$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/248dd090-9420-37f9-9305-b5cd56b24a28.roa File: 248dd090-9420-37f9-9305-b5cd56b24a28.roa (raw, json) Hash identifier: 7LQbXNEdIP2aK8Qj+/utchCjHcr59wsF/W4C5Y1FY9U= Subject key identifier: 56:68:00:28:08:25:7E:87:47:74:E8:33:6C:86:63:B1:04:01:87:18 Certificate issuer: /CN=9bd0a861-f835-4585-9517-e1dba949c123 Certificate serial: 010D0C9F4328584D524347C7B4D0AA4558A2CB00 Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/248dd090-9420-37f9-9305-b5cd56b24a28.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 25820 IP address blocks: 74.118.192.0/22 maxlen: 24 104.193.8.0/22 maxlen: 24 104.245.96.0/21 maxlen: 24 104.255.64.0/21 maxlen: 24 142.0.32.0/20 maxlen: 24 162.213.24.0/21 maxlen: 24 162.248.72.0/21 maxlen: 24 204.124.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:47:c7:b4:d0:aa:45:58:a2:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=54f04d7d-44c8-4816-b399-52f27a83683f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4e:11:9e:57:ea:b3:aa:33:94:13:04:ee:d1: 1d:5a:09:f4:35:e5:0a:93:26:af:2b:ec:fa:72:63: 0c:4a:29:27:37:4d:0e:90:77:b3:14:61:7d:5f:25: f5:ac:6a:d6:3f:2b:3c:47:30:81:ec:2c:af:ad:e9: 53:08:3e:a5:00:98:22:9e:41:aa:91:c3:70:89:87: 6a:24:31:27:db:db:4d:6e:54:01:3e:ba:1c:70:4b: 87:71:52:d7:00:14:f1:bd:b1:b3:20:6d:54:df:3e: 00:68:78:7f:8a:c2:6e:8e:94:03:33:1c:5f:b1:5c: c2:35:53:d1:88:c6:e0:e3:42:ea:2b:d2:b2:3e:84: 1f:73:0a:b5:05:d8:22:38:e4:4b:0a:37:63:69:ca: 4c:4f:b6:d2:01:82:bd:29:3e:6b:6a:d0:d9:40:0f: 8c:cf:40:60:d0:93:04:ad:b7:a0:c0:eb:7a:c3:cb: 86:c1:76:3b:48:ea:fa:42:3d:14:0b:f4:0e:7e:f9: 78:23:a8:a8:07:86:52:15:10:ab:b1:3b:8c:b5:64: 3a:58:3d:0b:66:b9:0e:28:f3:20:eb:1e:db:f7:e3: ce:0a:67:0c:fe:e4:51:78:1b:13:69:3b:7e:e1:a6: 32:fd:9a:f2:14:cd:b2:f3:a5:23:b3:0f:f9:4e:41: 0f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:68:00:28:08:25:7E:87:47:74:E8:33:6C:86:63:B1:04:01:87:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/248dd090-9420-37f9-9305-b5cd56b24a28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl X509v3 Authority Key Identifier: keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer sbgp-ipAddrBlock: critical IPv4: 74.118.192.0/22 104.193.8.0/22 104.245.96.0/21 104.255.64.0/21 142.0.32.0/20 162.213.24.0/21 162.248.72.0/21 204.124.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:40:fd:a5:f1:0d:04:00:18:f9:04:d9:22:55:0b:b6:43:0f: ea:c3:34:d8:20:d8:cc:86:b2:9d:65:44:5c:1d:af:74:ac:94: f6:36:f8:c7:05:66:ab:6f:d0:fc:86:63:be:2e:f4:00:c2:a0: 9c:fa:c1:41:03:b7:6f:b3:4d:62:13:eb:22:2a:bb:92:a9:b3: 22:aa:2f:c0:21:20:94:63:28:a0:5e:0e:93:67:ac:80:b9:44: 28:c8:90:59:b2:f1:34:bd:b9:85:c9:b5:ab:34:bd:db:56:44: c1:e3:e4:2f:00:2d:48:ff:67:8d:76:4d:7b:95:7b:88:62:4c: d5:3b:7b:f9:87:01:56:0a:ad:7c:82:2b:dc:8a:68:57:2c:f7: 01:0c:96:b8:31:a0:b4:f5:5e:83:8b:40:66:c2:69:80:ff:0d: db:8e:b1:ef:0f:86:44:40:d3:50:dc:82:74:7d:80:9d:ca:ba: 40:46:09:0a:a2:33:af:08:c1:72:dd:24:db:ee:08:81:1f:28: 96:00:d4:8d:71:4b:5f:0f:d7:e8:65:6f:a3:b6:de:65:a6:05: 5f:d3:5a:53:a2:03:b9:bd:fd:fd:8f:ac:97:b3:7b:15:4b:ad: d7:ae:f5:00:a8:1f:4b:b8:64:76:2d:a2:34:7f:96:f3:25:04: f0:36:3f:3d -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWE1SQ0fHtNCqRViiywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJkMGE4NjEtZjgzNS00NTg1LTk1MTctZTFkYmE5NDlj MTIzMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NTRmMDRkN2QtNDRjOC00ODE2LWIzOTktNTJmMjdhODM2ODNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA404Rnlfqs6ozlBME7tEdWgn0NeUKkyavK+z6 cmMMSiknN00OkHezFGF9XyX1rGrWPys8RzCB7CyvrelTCD6lAJginkGqkcNwiYdq JDEn29tNblQBProccEuHcVLXABTxvbGzIG1U3z4AaHh/isJujpQDMxxfsVzCNVPR iMbg40LqK9KyPoQfcwq1BdgiOORLCjdjacpMT7bSAYK9KT5ratDZQA+Mz0Bg0JME rbegwOt6w8uGwXY7SOr6Qj0UC/QOfvl4I6ioB4ZSFRCrsTuMtWQ6WD0LZrkOKPMg 6x7b9+POCmcM/uRReBsTaTt+4aYy/ZryFM2y86Ujsw/5TkEPFQIDAQABo4IDfzCC A3swHQYDVR0OBBYEFFZoACgIJX6HR3ToM2yGY7EEAYcYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQw YTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRiYTk0OWMxMjMvMjQ4ZGQwOTAtOTQyMC0z N2Y5LTkzMDUtYjVjZDU2YjI0YTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWJkMGE4NjEtZjgzNS00NTg1LTk1 MTctZTFkYmE5NDljMTIzLzliZDBhODYxLWY4MzUtNDU4NS05NTE3LWUxZGJhOTQ5 YzEyMy5jcmwwHwYDVR0jBBgwFoAU5LcXAHA6BDXEY3u/qUeRKvFBvBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQwYTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRi YTk0OWMxMjMuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCSnbAAwQC aMEIAwQDaPVgAwQDaP9AAwQEjgAgAwQDotUYAwQDovhIAwQCzHy0MFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AEdA/aXxDQQAGPkE2SJVC7ZDD+rDNNgg2MyGsp1lRFwdr3SslPY2+McFZqtv0PyG Y74u9ADCoJz6wUEDt2+zTWIT6yIqu5KpsyKqL8AhIJRjKKBeDpNnrIC5RCjIkFmy 8TS9uYXJtas0vdtWRMHj5C8ALUj/Z412TXuVe4hiTNU7e/mHAVYKrXyCK9yKaFcs 9wEMlrgxoLT1XoOLQGbCaYD/DduOse8PhkRA01DcgnR9gJ3KukBGCQqiM68IwXLd JNvuCIEfKJYA1I1xS18P1+hlb6O23mWmBV/TWlOiA7m9/f2PrJezexVLrdeu9QCo H0u4ZHYtojR/lvMlBPA2Pz0= -----END CERTIFICATE-----Generated at Sun Mar 29 20:49:59 2026 by rpki-client