$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a7081ce6-d0a5-398a-90e4-2bf4df0d85e7.roa File: a7081ce6-d0a5-398a-90e4-2bf4df0d85e7.roa (raw, json) Hash identifier: iaqIW4GT9f0rol3FFoP9nYjvwetXIkGeTrUWNuyIo+w= Subject key identifier: FD:32:12:49:6B:36:F5:F1:24:38:04:D4:9F:15:8E:E3:A6:FD:3C:AB Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584D8AC54630322F7431B935D140 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a7081ce6-d0a5-398a-90e4-2bf4df0d85e7.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 396085 IP address blocks: 72.249.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:46:30:32:2f:74:31:b9:35:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=5c5268e2-a116-482c-abc0-29c41c4ec7bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ba:68:eb:d8:d0:29:6c:cd:ff:f5:26:3c:7c: 6d:26:4b:4e:b2:10:35:46:8f:6b:01:4c:93:c8:38: dd:69:f7:40:b1:cd:7b:36:96:77:87:0c:71:40:ce: 74:8e:94:e1:35:27:6e:8d:3a:10:9f:7b:bc:ca:ce: bc:d5:15:21:28:2c:b1:c1:6e:48:f4:29:d8:7d:17: 20:b8:35:17:0d:65:02:89:a0:75:73:b9:5d:c9:be: 0c:ca:14:a3:69:e8:7e:60:31:ef:8d:19:be:88:8d: b0:fb:53:f3:5c:1a:8c:2e:af:ec:4e:3a:2b:da:ce: 1c:93:91:79:36:9f:08:7d:74:7d:8a:b6:d9:c3:15: 47:2a:b4:79:cd:82:ce:72:10:23:f8:40:61:35:07: 50:e9:9e:9c:f2:56:3b:8c:c5:be:8a:bd:c3:0d:d8: a9:5d:56:14:ba:93:b7:f4:86:02:92:03:cc:2f:7d: d7:54:b5:ae:17:1c:1c:5b:19:03:ef:db:17:36:ec: 0f:3a:6d:d8:16:71:88:bc:21:84:79:ff:26:e0:28: 6d:88:d1:13:2e:36:8e:c4:55:9d:ee:a2:75:2c:a7: ca:47:3c:c1:0b:64:78:63:85:90:34:61:ea:f7:4f: ed:ef:20:0c:80:d0:cb:38:a8:e5:20:6c:4f:a9:6e: ae:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:32:12:49:6B:36:F5:F1:24:38:04:D4:9F:15:8E:E3:A6:FD:3C:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a7081ce6-d0a5-398a-90e4-2bf4df0d85e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 72.249.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:35:a3:44:7f:2e:c7:1b:4c:43:be:6f:b9:1d:84:fa:e2:ed: e6:f3:98:4f:07:f3:f3:9b:0f:63:4b:ad:66:74:d4:be:4d:4b: 35:28:55:f2:05:17:e4:9c:25:1e:5f:a0:92:fd:bb:7b:5c:52: 7b:b1:14:69:d3:e0:0f:d2:10:7a:b6:af:80:2c:23:39:73:01: 45:00:8d:dd:15:fd:41:fc:b9:7e:92:dc:18:00:e7:ba:23:25: 02:1d:33:30:56:8a:69:16:70:29:89:d7:84:c4:76:b4:03:b8: 75:48:be:f5:31:a1:19:c7:40:66:34:b2:da:c2:73:4f:22:29: eb:9b:10:13:ee:2e:c4:5d:3b:a0:e1:6b:5a:7c:3a:b1:10:eb: 28:73:48:c6:19:c1:52:91:12:9d:8b:83:67:d4:4e:59:a3:58: c5:8e:fd:1d:3a:5d:87:d1:c7:08:76:a6:01:89:66:69:11:32: e9:b9:89:c7:3f:b3:f1:be:8c:57:d2:7e:d8:df:cd:d3:80:80: 29:99:3a:cc:39:72:b8:e2:28:2a:37:cd:a4:29:9f:9a:29:6b: 55:32:41:bc:ca:78:e7:7f:03:3a:f4:cf:34:93:c5:d3:fc:77: 19:c7:33:f7:a8:5b:36:e3:3c:1d:4e:00:f8:cf:53:48:56:30: 26:5a:46:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxUYwMi90Mbk10UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk NWM1MjY4ZTItYTExNi00ODJjLWFiYzAtMjljNDFjNGVjN2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLpo69jQKWzN//UmPHxtJktOshA1Ro9rAUyT yDjdafdAsc17NpZ3hwxxQM50jpThNSdujToQn3u8ys681RUhKCyxwW5I9CnYfRcg uDUXDWUCiaB1c7ldyb4MyhSjaeh+YDHvjRm+iI2w+1PzXBqMLq/sTjor2s4ck5F5 Np8IfXR9irbZwxVHKrR5zYLOchAj+EBhNQdQ6Z6c8lY7jMW+ir3DDdipXVYUupO3 9IYCkgPML33XVLWuFxwcWxkD79sXNuwPOm3YFnGIvCGEef8m4ChtiNETLjaOxFWd 7qJ1LKfKRzzBC2R4Y4WQNGHq90/t7yAMgNDLOKjlIGxPqW6uBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0yEklrNvXxJDgE1J8VjuOm/TyrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYTcwODFjZTYtZDBhNS0z OThhLTkwZTQtMmJmNGRmMGQ4NWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPkiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY1o0R/LscbTEO+b7kdhPri7ebzmE8H8/ObD2NLrWZ01L5NSzUoVfIF F+ScJR5foJL9u3tcUnuxFGnT4A/SEHq2r4AsIzlzAUUAjd0V/UH8uX6S3BgA57oj JQIdMzBWimkWcCmJ14TEdrQDuHVIvvUxoRnHQGY0strCc08iKeubEBPuLsRdO6Dh a1p8OrEQ6yhzSMYZwVKREp2Lg2fUTlmjWMWO/R06XYfRxwh2pgGJZmkRMum5icc/ s/G+jFfSftjfzdOAgCmZOsw5crjiKCo3zaQpn5opa1UyQbzKeOd/Azr0zzSTxdP8 dxnHM/eoWzbjPB1OAPjPU0hWMCZaRgU= -----END CERTIFICATE-----Generated at Wed Apr 22 08:33:33 2026 by rpki-client