$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/084d4dea-cd13-3639-9624-25ca1857c204.roa File: 084d4dea-cd13-3639-9624-25ca1857c204.roa (raw, json) Hash identifier: 9/nQK6eLiZnjcL0EqA+2ts/SoDyRv+8ZMYMPtg6SNCE= Subject key identifier: 70:FE:06:C7:5B:D8:0A:B0:FA:3C:3F:78:75:98:55:7B:1E:B9:14:90 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584DAC456C6112046491E33F7680 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/084d4dea-cd13-3639-9624-25ca1857c204.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 13414 IP address blocks: 64.63.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:6c:61:12:04:64:91:e3:3f:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=29a8c237-7c63-4a83-815f-0ab509c8d4a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3b:fa:ad:86:0a:60:bf:91:11:33:3a:71:67: 63:71:d8:0b:89:14:09:6d:44:88:c2:05:87:36:8a: 7b:c6:1a:c0:13:75:2d:14:55:36:22:3b:c2:f5:e2: 55:fc:e5:e6:18:8a:54:6f:72:6c:3d:7b:ad:91:a3: 2b:ea:f8:a3:01:64:93:47:6d:d2:24:ab:34:56:11: 78:44:f4:f3:fb:69:9c:76:05:c3:6e:19:57:40:1e: c2:93:ec:0b:e4:bb:ea:c4:69:a4:86:20:dd:09:82: 82:32:8d:de:1c:bc:65:ae:d0:a5:61:ea:b0:a7:5f: d2:03:e7:9e:fa:7c:c4:99:48:d9:c0:55:6d:4b:9a: 8b:15:56:bd:4d:bd:91:92:7a:d0:53:d6:56:6e:c3: a0:f1:ef:8d:06:40:2b:12:a1:19:b7:e4:ca:f1:a0: c6:9a:ee:e0:a2:31:c9:85:ab:cd:34:40:41:9c:fa: 6a:c8:36:6c:b3:2b:b6:a3:74:09:93:14:ec:14:41: b8:60:bf:50:32:9d:06:1f:85:8d:4d:2a:fc:23:88: 89:4a:0f:00:16:02:38:69:81:d0:04:1c:60:e2:bc: c5:ee:77:3e:40:a8:ec:dd:63:16:5e:a4:dd:cc:6e: c4:0b:f1:b6:6a:9b:45:b8:19:c6:ee:f4:f0:1f:4c: 0c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FE:06:C7:5B:D8:0A:B0:FA:3C:3F:78:75:98:55:7B:1E:B9:14:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/084d4dea-cd13-3639-9624-25ca1857c204.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d7:4c:c8:ee:9e:cf:e6:c7:6b:a7:a4:23:df:2a:29:8f:c9: 8c:7c:d1:b2:be:d9:73:c4:13:86:55:ec:09:ea:2b:6f:50:c8: f2:d1:50:d6:94:32:0d:7b:a6:4d:0a:c0:9b:ca:af:ad:c1:b1: c4:26:e0:0f:05:57:48:26:9f:e4:ba:c1:12:d6:e0:45:2f:48: 38:47:2a:4f:08:fd:6f:ae:a6:e2:43:79:42:b7:b0:57:1a:89: 35:93:4e:59:38:72:ec:ba:94:c8:c3:02:65:4b:38:2d:38:14: 53:65:16:65:d3:b0:66:67:2c:7b:9c:6f:81:11:c4:6f:7d:30: 2a:a3:9b:91:37:cb:ca:9f:da:e3:fe:2f:1c:79:17:cb:5b:9d: b4:1a:92:29:49:98:f4:e1:7f:b5:aa:f6:6f:ff:79:20:5e:00: 36:7f:6e:9a:9d:da:96:c2:89:ce:d3:a3:1f:da:25:8d:f3:e0: c0:be:87:26:27:84:cb:c5:97:ab:54:dd:27:c2:d8:b3:f6:21: 37:c8:fe:57:b4:50:b1:17:03:d4:f0:53:4a:8a:48:51:06:b9: 48:b1:ee:3c:ec:cd:44:d3:4c:9f:fc:c5:ae:49:53:c9:92:9a: dd:e6:5c:d5:69:08:2c:49:10:13:ae:bf:52:1c:fc:b9:10:da: 9d:64:e0:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRWxhEgRkkeM/doAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk MjlhOGMyMzctN2M2My00YTgzLTgxNWYtMGFiNTA5YzhkNGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTv6rYYKYL+RETM6cWdjcdgLiRQJbUSIwgWH Nop7xhrAE3UtFFU2IjvC9eJV/OXmGIpUb3JsPXutkaMr6vijAWSTR23SJKs0VhF4 RPTz+2mcdgXDbhlXQB7Ck+wL5LvqxGmkhiDdCYKCMo3eHLxlrtClYeqwp1/SA+ee +nzEmUjZwFVtS5qLFVa9Tb2RknrQU9ZWbsOg8e+NBkArEqEZt+TK8aDGmu7gojHJ havNNEBBnPpqyDZssyu2o3QJkxTsFEG4YL9QMp0GH4WNTSr8I4iJSg8AFgI4aYHQ BBxg4rzF7nc+QKjs3WMWXqTdzG7EC/G2aptFuBnG7vTwH0wMJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHD+Bsdb2Aqw+jw/eHWYVXseuRSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMDg0ZDRkZWEtY2QxMy0z NjM5LTk2MjQtMjVjYTE4NTdjMjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7XTMjuns/mx2unpCPfKimPyYx80bK+2XPEE4ZV7AnqK29QyPLRUNaU Mg17pk0KwJvKr63BscQm4A8FV0gmn+S6wRLW4EUvSDhHKk8I/W+upuJDeUK3sFca iTWTTlk4cuy6lMjDAmVLOC04FFNlFmXTsGZnLHucb4ERxG99MCqjm5E3y8qf2uP+ Lxx5F8tbnbQakilJmPThf7Wq9m//eSBeADZ/bpqd2pbCic7Tox/aJY3z4MC+hyYn hMvFl6tU3SfC2LP2ITfI/le0ULEXA9TwU0qKSFEGuUix7jzszUTTTJ/8xa5JU8mS mt3mXNVpCCxJEBOuv1Ic/LkQ2p1k4MI= -----END CERTIFICATE-----Generated at Wed May 13 11:41:20 2026 by rpki-client