$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/606dc7ab-30e0-3efc-855d-f92e73b73f0a.roa File: 606dc7ab-30e0-3efc-855d-f92e73b73f0a.roa (raw, json) Hash identifier: xjg+6TwigqKwACW8jTuX8zBHvTV5YaHtj22YdiMWiyE= Subject key identifier: B2:18:37:4E:95:B4:30:D0:29:26:07:B4:2B:71:CF:5B:E4:42:99:AC Certificate issuer: /CN=2e356a8c-d37d-4efc-986d-251de18075cc Certificate serial: 010D0C9F4328584D8AC53B2865C0522BD1BBDC40 Authority key identifier: EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/606dc7ab-30e0-3efc-855d-f92e73b73f0a.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 14543 IP address blocks: 69.84.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:3b:28:65:c0:52:2b:d1:bb:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e356a8c-d37d-4efc-986d-251de18075cc Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=35895c70-8e3b-438d-9a3b-87a8384d8e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6f:18:af:d4:a0:30:99:33:0e:9b:b3:c7:bf: 72:ea:f2:72:4e:2b:85:b7:79:08:07:29:d7:69:20: dd:66:cc:ce:7b:e4:9c:23:e6:36:98:81:b4:d2:e9: 3b:af:60:b1:61:8f:4f:7d:61:48:cb:bf:a7:94:80: bb:58:1c:32:92:48:0b:b5:57:fd:4d:c7:58:6a:29: fb:4d:de:48:a5:7e:e4:ac:57:7f:60:74:e6:0e:0f: 50:26:7d:a9:a4:be:1e:38:d9:1b:93:b3:ee:00:3f: b6:45:c4:bf:2c:fa:c2:88:63:09:4c:4e:cd:db:98: 35:2f:fb:bd:21:7c:bd:58:7d:13:39:e3:aa:fc:c7: 3c:fd:e8:89:af:3a:d7:10:6a:4b:a2:ca:34:dd:73: 27:d8:90:0b:bd:33:11:45:3c:25:a2:63:c0:a3:24: f5:c7:e6:8f:52:97:ce:85:05:6e:ad:62:50:52:09: 9b:98:64:ae:93:a8:f9:20:62:86:5a:41:1b:f1:07: 2a:6c:c2:3a:04:cb:f1:5a:04:b4:52:38:d0:17:11: a7:89:d4:b1:a0:82:39:a9:49:16:ff:de:7a:26:69: 1b:7f:e4:fe:ab:51:e5:a1:1e:a8:c3:13:6c:56:8c: 0a:c8:df:fc:75:ee:47:cd:77:81:5a:2e:1c:f2:33: 4e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:18:37:4E:95:B4:30:D0:29:26:07:B4:2B:71:CF:5B:E4:42:99:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/606dc7ab-30e0-3efc-855d-f92e73b73f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl X509v3 Authority Key Identifier: keyid:EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer sbgp-ipAddrBlock: critical IPv4: 69.84.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:58:0b:02:f2:db:ba:3d:22:18:a8:aa:5e:e0:0d:b9:a5:81: 07:c2:1f:22:c4:70:bf:b1:36:b9:4f:69:59:80:fc:f5:fe:7a: 50:15:34:4e:62:6c:02:d7:92:bf:a5:2c:e0:e9:4a:7d:c8:b5: 3b:ae:14:b1:03:1d:19:8b:49:66:5a:ba:bd:a5:1a:ea:23:5e: 9e:b2:a0:50:72:94:5c:ed:c6:26:59:37:4d:c2:98:6c:08:4f: 3b:38:85:7f:81:93:63:40:ec:54:69:75:92:ba:f8:13:53:7a: 52:f9:fb:4b:b4:04:85:3b:30:08:50:f1:cc:4c:98:f7:29:02: 7b:7c:cf:4d:e4:ec:db:d7:b7:58:61:eb:dc:0a:34:b6:c2:42: 5a:10:08:f1:df:88:a2:f8:15:6a:c6:3c:93:fe:43:10:38:6f: 38:c5:8f:19:44:e7:88:dc:28:d2:4a:fb:ac:f2:5b:9b:6e:ca: 4e:b8:a7:aa:6d:28:0d:97:f5:01:d5:35:7d:f7:37:d5:8e:b6: 3f:fa:b5:a5:46:c5:ec:04:3b:6b:4d:f5:46:5f:c6:4b:e8:84: c0:16:8b:b2:27:96:b7:9c:ef:b2:a4:db:35:7d:6f:5b:77:58: e6:87:0a:98:8a:10:ac:d3:f9:a0:da:f6:30:2e:e8:05:6c:20: 34:be:d0:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxTsoZcBSK9G73EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUzNTZhOGMtZDM3ZC00ZWZjLTk4NmQtMjUxZGUxODA3 NWNjMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk MzU4OTVjNzAtOGUzYi00MzhkLTlhM2ItODdhODM4NGQ4ZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW8Yr9SgMJkzDpuzx79y6vJyTiuFt3kIBynX aSDdZszOe+ScI+Y2mIG00uk7r2CxYY9PfWFIy7+nlIC7WBwykkgLtVf9TcdYain7 Td5IpX7krFd/YHTmDg9QJn2ppL4eONkbk7PuAD+2RcS/LPrCiGMJTE7N25g1L/u9 IXy9WH0TOeOq/Mc8/eiJrzrXEGpLoso03XMn2JALvTMRRTwlomPAoyT1x+aPUpfO hQVurWJQUgmbmGSuk6j5IGKGWkEb8QcqbMI6BMvxWgS0UjjQFxGnidSxoII5qUkW /956Jmkbf+T+q1HloR6owxNsVowKyN/8de5HzXeBWi4c8jNObwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIYN06VtDDQKSYHtCtxz1vkQpmsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZTM1 NmE4Yy1kMzdkLTRlZmMtOTg2ZC0yNTFkZTE4MDc1Y2MvNjA2ZGM3YWItMzBlMC0z ZWZjLTg1NWQtZjkyZTczYjczZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmUzNTZhOGMtZDM3ZC00ZWZjLTk4 NmQtMjUxZGUxODA3NWNjLzJlMzU2YThjLWQzN2QtNGVmYy05ODZkLTI1MWRlMTgw NzVjYy5jcmwwHwYDVR0jBBgwFoAU7lP44DKomZKG+uTWr77qVTKoN78wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZTM1NmE4Yy1kMzdkLTRlZmMtOTg2ZC0yNTFk ZTE4MDc1Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERVQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBYCwLy27o9Ihioql7gDbmlgQfCHyLEcL+xNrlPaVmA/PX+elAVNE5i bALXkr+lLODpSn3ItTuuFLEDHRmLSWZaur2lGuojXp6yoFBylFztxiZZN03CmGwI Tzs4hX+Bk2NA7FRpdZK6+BNTelL5+0u0BIU7MAhQ8cxMmPcpAnt8z03k7NvXt1hh 69wKNLbCQloQCPHfiKL4FWrGPJP+QxA4bzjFjxlE54jcKNJK+6zyW5tuyk64p6pt KA2X9QHVNX33N9WOtj/6taVGxewEO2tN9UZfxkvohMAWi7Inlrec77Kk2zV9b1t3 WOaHCpiKEKzT+aDa9jAu6AVsIDS+0G8= -----END CERTIFICATE-----Generated at Mon Apr 27 11:19:56 2026 by rpki-client