$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/8e15c1af-21cf-36cb-8007-f5f39145eb9d.roa File: 8e15c1af-21cf-36cb-8007-f5f39145eb9d.roa (raw, json) Hash identifier: qZWPv9xcaPOhgrpaAakiUc07yCP7+qKrDN6M+zZ5kKQ= Subject key identifier: AC:C5:F3:54:1D:A2:4A:89:CF:03:BC:C6:0A:A4:A8:09:61:61:16:72 Certificate issuer: /CN=ac4576d4-b383-4f58-8da4-316d12d38f36 Certificate serial: 010D0C9F4328584DE84B5B37179F6D9ADFC35040 Authority key identifier: 88:85:79:92:5C:D9:E3:38:2D:2A:D0:3D:DF:00:D2:66:92:C9:A7:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/8e15c1af-21cf-36cb-8007-f5f39145eb9d.roa Signing time: Thu 21 May 2026 13:00:32 +0000 ROA not before: Thu 21 May 2026 13:00:32 +0000 ROA not after: Wed 19 Aug 2026 13:00:32 +0000 asID: 7029 IP address blocks: 170.124.0.0/18 maxlen: 24 170.124.64.0/18 maxlen: 24 170.124.128.0/18 maxlen: 24 170.124.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/ac4576d4-b383-4f58-8da4-316d12d38f36.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/ac4576d4-b383-4f58-8da4-316d12d38f36.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:4b:5b:37:17:9f:6d:9a:df:c3:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac4576d4-b383-4f58-8da4-316d12d38f36 Validity Not Before: May 21 13:00:32 2026 GMT Not After : Aug 19 13:00:32 2026 GMT Subject: CN=7e9cef0d-4ec3-42cf-b6a2-4f43b91d161b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a1:5a:53:5e:76:a9:fe:60:08:cf:45:11:ad: 2e:a1:f4:7f:db:0d:35:5b:08:bd:4f:98:b7:0a:22: 08:11:33:f1:8c:eb:da:2e:ea:8f:42:c2:f2:e9:93: 4c:f5:13:a2:fb:d0:ac:63:12:1f:26:ba:78:62:19: 82:bb:53:68:35:3f:c6:ea:aa:e5:01:4d:b9:4d:5a: ee:f1:06:7a:64:68:0b:43:e1:cb:35:cd:78:9b:51: b8:25:0c:6f:ea:b6:f7:24:35:77:cd:52:6a:f2:74: 0f:df:44:09:78:51:dd:0a:6d:1b:f0:48:9d:ff:a8: 56:72:82:52:4e:7e:d6:d9:59:ba:f3:db:07:f6:05: b3:a1:91:6f:cd:d5:84:0d:0f:50:90:39:bd:cc:be: 96:27:d0:a1:58:4e:d6:83:c5:6f:16:8c:b2:b7:de: 7c:2d:9c:d0:cc:02:e6:bd:f5:8f:a6:f3:78:62:4a: 13:48:d9:6a:f1:dc:f9:8c:a3:e2:15:0d:17:62:63: 44:e6:84:16:40:e8:fc:d5:a1:15:d8:fd:c3:66:07: a8:24:db:fd:c6:45:cd:76:aa:a9:65:e5:49:d5:f0: f0:b9:e4:fd:e1:fa:b3:d9:58:98:ea:d1:bd:b8:cd: 20:50:f2:d0:b5:5a:35:7a:83:e1:f0:e7:6a:61:5c: 42:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C5:F3:54:1D:A2:4A:89:CF:03:BC:C6:0A:A4:A8:09:61:61:16:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/8e15c1af-21cf-36cb-8007-f5f39145eb9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/ac4576d4-b383-4f58-8da4-316d12d38f36.crl X509v3 Authority Key Identifier: keyid:88:85:79:92:5C:D9:E3:38:2D:2A:D0:3D:DF:00:D2:66:92:C9:A7:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36.cer sbgp-ipAddrBlock: critical IPv4: 170.124.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:8e:4d:d3:84:f7:db:da:02:40:99:27:d8:b1:37:12:01:aa: 01:d4:6d:19:a9:64:5f:da:bf:16:2f:dd:d9:9f:3d:d7:17:46: 2b:63:c0:0d:6a:ed:2c:e8:24:a0:15:bc:06:0c:95:d9:55:01: 7e:4c:16:d4:b4:be:f7:0b:8b:f4:b5:2f:36:de:66:1d:06:a2: 00:b6:e4:6a:d8:4d:19:25:02:b7:66:36:27:cd:92:42:51:db: 89:a7:da:f3:db:0c:d9:6f:b5:64:7d:23:2b:3b:d5:68:f6:74: 1c:fa:50:e0:9b:28:53:1f:05:a8:38:73:a7:e2:e7:cc:f9:3d: 46:04:40:d7:fb:7a:e3:e6:89:a6:6d:6c:cd:32:ca:89:82:20: 9b:a4:d7:33:9d:0e:1a:c3:fc:81:8c:ba:89:78:8e:37:69:a5: af:db:23:d0:c7:15:29:12:75:87:e6:52:07:66:90:07:0f:d1: 72:ec:27:61:ca:57:e1:a2:4b:ae:53:51:7b:c0:82:ff:01:6c: 2d:d9:27:be:ed:fb:68:e1:68:24:c8:ad:1e:35:f7:19:4a:9f: 00:9a:f3:13:d9:bf:b7:bd:f8:c9:0c:c9:6d:43:1d:09:c1:0d: f6:bd:23:31:a2:51:af:a8:32:1c:c9:35:1a:5c:56:83:d6:1d: fd:78:34:a1 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE3oS1s3F59tmt/DUEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM0NTc2ZDQtYjM4My00ZjU4LThkYTQtMzE2ZDEyZDM4 ZjM2MB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk N2U5Y2VmMGQtNGVjMy00MmNmLWI2YTItNGY0M2I5MWQxNjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaFaU152qf5gCM9FEa0uofR/2w01Wwi9T5i3 CiIIETPxjOvaLuqPQsLy6ZNM9ROi+9CsYxIfJrp4YhmCu1NoNT/G6qrlAU25TVru 8QZ6ZGgLQ+HLNc14m1G4JQxv6rb3JDV3zVJq8nQP30QJeFHdCm0b8Eid/6hWcoJS Tn7W2Vm689sH9gWzoZFvzdWEDQ9QkDm9zL6WJ9ChWE7Wg8VvFoyyt958LZzQzALm vfWPpvN4YkoTSNlq8dz5jKPiFQ0XYmNE5oQWQOj81aEV2P3DZgeoJNv9xkXNdqqp ZeVJ1fDwueT94fqz2ViY6tG9uM0gUPLQtVo1eoPh8OdqYVxC4wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKzF81QdokqJzwO8xgqkqAlhYRZyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzQ1 NzZkNC1iMzgzLTRmNTgtOGRhNC0zMTZkMTJkMzhmMzYvOGUxNWMxYWYtMjFjZi0z NmNiLTgwMDctZjVmMzkxNDVlYjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM0NTc2ZDQtYjM4My00ZjU4LThk YTQtMzE2ZDEyZDM4ZjM2L2FjNDU3NmQ0LWIzODMtNGY1OC04ZGE0LTMxNmQxMmQz OGYzNi5jcmwwHwYDVR0jBBgwFoAUiIV5klzZ4zgtKtA93wDSZpLJp+8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzQ1NzZkNC1iMzgzLTRmNTgtOGRhNC0zMTZk MTJkMzhmMzYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqnwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAnY5N04T329oCQJkn2LE3EgGqAdRtGalkX9q/Fi/d2Z891xdGK2PADWrt LOgkoBW8BgyV2VUBfkwW1LS+9wuL9LUvNt5mHQaiALbkathNGSUCt2Y2J82SQlHb iafa89sM2W+1ZH0jKzvVaPZ0HPpQ4JsoUx8FqDhzp+LnzPk9RgRA1/t64+aJpm1s zTLKiYIgm6TXM50OGsP8gYy6iXiON2mlr9sj0McVKRJ1h+ZSB2aQBw/RcuwnYcpX 4aJLrlNRe8CC/wFsLdknvu37aOFoJMitHjX3GUqfAJrzE9m/t734yQzJbUMdCcEN 9r0jMaJRr6gyHMk1GlxWg9Yd/Xg0oQ== -----END CERTIFICATE-----Generated at Tue Jun 2 21:53:11 2026 by rpki-client