$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ba928cd3-74e7-3e5f-a258-c51d51f5a624.roa File: ba928cd3-74e7-3e5f-a258-c51d51f5a624.roa (raw, json) Hash identifier: sJNyeFYFaSf2BhQRadL9WPS87A8mrVgsll3tyZJ0LV4= Subject key identifier: 31:C2:40:2B:E0:62:D4:ED:07:60:22:A5:E9:9A:FB:F8:BF:DE:FE:7F Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584DAAE0265F960B1B3084AE9CA0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ba928cd3-74e7-3e5f-a258-c51d51f5a624.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 13414 IP address blocks: 64.63.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:26:5f:96:0b:1b:30:84:ae:9c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=1f3d2298-0db8-47f4-9fbd-321d84a34a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c3:75:94:2e:04:36:dd:2e:51:b1:6e:a7:36: 66:85:91:d8:51:87:97:41:d7:61:6f:39:9f:4b:81: 63:bc:e0:42:a8:5e:e1:69:2b:69:27:ef:d6:34:65: 9f:12:42:16:19:a1:3d:b7:33:11:11:bc:c1:1c:fa: 9c:32:e6:38:1b:af:d6:31:00:c5:01:0a:8f:1d:e4: 3f:42:3a:9a:46:43:ed:25:f0:e7:1e:b1:91:96:d5: 69:e1:17:d8:b2:9b:3d:77:a7:47:ea:71:ae:3c:66: ad:d8:24:dc:46:4e:3f:90:9e:c6:d7:5f:dd:14:3a: 25:86:5e:0f:f4:ae:2f:4c:fc:3d:e3:2f:59:ae:37: 9e:ab:f0:d0:e0:be:fc:d9:37:65:ad:ec:3a:8a:94: 06:1c:8c:f4:7e:d1:72:8a:e0:69:3f:4a:77:ad:22: ec:4c:68:04:72:86:ec:13:93:68:30:0a:74:f6:94: cb:e0:f9:8a:cb:63:b1:e3:6c:13:71:37:a9:d2:a7: d8:cb:54:94:68:d9:14:fb:6d:a1:bd:5f:16:fb:52: d7:ac:0d:20:83:48:a6:01:49:ff:d9:30:e8:61:df: 70:77:94:53:b1:5a:18:a3:f9:96:fb:b5:ae:34:ea: e1:00:84:10:67:78:4e:7a:e8:dd:32:d1:27:fb:1c: d0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C2:40:2B:E0:62:D4:ED:07:60:22:A5:E9:9A:FB:F8:BF:DE:FE:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ba928cd3-74e7-3e5f-a258-c51d51f5a624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:a1:97:6e:88:78:25:b6:7a:dd:63:c4:72:3d:97:f6:ab:81: 7b:5d:b6:30:ee:8a:56:e5:20:76:8f:62:3a:99:5f:94:9d:73: 89:c4:6e:c6:d3:c3:0f:55:e0:68:14:f9:12:c2:0e:b3:3f:98: 19:21:ed:21:ac:84:6f:89:7d:3d:40:4d:9b:2b:bc:15:3c:ba: bf:8b:55:de:e9:8d:3c:76:dc:81:d9:04:95:5d:48:5a:17:70: c5:c3:35:38:c4:6c:95:7a:3e:e8:1c:b6:27:b6:6e:d6:a0:bc: 64:3a:ff:ce:ae:cc:5b:70:dc:aa:3c:f9:f3:62:62:f8:c3:97: c8:13:bc:fc:aa:cb:88:a7:30:98:17:41:ed:dd:76:51:98:f3: de:88:87:9a:63:e3:85:dc:f0:2f:42:53:58:15:f8:52:40:1a: 22:4d:4d:53:ff:06:4f:c1:a9:bc:04:7c:92:5a:fc:22:b6:92: f0:fc:85:6d:ac:97:c3:eb:49:3a:a6:05:af:c0:c6:0f:16:dd: ae:ad:46:80:2e:05:65:17:23:84:82:7d:58:3d:86:23:0f:94: b8:8e:df:a0:04:fa:b3:81:cc:01:a3:4a:cd:61:c1:d0:df:a0: 12:e1:62:7e:e6:c6:51:7b:0f:97:3e:b1:7b:6e:d8:d0:ef:6d: 29:41:26:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4CZflgsbMISunKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk MWYzZDIyOTgtMGRiOC00N2Y0LTlmYmQtMzIxZDg0YTM0YTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssN1lC4ENt0uUbFupzZmhZHYUYeXQddhbzmf S4FjvOBCqF7haStpJ+/WNGWfEkIWGaE9tzMREbzBHPqcMuY4G6/WMQDFAQqPHeQ/ QjqaRkPtJfDnHrGRltVp4RfYsps9d6dH6nGuPGat2CTcRk4/kJ7G11/dFDolhl4P 9K4vTPw94y9Zrjeeq/DQ4L782Tdlrew6ipQGHIz0ftFyiuBpP0p3rSLsTGgEcobs E5NoMAp09pTL4PmKy2Ox42wTcTep0qfYy1SUaNkU+22hvV8W+1LXrA0gg0imAUn/ 2TDoYd9wd5RTsVoYo/mW+7WuNOrhAIQQZ3hOeujdMtEn+xzQuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHCQCvgYtTtB2Aipema+/i/3v5/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYmE5MjhjZDMtNzRlNy0z ZTVmLWEyNTgtYzUxZDUxZjVhNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuhl26IeCW2et1jxHI9l/argXtdtjDuilblIHaPYjqZX5Sdc4nEbsbT ww9V4GgU+RLCDrM/mBkh7SGshG+JfT1ATZsrvBU8ur+LVd7pjTx23IHZBJVdSFoX cMXDNTjEbJV6Pugctie2btagvGQ6/86uzFtw3Ko8+fNiYvjDl8gTvPyqy4inMJgX Qe3ddlGY896Ih5pj44Xc8C9CU1gV+FJAGiJNTVP/Bk/BqbwEfJJa/CK2kvD8hW2s l8PrSTqmBa/Axg8W3a6tRoAuBWUXI4SCfVg9hiMPlLiO36AE+rOBzAGjSs1hwdDf oBLhYn7mxlF7D5c+sXtu2NDvbSlBJg8= -----END CERTIFICATE-----Generated at Wed May 13 09:01:36 2026 by rpki-client