$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/8f2b3ac5-1b68-34be-8371-29af1cf4e2c1.roa File: 8f2b3ac5-1b68-34be-8371-29af1cf4e2c1.roa (raw, json) Hash identifier: kdMRIWw4qxD2iZbh3+ljy9s/T1+dmw0O1SGw+ZLLDgk= Subject key identifier: 2B:C7:9C:1E:BA:AA:86:A3:7C:31:4E:2E:7C:52:1B:83:73:E0:3E:D7 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584DE84B3ED782567DA1CD126100 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/8f2b3ac5-1b68-34be-8371-29af1cf4e2c1.roa Signing time: Thu 21 May 2026 13:00:32 +0000 ROA not before: Thu 21 May 2026 13:00:32 +0000 ROA not after: Wed 19 Aug 2026 13:00:32 +0000 asID: 32035 IP address blocks: 64.136.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:4b:3e:d7:82:56:7d:a1:cd:12:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: May 21 13:00:32 2026 GMT Not After : Aug 19 13:00:32 2026 GMT Subject: CN=47355fbd-5c79-44f5-86d4-a9a638a734e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ea:93:81:83:ea:71:f9:8f:3f:bb:4e:6d:5a: 83:59:e2:d5:0e:cc:77:be:b4:f2:c0:1a:03:09:ab: af:ef:64:1a:a4:08:c9:ef:65:13:23:96:33:48:f9: f1:5c:3d:36:f9:6a:95:eb:4b:7a:da:2f:4c:06:e7: a1:dc:6a:97:b7:95:18:73:10:e9:53:26:c0:05:39: 6d:a2:00:d0:2e:4d:b5:2d:aa:51:43:02:e5:97:f6: da:c3:70:a4:52:b7:4d:82:6b:05:df:89:03:12:ae: 8b:41:c9:1a:f7:d9:0e:75:c9:d6:33:64:25:27:7c: bb:3d:0d:86:1f:ef:94:77:8c:45:1b:4c:d7:21:8d: 68:f4:23:81:1c:cc:8d:62:7e:2c:26:d2:02:8a:97: b4:76:29:0e:79:73:f2:3a:52:08:9e:77:dd:1c:ab: fd:23:2d:be:ce:e6:ad:bb:da:e7:e5:df:9b:6a:bb: b9:a7:c7:2b:e2:d3:c7:c8:c4:f9:89:61:0d:58:22: 65:ff:b9:04:0e:92:2d:35:b6:da:0e:1c:5c:67:d5: 69:dd:c1:dc:77:43:e7:4a:05:b8:4f:90:47:fb:2c: 42:19:5d:5d:c9:5f:2d:96:57:16:bd:7b:72:5a:06: 4a:6c:46:b0:e7:f6:4b:fe:52:d7:6b:7f:cf:36:c8: a9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C7:9C:1E:BA:AA:86:A3:7C:31:4E:2E:7C:52:1B:83:73:E0:3E:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/8f2b3ac5-1b68-34be-8371-29af1cf4e2c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 64.136.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:fb:84:f3:27:ea:f8:44:c7:71:90:b2:bd:43:55:5f:67:ac: db:bd:a9:83:7e:a7:43:ec:e1:79:0e:5a:15:77:2e:b6:f2:fe: 87:99:6c:87:67:71:03:7b:03:cf:7b:f4:e4:0e:6f:39:6f:8b: 54:07:55:e6:49:5a:d5:0c:9b:b9:9a:89:17:2a:3c:58:5f:ec: 91:95:32:32:94:dd:7a:f4:fc:d1:4c:60:19:fb:e2:24:43:68: 09:4e:3e:0f:ef:da:3e:27:b7:f8:24:2b:fb:60:6b:bc:15:7f: 92:8e:4b:77:88:57:12:5b:1a:2a:6d:ca:f3:f4:93:69:da:84: 07:96:fd:aa:f5:f7:47:54:82:92:6c:e4:d5:57:54:5e:b1:43: 7c:1f:9e:1c:34:ae:3d:50:77:19:6d:33:a0:6e:ff:41:eb:12: d3:7f:65:ca:c7:45:61:c5:cb:7c:dd:49:76:bc:e3:13:f6:48: 65:b0:13:e0:76:cc:27:aa:ed:15:67:8d:83:31:9f:d2:31:8f: 69:2c:d5:8d:ba:85:f6:d3:4b:c6:c2:a2:b3:5e:09:98:0b:90: 05:de:85:cd:df:5e:80:37:68:25:93:f1:a4:b3:58:77:88:da: 44:e4:d3:a6:3f:ad:8b:3a:6d:5d:05:ea:60:11:77:4f:55:00: ef:c2:40:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3oSz7XglZ9oc0SYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk NDczNTVmYmQtNWM3OS00NGY1LTg2ZDQtYTlhNjM4YTczNGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreqTgYPqcfmPP7tObVqDWeLVDsx3vrTywBoD Cauv72QapAjJ72UTI5YzSPnxXD02+WqV60t62i9MBueh3GqXt5UYcxDpUybABTlt ogDQLk21LapRQwLll/baw3CkUrdNgmsF34kDEq6LQcka99kOdcnWM2QlJ3y7PQ2G H++Ud4xFG0zXIY1o9COBHMyNYn4sJtICipe0dikOeXPyOlIInnfdHKv9Iy2+zuat u9rn5d+baru5p8cr4tPHyMT5iWENWCJl/7kEDpItNbbaDhxcZ9Vp3cHcd0PnSgW4 T5BH+yxCGV1dyV8tllcWvXtyWgZKbEaw5/ZL/lLXa3/PNsipAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvHnB66qoajfDFOLnxSG4Nz4D7XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvOGYyYjNhYzUtMWI2OC0z NGJlLTgzNzEtMjlhZjFjZjRlMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQIigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIn7hPMn6vhEx3GQsr1DVV9nrNu9qYN+p0Ps4XkOWhV3Lrby/oeZbIdn cQN7A8979OQObzlvi1QHVeZJWtUMm7maiRcqPFhf7JGVMjKU3Xr0/NFMYBn74iRD aAlOPg/v2j4nt/gkK/tga7wVf5KOS3eIVxJbGiptyvP0k2nahAeW/ar190dUgpJs 5NVXVF6xQ3wfnhw0rj1QdxltM6Bu/0HrEtN/ZcrHRWHFy3zdSXa84xP2SGWwE+B2 zCeq7RVnjYMxn9Ixj2ks1Y26hfbTS8bCorNeCZgLkAXehc3fXoA3aCWT8aSzWHeI 2kTk06Y/rYs6bV0F6mARd09VAO/CQM8= -----END CERTIFICATE-----Generated at Fri May 22 16:11:10 2026 by rpki-client