$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/c975af3b-1769-381f-b596-ba7b61e7fce8.roa File: c975af3b-1769-381f-b596-ba7b61e7fce8.roa (raw, json) Hash identifier: knZBCIR9IfKSsE+yEOfBx/GLENHznMrmCMaVu9AsENo= Subject key identifier: 44:19:C4:EB:5E:CF:11:2B:E4:C3:D7:D7:0E:C2:1C:19:EA:74:F6:1C Certificate issuer: /CN=2cd4f52f-4053-45db-b8e0-a7e0e3b85fba Certificate serial: 010D0C9F4328584D464F19C210B8F9225DD21620 Authority key identifier: 92:7E:C7:37:59:2A:7C:4B:35:5D:FB:0F:F7:B8:D6:4E:7F:9D:CD:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/c975af3b-1769-381f-b596-ba7b61e7fce8.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 20257 IP address blocks: 69.80.80.0/20 maxlen: 24 74.222.96.0/20 maxlen: 24 74.222.112.0/20 maxlen: 24 153.57.64.0/18 maxlen: 24 158.115.160.0/19 maxlen: 24 173.233.112.0/20 maxlen: 24 216.218.64.0/18 maxlen: 24 2605:4cc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:4f:19:c2:10:b8:f9:22:5d:d2:16:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cd4f52f-4053-45db-b8e0-a7e0e3b85fba Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=af95fa99-c1a6-490b-b419-ff105f570109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d7:47:f9:3f:8e:e6:4a:3a:1d:70:be:bd:45: 11:f0:5c:85:9b:c4:79:45:31:e1:69:91:0e:18:b4: 4c:d5:b9:24:00:ca:0d:11:9f:63:8d:db:27:94:dc: a0:db:3c:81:ae:80:13:b6:a5:eb:15:0c:f2:f3:5f: 8d:87:3b:73:66:de:24:73:6e:13:b9:a7:36:05:ad: 99:0b:36:07:cd:90:ed:be:1e:9a:85:4b:84:73:3e: e3:5c:12:94:03:40:38:a7:fb:6e:e5:c2:9a:d4:3a: 37:d8:7f:3e:74:ff:56:7c:68:b5:a1:36:50:fc:82: a0:e8:1e:91:33:d7:7d:b5:2f:aa:d0:a5:b7:a9:7f: 2a:f2:69:d9:74:92:2b:39:d8:a5:75:53:a2:c0:49: a4:4d:a9:f8:92:d7:01:8e:47:37:0e:26:3d:9e:99: 39:e5:62:a7:e7:37:10:e8:7d:b1:af:e9:81:7d:97: 3b:63:b6:ae:a2:ec:c6:b7:8d:0c:67:eb:ca:ae:1f: 65:4c:2e:7b:df:d7:c6:0c:ad:94:e5:5c:18:71:79: 49:61:5c:2d:13:5c:c8:8b:95:27:5e:c1:c5:22:ca: 5a:73:cf:d0:62:49:b1:6e:7e:85:48:20:5b:d2:76: 57:38:18:14:0b:da:21:af:4a:f0:4c:11:8e:83:74: 50:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:19:C4:EB:5E:CF:11:2B:E4:C3:D7:D7:0E:C2:1C:19:EA:74:F6:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/c975af3b-1769-381f-b596-ba7b61e7fce8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.crl X509v3 Authority Key Identifier: keyid:92:7E:C7:37:59:2A:7C:4B:35:5D:FB:0F:F7:B8:D6:4E:7F:9D:CD:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.cer sbgp-ipAddrBlock: critical IPv4: 69.80.80.0/20 74.222.96.0/19 153.57.64.0/18 158.115.160.0/19 173.233.112.0/20 216.218.64.0/18 IPv6: 2605:4cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:f3:b1:46:bf:4f:71:22:89:9b:0d:fa:ef:d2:05:c0:27:61: 33:14:e9:f6:0d:6c:b1:0f:cf:54:93:36:06:dc:60:6f:42:b1: ee:08:b6:3c:db:7e:ff:63:ee:bc:27:df:bb:76:a3:f8:76:b5: 0b:ec:dd:79:b4:9f:08:17:45:56:76:3b:36:c4:c6:3e:74:24: 84:8c:39:b4:c8:ad:51:ec:f7:e2:90:5d:c5:9f:b3:27:50:28: 2e:35:df:4e:04:ca:5a:db:2e:25:53:9e:d8:0f:dc:be:20:46: 8d:2e:7f:f1:e2:d1:3e:08:23:1a:a0:41:6e:2a:c8:cb:37:14: bb:e5:62:77:1d:fb:4b:63:23:10:06:e2:21:53:c2:2f:cd:56: 70:de:28:d9:8b:5b:41:9b:75:b8:7a:0d:b1:6b:a1:2f:23:0d: 57:c7:9c:f8:23:d1:26:00:82:f3:cd:42:1c:d4:df:53:2e:a7: 4a:4b:ca:ac:8b:21:4d:4a:24:35:61:cb:51:0c:62:97:7b:a2: ff:e9:93:b2:73:15:f9:9e:4e:b2:8d:0b:2d:f6:3c:93:26:31: 49:80:c4:00:3f:22:96:47:53:b2:dd:4c:1f:eb:26:af:42:28: 67:0f:0e:89:04:18:e8:c0:58:5a:de:e7:6b:32:54:a3:e3:7d: fb:4e:75:4d -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWE1GTxnCELj5Il3SFiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNkNGY1MmYtNDA1My00NWRiLWI4ZTAtYTdlMGUzYjg1 ZmJhMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk YWY5NWZhOTktYzFhNi00OTBiLWI0MTktZmYxMDVmNTcwMTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgddH+T+O5ko6HXC+vUUR8FyFm8R5RTHhaZEO GLRM1bkkAMoNEZ9jjdsnlNyg2zyBroATtqXrFQzy81+NhztzZt4kc24Tuac2Ba2Z CzYHzZDtvh6ahUuEcz7jXBKUA0A4p/tu5cKa1Do32H8+dP9WfGi1oTZQ/IKg6B6R M9d9tS+q0KW3qX8q8mnZdJIrOdildVOiwEmkTan4ktcBjkc3DiY9npk55WKn5zcQ 6H2xr+mBfZc7Y7auouzGt40MZ+vKrh9lTC5739fGDK2U5VwYcXlJYVwtE1zIi5Un XsHFIspac8/QYkmxbn6FSCBb0nZXOBgUC9ohr0rwTBGOg3RQ7wIDAQABo4IDgjCC A34wHQYDVR0OBBYEFEQZxOtezxEr5MPX1w7CHBnqdPYcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yY2Q0 ZjUyZi00MDUzLTQ1ZGItYjhlMC1hN2UwZTNiODVmYmEvYzk3NWFmM2ItMTc2OS0z ODFmLWI1OTYtYmE3YjYxZTdmY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmNkNGY1MmYtNDA1My00NWRiLWI4 ZTAtYTdlMGUzYjg1ZmJhLzJjZDRmNTJmLTQwNTMtNDVkYi1iOGUwLWE3ZTBlM2I4 NWZiYS5jcmwwHwYDVR0jBBgwFoAUkn7HN1kqfEs1XfsP97jWTn+dzfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yY2Q0ZjUyZi00MDUzLTQ1ZGItYjhlMC1hN2Uw ZTNiODVmYmEuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQERVBQAwQF St5gAwQGmTlAAwQFnnOgAwQErelwAwQG2NpAMA0EAgACMAcDBQAmBUzAMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAHvzsUa/T3EiiZsN+u/SBcAnYTMU6fYNbLEPz1STNgbcYG9Cse4Itjzbfv9j 7rwn37t2o/h2tQvs3Xm0nwgXRVZ2OzbExj50JISMObTIrVHs9+KQXcWfsydQKC41 304EylrbLiVTntgP3L4gRo0uf/Hi0T4IIxqgQW4qyMs3FLvlYncd+0tjIxAG4iFT wi/NVnDeKNmLW0Gbdbh6DbFroS8jDVfHnPgj0SYAgvPNQhzU31Mup0pLyqyLIU1K JDVhy1EMYpd7ov/pk7JzFfmeTrKNCy32PJMmMUmAxAA/IpZHU7LdTB/rJq9CKGcP DokEGOjAWFre52syVKPjfftOdU0= -----END CERTIFICATE-----Generated at Sat Mar 28 13:41:35 2026 by rpki-client