$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/646207f2-cf4f-3abb-93af-47f00919b1b8.roa File: 646207f2-cf4f-3abb-93af-47f00919b1b8.roa (raw, json) Hash identifier: W3TVlaFZmjmE/ZYwtpweM+oUZ6m7wmLPPqwDqgZ1zQw= Subject key identifier: D6:3F:C3:5D:0C:6E:09:E1:56:46:A0:AC:7D:77:F1:77:FF:06:8D:35 Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584D91BFFF4DF04647E53DD29C00 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/646207f2-cf4f-3abb-93af-47f00919b1b8.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 12213 IP address blocks: 24.170.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:bf:ff:4d:f0:46:47:e5:3d:d2:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=9a8f7c8c-b963-487e-b92a-1aa27a71c1b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6e:5d:e5:69:ca:0b:86:bc:b4:f9:db:c0:50: d2:76:ca:a4:2b:1d:ee:7f:e9:12:17:de:e7:06:ca: 5d:5e:42:10:2a:e6:2d:1f:16:75:21:e7:30:bb:5e: a8:b4:d4:2d:5f:cc:e9:43:42:f3:ce:6d:05:d2:4a: 05:01:49:c5:82:9b:cc:48:d7:58:69:5b:2b:3b:3d: d8:7f:ba:3c:d3:d3:2d:88:9b:e9:07:e2:00:a9:f4: 78:fd:57:e3:0b:58:3e:02:5c:ae:fc:59:a4:bf:db: db:8f:ed:c2:94:fc:7c:c6:37:0a:74:c4:46:74:20: 82:3e:4c:0d:38:71:b0:0c:5a:5d:10:57:fe:e7:fd: 1d:f5:e4:a8:e3:68:3d:3f:7c:28:5d:68:c2:1e:90: d4:99:0e:03:6a:93:30:45:7b:09:c0:4c:37:bd:8d: da:6b:c9:54:78:d0:c7:76:7b:2e:7e:b3:1f:10:6c: 41:02:9b:60:09:6a:f1:78:30:95:17:1d:66:03:06: 06:6e:01:ed:53:5d:07:cd:44:c9:e8:05:8f:d1:66: 8f:0d:23:70:6a:62:bf:0a:a8:64:51:d7:56:ca:7c: 81:15:5c:d0:3a:79:d7:06:c7:a0:82:fb:e5:08:a5: 32:7c:e6:cf:cc:98:90:eb:b4:de:d3:73:27:d9:72: 38:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3F:C3:5D:0C:6E:09:E1:56:46:A0:AC:7D:77:F1:77:FF:06:8D:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/646207f2-cf4f-3abb-93af-47f00919b1b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 24.170.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:47:59:82:c7:58:c5:ee:29:cb:22:5c:a1:15:3a:9b:86:ad: 4c:a4:e4:5f:ce:06:5d:8a:26:36:3d:bd:e9:bb:8b:7d:40:04: 2b:0a:a8:24:5b:4e:49:9a:71:9d:bb:c8:8f:ea:ae:81:1f:88: 63:6b:27:82:db:88:13:cf:7c:00:1c:6f:c9:14:c6:01:c4:6e: 45:51:9a:1a:27:a4:ce:3b:28:6d:50:7d:23:4d:c3:61:66:d7: b7:c9:b7:02:d0:17:1d:89:0c:e4:c9:d7:90:9f:77:c5:b7:32: 84:64:5a:a1:2a:8c:96:68:4c:7b:51:25:b9:7b:79:1b:dc:18: 91:e7:1f:7f:90:f6:39:16:2b:ec:32:8c:fb:11:6e:7e:eb:b2: 52:69:96:0b:c1:00:ad:6d:08:4a:4c:96:bd:a7:c8:b7:8a:0a: f4:83:4d:25:36:c6:1e:9b:2b:e8:ab:c2:53:a9:2f:28:08:3d: 00:a6:76:67:bc:18:58:5e:58:07:2f:78:3f:ce:b5:1c:78:b9: 4e:be:7a:fe:b0:14:92:b9:3e:e3:7b:a6:72:74:75:f1:34:54: 50:3c:79:7f:e1:12:83:ff:41:bb:2c:de:0c:a0:da:b5:5d:03: 22:59:b8:f9:8e:36:f5:b0:d4:06:38:db:d4:86:63:95:11:ac: 4c:08:25:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Rv/9N8EZH5T3SnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk OWE4ZjdjOGMtYjk2My00ODdlLWI5MmEtMWFhMjdhNzFjMWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo25d5WnKC4a8tPnbwFDSdsqkKx3uf+kSF97n BspdXkIQKuYtHxZ1Iecwu16otNQtX8zpQ0Lzzm0F0koFAUnFgpvMSNdYaVsrOz3Y f7o809MtiJvpB+IAqfR4/VfjC1g+Alyu/Fmkv9vbj+3ClPx8xjcKdMRGdCCCPkwN OHGwDFpdEFf+5/0d9eSo42g9P3woXWjCHpDUmQ4DapMwRXsJwEw3vY3aa8lUeNDH dnsufrMfEGxBAptgCWrxeDCVFx1mAwYGbgHtU10HzUTJ6AWP0WaPDSNwamK/Cqhk UddWynyBFVzQOnnXBseggvvlCKUyfObPzJiQ67Te03Mn2XI4NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNY/w10MbgnhVkagrH138Xf/Bo01MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvNjQ2MjA3ZjItY2Y0Zi0z YWJiLTkzYWYtNDdmMDA5MTliMWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGKqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZHWYLHWMXuKcsiXKEVOpuGrUyk5F/OBl2KJjY9vem7i31ABCsKqCRb TkmacZ27yI/qroEfiGNrJ4LbiBPPfAAcb8kUxgHEbkVRmhonpM47KG1QfSNNw2Fm 17fJtwLQFx2JDOTJ15Cfd8W3MoRkWqEqjJZoTHtRJbl7eRvcGJHnH3+Q9jkWK+wy jPsRbn7rslJplgvBAK1tCEpMlr2nyLeKCvSDTSU2xh6bK+irwlOpLygIPQCmdme8 GFheWAcveD/OtRx4uU6+ev6wFJK5PuN7pnJ0dfE0VFA8eX/hEoP/Qbss3gyg2rVd AyJZuPmONvWw1AY429SGY5URrEwIJX8= -----END CERTIFICATE-----Generated at Wed May 13 08:32:16 2026 by rpki-client