$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/cadfb715-8e26-3e18-83e8-8fb22e97789c.roa File: cadfb715-8e26-3e18-83e8-8fb22e97789c.roa (raw, json) Hash identifier: hg9T000L1FQye5al93M+CHP0KuF1ZZ+dIY3ea55oITM= Subject key identifier: AE:F0:C9:C5:68:FA:D4:E9:73:1B:B7:40:EE:E8:F4:3A:47:C5:68:9B Certificate issuer: /CN=a920645f-6928-416c-87e9-a0135e5720e4 Certificate serial: 010D0C9F4328584D8EF55CD583C06716D91828C0 Authority key identifier: 0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/cadfb715-8e26-3e18-83e8-8fb22e97789c.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 13657 IP address blocks: 67.215.192.0/20 maxlen: 24 104.242.0.0/17 maxlen: 24 216.235.0.0/20 maxlen: 24 2001:4900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:5c:d5:83:c0:67:16:d9:18:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a920645f-6928-416c-87e9-a0135e5720e4 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=2a2802b8-9183-4d14-a0fe-841195cf67c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:08:73:8c:3d:ad:86:59:33:d3:c8:05:30:5b: f4:9a:a6:e4:88:c8:cc:29:67:19:81:89:92:1b:d0: ab:2f:47:af:35:e2:dc:13:79:bc:0f:d6:8c:02:30: d7:38:f4:7e:18:27:61:39:8e:a3:57:05:75:42:9e: 13:fd:48:6a:2d:bb:4a:7f:27:46:41:f5:43:c4:2e: 65:12:02:98:8e:b4:f8:29:21:1d:63:2e:d9:19:69: 0c:82:76:eb:67:5f:87:b6:b0:f9:19:70:5d:27:2d: cf:66:bd:37:d4:76:ab:8a:50:3e:0e:6b:d1:d2:0d: 6b:9e:66:45:60:83:f0:3d:27:9a:70:89:50:1d:52: 63:ca:4c:65:9b:25:63:67:d0:9d:bb:29:58:74:ed: d3:c9:11:cd:7a:c0:ee:1d:2f:66:78:35:7f:8a:eb: f5:06:e1:eb:b9:84:6b:db:ba:c9:50:c3:79:85:b7: 8e:39:60:84:1d:73:c0:c9:4c:22:eb:ee:63:43:12: 84:e6:28:9d:ec:37:3c:e7:12:8d:b6:e6:17:e2:c1: bf:cb:9e:df:57:0d:05:f9:6f:4c:bb:a7:41:79:17: 9d:27:51:99:cc:c7:12:57:d9:74:0a:d3:df:1b:79: cd:79:41:28:63:07:6b:db:7b:2c:62:94:c1:33:26: f4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F0:C9:C5:68:FA:D4:E9:73:1B:B7:40:EE:E8:F4:3A:47:C5:68:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/cadfb715-8e26-3e18-83e8-8fb22e97789c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.crl X509v3 Authority Key Identifier: keyid:0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer sbgp-ipAddrBlock: critical IPv4: 67.215.192.0/20 104.242.0.0/17 216.235.0.0/20 IPv6: 2001:4900::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:27:32:15:7c:59:4b:34:6f:5b:b0:a2:ed:fb:b2:f4:98:c3: 20:8a:cb:41:27:d5:b1:a1:9c:8b:86:45:ed:88:9c:14:00:64: 79:4e:1e:39:7a:fd:87:d1:37:a8:31:be:bc:4f:35:6b:23:8c: f1:4b:14:4c:26:e2:5a:05:b7:83:db:fe:92:7b:8a:d4:5f:23: cd:ed:a7:a1:90:9b:ae:6a:cb:c8:e1:3b:7c:bd:7a:08:bf:5a: 87:f4:05:d9:7b:4e:63:e0:83:7b:2e:9d:7d:b4:c7:5f:9a:57: 10:5f:23:e7:cf:e8:c0:51:ca:d9:c2:2a:e6:be:f3:45:29:66: ae:f0:92:3a:23:1e:81:fd:3e:76:ba:49:ca:c2:d5:99:a8:c3: 35:64:d3:41:e1:e7:90:ba:f5:81:79:95:75:8d:2f:8f:99:1d: 79:96:86:75:44:9a:0e:f9:1f:56:2c:05:bd:fa:19:ed:59:7d: e6:f5:36:6f:0d:e2:f8:02:ff:a9:7e:50:40:9c:92:e9:00:91: 9c:14:20:02:15:aa:11:80:09:2f:8f:bf:8a:9a:fe:80:8a:90: 1a:a0:fb:73:3e:45:ff:cc:d5:d4:ab:ed:2b:ec:91:43:5a:6a: 0a:91:6f:b0:3a:b5:3d:75:52:8c:a8:2a:f7:2f:f3:26:85:19: cf:ab:89:03 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE2O9VzVg8BnFtkYKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkyMDY0NWYtNjkyOC00MTZjLTg3ZTktYTAxMzVlNTcy MGU0MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MmEyODAyYjgtOTE4My00ZDE0LWEwZmUtODQxMTk1Y2Y2N2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAughzjD2thlkz08gFMFv0mqbkiMjMKWcZgYmS G9CrL0evNeLcE3m8D9aMAjDXOPR+GCdhOY6jVwV1Qp4T/UhqLbtKfydGQfVDxC5l EgKYjrT4KSEdYy7ZGWkMgnbrZ1+HtrD5GXBdJy3PZr031HarilA+DmvR0g1rnmZF YIPwPSeacIlQHVJjykxlmyVjZ9CduylYdO3TyRHNesDuHS9meDV/iuv1BuHruYRr 27rJUMN5hbeOOWCEHXPAyUwi6+5jQxKE5iid7Dc85xKNtuYX4sG/y57fVw0F+W9M u6dBeRedJ1GZzMcSV9l0CtPfG3nNeUEoYwdr23ssYpTBMyb08wIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFK7wycVo+tTpcxu3QO7o9DpHxWibMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hOTIw NjQ1Zi02OTI4LTQxNmMtODdlOS1hMDEzNWU1NzIwZTQvY2FkZmI3MTUtOGUyNi0z ZTE4LTgzZTgtOGZiMjJlOTc3ODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTkyMDY0NWYtNjkyOC00MTZjLTg3 ZTktYTAxMzVlNTcyMGU0L2E5MjA2NDVmLTY5MjgtNDE2Yy04N2U5LWEwMTM1ZTU3 MjBlNC5jcmwwHwYDVR0jBBgwFoAUDno2lSOuiTEQhAW3fVJvX5GUSCkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hOTIwNjQ1Zi02OTI4LTQxNmMtODdlOS1hMDEz NWU1NzIwZTQuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEQ9fAAwQH aPIAAwQE2OsAMA0EAgACMAcDBQAgAUkAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAUnMhV8WUs0b1uwou37 svSYwyCKy0En1bGhnIuGRe2InBQAZHlOHjl6/YfRN6gxvrxPNWsjjPFLFEwm4loF t4Pb/pJ7itRfI83tp6GQm65qy8jhO3y9egi/Wof0Bdl7TmPgg3sunX20x1+aVxBf I+fP6MBRytnCKua+80UpZq7wkjojHoH9Pna6ScrC1ZmowzVk00Hh55C69YF5lXWN L4+ZHXmWhnVEmg75H1YsBb36Ge1Zfeb1Nm8N4vgC/6l+UECckukAkZwUIAIVqhGA CS+Pv4qa/oCKkBqg+3M+Rf/M1dSr7SvskUNaagqRb7A6tT11UoyoKvcv8yaFGc+r iQM= -----END CERTIFICATE-----Generated at Wed May 13 11:36:55 2026 by rpki-client