$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/dec8ab73-0262-34e2-a529-54abcb563e1f.roa File: dec8ab73-0262-34e2-a529-54abcb563e1f.roa (raw, json) Hash identifier: bhHzjbGzVpVgfmhdsbi0CkQFSuiWkaVlozxBJlx9AUA= Subject key identifier: 06:70:09:DC:2F:76:3F:45:C7:29:20:06:15:C3:64:93:18:21:0B:F1 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584D40CA5BA9890B965E442CEB80 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/dec8ab73-0262-34e2-a529-54abcb563e1f.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 18607 IP address blocks: 64.145.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:5b:a9:89:0b:96:5e:44:2c:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=40e75e17-77bf-4e53-b39e-300dcaae0c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:53:c1:b9:cc:00:c7:1a:21:1d:43:12:af:f9: 77:53:8a:9e:c6:67:4c:11:9c:63:fe:06:61:f7:33: 7b:02:49:a3:7e:a9:fa:6c:9c:fb:c7:b5:67:f2:13: 9b:32:41:0f:ef:3e:ca:04:e5:5c:07:1a:51:82:4f: 42:81:51:a2:84:6b:90:65:ed:2e:9c:9f:91:ab:be: 45:3f:21:d5:51:12:c3:44:71:f1:02:69:c2:e3:72: 0c:da:39:c7:43:a3:52:18:88:05:cc:49:d1:78:9c: 68:c1:a0:ff:44:7e:fb:20:70:bd:74:c3:f1:72:6a: 9e:d0:77:98:2f:3b:48:fc:57:74:10:bd:3e:4c:8b: 49:29:64:e8:9d:8e:f1:60:c3:c7:a8:3c:8f:53:0b: 15:4c:3a:b1:a0:b6:25:50:93:82:1d:64:ce:44:16: 3e:77:06:7e:99:46:32:a6:6e:69:24:fb:22:5e:7e: 18:8f:78:98:cb:a1:0e:7f:be:19:0f:fe:a8:1c:42: 34:96:e5:97:82:d3:a7:0a:4b:6b:79:e3:26:7f:34: 60:e0:22:2d:33:a1:2c:f5:5e:e7:84:60:cd:0e:bb: 1a:ce:3c:fb:3f:2d:a3:2f:2f:d6:54:44:9a:04:e1: 83:9a:e5:0d:a6:09:28:94:05:1b:e6:b6:df:b6:f6: fe:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:70:09:DC:2F:76:3F:45:C7:29:20:06:15:C3:64:93:18:21:0B:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/dec8ab73-0262-34e2-a529-54abcb563e1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 64.145.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:7e:71:bf:60:70:4d:81:39:5e:62:c6:3f:05:e7:c6:0b:38: 30:06:01:37:a7:ae:42:e2:65:29:28:b5:45:48:38:47:12:38: 65:5c:f0:d4:84:23:6b:8c:c0:bb:60:d9:08:4f:01:d0:75:3e: c1:ee:8d:90:36:0c:e2:9b:25:0c:fc:2a:87:0d:c1:01:48:24: 91:fc:82:9a:4a:99:3b:7b:22:4b:da:d5:9e:bc:ed:d7:95:33: 5d:fe:0f:99:03:1a:1d:ce:f1:4b:a1:b2:ef:77:93:a1:7c:2e: 31:e7:19:11:e5:a4:04:58:ec:45:94:2b:7c:ef:a0:aa:4c:1e: 6e:ba:2c:67:50:19:3a:5e:ed:eb:5b:c8:fb:e9:f5:34:67:b9: fd:ed:27:fa:d1:27:57:99:c2:d9:b6:62:4c:43:88:d8:5b:c1: f7:a6:12:4a:78:3a:06:07:bc:55:28:de:92:b4:9d:a3:24:7a: db:59:c8:7b:d7:ed:40:c2:58:e1:b0:61:8d:49:6e:9b:c4:00: 80:c7:58:e1:38:7b:5a:73:1e:a3:90:d0:79:fb:2f:3d:0a:e6: 31:76:d5:a4:1d:21:85:cf:8e:4a:50:73:89:63:e4:74:ee:45: 4c:70:1c:40:32:35:93:3d:bb:dd:ce:e3:3f:b1:1f:76:f6:13: d0:cb:3e:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AylupiQuWXkQs64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NDBlNzVlMTctNzdiZi00ZTUzLWIzOWUtMzAwZGNhYWUwYzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlPBucwAxxohHUMSr/l3U4qexmdMEZxj/gZh 9zN7Akmjfqn6bJz7x7Vn8hObMkEP7z7KBOVcBxpRgk9CgVGihGuQZe0unJ+Rq75F PyHVURLDRHHxAmnC43IM2jnHQ6NSGIgFzEnReJxowaD/RH77IHC9dMPxcmqe0HeY LztI/Fd0EL0+TItJKWTonY7xYMPHqDyPUwsVTDqxoLYlUJOCHWTORBY+dwZ+mUYy pm5pJPsiXn4Yj3iYy6EOf74ZD/6oHEI0luWXgtOnCktreeMmfzRg4CItM6Es9V7n hGDNDrsazjz7Py2jLy/WVESaBOGDmuUNpgkolAUb5rbftvb+SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZwCdwvdj9FxykgBhXDZJMYIQvxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvZGVjOGFiNzMtMDI2Mi0z NGUyLWE1MjktNTRhYmNiNTYzZTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJFJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZ+cb9gcE2BOV5ixj8F58YLODAGATenrkLiZSkotUVIOEcSOGVc8NSE I2uMwLtg2QhPAdB1PsHujZA2DOKbJQz8KocNwQFIJJH8gppKmTt7Ikva1Z687deV M13+D5kDGh3O8Uuhsu93k6F8LjHnGRHlpARY7EWUK3zvoKpMHm66LGdQGTpe7etb yPvp9TRnuf3tJ/rRJ1eZwtm2YkxDiNhbwfemEkp4OgYHvFUo3pK0naMkettZyHvX 7UDCWOGwYY1JbpvEAIDHWOE4e1pzHqOQ0Hn7Lz0K5jF21aQdIYXPjkpQc4lj5HTu RUxwHEAyNZM9u93O4z+xH3b2E9DLPqo= -----END CERTIFICATE-----Generated at Thu Mar 26 16:32:08 2026 by rpki-client