$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/640938b3-682f-3b9f-b3c1-443bc6a0606f.roa File: 640938b3-682f-3b9f-b3c1-443bc6a0606f.roa (raw, json) Hash identifier: A4fh6tRyi7L0N+OGEnEjDDcplmgMHrKSHi6lP0ty4f4= Subject key identifier: 0F:62:A9:65:86:22:98:55:8C:E2:31:6C:99:DF:ED:D3:39:E9:B4:CA Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584DA11ABD6E68A2D38D73F89F00 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/640938b3-682f-3b9f-b3c1-443bc6a0606f.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 63062 IP address blocks: 67.143.106.0/24 maxlen: 24 72.169.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:bd:6e:68:a2:d3:8d:73:f8:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=e68b9a5f-ab0c-4611-aec4-8c79a2c1932e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:df:91:d0:ae:7d:20:af:e4:2d:ad:3b:29:3d: 06:2e:26:6f:b9:7a:dc:ca:6e:7e:c7:9f:9b:8d:2b: 14:95:bb:b0:b8:4b:7b:83:40:92:62:c8:28:e1:1d: b3:88:e1:76:97:3b:d6:5b:ba:c6:2d:47:66:fd:45: aa:27:06:7b:52:28:85:3e:7f:e1:37:9a:04:11:44: 38:00:2e:29:66:8e:b8:10:32:5e:d1:71:d0:09:52: 88:9d:a7:e5:bc:39:a7:b9:f1:74:96:db:7a:fd:60: 09:49:15:95:29:36:d5:44:35:47:36:f5:ca:3a:72: 0d:eb:a2:97:be:cc:8e:5d:f0:f3:ff:97:9d:1c:d3: ce:5c:4a:ce:0c:a3:39:eb:50:a0:2d:0b:cf:0a:e3: e9:34:02:7b:85:4a:32:0c:52:71:b1:a6:e6:a3:78: 7b:c0:ab:41:4d:c4:6f:c4:38:17:7e:6e:ec:68:ba: d0:39:9d:4b:a8:74:d0:e1:7c:d6:b0:b7:f5:ea:41: 07:22:35:49:3f:39:0d:33:b8:74:29:37:a0:6b:35: 08:98:50:fe:c0:f1:9b:eb:6b:1d:a6:91:1f:22:f5: ea:e0:72:5e:52:c4:0f:f4:f1:5b:db:75:b0:91:7c: a9:d7:79:a1:b5:2d:d5:e1:63:35:4b:7d:5d:c4:1f: 4d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:62:A9:65:86:22:98:55:8C:E2:31:6C:99:DF:ED:D3:39:E9:B4:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/640938b3-682f-3b9f-b3c1-443bc6a0606f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.143.106.0/24 72.169.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:87:14:ac:ec:eb:19:c1:cf:11:48:7c:83:15:04:a3:95:8f: 20:2e:a5:b0:31:f5:06:18:34:a1:64:08:4a:ea:6a:ec:0d:5f: d6:83:9c:fe:f1:f4:36:14:74:e5:66:b1:c9:af:7e:9e:6c:c3: 9c:fc:49:4a:fd:0a:9b:91:1b:9c:ce:a2:6f:d2:b2:4c:25:bb: 16:60:d5:fb:dc:ef:00:14:73:17:d3:c5:af:ef:9b:31:67:d2: 43:16:de:07:ca:52:69:32:6f:39:9d:6e:26:6c:74:a4:6d:37: c1:21:ab:05:bb:f9:9b:4e:46:49:79:6e:9c:7f:46:3f:ea:d7: cc:ba:d1:43:c2:ea:b5:8d:4f:d8:ee:d1:1f:88:95:81:2d:d1: 59:34:41:09:52:43:ec:16:ab:c1:56:d9:61:2c:32:67:a8:b9: bf:4d:00:0d:36:af:29:a5:b6:de:bc:82:57:33:b4:5e:91:e9: b9:b6:bc:0c:69:08:73:74:b6:75:44:f0:06:95:c5:e0:fb:ca: 4c:c8:4f:f8:29:67:e5:0f:63:92:18:d6:c4:df:7c:4e:45:40: d3:4f:bb:3e:95:2c:9c:bc:02:85:19:cf:88:a8:2b:5c:65:10: d5:5b:ea:99:e3:82:da:77:ab:59:8f:65:40:f4:70:73:3b:9b: 6c:6f:e5:88 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2hGr1uaKLTjXP4nwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk ZTY4YjlhNWYtYWIwYy00NjExLWFlYzQtOGM3OWEyYzE5MzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9+R0K59IK/kLa07KT0GLiZvuXrcym5+x5+b jSsUlbuwuEt7g0CSYsgo4R2ziOF2lzvWW7rGLUdm/UWqJwZ7UiiFPn/hN5oEEUQ4 AC4pZo64EDJe0XHQCVKInaflvDmnufF0ltt6/WAJSRWVKTbVRDVHNvXKOnIN66KX vsyOXfDz/5edHNPOXErODKM561CgLQvPCuPpNAJ7hUoyDFJxsabmo3h7wKtBTcRv xDgXfm7saLrQOZ1LqHTQ4XzWsLf16kEHIjVJPzkNM7h0KTegazUImFD+wPGb62sd ppEfIvXq4HJeUsQP9PFb23WwkXyp13mhtS3V4WM1S31dxB9NswIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFA9iqWWGIphVjOIxbJnf7dM56bTKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvNjQwOTM4YjMtNjgyZi0z YjlmLWIzYzEtNDQzYmM2YTA2MDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQ49qAwQA SKnJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJOHFKzs6xnBzxFIfIMVBKOVjyAupbAx9QYYNKFkCErqauwN X9aDnP7x9DYUdOVmscmvfp5sw5z8SUr9CpuRG5zOom/SskwluxZg1fvc7wAUcxfT xa/vmzFn0kMW3gfKUmkybzmdbiZsdKRtN8EhqwW7+ZtORkl5bpx/Rj/q18y60UPC 6rWNT9ju0R+IlYEt0Vk0QQlSQ+wWq8FW2WEsMmeoub9NAA02rymltt68glcztF6R 6bm2vAxpCHN0tnVE8AaVxeD7ykzIT/gpZ+UPY5IY1sTffE5FQNNPuz6VLJy8AoUZ z4ioK1xlENVb6pnjgtp3q1mPZUD0cHM7m2xv5Yg= -----END CERTIFICATE-----Generated at Wed May 13 15:19:50 2026 by rpki-client