$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/30c2c6c8-d695-3d54-b0c3-7bad94805e5d.roa File: 30c2c6c8-d695-3d54-b0c3-7bad94805e5d.roa (raw, json) Hash identifier: 7sKFlMWcuO7miPFfKXo+nUKMNBenSvjiO+QDVWmEN4s= Subject key identifier: D4:29:DF:CA:2A:9E:3C:BE:24:2A:00:61:24:DF:B1:0B:62:89:00:08 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584D2BDA16CD1BD7C69BEE3386C0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/30c2c6c8-d695-3d54-b0c3-7bad94805e5d.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 11090 IP address blocks: 64.4.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:16:cd:1b:d7:c6:9b:ee:33:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=130578ad-9052-4ccb-91cc-39118cab300a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:83:25:ab:d8:3f:82:9c:de:6a:4b:9b:21:d2: 3a:d0:94:a1:79:31:ca:cb:e3:88:17:df:22:d6:b7: cf:44:23:ef:a5:a9:04:c6:d1:29:5d:02:c3:2a:a0: 20:6a:a7:35:3b:40:57:f1:3c:7d:f4:bf:7e:12:ab: 76:44:c7:19:c8:41:96:bd:16:21:fe:68:b0:16:f6: f2:89:ea:ea:40:f4:dd:04:57:93:b5:74:f0:b4:67: 36:ab:9e:97:b6:e7:73:69:3a:d8:4b:1f:01:d5:80: c3:38:ba:73:a3:c5:91:4b:40:d5:9e:74:e0:3b:d8: f0:7e:1b:b7:33:ec:8a:43:ed:4b:6c:fe:79:ad:2d: 4f:1a:e0:43:18:dc:1e:59:61:ba:11:1e:b9:46:8c: 7c:65:34:0d:c4:a1:dd:fc:e7:c1:f7:74:fa:db:70: 81:48:ae:47:31:17:87:80:80:e6:9f:e8:72:85:97: 03:ea:6e:67:98:30:98:fa:3b:cd:18:c5:45:bd:e9: b7:63:51:f4:e3:35:c2:54:34:89:9c:97:84:d2:20: e0:cf:49:5c:7c:1a:f4:24:7b:4d:bc:3f:8b:db:cf: 70:f1:16:54:db:f1:29:7e:f6:b6:30:67:cd:ca:75: 5b:b9:30:fc:7a:49:4d:90:d7:19:cd:4d:3a:4d:79: 2a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:29:DF:CA:2A:9E:3C:BE:24:2A:00:61:24:DF:B1:0B:62:89:00:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/30c2c6c8-d695-3d54-b0c3-7bad94805e5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:e0:43:63:f4:21:8d:2c:97:63:29:da:7c:b2:0f:82:18:02: 0a:02:24:8b:32:a3:9a:8a:3b:7b:66:c2:3b:f1:bf:45:1c:1f: 77:ee:32:cb:99:73:f9:b5:8f:23:bd:1b:a6:5f:94:37:4b:00: 35:30:d6:46:74:74:33:dd:d6:b3:cb:07:ce:74:ad:de:7c:fe: bc:8f:b5:f5:1a:38:de:5e:7a:87:1c:4f:3a:15:98:6d:b3:3b: 2a:20:c7:f5:eb:92:ca:16:fa:f3:37:ca:57:1c:bf:8c:69:a1: 09:e1:08:de:28:a4:00:8a:85:0f:f5:88:9e:e7:e3:42:3c:3f: e2:86:9b:6d:30:12:3b:77:06:79:33:fb:7c:f6:3d:87:b8:9b: 75:48:0f:36:7e:28:bf:a1:96:52:19:95:c5:3b:bc:83:b6:e2: 8c:9f:3f:f6:ae:63:aa:cc:86:40:64:09:53:7b:52:58:a8:7b: db:cd:80:82:b9:7e:14:11:b9:6b:a0:b6:ff:32:bc:d8:a4:0a: 9b:55:e3:8c:ad:60:56:65:26:4a:e7:06:0d:3f:c5:f5:c5:56: 3d:34:31:f0:96:1a:78:8b:dc:09:05:2f:57:7f:58:b2:af:11: eb:11:ba:fa:5a:35:96:c7:d5:b5:ff:06:d0:58:7b:fb:2f:03: ce:39:d9:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hbNG9fGm+4zhsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk MTMwNTc4YWQtOTA1Mi00Y2NiLTkxY2MtMzkxMThjYWIzMDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroMlq9g/gpzeakubIdI60JSheTHKy+OIF98i 1rfPRCPvpakExtEpXQLDKqAgaqc1O0BX8Tx99L9+Eqt2RMcZyEGWvRYh/miwFvby ierqQPTdBFeTtXTwtGc2q56XtudzaTrYSx8B1YDDOLpzo8WRS0DVnnTgO9jwfhu3 M+yKQ+1LbP55rS1PGuBDGNweWWG6ER65Rox8ZTQNxKHd/OfB93T623CBSK5HMReH gIDmn+hyhZcD6m5nmDCY+jvNGMVFvem3Y1H04zXCVDSJnJeE0iDgz0lcfBr0JHtN vD+L289w8RZU2/Epfva2MGfNynVbuTD8eklNkNcZzU06TXkqBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQp38oqnjy+JCoAYSTfsQtiiQAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMzBjMmM2YzgtZDY5NS0z ZDU0LWIwYzMtN2JhZDk0ODA1ZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDgQ2P0IY0sl2Mp2nyyD4IYAgoCJIsyo5qKO3tmwjvxv0UcH3fuMsuZ c/m1jyO9G6ZflDdLADUw1kZ0dDPd1rPLB850rd58/ryPtfUaON5eeoccTzoVmG2z Oyogx/XrksoW+vM3ylccv4xpoQnhCN4opACKhQ/1iJ7n40I8P+KGm20wEjt3Bnkz +3z2PYe4m3VIDzZ+KL+hllIZlcU7vIO24oyfP/auY6rMhkBkCVN7Ulioe9vNgIK5 fhQRuWugtv8yvNikCptV44ytYFZlJkrnBg0/xfXFVj00MfCWGniL3AkFL1d/WLKv EesRuvpaNZbH1bX/BtBYe/svA8452RQ= -----END CERTIFICATE-----Generated at Thu Mar 26 13:04:30 2026 by rpki-client