$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/bb120513-c816-385c-a3d5-45ae6fdc2108.roa File: bb120513-c816-385c-a3d5-45ae6fdc2108.roa (raw, json) Hash identifier: xch+AqW9gW102MmN0nQ3IWypmITLVdKsWjbM0M4k6zE= Subject key identifier: FE:53:63:AF:78:9D:5F:E7:4D:8F:B5:84:B3:55:94:89:C9:18:41:C4 Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F4328584D300A64E4CC56D7224DF5D080 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/bb120513-c816-385c-a3d5-45ae6fdc2108.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 33724 IP address blocks: 64.136.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:64:e4:cc:56:d7:22:4d:f5:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=cad3e82a-e926-4204-bf1a-df5e29d8689c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:95:f0:4b:d3:33:18:4d:8d:36:6d:3c:3f:18: 88:19:aa:06:c3:3f:08:98:af:45:b5:1a:3a:f7:f5: a4:f5:e3:11:27:cd:c1:52:26:13:1f:91:86:a2:f8: 1a:c5:14:73:5e:cb:93:49:ab:72:4f:fe:4b:a5:4e: d4:ed:49:00:24:9d:38:2c:06:c5:a2:3e:94:fa:8b: 0c:9f:a2:9b:00:d8:69:7a:6d:54:fc:19:90:2d:12: d4:92:51:1d:1c:f5:35:6c:e0:9d:c3:ba:92:f8:00: 61:37:4b:f0:61:bc:a5:5d:56:c8:6b:6b:dd:de:5d: c1:ab:99:58:c5:6e:4a:21:00:0b:4b:11:f4:c6:3c: 82:6e:0c:13:90:b0:df:1a:26:12:dc:ef:99:c2:fe: 6f:b3:b8:26:d7:b7:67:a7:8d:8a:a6:0d:e0:68:b5: 71:cd:ce:f4:78:3f:9f:88:ff:d1:6d:7d:b7:39:ad: 22:ed:6e:90:24:eb:57:73:99:48:65:83:7b:1a:49: 01:b7:0f:ac:e8:40:12:c4:95:55:fe:66:d9:33:db: 21:f3:23:9d:54:53:8e:43:52:e6:e0:48:96:dd:1d: ec:a4:b1:09:4d:e2:4a:8a:51:35:d4:21:c0:cc:26: 53:bb:70:7e:5d:16:48:84:3d:ea:62:72:a3:04:a7: ec:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:53:63:AF:78:9D:5F:E7:4D:8F:B5:84:B3:55:94:89:C9:18:41:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/bb120513-c816-385c-a3d5-45ae6fdc2108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 64.136.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:60:fe:ab:ed:c7:a2:70:e3:26:19:ac:f8:25:f0:d6:1d:8a: df:19:9b:d3:45:03:65:06:6c:6d:b1:6c:7b:0c:a2:5c:52:ec: fc:46:5a:0f:f9:c9:1b:15:69:ce:76:16:eb:c7:34:64:58:f0: 84:8d:fb:8a:47:e8:42:af:6b:b9:42:92:98:90:29:e2:2e:af: a9:7d:9a:d0:21:a4:84:45:27:7a:c2:cb:9a:7f:c3:3a:25:50: cd:1e:74:6e:88:db:59:cf:cf:6a:37:c0:36:1d:69:5b:09:e6: cd:b2:94:f7:3e:7f:86:09:67:eb:fa:22:b5:77:f3:ef:6c:b5: 79:8a:6f:43:d2:bb:90:c8:b9:73:f4:93:00:60:24:ab:65:14: 68:1f:a5:a5:61:ec:0e:80:60:ed:d0:69:6f:46:a3:67:bb:7c: e9:c1:0d:36:73:a8:7c:5d:cb:f2:3c:85:d4:7a:24:2d:0e:d5: f8:87:f4:e6:a9:f9:4e:39:c5:49:1e:10:b9:df:f6:30:ca:28: 8a:08:7c:e2:50:32:cd:35:ec:9b:fe:2f:e7:f9:31:db:e2:cb: da:6e:c0:3c:8f:d9:e5:2b:ed:18:1f:f7:2b:b5:be:22:84:71: a8:ff:90:b9:6d:a3:21:be:83:72:db:d5:4e:c2:ff:b9:02:db: 2e:21:11:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmTkzFbXIk310IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk Y2FkM2U4MmEtZTkyNi00MjA0LWJmMWEtZGY1ZTI5ZDg2ODljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65XwS9MzGE2NNm08PxiIGaoGwz8ImK9FtRo6 9/Wk9eMRJ83BUiYTH5GGovgaxRRzXsuTSatyT/5LpU7U7UkAJJ04LAbFoj6U+osM n6KbANhpem1U/BmQLRLUklEdHPU1bOCdw7qS+ABhN0vwYbylXVbIa2vd3l3Bq5lY xW5KIQALSxH0xjyCbgwTkLDfGiYS3O+Zwv5vs7gm17dnp42Kpg3gaLVxzc70eD+f iP/RbX23Oa0i7W6QJOtXc5lIZYN7GkkBtw+s6EASxJVV/mbZM9sh8yOdVFOOQ1Lm 4EiW3R3spLEJTeJKilE11CHAzCZTu3B+XRZIhD3qYnKjBKfswQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5TY694nV/nTY+1hLNVlInJGEHEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvYmIxMjA1MTMtYzgxNi0z ODVjLWEzZDUtNDVhZTZmZGMyMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQIhiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJg/qvtx6Jw4yYZrPgl8NYdit8Zm9NFA2UGbG2xbHsMolxS7PxGWg/5 yRsVac52FuvHNGRY8ISN+4pH6EKva7lCkpiQKeIur6l9mtAhpIRFJ3rCy5p/wzol UM0edG6I21nPz2o3wDYdaVsJ5s2ylPc+f4YJZ+v6IrV38+9stXmKb0PSu5DIuXP0 kwBgJKtlFGgfpaVh7A6AYO3QaW9Go2e7fOnBDTZzqHxdy/I8hdR6JC0O1fiH9Oap +U45xUkeELnf9jDKKIoIfOJQMs017Jv+L+f5Mdviy9puwDyP2eUr7Rgf9yu1viKE caj/kLltoyG+g3Lb1U7C/7kC2y4hET4= -----END CERTIFICATE-----Generated at Thu Mar 26 07:30:15 2026 by rpki-client