$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/3c659425-4a42-3ef9-8a3f-c568097ff599.roa File: 3c659425-4a42-3ef9-8a3f-c568097ff599.roa (raw, json) Hash identifier: RF18cm5LtxSzuOzuPimOmy9mSssoRoftlpf4qpXPOHQ= Subject key identifier: 7C:68:48:F6:9E:1D:B8:6A:DE:5D:90:01:3D:E4:5F:64:07:A0:4F:23 Certificate issuer: /CN=5c24b227-71d8-4de3-9a17-e538fd673530 Certificate serial: 010D0C9F4328584DA97ABBAA712EDA8519C29F40 Authority key identifier: 47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/3c659425-4a42-3ef9-8a3f-c568097ff599.roa Signing time: Wed 29 Apr 2026 01:00:23 +0000 ROA not before: Wed 29 Apr 2026 01:00:23 +0000 ROA not after: Tue 28 Jul 2026 01:00:23 +0000 asID: 395383 IP address blocks: 70.34.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a9:7a:bb:aa:71:2e:da:85:19:c2:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c24b227-71d8-4de3-9a17-e538fd673530 Validity Not Before: Apr 29 01:00:23 2026 GMT Not After : Jul 28 01:00:23 2026 GMT Subject: CN=8ce39578-913d-491b-b37d-a1f34da36e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f7:d0:64:a7:4d:8d:e7:41:26:e1:40:9f:fa: 9b:ee:0a:f0:e9:2b:ee:a2:8a:c2:ce:16:71:16:48: 56:c0:9e:fd:31:c8:e7:9b:34:6c:d2:d6:c0:5b:16: 63:91:59:e0:89:23:5a:4c:55:cd:29:8b:8d:7f:e3: c7:94:f7:f9:8f:01:ce:68:c5:51:a9:27:89:c4:d2: 4a:f6:dc:f9:cc:d4:3b:81:c5:56:ad:83:36:7c:24: 90:ac:a0:12:ba:24:95:8a:2e:52:cc:a4:9e:6f:7d: e0:e5:2b:dd:36:c7:c1:91:99:a9:1f:a6:76:3f:10: c7:28:e4:11:ba:a3:b6:4f:c6:57:68:19:e9:09:b2: 66:0f:37:40:ad:4b:f4:d0:29:4a:d2:fa:ed:55:5d: 8f:60:ad:41:28:ec:2b:9c:ca:bf:8c:de:b9:f4:af: af:cf:54:50:ac:a4:6e:44:ce:2c:11:a9:68:44:97: d6:03:8e:e0:23:4c:fe:61:53:b1:49:19:2d:33:90: 9c:32:ac:d2:83:83:fa:84:c0:cc:90:66:26:b5:9b: 4e:26:20:e3:c6:5a:ff:21:a6:6c:7f:7e:de:63:47: e6:41:5c:71:51:1d:44:26:24:ad:0e:49:c9:39:1c: 5e:ae:34:82:44:d4:16:75:9a:30:52:aa:6a:07:53: 73:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:68:48:F6:9E:1D:B8:6A:DE:5D:90:01:3D:E4:5F:64:07:A0:4F:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/3c659425-4a42-3ef9-8a3f-c568097ff599.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl X509v3 Authority Key Identifier: keyid:47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer sbgp-ipAddrBlock: critical IPv4: 70.34.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:1f:c6:f9:29:26:cf:5b:51:07:f8:6b:69:13:46:d9:37:49: 52:69:c5:73:8c:28:a7:26:cd:1a:d7:e0:be:37:b0:5b:64:a7: dc:88:30:9a:ae:3d:e3:91:a1:66:09:3e:a5:d9:76:d7:f3:6f: 1a:a0:6d:1e:b5:09:d2:a5:aa:6a:47:53:39:6f:db:7d:16:69: 42:f6:34:99:62:8f:60:e4:19:38:1e:70:fc:e6:40:a0:1f:f7: da:5d:df:20:a5:f2:ac:ff:f6:a8:22:ab:92:62:89:1d:f3:c3: 7c:b6:cc:8a:76:67:7c:41:7e:84:ea:b1:d8:63:27:fd:f0:8a: 28:5f:03:1d:db:34:15:22:5f:6f:dd:1b:14:9d:88:e4:13:af: bf:1b:5f:5b:ec:17:6a:93:30:28:26:d6:8f:a5:c1:2c:21:2c: f8:25:10:e0:53:2b:e4:f1:55:65:6a:34:eb:c1:9a:89:e5:c2: 57:5d:8a:26:e7:b3:95:76:1a:20:72:23:46:df:ef:be:99:83: fe:fb:68:23:de:c2:88:4c:39:30:15:6b:5a:af:84:c5:89:a4: 25:4f:80:e3:72:46:0c:f7:af:fa:8a:84:ce:ae:ff:a0:ae:11: 34:d3:f6:a7:cd:a8:ef:d7:13:d7:86:85:e2:fd:70:05:99:de: 97:8b:3a:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2peruqcS7ahRnCn0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMyNGIyMjctNzFkOC00ZGUzLTlhMTctZTUzOGZkNjcz NTMwMB4XDTI2MDQyOTAxMDAyM1oXDTI2MDcyODAxMDAyM1owLzEtMCsGA1UEAxMk OGNlMzk1NzgtOTEzZC00OTFiLWIzN2QtYTFmMzRkYTM2ZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPfQZKdNjedBJuFAn/qb7grw6SvuoorCzhZx FkhWwJ79McjnmzRs0tbAWxZjkVngiSNaTFXNKYuNf+PHlPf5jwHOaMVRqSeJxNJK 9tz5zNQ7gcVWrYM2fCSQrKASuiSVii5SzKSeb33g5SvdNsfBkZmpH6Z2PxDHKOQR uqO2T8ZXaBnpCbJmDzdArUv00ClK0vrtVV2PYK1BKOwrnMq/jN659K+vz1RQrKRu RM4sEaloRJfWA47gI0z+YVOxSRktM5CcMqzSg4P6hMDMkGYmtZtOJiDjxlr/IaZs f37eY0fmQVxxUR1EJiStDknJORxerjSCRNQWdZowUqpqB1NzywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxoSPaeHbhq3l2QAT3kX2QHoE8jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YzI0 YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4ZmQ2NzM1MzAvM2M2NTk0MjUtNGE0Mi0z ZWY5LThhM2YtYzU2ODA5N2ZmNTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWMyNGIyMjctNzFkOC00ZGUzLTlh MTctZTUzOGZkNjczNTMwLzVjMjRiMjI3LTcxZDgtNGRlMy05YTE3LWU1MzhmZDY3 MzUzMC5jcmwwHwYDVR0jBBgwFoAURxw2+fK+zH6557f46lGtvMrC1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YzI0YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4 ZmQ2NzM1MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8fxvkpJs9bUQf4a2kTRtk3SVJpxXOMKKcmzRrX4L43sFtkp9yIMJqu PeORoWYJPqXZdtfzbxqgbR61CdKlqmpHUzlv230WaUL2NJlij2DkGTgecPzmQKAf 99pd3yCl8qz/9qgiq5JiiR3zw3y2zIp2Z3xBfoTqsdhjJ/3wiihfAx3bNBUiX2/d GxSdiOQTr78bX1vsF2qTMCgm1o+lwSwhLPglEOBTK+TxVWVqNOvBmonlwlddiibn s5V2GiByI0bf776Zg/77aCPewohMOTAVa1qvhMWJpCVPgONyRgz3r/qKhM6u/6Cu ETTT9qfNqO/XE9eGheL9cAWZ3peLOrw= -----END CERTIFICATE-----Generated at Wed May 13 01:34:57 2026 by rpki-client