$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/0a937c6f-24b6-3c6a-9f0f-3a16a439b5a5.roa File: 0a937c6f-24b6-3c6a-9f0f-3a16a439b5a5.roa (raw, json) Hash identifier: Uf1QqluLaVXP0brlRX1hrFeRATV4Q4Ysaw7DWEZlm0s= Subject key identifier: 18:7F:4A:6A:35:8D:21:2A:E0:10:C1:51:DF:4B:56:BA:60:33:B8:D6 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584D8EF57548A1902FC5DEACEA00 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/0a937c6f-24b6-3c6a-9f0f-3a16a439b5a5.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 13768 IP address blocks: 64.34.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:75:48:a1:90:2f:c5:de:ac:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=87ce3eca-b145-45b2-a0c9-2a16cb87835d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:84:9b:12:8b:be:91:16:91:97:09:47:ae:7a: d2:17:4a:e6:bf:5e:88:f7:83:50:fa:a8:83:7a:63: 0f:d1:ca:23:44:ad:ab:4f:ee:47:8c:8f:98:90:49: 8b:1a:90:ee:6a:5c:d5:87:f2:2d:8d:f7:46:7e:03: 4f:3d:a4:e8:d5:45:ee:89:f1:e9:4a:f5:89:d1:88: c1:98:ae:a9:36:56:20:f9:9e:30:36:52:39:d2:e4: 25:46:de:76:0f:cd:6c:db:3e:28:50:29:e3:10:a4: ca:56:ac:ae:66:5d:96:c0:99:4d:a6:38:69:91:c7: 25:0e:2f:34:77:ff:98:e1:ef:e8:b2:fd:22:76:75: 99:f8:1b:1e:65:b1:ea:28:c6:9b:bd:82:e8:33:5b: 8f:72:3f:29:07:1f:08:53:22:60:ef:02:5b:5e:e8: bc:58:50:ee:82:f3:77:41:b0:c5:70:a4:ff:e1:dd: 46:e7:21:be:88:bb:4e:d8:ae:c3:fb:82:41:14:f7: 79:b5:94:d6:72:58:cf:52:c3:c3:f5:03:85:94:ab: 27:7b:5c:b2:64:b6:80:e2:20:65:af:06:61:ca:92: fe:a7:5a:58:68:cb:13:91:3d:06:66:60:96:f6:2b: af:cb:99:63:e6:34:76:6c:3f:fb:e0:7c:4a:3e:99: 8f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7F:4A:6A:35:8D:21:2A:E0:10:C1:51:DF:4B:56:BA:60:33:B8:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/0a937c6f-24b6-3c6a-9f0f-3a16a439b5a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:a7:00:85:44:c9:43:d4:50:82:16:7e:a4:cd:67:16:9a:88: 59:e4:3e:14:4e:ea:9f:45:b1:40:16:7e:0a:24:dd:5b:96:83: 04:cc:4b:8b:1a:72:8f:1e:c2:4f:d7:4e:4d:79:d2:a6:95:e4: 17:5a:5d:b0:c1:63:93:c8:ff:b6:79:75:23:64:8c:07:ae:49: 5f:65:cc:90:04:3d:81:a1:46:96:e4:65:09:29:1a:a2:b7:07: 32:5f:a2:18:d4:22:15:79:ba:64:19:d8:37:6f:27:20:1f:90: eb:55:45:ee:a3:46:b8:4b:46:df:d7:f7:7a:a2:bf:82:45:09: 74:00:1d:a6:a1:8a:cb:e3:c8:8a:59:26:f4:ba:b1:5c:74:16: a4:77:ca:bd:a4:c2:22:b4:57:ac:eb:33:c1:52:80:eb:03:0e: 81:80:9e:d9:4d:a0:86:92:a3:0c:6f:1c:33:b3:8d:89:87:d4: bc:1e:e9:62:8a:35:d7:fb:d9:3e:17:7a:08:28:78:3c:2a:21: 79:3c:7c:ad:87:84:ea:95:fe:4d:54:25:72:a5:cf:a0:2c:9d: 48:6b:fd:77:dc:ff:7e:eb:ea:01:6e:4e:c0:0c:8e:9d:f1:8a: 16:86:a7:f0:e1:7d:d3:5c:3b:03:5b:45:2c:86:60:69:9e:59: 9a:4b:b4:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9XVIoZAvxd6s6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ODdjZTNlY2EtYjE0NS00NWIyLWEwYzktMmExNmNiODc4MzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoSbEou+kRaRlwlHrnrSF0rmv16I94NQ+qiD emMP0cojRK2rT+5HjI+YkEmLGpDualzVh/ItjfdGfgNPPaTo1UXuifHpSvWJ0YjB mK6pNlYg+Z4wNlI50uQlRt52D81s2z4oUCnjEKTKVqyuZl2WwJlNpjhpkcclDi80 d/+Y4e/osv0idnWZ+BseZbHqKMabvYLoM1uPcj8pBx8IUyJg7wJbXui8WFDugvN3 QbDFcKT/4d1G5yG+iLtO2K7D+4JBFPd5tZTWcljPUsPD9QOFlKsne1yyZLaA4iBl rwZhypL+p1pYaMsTkT0GZmCW9iuvy5lj5jR2bD/74HxKPpmP5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBh/Smo1jSEq4BDBUd9LVrpgM7jWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMGE5MzdjNmYtMjRiNi0z YzZhLTlmMGYtM2ExNmE0MzliNWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQCKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+nAIVEyUPUUIIWfqTNZxaaiFnkPhRO6p9FsUAWfgok3VuWgwTMS4sa co8ewk/XTk150qaV5BdaXbDBY5PI/7Z5dSNkjAeuSV9lzJAEPYGhRpbkZQkpGqK3 BzJfohjUIhV5umQZ2DdvJyAfkOtVRe6jRrhLRt/X93qiv4JFCXQAHaahisvjyIpZ JvS6sVx0FqR3yr2kwiK0V6zrM8FSgOsDDoGAntlNoIaSowxvHDOzjYmH1Lwe6WKK Ndf72T4XeggoeDwqIXk8fK2HhOqV/k1UJXKlz6AsnUhr/Xfc/37r6gFuTsAMjp3x ihaGp/DhfdNcOwNbRSyGYGmeWZpLtNc= -----END CERTIFICATE-----Generated at Sun May 3 00:52:21 2026 by rpki-client