$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/27ef1240-e400-35f4-a885-bf4a8fb3d7f3.roa File: 27ef1240-e400-35f4-a885-bf4a8fb3d7f3.roa (raw, json) Hash identifier: qIObKiiBfgPRg/pjA0PNKFraPcNfmPwio0xpkyOO2w8= Subject key identifier: A0:D4:A8:66:AA:29:FD:80:4B:56:8C:00:E5:C1:D6:B1:EA:E6:F7:3F Certificate issuer: /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b Certificate serial: 010D0C9F4328584D7A055316F18A1D0D6ECFFA00 Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/27ef1240-e400-35f4-a885-bf4a8fb3d7f3.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 198949 IP address blocks: 67.20.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:53:16:f1:8a:1d:0d:6e:cf:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=391f56f3-7f84-4e25-876a-1d4ece9c4c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:71:8d:be:ed:70:05:3e:1e:df:40:65:65:f5: 7a:1e:0e:71:e2:65:d2:4d:d9:30:07:56:36:2c:48: 20:4e:f3:95:e2:a6:b3:39:f0:1d:93:a7:85:44:90: 37:09:cd:2d:a6:82:2f:f1:f0:a8:64:c2:d8:5f:c4: 6b:a3:5a:c6:79:70:a5:81:82:6e:de:14:f7:78:bd: e1:0a:96:e7:eb:ee:c3:0d:21:96:5c:31:0c:4f:1d: 32:15:95:e7:a7:a4:44:3b:bc:e6:cd:cf:6b:72:20: e0:2b:de:6b:db:6a:65:8a:0a:5c:b4:28:b1:be:91: 94:64:40:ea:71:49:00:3d:3b:c7:8f:0a:a5:f0:e6: 9b:c3:a9:f4:47:ca:a5:d9:8e:0a:7d:17:18:0a:87: f5:5f:68:f9:ec:90:d6:fc:ce:aa:c4:0b:66:db:ea: c4:c1:0e:4f:b3:6a:97:be:01:4e:0a:a6:b7:77:cf: 1a:aa:a8:a1:54:45:b3:00:57:d9:57:14:c5:a9:77: 57:7e:f4:d1:ab:af:8c:2c:36:f4:ed:cf:8a:69:ca: 63:1e:e5:72:b2:a6:b4:d7:6b:80:65:ce:51:7c:f4: cd:50:e0:6b:e0:4a:fe:6c:75:be:e4:65:7a:6d:b5: 35:55:84:44:56:81:df:6c:85:a8:3e:f3:66:f4:a2: 86:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D4:A8:66:AA:29:FD:80:4B:56:8C:00:E5:C1:D6:B1:EA:E6:F7:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/27ef1240-e400-35f4-a885-bf4a8fb3d7f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl X509v3 Authority Key Identifier: keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer sbgp-ipAddrBlock: critical IPv4: 67.20.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:bc:30:b7:de:f6:8e:9e:31:a4:0d:87:f1:e8:5c:d5:3e:dd: 57:7a:1a:67:c4:21:87:8d:6a:e1:7a:f2:70:52:4f:89:49:a6: 86:9a:04:29:35:c9:1b:57:3b:32:d2:ec:47:4d:69:a3:0b:cb: 2b:d6:39:4b:fa:7a:89:db:95:ab:76:8c:e8:2f:92:0b:e4:3c: b0:4d:c2:d3:d4:b5:96:ba:b2:f7:37:68:ae:fe:aa:69:97:fa: 73:bf:cd:d5:56:4e:64:f8:34:65:2e:4e:ed:e7:52:85:db:5d: f7:37:98:11:aa:6f:1a:78:21:db:8b:3f:c3:c7:14:34:5e:df: 3b:4b:dc:61:f0:d6:ac:81:f3:90:c7:fe:71:19:21:05:e9:7a: 1e:01:ba:e0:60:a6:7f:20:e5:4a:90:86:ea:e1:6d:61:23:c3: 7e:01:25:ec:c1:b3:33:d8:11:64:2a:07:f8:eb:81:7a:18:d4: d9:e9:9e:2c:89:ea:cc:0b:fe:d9:83:77:f7:c3:f4:26:c7:92: 65:fe:6b:75:6f:d8:2f:aa:bb:1b:7a:ef:30:c8:2a:c5:dc:f7: a8:8f:ba:7a:02:59:86:81:56:11:d9:29:56:e3:a7:7c:ae:84: 35:35:df:cb:9e:89:0d:2c:d9:14:5c:d2:11:ed:17:9a:12:72: 9f:d3:c4:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BVMW8YodDW7P+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWIyZTdlZDAtNzMxMC00ZWM2LWE0MzItZjlkZWQzNGFi OTFiMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk MzkxZjU2ZjMtN2Y4NC00ZTI1LTg3NmEtMWQ0ZWNlOWM0YzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3GNvu1wBT4e30BlZfV6Hg5x4mXSTdkwB1Y2 LEggTvOV4qazOfAdk6eFRJA3Cc0tpoIv8fCoZMLYX8Rro1rGeXClgYJu3hT3eL3h Cpbn6+7DDSGWXDEMTx0yFZXnp6REO7zmzc9rciDgK95r22pligpctCixvpGUZEDq cUkAPTvHjwql8Oabw6n0R8ql2Y4KfRcYCof1X2j57JDW/M6qxAtm2+rEwQ5Ps2qX vgFOCqa3d88aqqihVEWzAFfZVxTFqXdXfvTRq6+MLDb07c+KacpjHuVysqa012uA Zc5RfPTNUOBr4Er+bHW+5GV6bbU1VYREVoHfbIWoPvNm9KKGNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDUqGaqKf2AS1aMAOXB1rHq5vc/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJl N2VkMC03MzEwLTRlYzYtYTQzMi1mOWRlZDM0YWI5MWIvMjdlZjEyNDAtZTQwMC0z NWY0LWE4ODUtYmY0YThmYjNkN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWIyZTdlZDAtNzMxMC00ZWM2LWE0 MzItZjlkZWQzNGFiOTFiLzliMmU3ZWQwLTczMTAtNGVjNi1hNDMyLWY5ZGVkMzRh YjkxYi5jcmwwHwYDVR0jBBgwFoAUM0oT3qhiRI5j8VyZHha75VAqtPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJlN2VkMC03MzEwLTRlYzYtYTQzMi1mOWRl ZDM0YWI5MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQxRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACq8MLfe9o6eMaQNh/HoXNU+3Vd6GmfEIYeNauF68nBST4lJpoaaBCk1 yRtXOzLS7EdNaaMLyyvWOUv6eonblat2jOgvkgvkPLBNwtPUtZa6svc3aK7+qmmX +nO/zdVWTmT4NGUuTu3nUoXbXfc3mBGqbxp4IduLP8PHFDRe3ztL3GHw1qyB85DH /nEZIQXpeh4BuuBgpn8g5UqQhurhbWEjw34BJezBszPYEWQqB/jrgXoY1NnpniyJ 6swL/tmDd/fD9CbHkmX+a3Vv2C+quxt67zDIKsXc96iPunoCWYaBVhHZKVbjp3yu hDU138ueiQ0s2RRc0hHtF5oScp/TxLk= -----END CERTIFICATE-----Generated at Mon Apr 13 17:17:19 2026 by rpki-client