$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/efafb3e1-c5fc-3111-b4db-21000f90654c.roa File: efafb3e1-c5fc-3111-b4db-21000f90654c.roa (raw, json) Hash identifier: dv3oEqLoLVwOAxHG8b2+g8uvM+yXMX6GCfj/Ujyhxs4= Subject key identifier: 5F:76:82:7C:BD:50:25:90:55:E3:CA:B0:DC:BC:1E:73:CD:5B:1B:08 Certificate issuer: /CN=f2a1f149-bc0c-4f6c-9fb5-e656515d197b Certificate serial: 010D0C9F4328584DEB15FB258568CA55281D0210 Authority key identifier: 7F:BD:4B:2F:5C:42:44:6D:0C:C7:5A:3F:20:EC:C3:76:8C:F5:32:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/efafb3e1-c5fc-3111-b4db-21000f90654c.roa Signing time: Fri 22 May 2026 13:00:31 +0000 ROA not before: Fri 22 May 2026 13:00:31 +0000 ROA not after: Thu 20 Aug 2026 13:00:31 +0000 asID: 401834 IP address blocks: 64.89.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:eb:15:fb:25:85:68:ca:55:28:1d:02:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2a1f149-bc0c-4f6c-9fb5-e656515d197b Validity Not Before: May 22 13:00:31 2026 GMT Not After : Aug 20 13:00:31 2026 GMT Subject: CN=59bde283-178f-4082-9c41-0acc06f27117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:60:fe:b5:98:de:84:0a:3b:0e:a6:62:6e:2c: f1:54:04:46:47:58:b4:49:d0:07:6e:56:70:e5:05: 14:c9:eb:47:54:6a:65:13:02:71:92:44:1c:26:c7: bf:4b:bf:1f:08:09:1f:8a:d0:62:6e:e3:f3:bb:15: cc:2a:8e:aa:e0:e9:a5:a2:14:c2:a7:ec:e9:22:d0: bd:40:99:3d:24:c2:ea:b5:d9:ba:5f:a1:a4:97:a3: 0f:c5:d9:db:08:d6:9a:2f:9e:c7:3a:c5:80:3f:b5: 12:b2:55:f1:2a:85:db:0c:20:cf:b2:94:96:c4:26: c0:ab:c9:7e:12:d5:5c:31:91:ff:1e:1c:91:98:05: 4a:9e:38:8f:ac:73:c5:f8:c6:1f:0c:8c:ba:53:03: 40:0f:db:e3:18:7f:7c:c5:61:15:5b:e2:0c:c4:13: 7c:be:e1:22:8c:e4:cc:58:95:d4:9a:f6:ef:70:89: 51:87:4b:7d:70:22:a8:6f:08:ac:cc:87:17:b1:f9: d6:a6:38:27:c4:ea:48:1f:64:0a:b7:81:ba:93:2a: 90:da:99:f4:4f:4e:43:a2:6d:f3:80:54:60:6c:bb: 9b:cf:07:09:13:2f:e5:cc:92:25:9f:09:1a:c7:85: 2f:60:57:0d:cd:74:b7:18:b6:ed:20:d3:15:e2:ba: 1d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:76:82:7C:BD:50:25:90:55:E3:CA:B0:DC:BC:1E:73:CD:5B:1B:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/efafb3e1-c5fc-3111-b4db-21000f90654c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.crl X509v3 Authority Key Identifier: keyid:7F:BD:4B:2F:5C:42:44:6D:0C:C7:5A:3F:20:EC:C3:76:8C:F5:32:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.cer sbgp-ipAddrBlock: critical IPv4: 64.89.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:6b:c0:dd:26:12:65:cd:8d:89:fd:48:ff:09:60:2b:6b:f5: bb:b4:f4:6e:e0:d0:e0:c5:12:c8:57:63:8b:5e:77:fa:48:91: 58:75:b0:f2:dc:2a:e3:a0:31:72:d0:bd:40:7c:69:18:1d:29: 6b:54:88:bf:73:14:09:d1:24:c3:5c:bb:a0:4a:46:7f:54:24: 98:a4:13:a0:2b:75:ac:84:89:35:d8:91:1a:5c:44:f8:dd:70: 22:b4:a3:f9:b1:11:3a:65:cb:0f:e8:c0:f6:95:fe:5b:a3:10: a2:04:17:eb:cf:b8:5d:c5:ac:7b:1e:e0:a7:70:f5:77:d1:bb: e2:0b:d2:f0:f3:e7:92:cd:2a:8d:0a:11:d7:18:fb:26:33:30: fd:8c:74:72:49:1a:1f:5f:ed:11:e3:b8:1b:33:7a:ae:86:7b: 47:4e:18:ae:07:ea:0e:0c:74:74:82:c8:ae:2f:67:84:0b:3e: 26:9a:fe:a9:53:1b:98:3b:46:14:f2:00:5f:17:25:49:bd:b8: 3a:e6:34:c4:46:b3:dc:ac:c1:8a:81:f0:16:25:80:00:00:c1: f6:c3:60:ba:86:3f:9f:79:04:7a:e8:e3:c9:26:7a:ef:3c:7e: bd:00:2b:17:d2:42:e3:f9:b7:3d:22:c8:e7:7a:fc:e7:0d:0f: 57:7a:c0:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3rFfslhWjKVSgdAhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJhMWYxNDktYmMwYy00ZjZjLTlmYjUtZTY1NjUxNWQx OTdiMB4XDTI2MDUyMjEzMDAzMVoXDTI2MDgyMDEzMDAzMVowLzEtMCsGA1UEAxMk NTliZGUyODMtMTc4Zi00MDgyLTljNDEtMGFjYzA2ZjI3MTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGD+tZjehAo7DqZibizxVARGR1i0SdAHblZw 5QUUyetHVGplEwJxkkQcJse/S78fCAkfitBibuPzuxXMKo6q4OmlohTCp+zpItC9 QJk9JMLqtdm6X6Gkl6MPxdnbCNaaL57HOsWAP7USslXxKoXbDCDPspSWxCbAq8l+ EtVcMZH/HhyRmAVKnjiPrHPF+MYfDIy6UwNAD9vjGH98xWEVW+IMxBN8vuEijOTM WJXUmvbvcIlRh0t9cCKobwiszIcXsfnWpjgnxOpIH2QKt4G6kyqQ2pn0T05Dom3z gFRgbLubzwcJEy/lzJIlnwkax4UvYFcNzXS3GLbtINMV4rod0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF92gny9UCWQVePKsNy8HnPNWxsIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mMmEx ZjE0OS1iYzBjLTRmNmMtOWZiNS1lNjU2NTE1ZDE5N2IvZWZhZmIzZTEtYzVmYy0z MTExLWI0ZGItMjEwMDBmOTA2NTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZjJhMWYxNDktYmMwYy00ZjZjLTlm YjUtZTY1NjUxNWQxOTdiL2YyYTFmMTQ5LWJjMGMtNGY2Yy05ZmI1LWU2NTY1MTVk MTk3Yi5jcmwwHwYDVR0jBBgwFoAUf71LL1xCRG0Mx1o/IOzDdoz1MtowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mMmExZjE0OS1iYzBjLTRmNmMtOWZiNS1lNjU2 NTE1ZDE5N2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQFmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBrwN0mEmXNjYn9SP8JYCtr9bu09G7g0ODFEshXY4ted/pIkVh1sPLc KuOgMXLQvUB8aRgdKWtUiL9zFAnRJMNcu6BKRn9UJJikE6ArdayEiTXYkRpcRPjd cCK0o/mxETplyw/owPaV/lujEKIEF+vPuF3FrHse4Kdw9XfRu+IL0vDz55LNKo0K EdcY+yYzMP2MdHJJGh9f7RHjuBszeq6Ge0dOGK4H6g4MdHSCyK4vZ4QLPiaa/qlT G5g7RhTyAF8XJUm9uDrmNMRGs9yswYqB8BYlgAAAwfbDYLqGP595BHro48kmeu88 fr0AKxfSQuP5tz0iyOd6/OcND1d6wOo= -----END CERTIFICATE-----Generated at Wed Jun 10 03:36:42 2026 by rpki-client