$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d/a1ca8ae2-5dd2-3c00-b08d-54dbb145f162.roa File: a1ca8ae2-5dd2-3c00-b08d-54dbb145f162.roa (raw, json) Hash identifier: LhbEMXZ643tnFp3bypr8eZPk/oMM6y2/f43+zRje7Rc= Subject key identifier: A0:64:91:2B:42:5E:D9:7E:E4:5F:A9:9E:3B:D0:5C:0A:15:A9:64:E6 Certificate issuer: /CN=f1221975-8406-433d-a21a-c10166c9278d Certificate serial: 010D0C9F4328584D9A2019B2D5D2BDDB160F6740 Authority key identifier: CD:04:35:20:77:30:62:9F:DA:0E:AB:91:B9:89:89:C3:5F:D4:2B:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d/a1ca8ae2-5dd2-3c00-b08d-54dbb145f162.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 29744 IP address blocks: 74.214.208.0/20 maxlen: 24 162.213.16.0/22 maxlen: 24 199.84.255.0/24 maxlen: 24 199.253.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d/f1221975-8406-433d-a21a-c10166c9278d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d/f1221975-8406-433d-a21a-c10166c9278d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:19:b2:d5:d2:bd:db:16:0f:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1221975-8406-433d-a21a-c10166c9278d Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=d4e2b6c7-970d-4a60-b326-a1baf3eef1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:76:76:33:5d:3c:8d:b6:74:9d:08:01:d5:b2: 34:24:ef:27:09:7b:67:0b:39:4e:29:0c:c8:b1:a0: ee:42:b7:f5:08:30:27:07:3a:b0:b4:36:4e:26:d4: 2f:4a:9c:92:43:84:0f:2c:ac:75:cc:48:c8:0e:dc: 73:55:78:8a:5c:10:5c:d4:34:7b:b1:d3:df:36:0f: 28:26:e4:b0:cb:bb:ff:80:7b:60:aa:76:23:bf:e3: 9f:b0:a8:d7:8a:48:c7:72:2c:13:86:3e:91:2e:24: ec:e5:e2:0a:5e:4d:4b:97:12:06:6a:d5:c9:69:9b: 72:dd:95:f8:53:9c:2b:fb:7b:46:ae:5c:ed:e5:7c: bb:fa:b1:b9:9a:6e:60:87:6b:e2:e3:9f:bd:82:43: 46:c6:a6:7f:3b:d2:99:44:c3:40:44:52:47:29:6a: bd:57:66:bb:17:0a:cb:cb:b6:79:ee:e9:6b:fa:22: 32:a8:66:7b:14:e8:bc:7d:5c:f1:5e:b2:69:8a:a7: a4:93:7b:47:22:2d:f7:65:73:0f:da:4e:2e:b1:da: 18:a7:62:8b:03:52:de:3f:d3:b2:69:58:6f:7c:45: d7:7a:61:55:a3:6e:92:ed:1a:76:a8:57:78:81:00: 6a:9c:da:ba:9f:70:9c:83:31:f3:34:e8:53:07:a4: 04:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:64:91:2B:42:5E:D9:7E:E4:5F:A9:9E:3B:D0:5C:0A:15:A9:64:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d/a1ca8ae2-5dd2-3c00-b08d-54dbb145f162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d/f1221975-8406-433d-a21a-c10166c9278d.crl X509v3 Authority Key Identifier: keyid:CD:04:35:20:77:30:62:9F:DA:0E:AB:91:B9:89:89:C3:5F:D4:2B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1221975-8406-433d-a21a-c10166c9278d.cer sbgp-ipAddrBlock: critical IPv4: 74.214.208.0/20 162.213.16.0/22 199.84.255.0/24 199.253.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:53:17:15:7d:d4:8b:7e:8c:2c:02:a4:ff:a9:06:4c:1f:22: c8:15:f9:7a:a9:d6:39:c5:a7:9a:43:13:2e:fb:4e:2d:22:d6: cf:ac:73:34:c6:d6:9b:86:1d:e8:04:f2:5b:e4:f0:15:d4:aa: f4:dc:6e:29:54:dd:fd:e7:6f:c9:2e:70:14:40:d9:51:66:38: a3:ab:1e:8a:9c:61:0b:6d:a9:73:01:06:39:59:7d:8a:ee:1c: 08:01:f0:ad:51:20:2d:f4:4e:18:cc:92:f4:03:69:69:e8:bd: cd:0f:c4:d8:ee:27:51:04:fe:29:e0:b0:f2:c0:be:fc:2e:29: 27:34:72:1a:14:22:67:80:84:98:95:29:3a:d4:8e:67:b8:04: 52:9e:fc:7b:50:b7:6a:8b:1b:da:2d:a7:a6:aa:ba:10:5b:86: 93:a9:e9:64:1b:0d:ac:95:a5:bf:44:3b:eb:98:56:fa:9c:fd: 30:c5:de:c6:e1:49:d8:bc:f1:b0:c8:6b:c9:62:b0:45:3f:1f: 60:9e:48:59:65:02:fe:42:c0:cc:fd:b7:a3:b2:91:19:5e:07: 07:ec:9d:3b:bc:29:a9:cc:0e:36:aa:ae:68:c6:0b:32:e1:4e: de:1f:a7:e1:ba:75:a1:58:b1:5f:55:3f:38:cd:61:03:99:7f: 32:70:d8:8c -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE2aIBmy1dK92xYPZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjEyMjE5NzUtODQwNi00MzNkLWEyMWEtYzEwMTY2Yzky NzhkMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk ZDRlMmI2YzctOTcwZC00YTYwLWIzMjYtYTFiYWYzZWVmMWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnZ2M108jbZ0nQgB1bI0JO8nCXtnCzlOKQzI saDuQrf1CDAnBzqwtDZOJtQvSpySQ4QPLKx1zEjIDtxzVXiKXBBc1DR7sdPfNg8o JuSwy7v/gHtgqnYjv+OfsKjXikjHciwThj6RLiTs5eIKXk1LlxIGatXJaZty3ZX4 U5wr+3tGrlzt5Xy7+rG5mm5gh2vi45+9gkNGxqZ/O9KZRMNARFJHKWq9V2a7FwrL y7Z57ulr+iIyqGZ7FOi8fVzxXrJpiqekk3tHIi33ZXMP2k4usdoYp2KLA1LeP9Oy aVhvfEXXemFVo26S7Rp2qFd4gQBqnNq6n3CcgzHzNOhTB6QEFwIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFKBkkStCXtl+5F+pnjvQXAoVqWTmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mMTIy MTk3NS04NDA2LTQzM2QtYTIxYS1jMTAxNjZjOTI3OGQvYTFjYThhZTItNWRkMi0z YzAwLWIwOGQtNTRkYmIxNDVmMTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjEyMjE5NzUtODQwNi00MzNkLWEy MWEtYzEwMTY2YzkyNzhkL2YxMjIxOTc1LTg0MDYtNDMzZC1hMjFhLWMxMDE2NmM5 Mjc4ZC5jcmwwHwYDVR0jBBgwFoAUzQQ1IHcwYp/aDquRuYmJw1/UK/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mMTIyMTk3NS04NDA2LTQzM2QtYTIxYS1jMTAx NjZjOTI3OGQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEStbQAwQC otUQAwQAx1T/AwQCx/0MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHVTFxV91It+jCwCpP+pBkwfIsgV+Xqp 1jnFp5pDEy77Ti0i1s+sczTG1puGHegE8lvk8BXUqvTcbilU3f3nb8kucBRA2VFm OKOrHoqcYQttqXMBBjlZfYruHAgB8K1RIC30ThjMkvQDaWnovc0PxNjuJ1EE/ing sPLAvvwuKSc0choUImeAhJiVKTrUjme4BFKe/HtQt2qLG9otp6aquhBbhpOp6WQb DayVpb9EO+uYVvqc/TDF3sbhSdi88bDIa8lisEU/H2CeSFllAv5CwMz9t6OykRle BwfsnTu8KanMDjaqrmjGCzLhTt4fp+G6daFYsV9VPzjNYQOZfzJw2Iw= -----END CERTIFICATE-----Generated at Fri May 1 17:05:59 2026 by rpki-client