$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/fed4af4a-1a42-3d04-937d-5dfec9b3124d.roa File: fed4af4a-1a42-3d04-937d-5dfec9b3124d.roa (raw, json) Hash identifier: qr99fvXA7LfJOlAPVPLfv3n0q5mffJBPgVHTaQrFNwQ= Subject key identifier: B2:77:A6:B9:EC:B5:07:E8:2C:19:EC:36:3A:78:86:51:95:97:79:83 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584DA815750063E7961C5C2EB4D8 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/fed4af4a-1a42-3d04-937d-5dfec9b3124d.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 13414 IP address blocks: 64.63.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:75:00:63:e7:96:1c:5c:2e:b4:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=5b8fca57-59ce-4642-bfd5-53468e7be749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:90:84:2b:12:8e:94:f0:88:fa:79:ac:33:23: 51:b6:fa:e5:af:f0:c5:91:77:29:63:3e:41:3c:82: c8:7f:5a:b7:e1:e7:06:81:7d:c0:49:1f:a5:68:93: de:f8:b8:45:e6:de:78:11:b6:9b:6a:04:64:ff:12: 9f:da:70:2d:3b:a5:3e:70:2a:fc:0c:ec:51:b6:b8: 10:3d:e7:c6:1b:6a:5b:e7:26:dc:e0:15:ff:b7:e3: 99:45:0c:05:6b:f1:64:d1:a3:24:34:9e:03:b4:f0: 77:07:a5:0b:32:88:8c:fa:87:03:7d:7f:ae:b1:13: 6a:5b:74:eb:f0:e5:f6:be:d2:24:b8:da:ec:1d:6c: 43:53:7d:aa:d3:81:fb:d6:e0:d4:93:bb:23:4d:55: 19:c2:fd:3a:c2:97:67:d2:10:df:cd:28:d5:f4:08: eb:9f:68:a1:79:0b:15:2e:e4:23:cc:05:4b:b0:9c: 6e:79:82:28:a0:c2:d1:60:8f:4c:26:49:8b:a6:11: 37:84:4f:88:b4:1a:fa:f2:57:cb:53:05:ca:07:df: 86:20:ee:0e:c4:fa:3a:b9:17:2b:c7:ba:ce:43:a1: d5:bc:3a:b5:ea:40:53:2f:b6:96:0e:17:77:60:68: d2:7c:7d:a7:08:29:c1:5b:4c:bc:d3:79:0d:50:ae: 4a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:77:A6:B9:EC:B5:07:E8:2C:19:EC:36:3A:78:86:51:95:97:79:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/fed4af4a-1a42-3d04-937d-5dfec9b3124d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ab:f6:c8:c1:ba:74:36:78:df:49:d7:b6:fd:e5:07:2d:08: f7:91:d2:11:1a:59:6c:9d:2b:a6:1d:86:a1:b2:8a:6a:ad:a8: 79:66:8f:e3:e0:72:d6:06:c1:1f:67:25:33:bd:0a:7e:ac:5c: b0:d9:8c:1d:09:59:24:45:90:81:dd:63:c0:8b:2e:dd:43:36: 40:c4:49:d5:db:5a:0b:3e:62:ab:37:e3:87:48:d3:79:f7:00: 56:db:b2:f2:6a:5a:5e:1a:27:7a:cd:94:b6:ea:d9:4c:0b:04: e7:97:a5:ae:0a:f9:a7:7b:fc:35:1a:cd:73:cf:84:0a:56:f4: b4:d4:be:09:d2:10:04:85:12:1b:e2:0a:98:ce:e4:21:1e:24: e5:a1:28:58:c0:f7:93:87:be:51:48:5f:90:0a:2d:62:8a:2e: 51:cf:32:92:6d:74:a5:dd:7b:04:96:0f:97:46:98:c0:cd:12: d0:b1:ea:28:f3:c0:3f:1b:ba:3e:95:c2:a8:9b:08:78:78:84: 96:32:2b:8b:ff:fa:23:50:6a:37:ad:f7:19:4b:8d:e5:43:2e: 2b:a9:bd:e1:8c:97:80:94:e2:fe:d7:a7:0a:7b:c9:2a:c3:9c: de:30:b5:64:13:99:15:96:5f:83:a2:a1:7e:66:5a:4f:93:f8: 16:95:d9:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFXUAY+eWHFwutNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk NWI4ZmNhNTctNTljZS00NjQyLWJmZDUtNTM0NjhlN2JlNzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZCEKxKOlPCI+nmsMyNRtvrlr/DFkXcpYz5B PILIf1q34ecGgX3ASR+laJPe+LhF5t54EbabagRk/xKf2nAtO6U+cCr8DOxRtrgQ PefGG2pb5ybc4BX/t+OZRQwFa/Fk0aMkNJ4DtPB3B6ULMoiM+ocDfX+usRNqW3Tr 8OX2vtIkuNrsHWxDU32q04H71uDUk7sjTVUZwv06wpdn0hDfzSjV9Ajrn2iheQsV LuQjzAVLsJxueYIooMLRYI9MJkmLphE3hE+ItBr68lfLUwXKB9+GIO4OxPo6uRcr x7rOQ6HVvDq16kBTL7aWDhd3YGjSfH2nCCnBW0y803kNUK5KuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJ3prnstQfoLBnsNjp4hlGVl3mDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZmVkNGFmNGEtMWE0Mi0z ZDA0LTkzN2QtNWRmZWM5YjMxMjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGir9sjBunQ2eN9J17b95QctCPeR0hEaWWydK6YdhqGyimqtqHlmj+Pg ctYGwR9nJTO9Cn6sXLDZjB0JWSRFkIHdY8CLLt1DNkDESdXbWgs+Yqs344dI03n3 AFbbsvJqWl4aJ3rNlLbq2UwLBOeXpa4K+ad7/DUazXPPhApW9LTUvgnSEASFEhvi CpjO5CEeJOWhKFjA95OHvlFIX5AKLWKKLlHPMpJtdKXdewSWD5dGmMDNEtCx6ijz wD8buj6VwqibCHh4hJYyK4v/+iNQajet9xlLjeVDLiupveGMl4CU4v7Xpwp7ySrD nN4wtWQTmRWWX4OioX5mWk+T+BaV2fE= -----END CERTIFICATE-----Generated at Wed May 13 07:30:41 2026 by rpki-client