$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a5d66a87-f8a9-36cc-b9c0-506ca03e6618.roa File: a5d66a87-f8a9-36cc-b9c0-506ca03e6618.roa (raw, json) Hash identifier: eVh8N1QZkGfxal4klgUiijpReC03XiImrJCDflqZic4= Subject key identifier: 99:84:C4:E6:24:A6:52:26:ED:DB:24:E7:71:02:DC:F5:27:D2:C0:FF Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584D2BDA170A58DC78B4498FA848 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a5d66a87-f8a9-36cc-b9c0-506ca03e6618.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 11090 IP address blocks: 64.4.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:17:0a:58:dc:78:b4:49:8f:a8:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=e71179a9-a615-4982-b2fe-364a27a695c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:25:59:cb:7f:20:a5:51:60:a8:63:83:72:15: 6b:f5:f5:f4:ab:5d:e3:a2:bf:4e:02:dc:89:c8:71: 0d:15:25:48:b0:b7:7b:97:48:32:03:ed:43:f7:55: 38:57:81:3e:bd:7a:ba:a6:eb:76:2a:24:01:29:00: b7:91:be:1e:94:e7:f8:9e:d4:9c:35:e4:4c:8e:77: f5:dd:cf:c9:31:7f:c4:ad:05:43:83:a8:3c:11:1d: e4:9a:58:7e:a0:34:17:7d:f6:53:27:56:86:11:66: 8a:94:a6:54:38:75:67:54:61:91:65:c6:47:7b:20: a7:b0:5c:aa:a7:38:f1:f4:59:a5:4d:7d:44:b5:36: 02:9f:49:62:e9:29:24:42:86:2a:43:ac:0f:3b:ad: 43:90:03:9c:a9:fe:7c:49:4b:20:e8:a4:0f:04:0c: 16:12:bb:d3:fe:53:e3:eb:fe:fb:3e:bb:5d:b7:4e: e9:51:53:f9:18:0f:2a:a0:74:b6:e1:cb:b5:50:b3: a8:66:d2:26:84:a9:87:b3:a2:b9:24:6b:8f:90:6b: 30:aa:d1:da:7e:b4:d5:c4:92:80:f3:dc:6b:16:31: 10:fd:b8:84:e8:d9:0c:d1:12:4b:20:19:66:ea:7d: 12:90:c8:df:d2:37:d6:d9:7f:56:32:36:07:02:17: c7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:84:C4:E6:24:A6:52:26:ED:DB:24:E7:71:02:DC:F5:27:D2:C0:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a5d66a87-f8a9-36cc-b9c0-506ca03e6618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:bd:5a:40:9b:55:23:98:01:b3:24:7e:c4:fb:06:9b:4e:8c: e9:b3:df:f2:42:d0:3e:fd:86:db:37:d9:8e:94:77:bd:1a:2c: d7:d8:cb:d9:29:53:73:bf:a7:fd:0a:b9:0c:ad:59:35:37:ae: da:a4:5e:1b:60:cd:3f:58:ba:87:73:a7:83:1b:c8:6b:b9:44: 43:16:d9:36:a4:26:dd:73:9f:c4:23:c7:c9:70:4f:36:6a:db: 29:1e:09:0a:73:a2:50:c6:bb:2c:23:3b:5c:39:b5:fd:82:3a: 87:f0:30:e4:ac:e5:f9:10:45:44:91:e1:57:f3:26:c7:2c:98: b6:5a:09:9d:c8:19:a3:c9:3c:55:a8:77:f7:30:c5:51:37:f5: 4f:04:6b:f5:ee:c0:87:af:db:51:66:dc:54:20:6e:42:ae:f4: 98:0c:9a:cc:06:bc:37:fc:8c:9a:ca:ee:3d:ef:ed:83:9b:3d: 0e:85:ac:64:2a:8d:40:5b:6b:9c:c9:2f:3d:63:0f:16:0d:36: ed:f9:41:71:ed:55:cb:ee:f2:38:c6:2d:d3:c3:a9:25:45:cc: c7:09:5e:f5:b9:ed:0f:a9:de:a0:d9:06:c5:d2:3e:f6:c5:a3: 81:51:76:8a:1e:3e:6b:9c:78:8f:b1:19:1e:5e:9d:c3:d5:8f: 47:c0:41:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hcKWNx4tEmPqEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZTcxMTc5YTktYTYxNS00OTgyLWIyZmUtMzY0YTI3YTY5NWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiVZy38gpVFgqGODchVr9fX0q13jor9OAtyJ yHENFSVIsLd7l0gyA+1D91U4V4E+vXq6put2KiQBKQC3kb4elOf4ntScNeRMjnf1 3c/JMX/ErQVDg6g8ER3kmlh+oDQXffZTJ1aGEWaKlKZUOHVnVGGRZcZHeyCnsFyq pzjx9FmlTX1EtTYCn0li6SkkQoYqQ6wPO61DkAOcqf58SUsg6KQPBAwWErvT/lPj 6/77Prtdt07pUVP5GA8qoHS24cu1ULOoZtImhKmHs6K5JGuPkGswqtHafrTVxJKA 89xrFjEQ/biE6NkM0RJLIBlm6n0SkMjf0jfW2X9WMjYHAhfHYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmExOYkplIm7dsk53EC3PUn0sD/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYTVkNjZhODctZjhhOS0z NmNjLWI5YzAtNTA2Y2EwM2U2NjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQATkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHC9WkCbVSOYAbMkfsT7BptOjOmz3/JC0D79hts32Y6Ud70aLNfYy9kp U3O/p/0KuQytWTU3rtqkXhtgzT9Yuodzp4MbyGu5REMW2TakJt1zn8Qjx8lwTzZq 2ykeCQpzolDGuywjO1w5tf2COofwMOSs5fkQRUSR4VfzJscsmLZaCZ3IGaPJPFWo d/cwxVE39U8Ea/XuwIev21Fm3FQgbkKu9JgMmswGvDf8jJrK7j3v7YObPQ6FrGQq jUBba5zJLz1jDxYNNu35QXHtVcvu8jjGLdPDqSVFzMcJXvW57Q+p3qDZBsXSPvbF o4FRdooePmuceI+xGR5encPVj0fAQWI= -----END CERTIFICATE-----Generated at Thu Mar 26 13:05:13 2026 by rpki-client