$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/86946973-d9e3-36d6-bf61-ad06a033a3ff.roa File: 86946973-d9e3-36d6-bf61-ad06a033a3ff.roa (raw, json) Hash identifier: 8MbJLLCmwLyqrW9eoYLnVrvXO5HP+XmREs4TLvNXsA4= Subject key identifier: 67:7A:B7:50:23:D4:28:22:33:F4:7D:5D:DD:63:77:38:EF:25:79:2F Certificate issuer: /CN=1d4f6e46-d9c5-4221-a1e5-0f8722afef21 Certificate serial: 010D0C9F4328584DFEBEFA2155EC83B33390FD00 Authority key identifier: E2:77:C8:C6:43:70:0A:E3:39:3F:AF:54:A8:29:DE:AA:97:57:CA:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/86946973-d9e3-36d6-bf61-ad06a033a3ff.roa Signing time: Fri 29 May 2026 14:01:41 +0000 ROA not before: Fri 29 May 2026 14:01:41 +0000 ROA not after: Thu 27 Aug 2026 14:01:41 +0000 asID: 63448 IP address blocks: 65.17.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fe:be:fa:21:55:ec:83:b3:33:90:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d4f6e46-d9c5-4221-a1e5-0f8722afef21 Validity Not Before: May 29 14:01:41 2026 GMT Not After : Aug 27 14:01:41 2026 GMT Subject: CN=95ab93f7-99c0-44af-b0dd-1a40feab5e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:72:dd:e2:03:45:27:f9:1e:01:f8:43:50:f4: 94:8e:3b:59:3a:33:e2:f3:ce:07:44:5b:de:9e:5a: 34:78:ef:14:cd:5b:0f:18:a7:8a:5b:55:e7:b6:f2: 0f:ed:a7:c5:5f:e8:38:24:a4:d9:2a:54:e9:97:f7: a5:49:a3:a2:b6:03:8b:84:bc:1f:7e:73:bc:b3:55: a5:69:3f:a9:6e:68:79:9c:e1:b7:c4:09:10:88:d1: 59:4e:ae:24:35:5b:f7:1f:cf:fa:77:33:3e:dc:ee: 2b:84:11:14:c6:b2:5e:5d:1b:1b:da:f5:e2:73:4f: 36:30:91:dd:a7:f8:13:e4:c5:ee:dd:c2:2a:d6:21: 7b:ea:cc:dc:2f:c1:44:46:80:51:d0:2c:28:7a:af: 59:63:83:49:8c:8c:6d:ec:c2:e6:e2:24:10:15:17: d8:43:b8:dc:8e:bb:ba:90:f2:5f:3f:d1:43:67:3e: 25:53:21:56:31:b0:d4:06:8c:23:26:fa:01:ca:34: 44:bc:8e:57:c3:bc:27:35:fe:1c:30:e2:ad:a4:20: c3:93:4a:ef:0b:e9:df:5a:60:95:99:ba:93:6a:d7: 44:cf:b0:83:02:40:08:99:df:3b:36:ca:77:70:7c: b9:af:fe:34:0d:cb:df:ac:6b:fe:f4:4f:b5:70:db: c1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7A:B7:50:23:D4:28:22:33:F4:7D:5D:DD:63:77:38:EF:25:79:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/86946973-d9e3-36d6-bf61-ad06a033a3ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.crl X509v3 Authority Key Identifier: keyid:E2:77:C8:C6:43:70:0A:E3:39:3F:AF:54:A8:29:DE:AA:97:57:CA:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer sbgp-ipAddrBlock: critical IPv4: 65.17.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:4c:03:6c:e8:66:9f:44:64:26:b3:a8:5a:6e:21:6f:04:8f: 20:de:ed:69:d7:c3:e6:06:4b:05:87:dc:60:c4:76:8f:0e:1d: f0:f1:9e:cb:10:a1:f5:00:d8:89:4f:fe:ef:ed:26:c4:c7:a8: 9a:56:66:8c:35:bc:c3:62:de:21:34:30:a5:4f:56:72:01:8a: 13:f1:1c:c5:f6:16:2e:35:cb:e8:d9:f4:20:15:7f:71:b1:6e: df:f9:0f:55:f6:e6:5c:1e:d4:50:96:23:a1:78:7c:a9:ee:d5: a2:56:f3:3d:c5:09:0d:bb:ed:7f:b1:cc:00:6a:5f:ab:65:f2: e4:8a:7d:d2:03:48:d0:62:3a:e2:59:35:6e:fd:78:a3:22:6b: 07:8d:55:88:90:9f:08:e1:24:40:8b:c6:a7:d8:48:ff:96:ea: f7:44:ab:7f:f2:9e:8d:0e:59:69:a1:3a:b9:65:16:c3:05:0b: 68:04:9c:69:a0:63:9c:2d:b5:53:01:f0:4b:fa:07:a8:62:c2: 5f:e9:2d:51:81:80:33:72:84:7b:ed:70:4b:bd:30:3d:1e:b1: ee:8e:42:26:08:21:25:2c:5a:1d:9f:45:2a:5a:51:3f:4c:a9: 0d:7d:78:3f:37:1b:c4:0f:ef:b4:a4:37:0d:96:8d:08:7c:27: 90:21:60:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3+vvohVeyDszOQ/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ0ZjZlNDYtZDljNS00MjIxLWExZTUtMGY4NzIyYWZl ZjIxMB4XDTI2MDUyOTE0MDE0MVoXDTI2MDgyNzE0MDE0MVowLzEtMCsGA1UEAxMk OTVhYjkzZjctOTljMC00NGFmLWIwZGQtMWE0MGZlYWI1ZTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnLd4gNFJ/keAfhDUPSUjjtZOjPi884HRFve nlo0eO8UzVsPGKeKW1XntvIP7afFX+g4JKTZKlTpl/elSaOitgOLhLwffnO8s1Wl aT+pbmh5nOG3xAkQiNFZTq4kNVv3H8/6dzM+3O4rhBEUxrJeXRsb2vXic082MJHd p/gT5MXu3cIq1iF76szcL8FERoBR0Cwoeq9ZY4NJjIxt7MLm4iQQFRfYQ7jcjru6 kPJfP9FDZz4lUyFWMbDUBowjJvoByjREvI5Xw7wnNf4cMOKtpCDDk0rvC+nfWmCV mbqTatdEz7CDAkAImd87Nsp3cHy5r/40DcvfrGv+9E+1cNvBOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGd6t1Aj1CgiM/R9Xd1jdzjvJXkvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8xZDRm NmU0Ni1kOWM1LTQyMjEtYTFlNS0wZjg3MjJhZmVmMjEvODY5NDY5NzMtZDllMy0z NmQ2LWJmNjEtYWQwNmEwMzNhM2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMWQ0ZjZlNDYtZDljNS00MjIxLWEx ZTUtMGY4NzIyYWZlZjIxLzFkNGY2ZTQ2LWQ5YzUtNDIyMS1hMWU1LTBmODcyMmFm ZWYyMS5jcmwwHwYDVR0jBBgwFoAU4nfIxkNwCuM5P69UqCneqpdXysEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8xZDRmNmU0Ni1kOWM1LTQyMjEtYTFlNS0wZjg3 MjJhZmVmMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQRGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJMA2zoZp9EZCazqFpuIW8EjyDe7WnXw+YGSwWH3GDEdo8OHfDxnssQ ofUA2IlP/u/tJsTHqJpWZow1vMNi3iE0MKVPVnIBihPxHMX2Fi41y+jZ9CAVf3Gx bt/5D1X25lwe1FCWI6F4fKnu1aJW8z3FCQ277X+xzABqX6tl8uSKfdIDSNBiOuJZ NW79eKMiaweNVYiQnwjhJECLxqfYSP+W6vdEq3/yno0OWWmhOrllFsMFC2gEnGmg Y5wttVMB8Ev6B6hiwl/pLVGBgDNyhHvtcEu9MD0ese6OQiYIISUsWh2fRSpaUT9M qQ19eD83G8QP77SkNw2WjQh8J5AhYDU= -----END CERTIFICATE-----Generated at Sat Jun 6 12:04:10 2026 by rpki-client