$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/88c7f6db-ff78-33c2-9a65-7ca3502e82be.roa File: 88c7f6db-ff78-33c2-9a65-7ca3502e82be.roa (raw, json) Hash identifier: umGeQg31h5CGdMJ+6vTTYMdj6GRp+hw4eBh49APt7DI= Subject key identifier: 15:15:38:E1:BE:9B:62:8F:5F:4F:DA:22:51:7A:B7:26:50:C7:7F:0B Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584D2A74EA5220AB1D24F87A4E98 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/88c7f6db-ff78-33c2-9a65-7ca3502e82be.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 13536 IP address blocks: 64.140.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:ea:52:20:ab:1d:24:f8:7a:4e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=85919f91-31a5-4c3a-b47e-5cb31bc0e809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:e2:76:67:bd:dd:81:fa:41:6e:6b:6d:25: bc:1c:1f:9d:db:94:ee:14:cf:fe:11:f2:30:53:40: c8:b7:04:ee:08:10:33:50:a7:af:4e:60:fd:32:93: 6a:56:a7:d8:27:ee:bd:4b:70:a1:91:2d:10:c4:d6: af:12:d5:5c:11:da:dd:1b:91:51:3d:ea:28:12:00: 47:ef:d6:86:4d:38:cf:a8:a5:2f:f1:22:6a:95:7e: 26:f5:7a:9e:30:ba:36:69:fc:eb:ac:0d:a4:b3:31: ee:46:32:5e:28:b6:1f:2a:c4:8b:b4:3e:91:25:c6: 29:d8:e8:78:ca:5e:94:27:93:61:b5:8b:fa:16:8a: 0c:3f:7a:47:7c:15:a4:c3:7b:52:ca:63:75:01:01: 82:d1:8c:fd:de:2f:8f:ad:94:20:2a:bd:57:d3:bd: fa:b5:96:91:f4:34:8c:e0:b3:e1:66:cf:c1:3f:c3: f4:d0:46:2f:9b:80:64:10:bf:33:32:f3:d0:7f:f6: d5:02:26:f3:05:cd:70:cf:0a:cc:d9:8d:c5:5e:01: 28:f5:a7:a8:60:0f:d6:fb:d4:20:a4:63:48:f2:d9: af:9d:87:85:35:2f:40:b2:fc:13:8b:5f:15:4a:e0: c4:64:9e:b9:29:5e:00:61:60:3a:df:44:81:3a:d5: 72:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:15:38:E1:BE:9B:62:8F:5F:4F:DA:22:51:7A:B7:26:50:C7:7F:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/88c7f6db-ff78-33c2-9a65-7ca3502e82be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 64.140.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:41:17:ba:17:ca:35:9c:bf:1f:8a:3b:6d:f2:b2:c0:87:17: b3:0e:a1:7e:bb:42:da:ef:98:8b:51:da:99:02:44:78:46:64: 42:4e:1f:85:b9:ee:79:8c:51:e1:5c:fa:cd:35:29:03:ec:e0: b2:fe:79:a1:64:86:33:2d:d0:98:c9:fb:bd:c8:1f:7d:d9:76: 95:ef:76:8f:65:9c:df:6a:28:43:f3:61:ed:4e:51:2d:47:47: 01:13:2d:18:60:5c:5f:f8:5e:d4:27:47:90:40:44:4d:1d:c8: 8d:a3:fc:1b:c0:30:7f:25:a3:19:ce:2a:42:28:19:12:23:76: e0:17:95:0c:61:76:a4:d1:a7:38:20:f9:19:c1:88:1c:4c:41: 71:fa:f5:78:e7:26:c4:32:2c:1a:96:76:cd:cc:39:2b:ea:52: 1e:bd:7d:5c:2b:86:84:f1:8d:cd:09:89:cc:4d:c7:3f:83:65: a6:51:42:8c:95:50:01:62:5c:e1:01:7a:31:de:dd:8f:28:21: 51:23:12:ef:cd:59:a1:59:7f:63:eb:23:6e:5c:4a:bc:a4:db: 9b:2a:99:8e:f4:19:63:f6:ce:5d:95:fa:9c:9e:80:f6:62:7b: 83:3c:23:17:70:80:f4:0d:16:08:8f:9f:1f:fa:2e:24:1b:b2: 6d:bf:6a:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOpSIKsdJPh6TpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ODU5MTlmOTEtMzFhNS00YzNhLWI0N2UtNWNiMzFiYzBlODA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx3idme93YH6QW5rbSW8HB+d25TuFM/+EfIw U0DItwTuCBAzUKevTmD9MpNqVqfYJ+69S3ChkS0QxNavEtVcEdrdG5FRPeooEgBH 79aGTTjPqKUv8SJqlX4m9XqeMLo2afzrrA2kszHuRjJeKLYfKsSLtD6RJcYp2Oh4 yl6UJ5NhtYv6FooMP3pHfBWkw3tSymN1AQGC0Yz93i+PrZQgKr1X0736tZaR9DSM 4LPhZs/BP8P00EYvm4BkEL8zMvPQf/bVAibzBc1wzwrM2Y3FXgEo9aeoYA/W+9Qg pGNI8tmvnYeFNS9AsvwTi18VSuDEZJ65KV4AYWA630SBOtVymQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUVOOG+m2KPX0/aIlF6tyZQx38LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvODhjN2Y2ZGItZmY3OC0z M2MyLTlhNjUtN2NhMzUwMmU4MmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQIzlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMpBF7oXyjWcvx+KO23yssCHF7MOoX67QtrvmItR2pkCRHhGZEJOH4W5 7nmMUeFc+s01KQPs4LL+eaFkhjMt0JjJ+73IH33ZdpXvdo9lnN9qKEPzYe1OUS1H RwETLRhgXF/4XtQnR5BARE0dyI2j/BvAMH8loxnOKkIoGRIjduAXlQxhdqTRpzgg +RnBiBxMQXH69XjnJsQyLBqWds3MOSvqUh69fVwrhoTxjc0JicxNxz+DZaZRQoyV UAFiXOEBejHe3Y8oIVEjEu/NWaFZf2PrI25cSryk25sqmY70GWP2zl2V+pyegPZi e4M8IxdwgPQNFgiPnx/6LiQbsm2/aqg= -----END CERTIFICATE-----Generated at Thu Mar 26 14:16:10 2026 by rpki-client