$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/d1b8ca2e-76eb-396e-9dac-766bc9180740.roa File: d1b8ca2e-76eb-396e-9dac-766bc9180740.roa (raw, json) Hash identifier: UAltl8KB+kPZ3K747HZF+gYMJvkYGeU7zcb4vQ3SWh0= Subject key identifier: A6:C8:52:3B:9E:3C:34:2B:6A:A6:3C:42:8D:CF:C6:95:AF:91:2F:AF Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584D0EA7CC6ED7B213325E9A0380 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/d1b8ca2e-76eb-396e-9dac-766bc9180740.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 396185 IP address blocks: 64.178.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:cc:6e:d7:b2:13:32:5e:9a:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=aae99a20-14f2-45e8-8a20-bff1e166440e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b0:7d:17:09:43:87:39:58:19:4d:f6:3a:92: 84:6a:82:31:f3:b6:17:6a:7a:52:55:5a:f3:86:d2: f0:b1:c6:61:73:4b:bf:cd:29:96:f9:e4:a0:68:1d: 79:cd:47:f2:2e:64:df:61:55:ef:f5:cf:83:37:6d: a7:a9:c0:cc:1a:70:99:a7:d2:21:7e:0c:b3:42:d0: 86:7e:21:0f:d2:0e:c7:5d:84:57:5b:87:6b:c8:9e: a9:7b:92:17:cf:d9:84:1c:8a:fc:a2:bd:96:0d:6f: 49:47:f2:59:d1:c5:90:31:05:67:35:e4:c7:2c:bb: 3c:f1:0f:f5:cb:2c:a9:22:40:44:e0:c0:cf:bf:90: 67:a1:0f:72:ef:6f:73:10:c7:a9:26:9a:4a:b7:a2: d4:fc:b2:6b:63:23:dd:44:1c:15:bb:0f:22:ab:7e: 70:a8:e6:ca:9f:45:30:38:36:02:07:c5:c9:b4:a3: b6:ef:63:d4:17:a6:cd:dd:97:21:89:5b:be:6b:90: ad:d5:b0:04:5b:d3:e5:35:ac:28:44:82:47:1c:01: 8c:cf:ff:cf:9c:ed:36:4d:bd:6d:4b:5d:a9:bd:32: d3:55:06:d5:31:8c:eb:73:0c:bf:d5:36:29:61:83: 1e:74:c3:d8:57:f0:15:84:39:5e:84:ae:8f:d9:11: 02:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C8:52:3B:9E:3C:34:2B:6A:A6:3C:42:8D:CF:C6:95:AF:91:2F:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/d1b8ca2e-76eb-396e-9dac-766bc9180740.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 64.178.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:22:f1:3a:79:59:48:ba:45:05:31:30:b9:6d:24:12:ce:89: 4a:e0:32:33:91:4d:eb:6d:50:88:d2:be:8d:92:cd:6c:21:90: 8e:d5:15:3d:89:73:52:cc:73:25:85:e5:45:9c:e1:1e:c3:2f: 19:49:a9:95:a9:c2:b6:c4:b5:a8:1b:dd:32:6d:15:d4:6f:5d: 15:a0:d2:27:39:7b:17:03:f8:ee:84:df:a5:ef:26:34:59:37: 8f:df:1e:29:e7:f5:39:3e:1c:7e:21:12:36:9e:2e:33:69:a7: 04:49:40:7f:c4:04:35:c1:33:19:92:0a:68:4f:fb:bc:59:89: 91:94:d0:ef:83:16:8f:d1:bd:fe:37:30:76:01:1d:a1:95:0d: 2e:61:30:74:83:00:d4:b6:8e:76:04:3e:35:04:c1:a3:9e:b6: 2c:17:24:a7:4c:01:f0:d9:98:0f:d0:84:c7:3e:b2:52:f1:2a: c9:d4:b5:06:fd:42:35:24:fd:da:2d:e2:59:4d:02:f5:9b:77: 59:41:c5:23:f9:d3:13:08:74:fc:9b:18:ba:c1:b7:55:60:1a: fb:06:ff:a3:6c:db:d5:13:15:75:98:85:57:6c:ee:19:87:74: 99:a8:20:cc:cc:9b:82:bf:83:bb:a7:73:79:11:6c:07:b1:34: 2a:31:c9:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op8xu17ITMl6aA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk YWFlOTlhMjAtMTRmMi00NWU4LThhMjAtYmZmMWUxNjY0NDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbB9FwlDhzlYGU32OpKEaoIx87YXanpSVVrz htLwscZhc0u/zSmW+eSgaB15zUfyLmTfYVXv9c+DN22nqcDMGnCZp9IhfgyzQtCG fiEP0g7HXYRXW4dryJ6pe5IXz9mEHIr8or2WDW9JR/JZ0cWQMQVnNeTHLLs88Q/1 yyypIkBE4MDPv5BnoQ9y729zEMepJppKt6LU/LJrYyPdRBwVuw8iq35wqObKn0Uw ODYCB8XJtKO272PUF6bN3ZchiVu+a5Ct1bAEW9PlNawoRIJHHAGMz//PnO02Tb1t S12pvTLTVQbVMYzrcwy/1TYpYYMedMPYV/AVhDlehK6P2RECQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbIUjuePDQraqY8Qo3PxpWvkS+vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvZDFiOGNhMmUtNzZlYi0z OTZlLTlkYWMtNzY2YmM5MTgwNzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLLlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoi8Tp5WUi6RQUxMLltJBLOiUrgMjORTettUIjSvo2SzWwhkI7VFT2J c1LMcyWF5UWc4R7DLxlJqZWpwrbEtagb3TJtFdRvXRWg0ic5excD+O6E36XvJjRZ N4/fHinn9Tk+HH4hEjaeLjNppwRJQH/EBDXBMxmSCmhP+7xZiZGU0O+DFo/Rvf43 MHYBHaGVDS5hMHSDANS2jnYEPjUEwaOetiwXJKdMAfDZmA/QhMc+slLxKsnUtQb9 QjUk/dot4llNAvWbd1lBxSP50xMIdPybGLrBt1VgGvsG/6Ns29UTFXWYhVds7hmH dJmoIMzMm4K/g7unc3kRbAexNCoxyeo= -----END CERTIFICATE-----Generated at Thu Mar 26 14:55:37 2026 by rpki-client