$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa File: 3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa (raw, json) Hash identifier: w6BtMZxwkV19Rmg8kxN3OuXntPnPcOUanfROTOvXFR8= Subject key identifier: 82:9F:F7:41:CA:DF:B1:BC:0D:EC:39:3A:20:8D:A1:18:0E:E9:F4:EB Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584D6515173B8AF1879A99493400 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 14618 IP address blocks: 64.52.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:17:3b:8a:f1:87:9a:99:49:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=8190c703-f3e0-4460-88ea-4741677252f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6f:f3:13:00:cf:dc:13:15:d7:73:51:cc:cd: a4:dc:a4:f1:a0:af:93:08:1c:b1:f4:5a:af:d7:b3: 84:15:f2:70:cb:46:64:1d:e9:a9:81:b4:de:6d:16: 7c:4a:0e:07:32:1f:f6:56:b1:12:d1:b3:48:44:0a: 80:c7:d2:be:b7:31:d4:c3:76:45:ff:eb:34:f5:7a: e5:bc:85:2b:35:6d:f3:70:5b:71:e1:53:5a:16:05: 0c:6c:b2:f6:e0:7b:ad:86:49:99:78:50:67:ef:d4: 90:f6:d2:3e:35:4d:3e:ec:57:c1:c2:b9:93:a8:43: f0:0d:cc:82:9a:6b:8a:4f:b4:c3:ce:92:0e:c5:e1: db:86:a3:60:21:26:96:7f:43:c3:07:c5:4e:39:87: 57:b3:35:47:33:3c:c3:18:c1:46:70:5c:8c:e9:67: 5c:fc:37:40:91:7d:8b:90:67:10:dd:ad:a3:c4:b3: 6d:b3:0e:38:72:52:12:8a:48:8a:9a:25:d6:5c:06: 3b:3a:84:a6:3c:c9:2b:06:83:e0:91:a2:02:42:a8: a9:0c:29:93:43:d3:ee:6a:89:44:5a:12:3f:10:43: 3e:27:9c:b9:9a:d3:a1:73:c5:0d:ab:d4:20:b0:39: da:2e:cd:e7:ff:f9:c4:c7:a7:44:a5:84:9a:9a:90: 5b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9F:F7:41:CA:DF:B1:BC:0D:EC:39:3A:20:8D:A1:18:0E:E9:F4:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 64.52.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:a5:c9:02:4b:21:39:29:57:c3:1c:6b:9b:de:05:a2:df:eb: 9a:4e:83:9f:b1:be:e8:95:e5:93:13:52:c0:08:79:92:6d:4e: 21:29:f1:bf:d4:42:30:6b:99:45:7f:5c:ff:14:eb:de:65:64: af:5d:0f:7c:f6:d9:0c:d3:9e:b9:6d:44:a3:a9:e4:ca:74:1a: 16:46:0d:49:30:f6:33:ed:42:83:79:dc:b7:8f:e7:80:df:53: a9:72:42:44:10:1a:e4:16:fe:81:ec:6f:60:a6:59:ab:f6:bd: e7:d7:2b:92:62:f7:fe:4c:8c:b6:7e:fe:33:ba:65:dc:83:92: 0a:38:8f:08:0f:ba:fe:93:e7:7a:3f:2f:96:6f:14:b8:bf:a0: b0:dc:8c:af:42:bd:a4:d1:70:0b:7d:e5:4a:17:67:e2:46:16: 79:7f:61:d5:e2:ac:7d:da:45:b6:53:92:d8:9a:b9:f3:c1:5a: 2c:0f:10:89:61:f9:63:66:e7:d1:e9:45:d7:11:28:77:97:d5: b2:43:83:ee:40:77:01:78:b7:77:22:b1:43:8c:f3:dc:74:aa: 53:b6:c1:04:4b:49:a3:15:25:51:d3:02:9b:9e:b7:6a:b0:7e: 6c:09:9a:45:d7:9a:8d:28:f1:d0:cb:6f:35:a9:6b:21:6e:32: e6:ce:fc:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFRc7ivGHmplJNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk ODE5MGM3MDMtZjNlMC00NDYwLTg4ZWEtNDc0MTY3NzI1MmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm/zEwDP3BMV13NRzM2k3KTxoK+TCByx9Fqv 17OEFfJwy0ZkHempgbTebRZ8Sg4HMh/2VrES0bNIRAqAx9K+tzHUw3ZF/+s09Xrl vIUrNW3zcFtx4VNaFgUMbLL24HuthkmZeFBn79SQ9tI+NU0+7FfBwrmTqEPwDcyC mmuKT7TDzpIOxeHbhqNgISaWf0PDB8VOOYdXszVHMzzDGMFGcFyM6Wdc/DdAkX2L kGcQ3a2jxLNtsw44clISikiKmiXWXAY7OoSmPMkrBoPgkaICQqipDCmTQ9PuaolE WhI/EEM+J5y5mtOhc8UNq9QgsDnaLs3n//nEx6dEpYSampBbKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKf90HK37G8Dew5OiCNoRgO6fTrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvM2YxZDVlMDgtOWE1Ny0z YjFmLWEyZDktOWRhMDNjZDhhYWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDRvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJelyQJLITkpV8Mca5veBaLf65pOg5+xvuiV5ZMTUsAIeZJtTiEp8b/U QjBrmUV/XP8U695lZK9dD3z22QzTnrltRKOp5Mp0GhZGDUkw9jPtQoN53LeP54Df U6lyQkQQGuQW/oHsb2CmWav2vefXK5Ji9/5MjLZ+/jO6ZdyDkgo4jwgPuv6T53o/ L5ZvFLi/oLDcjK9CvaTRcAt95UoXZ+JGFnl/YdXirH3aRbZTktiaufPBWiwPEIlh +WNm59HpRdcRKHeX1bJDg+5AdwF4t3cisUOM89x0qlO2wQRLSaMVJVHTApuet2qw fmwJmkXXmo0o8dDLbzWpayFuMubO/IQ= -----END CERTIFICATE-----Generated at Tue Apr 7 10:33:10 2026 by rpki-client