$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/37677602-0a43-34e8-9622-a4ac56d7d1e8.roa File: 37677602-0a43-34e8-9622-a4ac56d7d1e8.roa (raw, json) Hash identifier: NE4DUQ6o9Y75LhBFxrjFZu18CUvZTN7a45ufJ+YIdok= Subject key identifier: CA:E7:92:41:B8:15:A6:C0:D7:FF:EB:E3:6C:6E:96:25:F5:17:E7:34 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584D0EA7AE27584A19C4D1CA4B80 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/37677602-0a43-34e8-9622-a4ac56d7d1e8.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 14618 IP address blocks: 64.52.111.0/24 maxlen: 24 192.153.76.0/24 maxlen: 24 199.201.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:ae:27:58:4a:19:c4:d1:ca:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=ef1855eb-a15f-49ec-a1ed-0f2b6f5ef115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cf:10:34:12:ed:dc:ab:67:3d:f5:d7:e6:f4: 55:3a:09:2e:c8:25:62:07:3c:68:6b:3c:10:4b:fb: ab:75:d3:bb:0e:8b:e0:e6:79:0c:b2:d8:79:66:46: ac:0f:30:fe:cd:64:7a:19:92:cc:c0:9d:7a:18:65: 30:50:99:6f:ea:57:08:84:9a:f0:d2:5f:57:96:17: 24:59:77:2a:5a:31:98:42:2f:6b:d6:e6:fd:0f:36: e6:21:ad:d5:2f:3f:4e:f5:42:0e:64:a0:5d:b8:73: 83:fb:76:d3:a7:9a:4f:97:fe:0e:f6:02:b1:97:3e: dd:be:ac:62:4f:6c:1c:a9:51:85:d8:6c:ba:f5:b7: d5:4e:37:4b:f6:e7:ea:08:f7:4d:f4:b7:31:2f:6c: 72:cf:d1:2a:f0:2e:2b:95:0e:69:04:5c:d4:3a:23: ce:1c:ff:cb:d7:49:6b:c6:90:a8:d2:bd:e8:28:3b: 91:61:c8:24:86:03:7f:35:a9:e6:46:d5:bc:ef:7a: 9f:3f:ee:0b:15:21:c7:9c:39:80:b2:ab:b5:93:ff: 36:5e:d5:8b:ab:d7:eb:41:50:0a:7e:0a:89:92:5b: be:55:0f:c3:a7:59:98:ba:05:f1:5b:44:bb:98:a7: 3a:88:95:82:9e:5b:6b:ca:07:17:3c:0d:0d:ed:e5: 22:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E7:92:41:B8:15:A6:C0:D7:FF:EB:E3:6C:6E:96:25:F5:17:E7:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/37677602-0a43-34e8-9622-a4ac56d7d1e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 64.52.111.0/24 192.153.76.0/24 199.201.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:6a:1c:2b:b7:fe:73:b4:4c:94:81:cc:47:2f:f1:98:a7:a1: 03:fb:73:d1:2f:f6:c7:0c:70:8a:64:2d:20:43:3c:0b:a2:0a: ca:83:39:73:a6:3c:1e:87:79:ec:ac:9c:52:2a:3a:49:d3:52: e9:a6:46:1c:e1:45:7b:ad:11:13:39:82:07:39:62:9f:af:d2: 3b:11:18:93:a4:b6:5e:68:8f:f1:35:03:01:b6:20:05:cd:8c: 43:67:66:75:6a:6d:d4:e2:58:42:f6:34:95:9b:68:5a:ef:bf: 4c:64:61:55:a1:d9:d3:26:e0:a0:4b:22:da:01:b6:7d:d6:11: 03:ed:1c:67:c0:2c:f1:1f:30:6b:4a:18:5b:da:a8:8a:8e:be: 7f:fd:a1:6c:8a:b5:af:50:4c:7c:64:0e:4f:ef:56:b8:bd:4a: 53:09:cc:13:9f:f8:f7:6c:4e:82:f7:27:60:02:14:eb:3c:3f: 6c:cf:c3:b9:73:0c:fe:aa:3e:32:25:36:cf:bc:42:40:05:87: e0:21:e8:c1:2d:ab:9a:47:9f:95:82:51:0d:fa:8f:81:a7:20: a1:9d:33:54:f7:44:46:c7:d4:59:29:e7:b3:61:5d:15:0e:3a: 7c:22:b4:99:5b:4f:1b:58:39:82:40:52:05:44:27:94:d1:67: 31:79:5a:9e -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE0Op64nWEoZxNHKS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk ZWYxODU1ZWItYTE1Zi00OWVjLWExZWQtMGYyYjZmNWVmMTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc8QNBLt3KtnPfXX5vRVOgkuyCViBzxoazwQ S/urddO7Dovg5nkMsth5ZkasDzD+zWR6GZLMwJ16GGUwUJlv6lcIhJrw0l9Xlhck WXcqWjGYQi9r1ub9DzbmIa3VLz9O9UIOZKBduHOD+3bTp5pPl/4O9gKxlz7dvqxi T2wcqVGF2Gy69bfVTjdL9ufqCPdN9LcxL2xyz9Eq8C4rlQ5pBFzUOiPOHP/L10lr xpCo0r3oKDuRYcgkhgN/NanmRtW873qfP+4LFSHHnDmAsqu1k/82XtWLq9frQVAK fgqJklu+VQ/Dp1mYugXxW0S7mKc6iJWCnltrygcXPA0N7eUiDQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFMrnkkG4FabA1//r42xuliX1F+c0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvMzc2Nzc2MDItMGE0My0z NGU4LTk2MjItYTRhYzU2ZDdkMWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQDRvAwQA wJlMAwQAx8l/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAIlqHCu3/nO0TJSBzEcv8ZinoQP7c9Ev9scMcIpk LSBDPAuiCsqDOXOmPB6HeeysnFIqOknTUummRhzhRXutERM5ggc5Yp+v0jsRGJOk tl5oj/E1AwG2IAXNjENnZnVqbdTiWEL2NJWbaFrvv0xkYVWh2dMm4KBLItoBtn3W EQPtHGfALPEfMGtKGFvaqIqOvn/9oWyKta9QTHxkDk/vVri9SlMJzBOf+PdsToL3 J2ACFOs8P2zPw7lzDP6qPjIlNs+8QkAFh+Ah6MEtq5pHn5WCUQ36j4GnIKGdM1T3 REbH1Fkp57NhXRUOOnwitJlbTxtYOYJAUgVEJ5TRZzF5Wp4= -----END CERTIFICATE-----Generated at Thu Mar 26 19:09:23 2026 by rpki-client