$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4a18d617-e649-4c2b-ad1c-3e792346089e/4fff4a2f-73cb-3236-aaa4-9b7cf33a5b2f.roa File: 4fff4a2f-73cb-3236-aaa4-9b7cf33a5b2f.roa (raw, json) Hash identifier: 4lOoAYXPrSqzeuJXGuqP5LAfTROmkHzQTw8lGU2Qd5E= Subject key identifier: 43:4D:BF:C4:0C:A6:94:56:60:D9:A7:82:EA:5F:22:60:5C:7F:C2:1D Certificate issuer: /CN=4a18d617-e649-4c2b-ad1c-3e792346089e Certificate serial: 010D0C9F4328584E01D27A55C289642BAB4C2700 Authority key identifier: CB:CB:FC:D7:B9:AB:BF:92:FF:3F:D8:85:65:EF:35:62:9A:AE:C2:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4a18d617-e649-4c2b-ad1c-3e792346089e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4a18d617-e649-4c2b-ad1c-3e792346089e/4fff4a2f-73cb-3236-aaa4-9b7cf33a5b2f.roa Signing time: Sat 30 May 2026 16:28:24 +0000 ROA not before: Sat 30 May 2026 16:28:24 +0000 ROA not after: Fri 28 Aug 2026 16:28:24 +0000 asID: 834 IP address blocks: 64.4.168.0/24 maxlen: 24 64.4.169.0/24 maxlen: 24 64.4.170.0/24 maxlen: 24 64.4.171.0/24 maxlen: 24 208.91.188.0/24 maxlen: 24 208.91.189.0/24 maxlen: 24 208.91.190.0/24 maxlen: 24 208.91.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4a18d617-e649-4c2b-ad1c-3e792346089e/4a18d617-e649-4c2b-ad1c-3e792346089e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4a18d617-e649-4c2b-ad1c-3e792346089e/4a18d617-e649-4c2b-ad1c-3e792346089e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4a18d617-e649-4c2b-ad1c-3e792346089e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:01:d2:7a:55:c2:89:64:2b:ab:4c:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a18d617-e649-4c2b-ad1c-3e792346089e Validity Not Before: May 30 16:28:24 2026 GMT Not After : Aug 28 16:28:24 2026 GMT Subject: CN=38aed287-b144-47bf-b446-c0e885a9ef3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5f:15:1b:6e:4c:0b:d9:33:6d:df:ee:0a:bf: 46:a3:3b:fa:bf:15:54:56:32:cf:55:b5:b6:53:8d: a6:b8:5e:c9:a8:b2:e4:bb:12:81:06:89:c1:11:5a: 08:bb:51:76:55:75:84:88:9c:ce:f3:b3:ec:c4:80: 23:02:9b:d0:1b:3d:44:a1:07:6b:d1:58:98:f6:af: f2:7d:11:39:77:32:b9:f7:fa:04:85:ee:62:87:2a: dd:75:8d:7e:e7:a6:a6:82:4d:e3:2a:bc:48:a6:db: 4b:5b:ea:c3:bc:bf:b1:a2:72:e5:ec:fd:e9:e8:fb: 5c:2e:ed:fb:4f:f0:70:dc:f5:60:fa:bd:e6:4a:43: e7:72:9a:4a:78:b2:1f:11:29:75:52:4d:77:3c:17: b5:51:f1:54:60:41:52:a6:21:df:ec:64:27:6a:0a: 85:5d:09:26:01:4b:ea:66:3e:af:9b:a6:ef:b5:85: be:27:5d:5e:05:8a:da:dd:71:6b:0e:f9:49:c7:2f: 3c:14:c4:26:d5:ee:6f:6b:c2:2a:7a:3c:00:ca:e9: 3c:71:27:9f:bb:c4:ab:79:04:ce:66:c7:8d:39:8b: de:e3:30:bb:5d:d0:75:f3:52:62:b7:fa:a5:53:ec: 67:36:c9:f3:52:ff:e5:d2:21:31:b9:28:f5:19:bc: 43:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4D:BF:C4:0C:A6:94:56:60:D9:A7:82:EA:5F:22:60:5C:7F:C2:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4a18d617-e649-4c2b-ad1c-3e792346089e/4fff4a2f-73cb-3236-aaa4-9b7cf33a5b2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4a18d617-e649-4c2b-ad1c-3e792346089e/4a18d617-e649-4c2b-ad1c-3e792346089e.crl X509v3 Authority Key Identifier: keyid:CB:CB:FC:D7:B9:AB:BF:92:FF:3F:D8:85:65:EF:35:62:9A:AE:C2:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4a18d617-e649-4c2b-ad1c-3e792346089e.cer sbgp-ipAddrBlock: critical IPv4: 64.4.168.0/22 208.91.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:8d:69:4c:80:90:2a:45:96:1e:d3:3d:5f:7e:89:fb:4a:bd: 9c:5d:9c:ea:ab:17:e4:87:72:d9:1e:0a:98:cc:74:b6:95:cc: a5:df:c4:c8:9d:cf:de:3a:ae:9f:dd:68:3b:e0:45:89:94:53: 3f:ef:99:20:9d:07:59:70:58:c1:9e:53:48:25:4b:04:85:9c: 95:b1:c9:c4:3d:7d:cb:55:db:bd:97:77:ff:33:6c:1a:ef:49: 38:e9:8a:85:ad:15:0c:5c:d0:8e:f8:65:2e:aa:5e:cb:d5:a3: 3d:33:27:94:49:d9:71:90:95:e6:60:66:2c:75:3a:9b:a7:e5: ec:db:c2:ea:c5:76:c6:b0:6f:79:54:08:94:d4:6b:6c:0a:1c: 1f:3b:37:7f:29:1b:58:46:13:ab:43:e7:ab:04:dc:4b:00:9b: fe:4c:86:a1:dc:d4:5f:42:73:1a:a5:27:3e:13:23:76:86:2c: e1:08:be:75:ca:35:13:ed:7c:e4:a9:29:24:8c:47:4b:7c:9f: 87:a3:db:1f:f4:bb:8c:ec:12:4e:88:a9:5f:7a:54:9d:d0:97: d3:95:6e:5b:7e:5e:99:51:f5:4d:77:44:25:43:0f:aa:b8:ff: a1:94:92:50:4a:6d:33:20:8c:cb:26:d2:6d:9b:12:d9:d0:71: 21:46:7b:d2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE4B0npVwolkK6tMJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGExOGQ2MTctZTY0OS00YzJiLWFkMWMtM2U3OTIzNDYw ODllMB4XDTI2MDUzMDE2MjgyNFoXDTI2MDgyODE2MjgyNFowLzEtMCsGA1UEAxMk MzhhZWQyODctYjE0NC00N2JmLWI0NDYtYzBlODg1YTllZjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql8VG25MC9kzbd/uCr9Gozv6vxVUVjLPVbW2 U42muF7JqLLkuxKBBonBEVoIu1F2VXWEiJzO87PsxIAjApvQGz1EoQdr0ViY9q/y fRE5dzK59/oEhe5ihyrddY1+56amgk3jKrxIpttLW+rDvL+xonLl7P3p6PtcLu37 T/Bw3PVg+r3mSkPncppKeLIfESl1Uk13PBe1UfFUYEFSpiHf7GQnagqFXQkmAUvq Zj6vm6bvtYW+J11eBYra3XFrDvlJxy88FMQm1e5va8IqejwAyuk8cSefu8SreQTO ZseNOYve4zC7XdB181Jit/qlU+xnNsnzUv/l0iExuSj1GbxDvQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFENNv8QMppRWYNmngupfImBcf8IdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80YTE4 ZDYxNy1lNjQ5LTRjMmItYWQxYy0zZTc5MjM0NjA4OWUvNGZmZjRhMmYtNzNjYi0z MjM2LWFhYTQtOWI3Y2YzM2E1YjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNGExOGQ2MTctZTY0OS00YzJiLWFk MWMtM2U3OTIzNDYwODllLzRhMThkNjE3LWU2NDktNGMyYi1hZDFjLTNlNzkyMzQ2 MDg5ZS5jcmwwHwYDVR0jBBgwFoAUy8v817mrv5L/P9iFZe81YpquwsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80YTE4ZDYxNy1lNjQ5LTRjMmItYWQxYy0zZTc5 MjM0NjA4OWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQASoAwQC 0Fu8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGyNaUyAkCpFlh7TPV9+iftKvZxdnOqrF+SHctkeCpjMdLaV zKXfxMidz946rp/daDvgRYmUUz/vmSCdB1lwWMGeU0glSwSFnJWxycQ9fctV272X d/8zbBrvSTjpioWtFQxc0I74ZS6qXsvVoz0zJ5RJ2XGQleZgZix1Opun5ezbwurF dsawb3lUCJTUa2wKHB87N38pG1hGE6tD56sE3EsAm/5MhqHc1F9CcxqlJz4TI3aG LOEIvnXKNRPtfOSpKSSMR0t8n4ej2x/0u4zsEk6IqV96VJ3Ql9OVblt+XplR9U13 RCVDD6q4/6GUklBKbTMgjMsm0m2bEtnQcSFGe9I= -----END CERTIFICATE-----Generated at Thu Jun 4 05:05:20 2026 by rpki-client