$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b2768af2-0a70-3d33-aa67-6e4b3c0f98c4.roa File: b2768af2-0a70-3d33-aa67-6e4b3c0f98c4.roa (raw, json) Hash identifier: aZLoWXt6T4JTgmeSW6pqkt7DcVs2wIeHKUD8+zs44qI= Subject key identifier: 01:D9:73:6F:AE:13:E1:1B:68:34:2E:58:67:AF:54:06:98:8C:98:91 Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F4328584DA11AEE8E1368643321EC6C80 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b2768af2-0a70-3d33-aa67-6e4b3c0f98c4.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 206226 IP address blocks: 64.112.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:ee:8e:13:68:64:33:21:ec:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=529cf09e-429c-42f1-9b80-4f86880dc010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c5:77:84:da:65:48:a0:62:db:aa:91:0f:30: a4:cb:b4:29:0d:c2:9f:b6:94:5d:20:a0:98:03:68: 3a:8b:72:52:2f:d6:f4:0e:4d:5a:a5:2a:64:8d:4e: a0:4e:f8:33:bf:6f:28:cd:97:40:a5:fa:d8:c4:57: 60:89:a6:bc:6e:26:39:b0:29:da:8f:37:b4:ed:c5: 29:33:7d:a9:0a:64:61:5b:58:0f:79:84:83:95:a8: 50:0d:9d:2e:f1:b4:9c:7a:6d:16:bb:68:2c:62:8e: 10:3b:1e:e4:02:a2:de:77:ea:cc:41:aa:a0:36:63: c9:a7:75:d2:b5:68:7c:75:15:72:5d:41:e7:4a:39: dd:ee:a2:88:c3:39:02:ed:3b:71:13:32:77:8c:53: 4f:64:85:fe:62:ab:10:e8:d9:13:91:65:09:ea:09: c7:6f:a1:c8:e0:46:15:19:c6:3e:aa:0e:25:94:5a: 5a:ba:b1:12:5d:03:53:e6:e2:e1:6f:d5:07:2a:62: 45:2b:91:be:16:c2:b4:d6:bb:81:51:05:aa:27:40: 4d:85:64:c4:dd:85:ab:f5:5a:a4:e4:69:4a:c2:fc: 05:04:90:9b:80:f2:df:31:b2:83:a2:80:01:23:90: 5f:82:b8:83:c2:4e:07:c8:3c:54:2d:46:e4:64:80: a3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D9:73:6F:AE:13:E1:1B:68:34:2E:58:67:AF:54:06:98:8C:98:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b2768af2-0a70-3d33-aa67-6e4b3c0f98c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 64.112.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:ad:44:28:0e:5a:77:13:a3:62:40:e2:cf:a2:96:20:d5:16: a1:07:53:d3:03:31:1e:83:dd:c0:0b:26:67:e5:c2:72:f5:14: 67:c8:a2:df:2e:65:99:63:f9:80:54:a5:dc:70:9c:65:33:cb: 4d:02:18:30:93:97:f2:1f:b1:30:3b:34:ca:f0:af:51:d7:42: 71:5e:bf:df:e8:fe:72:71:21:eb:15:73:ce:04:24:59:e4:a9: af:1a:a3:03:78:67:36:02:80:1f:4b:46:f7:7d:a8:4d:28:36: fb:64:63:d6:59:f7:7d:86:00:51:5d:44:46:9f:41:f2:c5:37: 92:8b:a2:51:53:fb:c7:30:86:5f:c0:97:c1:b4:d4:04:67:1f: a8:9f:e5:64:11:6e:6c:55:b6:94:37:bc:e3:a0:d1:00:3f:1a: 06:bf:2a:2e:4b:6e:db:ca:36:6b:f2:c9:bd:86:d8:9c:5f:8b: 3d:e3:72:8f:2d:97:82:eb:30:d1:0d:41:ea:64:97:33:bd:fd: dd:f1:7b:54:42:f9:b5:e9:73:e1:07:5e:0b:71:b5:42:28:bd: 6d:00:4c:ce:9e:38:ae:1a:b7:43:2b:ae:42:1a:7d:45:55:52: b0:66:c3:7f:d6:1b:8c:e3:16:7b:06:8f:94:7f:9d:7c:d6:65: 0f:63:83:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGu6OE2hkMyHsbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk NTI5Y2YwOWUtNDI5Yy00MmYxLTliODAtNGY4Njg4MGRjMDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8V3hNplSKBi26qRDzCky7QpDcKftpRdIKCY A2g6i3JSL9b0Dk1apSpkjU6gTvgzv28ozZdApfrYxFdgiaa8biY5sCnajze07cUp M32pCmRhW1gPeYSDlahQDZ0u8bScem0Wu2gsYo4QOx7kAqLed+rMQaqgNmPJp3XS tWh8dRVyXUHnSjnd7qKIwzkC7TtxEzJ3jFNPZIX+YqsQ6NkTkWUJ6gnHb6HI4EYV GcY+qg4llFpaurESXQNT5uLhb9UHKmJFK5G+FsK01ruBUQWqJ0BNhWTE3YWr9Vqk 5GlKwvwFBJCbgPLfMbKDooABI5BfgriDwk4HyDxULUbkZICj1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHZc2+uE+EbaDQuWGevVAaYjJiRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvYjI3NjhhZjItMGE3MC0z ZDMzLWFhNjctNmU0YjNjMGY5OGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHBjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOtRCgOWncTo2JA4s+iliDVFqEHU9MDMR6D3cALJmflwnL1FGfIot8u ZZlj+YBUpdxwnGUzy00CGDCTl/IfsTA7NMrwr1HXQnFev9/o/nJxIesVc84EJFnk qa8aowN4ZzYCgB9LRvd9qE0oNvtkY9ZZ932GAFFdREafQfLFN5KLolFT+8cwhl/A l8G01ARnH6if5WQRbmxVtpQ3vOOg0QA/Gga/Ki5LbtvKNmvyyb2G2Jxfiz3jco8t l4LrMNENQepklzO9/d3xe1RC+bXpc+EHXgtxtUIovW0ATM6eOK4at0MrrkIafUVV UrBmw3/WG4zjFnsGj5R/nXzWZQ9jg/Y= -----END CERTIFICATE-----Generated at Wed May 13 06:45:03 2026 by rpki-client