$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/7aa03dbb-c767-31ad-805f-79f186089aa4.roa File: 7aa03dbb-c767-31ad-805f-79f186089aa4.roa (raw, json) Hash identifier: 9C1zN1tc8SeTH4r9ZttAhOiEjj01B0YM3C6pMzQ7pKA= Subject key identifier: 60:74:C1:CB:1E:D0:E7:58:CE:30:E3:C8:89:98:D9:40:FE:B0:82:02 Certificate issuer: /CN=a5227ba9-e279-4048-a93b-e62de3502f68 Certificate serial: 010D0C9F4328584D95F002C2BAA221127574CC00 Authority key identifier: 44:02:F2:CE:3C:E2:5B:C5:F9:17:9C:EB:4A:5B:4B:3C:3A:3E:96:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/7aa03dbb-c767-31ad-805f-79f186089aa4.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 395896 IP address blocks: 64.89.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/a5227ba9-e279-4048-a93b-e62de3502f68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/a5227ba9-e279-4048-a93b-e62de3502f68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:02:c2:ba:a2:21:12:75:74:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5227ba9-e279-4048-a93b-e62de3502f68 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=fef599ba-59e9-42d0-9a2a-170af6c98a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b3:1d:34:74:63:5c:9f:c3:17:af:21:37:53: 1e:19:ce:43:61:32:db:28:51:a1:ba:d9:65:60:52: 0c:7f:ae:21:15:44:45:5b:fe:1e:fc:fc:e3:cd:be: 20:a6:c0:06:54:a1:a0:9e:3b:a2:f4:54:43:81:cf: 2a:09:61:9d:b8:24:c9:de:05:1f:cb:66:f1:f5:4b: b6:8b:d3:70:8a:e4:34:fc:6c:87:cf:9e:58:c6:e6: 3c:f3:0e:fe:49:d3:e5:c7:97:7f:5d:61:91:ea:08: 57:ba:02:64:f6:c4:ab:c3:e7:84:0f:d6:e0:a6:ee: 54:44:56:d2:39:73:37:ec:a9:27:72:7c:81:ab:59: 96:ec:39:9f:81:1f:15:54:32:fa:5f:5f:1f:d2:59: 81:41:1e:47:00:4f:b6:9a:3f:80:9e:3f:47:f5:26: 85:44:96:48:3c:5c:b1:e6:2d:b5:ad:c7:8c:e7:d6: e9:47:b8:7f:25:78:5b:d6:5e:75:61:be:b8:2d:87: b7:f5:4d:2f:32:59:ca:8b:30:0f:52:3a:26:e8:a5: 53:70:f1:34:f6:3b:0a:f0:a3:53:48:53:9e:e4:24: e5:8f:6f:c9:8b:dd:75:39:19:ee:6b:e4:28:88:9b: a9:aa:b0:8d:58:38:f8:b3:1c:da:b3:8c:8b:67:79: 71:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:74:C1:CB:1E:D0:E7:58:CE:30:E3:C8:89:98:D9:40:FE:B0:82:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/7aa03dbb-c767-31ad-805f-79f186089aa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/a5227ba9-e279-4048-a93b-e62de3502f68.crl X509v3 Authority Key Identifier: keyid:44:02:F2:CE:3C:E2:5B:C5:F9:17:9C:EB:4A:5B:4B:3C:3A:3E:96:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68.cer sbgp-ipAddrBlock: critical IPv4: 64.89.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:16:2e:4c:ca:0d:a6:e9:57:f0:26:21:e0:bb:ec:e4:ca:1c: b5:89:84:c8:8d:9b:78:a5:c5:cc:ad:53:62:4a:b7:5e:4d:ae: ed:ec:f1:f5:1a:38:c0:8e:33:26:74:2d:39:1d:cf:a5:5b:cb: 26:87:76:a3:89:6b:38:30:6a:d3:8e:c1:cf:cf:5a:15:3b:39: 2c:69:df:6a:28:a1:90:f1:1c:43:3a:31:44:cb:8a:fc:6f:2a: 7c:17:b2:31:4c:44:fa:6c:b8:0c:86:cf:71:ef:c0:96:65:b6: 3f:91:34:de:64:ae:02:75:18:c4:f1:8d:23:00:1e:96:41:f3: 58:6f:d5:60:8c:39:29:20:b9:07:26:8f:42:7f:40:ab:98:c7: 72:87:11:b5:fd:df:62:ab:ac:b9:81:ce:1f:17:cc:66:be:0e: 07:7e:cd:76:c0:c4:15:c9:1e:74:e0:f9:a5:48:e8:84:b0:56: 3e:dd:59:7a:8d:c4:bb:3a:9a:35:3e:c6:f0:da:93:c3:76:01: b6:95:11:91:32:35:f4:43:fd:dc:9e:05:b3:df:73:7f:e5:89: 40:e9:0f:0d:63:e6:f5:f0:69:e5:3f:de:b9:b2:42:1e:4a:3e: 54:94:90:8d:58:3d:c3:86:32:6c:86:95:32:ab:d0:c4:77:b3: 8a:24:d6:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8ALCuqIhEnV0zAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUyMjdiYTktZTI3OS00MDQ4LWE5M2ItZTYyZGUzNTAy ZjY4MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk ZmVmNTk5YmEtNTllOS00MmQwLTlhMmEtMTcwYWY2Yzk4YTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLMdNHRjXJ/DF68hN1MeGc5DYTLbKFGhutll YFIMf64hFURFW/4e/Pzjzb4gpsAGVKGgnjui9FRDgc8qCWGduCTJ3gUfy2bx9Uu2 i9NwiuQ0/GyHz55YxuY88w7+SdPlx5d/XWGR6ghXugJk9sSrw+eED9bgpu5URFbS OXM37KkncnyBq1mW7DmfgR8VVDL6X18f0lmBQR5HAE+2mj+Anj9H9SaFRJZIPFyx 5i21rceM59bpR7h/JXhb1l51Yb64LYe39U0vMlnKizAPUjom6KVTcPE09jsK8KNT SFOe5CTlj2/Ji911ORnua+QoiJupqrCNWDj4sxzas4yLZ3lxPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGB0wcse0OdYzjDjyImY2UD+sIICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hNTIy N2JhOS1lMjc5LTQwNDgtYTkzYi1lNjJkZTM1MDJmNjgvN2FhMDNkYmItYzc2Ny0z MWFkLTgwNWYtNzlmMTg2MDg5YWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTUyMjdiYTktZTI3OS00MDQ4LWE5 M2ItZTYyZGUzNTAyZjY4L2E1MjI3YmE5LWUyNzktNDA0OC1hOTNiLWU2MmRlMzUw MmY2OC5jcmwwHwYDVR0jBBgwFoAURALyzjziW8X5F5zrSltLPDo+lvAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hNTIyN2JhOS1lMjc5LTQwNDgtYTkzYi1lNjJk ZTM1MDJmNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQFkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkWLkzKDabpV/AmIeC77OTKHLWJhMiNm3ilxcytU2JKt15Nru3s8fUa OMCOMyZ0LTkdz6VbyyaHdqOJazgwatOOwc/PWhU7OSxp32oooZDxHEM6MUTLivxv KnwXsjFMRPpsuAyGz3HvwJZltj+RNN5krgJ1GMTxjSMAHpZB81hv1WCMOSkguQcm j0J/QKuYx3KHEbX932KrrLmBzh8XzGa+Dgd+zXbAxBXJHnTg+aVI6ISwVj7dWXqN xLs6mjU+xvDak8N2AbaVEZEyNfRD/dyeBbPfc3/liUDpDw1j5vXwaeU/3rmyQh5K PlSUkI1YPcOGMmyGlTKr0MR3s4ok1kk= -----END CERTIFICATE-----Generated at Wed Apr 29 15:27:36 2026 by rpki-client