5:6a:d3: df:18:3c:94:59:dd:b3:9d:f8:61:d2:18:29:c7:66: 4d:eb:7c:0d:6a:6a:d2:fb:da:39:59:ca:b9:86:c2: ff:bd:4e:cf:81:91:e4:c3:f9:6f:3d:c7:7b:bb:c6: 8c:01:89:67:59:30:44:98:99:49:e5:cc:9e:13:c1: 1e:da:43:4c:2e:c4:bf:18:31:74:60:76:20:e4:a6: 54:3d:8b:b0:ec:c3:e5:80:62:31:27:08:f6:a2:3b: 0c:d2:a1:eb:6c:ae:7d:34:b6:ec:d6:7c:b6:9c:d9: 66:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:87:8B:08:0B:A8:9F:A7:0E:CA:C5:2E:B1:3D:9C:90:6A:59:80:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/11f88e34-07bc-3f95-9191-762ad2f8559d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/9acebd4e-10d7-44b3-802e-4efe607dd4e3.crl X509v3 Authority Key Identifier: keyid:AA:97:35:3D:93:AC:AD:D5:70:FB:DB:56:2D:A5:D4:0F:56:55:74:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3.cer sbgp-ipAddrBlock: critical IPv4: 65.38.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:74:83:de:0b:4d:ba:12:59:33:69:7e:1c:5f:a2:c3:1e:82: ee:a2:be:2e:d3:4c:32:ec:9b:db:66:42:71:99:b2:d4:69:73: e5:4b:bc:54:8b:48:f1:e4:20:d8:d4:83:54:14:88:65:9c:b1: 47:ca:23:bc:58:60:de:29:b6:98:09:8b:a0:09:f7:c3:a1:be: 42:63:56:28:00:07:69:2f:a2:d7:10:77:b6:50:8d:38:fa:95: 3e:ff:f7:1c:44:e7:51:de:64:cb:18:06:e8:e8:5e:ff:2b:78: 41:f3:c8:14:1e:c8:33:ea:75:88:c1:c6:97:fa:0e:b3:e5:62: 0c:65:9b:80:ee:3b:a1:7f:77:55:be:f6:f1:aa:fd:22:92:33: b5:ed:36:db:26:54:19:50:59:35:59:8b:61:ff:1f:31:59:ff: 02:31:f6:ca:59:96:fc:f6:ae:59:b9:00:45:2d:07:29:eb:5a: f6:27:7c:7c:3e:c1:ed:e3:35:e3:6c:f9:83:5f:a5:64:1a:21: 79:88:23:00:fe:1a:62:db:56:cc:bd:b0:16:53:7d:d5:ad:02: 3b:5b:1a:cc:ba:51:92:d2:78:f3:60:07:5c:82:cf:d6:ac:5f: ed:3a:a4:62:8d:aa:5b:07:93:37:15:bf:70:22:f4:e3:76:f6: 8f:4f:98:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3NxasgGFBuKp0V1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFjZWJkNGUtMTBkNy00NGIzLTgwMmUtNGVmZTYwN2Rk NGUzMB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk Nzc2NGJjZWItZTZmMi00NTVmLThiMjMtMjQyMmExMDYyMGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFIlFO6O/EjhBm2Sf0w8alOFyLDbnl+Ahlfl zvJZCyxRyarn1f60aFZvuRCt4oSNgbvzbjP9pT9jQv0Fc/50VkLq2MdgEAOQDa10 Rc025A4hBDG3dxnqBleCn0/6AmwRxvI/AZcIotNnC0jjcJDGnFEfgJKGCwOKXWoS 8TWMGniYBhnI3qidVX1IhQJcMVgIZnSlatPfGDyUWd2znfhh0hgpx2ZN63wNamrS +9o5Wcq5hsL/vU7PgZHkw/lvPcd7u8aMAYlnWTBEmJlJ5cyeE8Ee2kNMLsS/GDF0 YHYg5KZUPYuw7MPlgGIxJwj2ojsM0qHrbK59NLbs1ny2nNlmVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiHiwgLqJ+nDsrFLrE9nJBqWYDiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YWNl YmQ0ZS0xMGQ3LTQ0YjMtODAyZS00ZWZlNjA3ZGQ0ZTMvMTFmODhlMzQtMDdiYy0z Zjk1LTkxOTEtNzYyYWQyZjg1NTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWFjZWJkNGUtMTBkNy00NGIzLTgw MmUtNGVmZTYwN2RkNGUzLzlhY2ViZDRlLTEwZDctNDRiMy04MDJlLTRlZmU2MDdk ZDRlMy5jcmwwHwYDVR0jBBgwFoAUqpc1PZOsrdVw+9tWLaXUD1ZVdGEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YWNlYmQ0ZS0xMGQ3LTQ0YjMtODAyZS00ZWZl NjA3ZGQ0ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQSZ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADl0g94LTboSWTNpfhxfosMegu6ivi7TTDLsm9tmQnGZstRpc+VLvFSL SPHkINjUg1QUiGWcsUfKI7xYYN4ptpgJi6AJ98OhvkJjVigAB2kvotcQd7ZQjTj6 lT7/9xxE51HeZMsYBujoXv8reEHzyBQeyDPqdYjBxpf6DrPlYgxlm4DuO6F/d1W+ 9vGq/SKSM7XtNtsmVBlQWTVZi2H/HzFZ/wIx9spZlvz2rlm5AEUtBynrWvYnfHw+ we3jNeNs+YNfpWQaIXmIIwD+GmLbVsy9sBZTfdWtAjtbGsy6UZLSePNgB1yCz9as X+06pGKNqlsHkzcVv3Ai9ON29o9PmEg= -----END CERTIFICATE-----Generated at Wed May 13 07:47:02 2026 by rpki-client