$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/c975af3b-1769-381f-b596-ba7b61e7fce8.roa File: c975af3b-1769-381f-b596-ba7b61e7fce8.roa (raw, json) Hash identifier: nQl7NVs0ZuWZiUb2RVZ4HHrKJg5w+PgYsVMigo4jhJU= Subject key identifier: 84:C2:8F:DF:07:E2:73:EC:19:6C:7B:4A:D4:13:E8:44:7D:D0:54:E0 Certificate issuer: /CN=2cd4f52f-4053-45db-b8e0-a7e0e3b85fba Certificate serial: 010D0C9F4328584D15A25C489E8CD20A4CE05FE0 Authority key identifier: 92:7E:C7:37:59:2A:7C:4B:35:5D:FB:0F:F7:B8:D6:4E:7F:9D:CD:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/c975af3b-1769-381f-b596-ba7b61e7fce8.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 20257 IP address blocks: 69.80.80.0/20 maxlen: 24 74.222.96.0/20 maxlen: 24 74.222.112.0/20 maxlen: 24 158.115.160.0/19 maxlen: 24 173.233.112.0/20 maxlen: 24 216.218.64.0/18 maxlen: 24 2605:4cc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:5c:48:9e:8c:d2:0a:4c:e0:5f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cd4f52f-4053-45db-b8e0-a7e0e3b85fba Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=5981d804-99b5-4ca5-9c9b-88539512674d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b3:2f:f5:78:c1:dd:80:3d:db:4c:7e:5d:3d: f2:a9:80:21:3d:1c:97:db:5b:02:14:33:4e:09:74: 78:04:95:0e:e2:31:8a:4d:de:6c:23:76:d9:91:e0: 8b:84:d0:13:c6:32:17:96:75:0c:3e:b1:2d:c9:f6: 94:1e:5b:0c:a2:9d:cf:0e:5c:45:5a:08:c9:6f:1b: c1:c7:cc:9c:25:4f:cd:85:45:42:0c:3c:f1:de:ea: 6d:3c:c9:72:a9:3d:3c:f2:99:24:f8:8b:f0:8c:28: d3:ec:04:7c:f9:18:2b:da:9a:87:bf:39:4d:ab:e1: 0c:25:fd:6c:e4:d0:f7:88:a8:5d:84:dc:f5:1d:eb: 2a:d6:7d:f2:4f:d0:b9:4b:aa:11:0a:9e:39:eb:86: de:84:d9:41:64:17:85:85:05:b1:36:ce:39:6d:63: 86:fc:16:bb:f4:85:c4:22:2d:c5:66:d1:c9:71:03: dc:ef:a4:b7:06:91:bf:cf:38:f0:03:9b:c2:ae:3d: 19:20:eb:9d:68:8f:62:12:8a:b0:33:f9:e5:31:af: ed:c0:f9:5f:2e:57:df:ac:fb:5b:7f:5b:35:49:34: 57:83:db:2a:27:b8:93:78:4c:7e:03:3b:3d:59:ba: 5b:42:63:31:50:72:61:e2:b7:9b:30:10:d0:b2:0f: dc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C2:8F:DF:07:E2:73:EC:19:6C:7B:4A:D4:13:E8:44:7D:D0:54:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/c975af3b-1769-381f-b596-ba7b61e7fce8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.crl X509v3 Authority Key Identifier: keyid:92:7E:C7:37:59:2A:7C:4B:35:5D:FB:0F:F7:B8:D6:4E:7F:9D:CD:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.cer sbgp-ipAddrBlock: critical IPv4: 69.80.80.0/20 74.222.96.0/19 158.115.160.0/19 173.233.112.0/20 216.218.64.0/18 IPv6: 2605:4cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:62:47:ba:c5:19:38:67:75:ea:a4:bb:f7:f5:f4:00:5f:e9: ba:85:e3:ad:21:7d:a5:31:24:3a:ea:b5:d2:fb:d6:e4:aa:0a: 25:b2:b7:03:35:49:fb:5e:7c:b2:c4:c3:8c:b1:4b:d9:a8:d7: 66:7f:04:d0:9f:16:db:89:a5:b8:9c:98:e2:6d:a7:e5:e0:ca: 05:7f:e2:8a:62:5b:d7:c6:73:67:0a:13:ac:1c:a1:e1:2f:02: e2:83:62:71:6c:16:4d:ab:6f:00:3c:09:ed:45:37:6a:2a:b4: bc:cc:f4:e0:a9:5a:1f:1c:f9:f2:9f:df:69:06:fc:32:e7:7d: 68:ae:5d:67:84:28:bc:31:95:56:69:86:aa:17:b4:c3:4c:41: ad:e0:37:be:03:e3:44:fa:08:c9:2a:79:77:34:f2:4a:e6:66: f6:5d:b8:ef:36:a3:8b:7c:d8:1c:4a:f2:21:33:ad:ef:87:20: a7:0c:72:68:da:d9:48:ee:3d:28:3f:1e:ae:4b:57:4f:dd:3a: 6d:3d:06:c4:22:1b:a4:9a:b8:b3:1d:d6:10:95:54:dd:8d:c4: f7:5c:78:0f:e6:98:b5:6b:d1:b4:e4:c8:22:42:ed:07:f6:ab: 63:54:1e:27:08:d2:cd:aa:aa:56:3d:0e:21:d8:de:e3:e4:92: 1b:45:cf:e6 -----BEGIN CERTIFICATE----- MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWE0VolxInozSCkzgX+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNkNGY1MmYtNDA1My00NWRiLWI4ZTAtYTdlMGUzYjg1 ZmJhMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk NTk4MWQ4MDQtOTliNS00Y2E1LTljOWItODg1Mzk1MTI2NzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirMv9XjB3YA920x+XT3yqYAhPRyX21sCFDNO CXR4BJUO4jGKTd5sI3bZkeCLhNATxjIXlnUMPrEtyfaUHlsMop3PDlxFWgjJbxvB x8ycJU/NhUVCDDzx3uptPMlyqT088pkk+IvwjCjT7AR8+Rgr2pqHvzlNq+EMJf1s 5ND3iKhdhNz1Hesq1n3yT9C5S6oRCp4564behNlBZBeFhQWxNs45bWOG/Ba79IXE Ii3FZtHJcQPc76S3BpG/zzjwA5vCrj0ZIOudaI9iEoqwM/nlMa/twPlfLlffrPtb f1s1STRXg9sqJ7iTeEx+Azs9WbpbQmMxUHJh4rebMBDQsg/c3wIDAQABo4IDfDCC A3gwHQYDVR0OBBYEFITCj98H4nPsGWx7StQT6ER90FTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yY2Q0 ZjUyZi00MDUzLTQ1ZGItYjhlMC1hN2UwZTNiODVmYmEvYzk3NWFmM2ItMTc2OS0z ODFmLWI1OTYtYmE3YjYxZTdmY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmNkNGY1MmYtNDA1My00NWRiLWI4 ZTAtYTdlMGUzYjg1ZmJhLzJjZDRmNTJmLTQwNTMtNDVkYi1iOGUwLWE3ZTBlM2I4 NWZiYS5jcmwwHwYDVR0jBBgwFoAUkn7HN1kqfEs1XfsP97jWTn+dzfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yY2Q0ZjUyZi00MDUzLTQ1ZGItYjhlMC1hN2Uw ZTNiODVmYmEuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQERVBQAwQF St5gAwQFnnOgAwQErelwAwQG2NpAMA0EAgACMAcDBQAmBUzAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAApi R7rFGThndeqku/f19ABf6bqF460hfaUxJDrqtdL71uSqCiWytwM1SftefLLEw4yx S9mo12Z/BNCfFtuJpbicmOJtp+XgygV/4opiW9fGc2cKE6wcoeEvAuKDYnFsFk2r bwA8Ce1FN2oqtLzM9OCpWh8c+fKf32kG/DLnfWiuXWeEKLwxlVZphqoXtMNMQa3g N74D40T6CMkqeXc08krmZvZduO82o4t82BxK8iEzre+HIKcMcmja2UjuPSg/Hq5L V0/dOm09BsQiG6SauLMd1hCVVN2NxPdceA/mmLVr0bTkyCJC7Qf2q2NUHicI0s2q qlY9DiHY3uPkkhtFz+Y= -----END CERTIFICATE-----Generated at Thu Mar 12 13:52:12 2026 by rpki-client