$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/7f37d838-7ff6-3d1f-ada9-65965fc7a645.roa File: 7f37d838-7ff6-3d1f-ada9-65965fc7a645.roa (raw, json) Hash identifier: 8MCV3W5QmpZyEY1ho8raKPDUJn5f0sDUPZ0G1POzGQM= Subject key identifier: 88:50:88:9C:10:2B:E3:32:82:2A:AA:95:1D:AA:0B:8C:D1:99:C1:57 Certificate issuer: /CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d Certificate serial: 010D0C9F4328584DD1F5B8C350037008AF1A2840 Authority key identifier: 72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/7f37d838-7ff6-3d1f-ada9-65965fc7a645.roa Signing time: Wed 13 May 2026 13:00:31 +0000 ROA not before: Wed 13 May 2026 13:00:31 +0000 ROA not after: Tue 11 Aug 2026 13:00:31 +0000 asID: 13876 IP address blocks: 64.186.128.0/20 maxlen: 24 66.102.224.0/20 maxlen: 24 67.204.0.0/19 maxlen: 24 158.41.16.0/21 maxlen: 24 2607:8300::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d1:f5:b8:c3:50:03:70:08:af:1a:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d Validity Not Before: May 13 13:00:31 2026 GMT Not After : Aug 11 13:00:31 2026 GMT Subject: CN=8670e61b-757b-4257-82a1-587b84aaefe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f6:50:c8:4a:40:9c:34:8e:0b:07:07:27:3b: 16:1e:00:69:83:e2:89:5e:c4:6c:b8:7e:81:16:f5: 8d:81:84:4a:9c:51:28:36:3d:94:29:fe:62:d4:bf: 86:32:af:be:75:eb:fb:32:0f:e8:39:b5:cf:63:d2: 44:6d:c8:d8:33:54:57:78:df:95:2b:af:76:c1:4a: 81:be:d8:be:49:f2:cc:3a:d7:bf:3c:76:27:01:ad: 32:6a:9d:53:47:ea:86:5c:7b:b5:07:cd:06:2a:9f: 3a:d0:61:51:df:b5:53:a9:fa:e5:bf:5a:51:a7:65: 75:23:4c:e8:07:c2:1a:9e:a0:78:dd:88:ae:b9:bc: 04:9a:53:02:c4:5a:f1:14:0a:4d:5d:45:35:6f:40: e6:cf:cb:1e:2a:85:48:04:fc:eb:26:86:f3:00:3c: 20:61:bc:94:52:bb:ba:4c:b6:04:a5:38:16:5f:08: 79:8f:af:41:b3:59:ba:95:c9:f9:38:17:8c:41:bb: 74:e4:a9:64:cb:d9:76:25:e6:c0:12:7a:42:da:03: 56:c8:27:f8:a5:b6:12:9c:18:a7:8e:96:5d:dc:7a: bf:77:b2:50:bb:73:7b:14:cf:e0:f3:9b:a4:a2:c4: be:c2:c1:fb:a2:bd:58:38:b7:8f:02:c9:fd:7f:81: d4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:50:88:9C:10:2B:E3:32:82:2A:AA:95:1D:AA:0B:8C:D1:99:C1:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/7f37d838-7ff6-3d1f-ada9-65965fc7a645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl X509v3 Authority Key Identifier: keyid:72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer sbgp-ipAddrBlock: critical IPv4: 64.186.128.0/20 66.102.224.0/20 67.204.0.0/19 158.41.16.0/21 IPv6: 2607:8300::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:9a:f5:df:52:f8:de:55:dc:9a:84:a9:f9:cd:9c:96:7d:7d: e9:b4:c1:5f:ce:0e:6f:30:e4:a6:7a:ff:ea:75:50:d3:7a:7e: a7:a7:63:09:90:0b:db:60:20:4e:3c:ab:47:8d:f4:21:1f:ce: c7:a4:84:bf:b9:ee:d2:4e:c7:16:ff:cf:52:e9:07:47:ee:36: 58:19:35:87:53:9c:16:7f:57:3f:25:a7:75:0e:ed:67:1c:3b: 8a:cc:d0:b1:2b:4d:37:63:6d:65:08:4e:97:c7:02:ea:ae:0f: cb:c1:9f:88:5a:b2:9b:4f:7d:c4:31:a6:83:9e:ba:db:22:eb: fd:bc:1a:01:da:f5:ed:d4:ec:06:3f:53:e5:cd:0a:2e:f7:17: e8:af:c5:f0:58:6f:03:38:bb:e5:a6:40:a8:2c:bf:41:28:2e: 22:e2:48:44:46:f9:07:f8:c5:7c:b5:3f:7f:e5:86:87:e9:d9: 50:c9:17:8f:a8:21:aa:97:6b:6b:fc:28:da:9a:18:66:a8:d1: 19:fc:27:54:64:bd:a5:53:e0:14:7b:dc:9b:a1:82:a1:b4:10: c3:2f:58:61:3e:88:bf:25:34:08:03:c2:52:a0:6b:fa:c2:43: 0a:45:00:ab:28:65:fd:95:25:c8:a8:50:5d:32:86:e2:81:7a: b5:e6:fe:26 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWE3R9bjDUANwCK8aKEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU0YzAxYmEtZDlhZC00NGU4LWI0OGMtMWE0OGYyMGQ4 YjdkMB4XDTI2MDUxMzEzMDAzMVoXDTI2MDgxMTEzMDAzMVowLzEtMCsGA1UEAxMk ODY3MGU2MWItNzU3Yi00MjU3LTgyYTEtNTg3Yjg0YWFlZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfZQyEpAnDSOCwcHJzsWHgBpg+KJXsRsuH6B FvWNgYRKnFEoNj2UKf5i1L+GMq++dev7Mg/oObXPY9JEbcjYM1RXeN+VK692wUqB vti+SfLMOte/PHYnAa0yap1TR+qGXHu1B80GKp860GFR37VTqfrlv1pRp2V1I0zo B8IanqB43YiuubwEmlMCxFrxFApNXUU1b0Dmz8seKoVIBPzrJobzADwgYbyUUru6 TLYEpTgWXwh5j69Bs1m6lcn5OBeMQbt05Klky9l2JebAEnpC2gNWyCf4pbYSnBin jpZd3Hq/d7JQu3N7FM/g85ukosS+wsH7or1YOLePAsn9f4HUoQIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFIhQiJwQK+MygiqqlR2qC4zRmcFXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRj MDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4ZjIwZDhiN2QvN2YzN2Q4MzgtN2ZmNi0z ZDFmLWFkYTktNjU5NjVmYzdhNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTU0YzAxYmEtZDlhZC00NGU4LWI0 OGMtMWE0OGYyMGQ4YjdkLzk1NGMwMWJhLWQ5YWQtNDRlOC1iNDhjLTFhNDhmMjBk OGI3ZC5jcmwwHwYDVR0jBBgwFoAUcqg9V4xmiDSMniuO8EO94nylkNwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRjMDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4 ZjIwZDhiN2QuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEQLqAAwQE QmbgAwQFQ8wAAwQDnikQMA0EAgACMAcDBQAmB4MAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD6a9d9S+N5V 3JqEqfnNnJZ9fem0wV/ODm8w5KZ6/+p1UNN6fqenYwmQC9tgIE48q0eN9CEfzsek hL+57tJOxxb/z1LpB0fuNlgZNYdTnBZ/Vz8lp3UO7WccO4rM0LErTTdjbWUITpfH AuquD8vBn4hasptPfcQxpoOeutsi6/28GgHa9e3U7AY/U+XNCi73F+ivxfBYbwM4 u+WmQKgsv0EoLiLiSERG+Qf4xXy1P3/lhofp2VDJF4+oIaqXa2v8KNqaGGao0Rn8 J1RkvaVT4BR73JuhgqG0EMMvWGE+iL8lNAgDwlKga/rCQwpFAKsoZf2VJcioUF0y huKBerXm/iY= -----END CERTIFICATE-----Generated at Thu May 28 13:41:16 2026 by rpki-client