$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/2db12b78-bb60-3bee-8ea6-72b50ff5c07e.roa File: 2db12b78-bb60-3bee-8ea6-72b50ff5c07e.roa (raw, json) Hash identifier: h+l2mYQkzJwOkCdNhdH7VrWo/oqYik9a3t8vCypFoiE= Subject key identifier: 26:5B:C8:B9:C7:D0:EB:C7:EB:12:69:DF:7F:E2:AB:20:09:D7:CB:79 Certificate issuer: /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Certificate serial: 010D0C9F4328584DE9B08733BB72DD87727FD020 Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/2db12b78-bb60-3bee-8ea6-72b50ff5c07e.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 395567 IP address blocks: 64.225.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:87:33:bb:72:dd:87:72:7f:d0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=2d04e756-d936-4f9b-a583-3c7ee42c0ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:98:bb:e8:dd:60:12:a1:c5:7d:94:9e:a1:42: c6:27:3d:cb:84:b7:04:b6:e0:97:71:93:3d:61:a9: bd:c5:67:08:d4:bb:c9:7d:31:c0:33:46:cb:11:62: 11:df:a1:82:4d:ce:5f:4e:d7:6c:29:6f:66:ca:c5: c5:1e:e2:21:b3:63:2e:c0:47:99:be:06:fd:30:ec: 38:1e:9d:08:10:20:a9:f8:92:50:a5:07:9d:22:7d: 9f:41:54:f4:a7:b7:e9:2b:7f:6a:6f:69:1d:42:d9: 69:d4:72:90:cb:f6:7b:b7:cc:23:3a:98:41:b5:14: 5a:93:d4:13:76:2b:12:f7:f9:59:54:ad:03:80:3a: 8e:4a:8e:fb:7a:ef:a0:a6:2b:7c:9b:a0:64:32:48: a2:a1:8a:ab:73:8b:cf:23:68:a6:25:59:9c:24:f2: fc:c9:47:20:d2:c1:83:3d:e9:c2:4f:ef:ac:1d:21: 51:44:7e:aa:d5:41:cb:29:d5:84:33:a7:0b:97:cd: 7c:55:cf:75:ab:5e:f7:71:60:08:b7:4c:56:23:c7: 9d:9d:bd:03:be:cb:c7:e0:65:d5:e1:d1:f9:8d:01: 1b:42:7d:c5:83:c9:1a:97:1e:13:28:c9:b8:89:20: 7d:32:9d:82:23:91:5e:5d:6b:bf:cf:d3:a4:eb:c4: a4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:5B:C8:B9:C7:D0:EB:C7:EB:12:69:DF:7F:E2:AB:20:09:D7:CB:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/2db12b78-bb60-3bee-8ea6-72b50ff5c07e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl X509v3 Authority Key Identifier: keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer sbgp-ipAddrBlock: critical IPv4: 64.225.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:8d:da:0e:35:2e:71:e1:4f:25:7f:7d:0d:3a:42:73:39:ca: a3:b4:6f:45:71:81:ce:59:91:26:29:9e:27:c1:6e:89:ac:72: 1f:f8:62:68:45:c0:fd:b0:ed:f3:c0:10:e0:f4:7b:8d:9a:c9: ae:e3:87:2f:a9:5e:72:ae:b3:4d:bb:70:05:98:5b:f5:a2:7c: 5a:a9:12:cf:e2:b7:54:e8:31:06:a2:64:30:81:22:83:10:e7: 24:bd:9a:ae:90:bd:34:c6:df:b1:b2:71:88:84:77:44:b9:44: 32:2a:e9:aa:f4:29:13:7f:f8:7e:3b:17:ab:8f:da:48:4d:6b: 7c:aa:a5:0b:17:32:2a:c0:8b:1a:06:a0:cc:a4:78:34:eb:0e: bf:50:f5:8d:88:31:68:7a:fc:e2:63:f7:c8:72:f0:44:1e:5b: 40:82:1d:e6:ad:97:1b:c1:a6:94:2d:78:0e:04:ad:6f:3d:c7: 6f:21:c3:85:f0:2e:d4:1e:ad:30:4c:b1:3a:8d:af:53:e1:0f: a7:b4:49:98:9a:ad:90:7b:84:3f:0e:fb:e2:a0:04:a4:b1:5a: b7:c2:18:99:63:d4:76:70:fb:ea:9b:d2:60:21:90:37:6c:c2: f0:78:d5:1c:cd:df:69:70:b2:fa:87:1b:c6:cd:45:60:83:da: d4:6e:ee:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psIczu3Ldh3J/0CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3 Y2IzMB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk MmQwNGU3NTYtZDkzNi00ZjliLWE1ODMtM2M3ZWU0MmMwY2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZi76N1gEqHFfZSeoULGJz3LhLcEtuCXcZM9 Yam9xWcI1LvJfTHAM0bLEWIR36GCTc5fTtdsKW9mysXFHuIhs2MuwEeZvgb9MOw4 Hp0IECCp+JJQpQedIn2fQVT0p7fpK39qb2kdQtlp1HKQy/Z7t8wjOphBtRRak9QT disS9/lZVK0DgDqOSo77eu+gpit8m6BkMkiioYqrc4vPI2imJVmcJPL8yUcg0sGD PenCT++sHSFRRH6q1UHLKdWEM6cLl818Vc91q173cWAIt0xWI8ednb0DvsvH4GXV 4dH5jQEbQn3Fg8kalx4TKMm4iSB9Mp2CI5FeXWu/z9Ok68SkCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZbyLnH0OvH6xJp33/iqyAJ18t5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3 YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvMmRiMTJiNzgtYmI2MC0z YmVlLThlYTYtNzJiNTBmZjVjMDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU3N2I1YWYtYTFiNS00ODU4LWI2 MWQtZjA5ZmQ2N2Y3Y2IzL2FlNzdiNWFmLWExYjUtNDg1OC1iNjFkLWYwOWZkNjdm N2NiMy5jcmwwHwYDVR0jBBgwFoAUQ8bZZVYwh5KCSgXB185ho81dPhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlm ZDY3ZjdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQOHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHON2g41LnHhTyV/fQ06QnM5yqO0b0Vxgc5ZkSYpnifBbomsch/4YmhF wP2w7fPAEOD0e42aya7jhy+pXnKus027cAWYW/WifFqpEs/it1ToMQaiZDCBIoMQ 5yS9mq6QvTTG37GycYiEd0S5RDIq6ar0KRN/+H47F6uP2khNa3yqpQsXMirAixoG oMykeDTrDr9Q9Y2IMWh6/OJj98hy8EQeW0CCHeatlxvBppQteA4ErW89x28hw4Xw LtQerTBMsTqNr1PhD6e0SZiarZB7hD8O++KgBKSxWrfCGJlj1HZw++qb0mAhkDds wvB41RzN32lwsvqHG8bNRWCD2tRu7os= -----END CERTIFICATE-----Generated at Sat May 23 17:29:24 2026 by rpki-client