$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/973a96a2-0162-35e7-90db-f4882fddf92f.roa File: 973a96a2-0162-35e7-90db-f4882fddf92f.roa (raw, json) Hash identifier: VBAiKscfBI3LtaH1/Ug6t3cKtT6/p9JfeLs9z1kRnv0= Subject key identifier: 4D:B8:22:C6:2A:A6:C0:F5:72:7D:77:6D:19:56:5A:08:95:BB:C3:8D Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584D6515174A2E53A874F6F83880 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/973a96a2-0162-35e7-90db-f4882fddf92f.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 16509 IP address blocks: 64.52.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:17:4a:2e:53:a8:74:f6:f8:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=49ada46b-2d03-4f82-badb-4d123d434ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5f:05:9e:88:10:9e:fa:c4:00:b7:b0:bc:df: 83:b5:bb:04:53:85:d8:49:c1:f6:fe:fe:b7:05:c7: 00:39:d3:79:e3:74:79:ea:55:1f:bf:2b:09:ac:f1: 4e:cf:a3:5b:0b:42:af:9f:6d:49:c7:62:f4:08:ec: db:d2:ed:e6:75:b9:cb:9f:7d:a5:cd:7f:19:c5:a7: e8:8c:08:38:22:1d:da:e8:b1:d0:59:86:32:23:eb: f4:86:f6:0c:53:d1:7c:62:bb:9c:83:24:d0:1c:2f: b8:46:06:0d:3f:77:1c:d5:b6:0a:d3:1a:b2:d6:e2: 56:fe:c3:bd:b9:87:1e:1d:2c:81:9a:e5:8f:ab:dc: 40:5e:88:69:a4:ac:29:f1:ee:3f:47:aa:4f:89:f2: 2f:24:5f:5d:bf:7d:05:fd:6a:a1:59:00:5e:cf:84: a3:a9:33:fe:e8:10:37:a7:47:88:91:39:9a:ab:e1: b8:d6:a8:92:fa:60:ef:21:01:bc:f4:7f:b5:dd:f3: 22:24:1b:e7:15:c0:90:e3:c8:bd:aa:71:f3:34:d6: a6:a9:d7:86:43:85:f0:39:2b:89:47:8b:8a:df:e7: 10:bc:f0:15:1d:3f:cd:d4:83:28:9c:13:8f:68:85: 04:e3:b8:d1:f3:ca:6c:50:b1:41:95:dc:f8:aa:4d: 64:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B8:22:C6:2A:A6:C0:F5:72:7D:77:6D:19:56:5A:08:95:BB:C3:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/973a96a2-0162-35e7-90db-f4882fddf92f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 64.52.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:a9:2f:c4:3c:73:85:d2:41:20:54:f5:09:53:4a:33:85:15: 3c:0a:67:7a:82:4d:c1:d9:f8:82:55:66:47:4b:e2:ce:79:67: 26:4c:d2:1a:b9:a8:c3:1f:d8:0e:30:16:7a:5e:5c:05:4f:d7: 21:b5:f7:22:a2:7b:28:03:09:15:b5:d3:56:44:53:b8:81:e7: 00:20:aa:1b:72:0b:01:d7:4d:47:28:3a:30:b5:a4:13:0d:36: 98:52:31:00:2f:f5:dd:ee:cd:cd:9f:e8:da:38:c5:e1:d8:a9: ad:27:3f:d7:ea:54:82:6d:8e:59:4e:18:53:cf:da:12:e8:e3: 15:83:b1:08:56:b5:59:ad:e0:25:45:3f:d1:42:e6:87:b9:20: ef:e8:0e:53:f1:05:46:f2:29:4f:27:6e:20:cb:d0:d0:7c:99: 13:f8:bc:68:8a:91:fe:64:07:af:26:59:9e:02:22:cd:9c:63: 91:2b:a1:3f:c9:1a:b6:58:db:bd:2a:d8:84:67:41:2e:c3:0e: ba:1a:c6:cc:39:03:2f:38:4f:62:bc:9e:e6:aa:f9:0d:97:b6: d7:36:74:a2:cd:ce:ad:d7:0d:c5:55:eb:25:ae:cb:31:54:3b: 51:31:16:df:d2:e7:ef:3d:62:b7:b7:cd:b3:81:90:a9:3a:20: c9:45:c9:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFRdKLlOodPb4OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk NDlhZGE0NmItMmQwMy00ZjgyLWJhZGItNGQxMjNkNDM0Y2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV8FnogQnvrEALewvN+DtbsEU4XYScH2/v63 BccAOdN543R56lUfvysJrPFOz6NbC0Kvn21Jx2L0COzb0u3mdbnLn32lzX8Zxafo jAg4Ih3a6LHQWYYyI+v0hvYMU9F8YrucgyTQHC+4RgYNP3cc1bYK0xqy1uJW/sO9 uYceHSyBmuWPq9xAXohppKwp8e4/R6pPifIvJF9dv30F/WqhWQBez4SjqTP+6BA3 p0eIkTmaq+G41qiS+mDvIQG89H+13fMiJBvnFcCQ48i9qnHzNNamqdeGQ4XwOSuJ R4uK3+cQvPAVHT/N1IMonBOPaIUE47jR88psULFBldz4qk1kmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE24IsYqpsD1cn13bRlWWgiVu8ONMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvOTczYTk2YTItMDE2Mi0z NWU3LTkwZGItZjQ4ODJmZGRmOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDRvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKpL8Q8c4XSQSBU9QlTSjOFFTwKZ3qCTcHZ+IJVZkdL4s55ZyZM0hq5 qMMf2A4wFnpeXAVP1yG19yKieygDCRW101ZEU7iB5wAgqhtyCwHXTUcoOjC1pBMN NphSMQAv9d3uzc2f6No4xeHYqa0nP9fqVIJtjllOGFPP2hLo4xWDsQhWtVmt4CVF P9FC5oe5IO/oDlPxBUbyKU8nbiDL0NB8mRP4vGiKkf5kB68mWZ4CIs2cY5EroT/J GrZY270q2IRnQS7DDroaxsw5Ay84T2K8nuaq+Q2Xttc2dKLNzq3XDcVV6yWuyzFU O1ExFt/S5+89Yre3zbOBkKk6IMlFyTM= -----END CERTIFICATE-----Generated at Tue Apr 7 15:11:24 2026 by rpki-client