$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa File: 503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa (raw, json) Hash identifier: eF1C9cBowpExpW6KfVvhaI4w9rozp2yvaVUwk8O4mls= Subject key identifier: 15:77:29:3F:A2:05:DE:E8:61:DF:78:B4:47:63:20:3A:30:C9:DE:9D Certificate issuer: /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Certificate serial: 010D0C9F4328584DDE85C947656E92FF766CD080 Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 14618 IP address blocks: 208.64.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:85:c9:47:65:6e:92:ff:76:6c:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=da240e04-cdaa-4071-95e6-472e6254042b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a4:6c:e3:d6:4e:69:2f:05:dc:a8:94:28:19: 2e:23:4f:dd:97:2f:21:1c:b1:e8:de:6c:fd:b0:5d: 9c:51:97:af:e5:8f:01:50:9e:89:5e:45:8b:63:67: 70:d9:56:40:4c:ff:ba:47:1d:c9:20:69:92:6e:6b: 32:b9:8b:73:2b:16:7e:e9:93:f2:aa:13:b0:09:81: e5:9d:2d:63:fa:07:04:ba:ce:0b:19:ec:0d:30:0a: 54:bc:5d:17:04:d1:05:db:b6:10:c1:15:e7:e7:2c: c7:14:fd:f3:9b:9c:d9:26:96:9f:e5:38:65:ad:73: a7:37:1a:9c:4e:39:c8:e0:31:22:7c:71:dc:6e:dc: 30:19:09:a6:7c:95:42:59:e9:b4:79:04:94:5f:85: d5:fc:74:5d:73:1b:5e:3a:d8:e6:2a:82:d0:eb:06: 45:b8:63:53:46:22:e1:79:19:0d:57:34:c0:ed:68: f2:a3:de:58:78:89:3f:7d:84:76:dd:71:07:05:fe: e1:1a:2a:36:83:5b:1d:06:11:88:f0:8e:64:df:f0: f4:2f:e8:bf:5d:25:3e:ab:84:b2:4f:d6:c8:fe:b1: f6:b9:7b:14:64:e8:21:75:6e:08:b5:ca:b2:4c:5d: a2:38:b3:12:f9:83:f2:b8:4d:e4:d8:10:fd:b6:0d: d3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:77:29:3F:A2:05:DE:E8:61:DF:78:B4:47:63:20:3A:30:C9:DE:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl X509v3 Authority Key Identifier: keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer sbgp-ipAddrBlock: critical IPv4: 208.64.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:fd:dc:5a:11:31:f4:34:25:f7:6f:64:a6:93:de:6c:5f:3a: fd:cb:b6:79:8d:e3:a5:f2:93:52:53:a3:43:87:a2:43:27:51: 0e:82:07:2a:52:11:45:8a:05:e5:16:28:89:3d:05:cd:9b:8b: 2d:0d:a4:03:7f:db:21:c5:16:b3:38:0d:d6:c6:de:68:2d:48: 70:3e:ba:7b:da:e5:ff:41:c4:4a:d7:b5:76:66:11:38:23:46: 1c:7c:9b:d9:5d:08:e3:6d:d0:04:dd:5d:28:f5:13:bd:ad:ff: 35:49:cc:71:74:54:39:ee:82:d5:a0:ba:34:69:51:1b:4e:e4: 65:a8:cc:87:f4:92:a7:ef:37:d1:ef:c0:45:b6:bd:f8:59:a6: b4:75:be:63:98:bb:54:96:7d:48:5e:d9:97:1b:f8:65:4c:17: f2:e3:c1:01:bf:6c:0c:95:01:57:26:7c:86:70:44:a1:6f:0c: 9f:e3:be:2b:f1:76:0d:96:ef:71:9b:8e:26:fe:ae:57:75:30: 9f:d3:7c:0c:4c:09:2b:65:84:c2:b3:86:4e:5c:73:e5:52:21: ac:3a:fa:a0:36:ef:5f:47:76:a9:5b:96:14:3c:e9:91:b3:50: 5c:cc:e5:d9:19:a3:a8:64:c4:af:83:01:91:66:d4:16:59:c1: 76:86:58:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3ehclHZW6S/3Zs0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2MwYjMtMzgzYS00MzhjLWFhNDUtMWU1ZGYwZDBl MDYxMB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk ZGEyNDBlMDQtY2RhYS00MDcxLTk1ZTYtNDcyZTYyNTQwNDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqRs49ZOaS8F3KiUKBkuI0/dly8hHLHo3mz9 sF2cUZev5Y8BUJ6JXkWLY2dw2VZATP+6Rx3JIGmSbmsyuYtzKxZ+6ZPyqhOwCYHl nS1j+gcEus4LGewNMApUvF0XBNEF27YQwRXn5yzHFP3zm5zZJpaf5ThlrXOnNxqc TjnI4DEifHHcbtwwGQmmfJVCWem0eQSUX4XV/HRdcxteOtjmKoLQ6wZFuGNTRiLh eRkNVzTA7Wjyo95YeIk/fYR23XEHBf7hGio2g1sdBhGI8I5k3/D0L+i/XSU+q4Sy T9bI/rH2uXsUZOghdW4ItcqyTF2iOLMS+YPyuE3k2BD9tg3TywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBV3KT+iBd7oYd94tEdjIDowyd6dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3 YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVkZjBkMGUwNjEvNTAzZTNhZWEtN2ZmNy0z ZTM3LTk2MTEtMmZhNjVlZTBkNmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGU4N2MwYjMtMzgzYS00MzhjLWFh NDUtMWU1ZGYwZDBlMDYxLzRlODdjMGIzLTM4M2EtNDM4Yy1hYTQ1LTFlNWRmMGQw ZTA2MS5jcmwwHwYDVR0jBBgwFoAUIbRtv8sZKo0pVPBrIIKDwhIbf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVk ZjBkMGUwNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID93FoRMfQ0JfdvZKaT3mxfOv3LtnmN46Xyk1JTo0OHokMnUQ6CBypS EUWKBeUWKIk9Bc2biy0NpAN/2yHFFrM4DdbG3mgtSHA+unva5f9BxErXtXZmETgj Rhx8m9ldCONt0ATdXSj1E72t/zVJzHF0VDnugtWgujRpURtO5GWozIf0kqfvN9Hv wEW2vfhZprR1vmOYu1SWfUhe2Zcb+GVMF/LjwQG/bAyVAVcmfIZwRKFvDJ/jvivx dg2W73Gbjib+rld1MJ/TfAxMCStlhMKzhk5cc+VSIaw6+qA2719HdqlblhQ86ZGz UFzM5dkZo6hkxK+DAZFm1BZZwXaGWDs= -----END CERTIFICATE-----Generated at Thu May 21 19:34:15 2026 by rpki-client