$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/d75fdb09-5717-3050-9039-6e239be863f8.roa File: d75fdb09-5717-3050-9039-6e239be863f8.roa (raw, json) Hash identifier: pecFafIT8d1SE60oiHKmEZsvbQEyYS8+KhxtzNHbXkw= Subject key identifier: 60:81:22:9A:14:3A:B7:F3:E8:9D:2A:D5:14:3E:BA:D0:59:40:D3:35 Certificate issuer: /CN=aa6485a3-0dd1-4bb3-989b-ac000d54ce27 Certificate serial: 010D0C9F4328584D8D8FF3170A2027A508DEEF80 Authority key identifier: CC:F6:81:0C:AB:D6:74:C0:AC:B7:EB:4E:AB:C5:DE:D5:3A:EA:4C:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/d75fdb09-5717-3050-9039-6e239be863f8.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 36267 IP address blocks: 172.83.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/aa6485a3-0dd1-4bb3-989b-ac000d54ce27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/aa6485a3-0dd1-4bb3-989b-ac000d54ce27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:f3:17:0a:20:27:a5:08:de:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa6485a3-0dd1-4bb3-989b-ac000d54ce27 Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=1d31c127-29d4-49b8-b208-6f8367ab6a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:80:8e:cb:a6:b9:99:f9:86:56:de:8a:d6:ce: 43:62:29:e2:99:a0:63:af:2a:9b:dd:07:1e:e1:95: 45:48:4f:ba:d4:ee:1c:0f:c6:ce:0f:62:ee:9a:e2: 50:bd:67:34:1e:ee:87:df:12:85:ac:c7:9e:7b:c4: 67:88:3d:09:14:1c:6d:5a:55:1b:ce:06:89:de:10: 55:7f:91:84:c5:39:17:42:9b:10:5e:3a:22:dc:a5: 6a:90:fe:f3:d5:92:88:cd:bc:47:10:2d:01:5f:60: 63:50:47:9b:c4:26:16:b2:13:d4:41:9e:d4:cb:80: 36:7a:9e:fd:5e:4f:a1:0c:9e:32:61:cd:2d:4c:54: af:b4:37:e3:b3:60:7a:a0:d2:5f:3b:48:96:d0:42: ed:22:a4:c0:7c:23:0c:2e:92:91:70:5e:76:25:4c: 35:88:c0:87:5b:0d:fd:91:9f:28:2a:14:53:d6:d1: e1:45:86:bd:c0:4f:fe:02:32:ca:39:21:ca:40:48: db:73:17:77:db:8d:08:40:49:59:01:81:34:88:f9: 4e:42:cf:b8:ea:77:50:89:56:25:89:54:62:6f:24: bd:34:d0:e4:77:d8:88:f7:92:2b:e1:30:cd:ae:7b: 94:fb:20:73:be:0b:dd:28:55:fb:66:44:d4:0c:0b: 41:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:81:22:9A:14:3A:B7:F3:E8:9D:2A:D5:14:3E:BA:D0:59:40:D3:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/d75fdb09-5717-3050-9039-6e239be863f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/aa6485a3-0dd1-4bb3-989b-ac000d54ce27.crl X509v3 Authority Key Identifier: keyid:CC:F6:81:0C:AB:D6:74:C0:AC:B7:EB:4E:AB:C5:DE:D5:3A:EA:4C:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27.cer sbgp-ipAddrBlock: critical IPv4: 172.83.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:c8:cb:4d:5f:52:55:b2:49:4c:b1:d0:8c:0f:df:a4:70:68: fe:36:92:df:cf:21:d2:c2:cb:15:b4:6d:5d:d8:89:5d:a1:42: 23:6d:25:67:89:01:ff:b5:9f:56:35:f8:19:d5:db:61:9c:ca: 71:15:7c:71:80:de:fc:66:17:69:b3:33:68:96:0b:2f:40:63: 55:51:11:78:21:3f:63:ab:d9:e9:49:35:c6:a9:c3:99:99:ab: ca:4b:54:ae:bd:38:99:68:47:b6:4d:aa:81:a7:ea:64:23:1e: 2c:b8:94:c7:9d:1d:93:d5:61:b1:f9:fa:d8:12:e3:73:ea:8a: ab:9a:d7:df:6b:53:69:e0:9f:31:68:80:a0:a1:84:89:d0:a8: 12:d8:c5:8a:39:4e:85:86:40:12:68:32:7d:d6:4b:43:92:93: d0:a1:e8:a5:78:76:61:b9:d2:e3:b3:70:b7:b9:bb:51:71:c0: 80:59:ed:50:15:17:3c:18:ef:1e:d5:a6:e1:f0:d1:4d:d0:fc: b6:7a:4b:9a:6c:00:5a:07:1c:66:69:b1:49:a7:b5:b6:e3:c8: f1:71:ef:1f:2e:44:ce:54:46:cf:5e:47:33:7e:30:8b:9b:f0: 8e:bf:4c:a1:0b:fc:23:02:b3:93:1e:ce:bb:3a:8b:48:6d:5c: ee:24:6b:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj/MXCiAnpQje74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE2NDg1YTMtMGRkMS00YmIzLTk4OWItYWMwMDBkNTRj ZTI3MB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk MWQzMWMxMjctMjlkNC00OWI4LWIyMDgtNmY4MzY3YWI2YTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoCOy6a5mfmGVt6K1s5DYinimaBjryqb3Qce 4ZVFSE+61O4cD8bOD2LumuJQvWc0Hu6H3xKFrMeee8RniD0JFBxtWlUbzgaJ3hBV f5GExTkXQpsQXjoi3KVqkP7z1ZKIzbxHEC0BX2BjUEebxCYWshPUQZ7Uy4A2ep79 Xk+hDJ4yYc0tTFSvtDfjs2B6oNJfO0iW0ELtIqTAfCMMLpKRcF52JUw1iMCHWw39 kZ8oKhRT1tHhRYa9wE/+AjLKOSHKQEjbcxd3240IQElZAYE0iPlOQs+46ndQiVYl iVRibyS9NNDkd9iI95Ir4TDNrnuU+yBzvgvdKFX7ZkTUDAtBdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCBIpoUOrfz6J0q1RQ+utBZQNM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hYTY0 ODVhMy0wZGQxLTRiYjMtOTg5Yi1hYzAwMGQ1NGNlMjcvZDc1ZmRiMDktNTcxNy0z MDUwLTkwMzktNmUyMzliZTg2M2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWE2NDg1YTMtMGRkMS00YmIzLTk4 OWItYWMwMDBkNTRjZTI3L2FhNjQ4NWEzLTBkZDEtNGJiMy05ODliLWFjMDAwZDU0 Y2UyNy5jcmwwHwYDVR0jBBgwFoAUzPaBDKvWdMCst+tOq8Xe1TrqTFEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hYTY0ODVhMy0wZGQxLTRiYjMtOTg5Yi1hYzAw MGQ1NGNlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHIy01fUlWySUyx0IwP36RwaP42kt/PIdLCyxW0bV3YiV2hQiNtJWeJ Af+1n1Y1+BnV22GcynEVfHGA3vxmF2mzM2iWCy9AY1VREXghP2Or2elJNcapw5mZ q8pLVK69OJloR7ZNqoGn6mQjHiy4lMedHZPVYbH5+tgS43Pqiqua199rU2ngnzFo gKChhInQqBLYxYo5ToWGQBJoMn3WS0OSk9Ch6KV4dmG50uOzcLe5u1FxwIBZ7VAV FzwY7x7VpuHw0U3Q/LZ6S5psAFoHHGZpsUmntbbjyPFx7x8uRM5URs9eRzN+MIub 8I6/TKEL/CMCs5Mezrs6i0htXO4ka0Y= -----END CERTIFICATE-----Generated at Tue Apr 21 20:56:24 2026 by rpki-client