$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa File: dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa (raw, json) Hash identifier: krKqdfU7wfGW5Zgefm3CM02SgoUiCJMx4Z4Vj+3XRBY= Subject key identifier: B6:ED:7A:6C:8E:8B:97:1E:45:73:37:A2:50:78:C1:8C:B7:18:F9:35 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584D2BDA178825D4864F5EDF2900 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 11090 IP address blocks: 64.4.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:17:88:25:d4:86:4f:5e:df:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=19424fdd-1599-45d6-97ab-60e71c9946f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:65:a2:8d:c9:f1:95:4f:35:10:e4:2f:29:7a: 4f:79:ac:0e:7d:2e:c1:56:1a:4a:42:4a:83:e3:2d: a4:5a:a8:36:fc:31:d5:83:e1:46:17:80:d3:14:09: fe:b9:f1:7f:ab:60:94:56:d4:2f:c2:45:6e:8f:58: fb:6b:6c:19:ca:db:55:49:b4:d5:69:f3:3e:d7:94: e7:63:03:52:b9:f5:a9:49:1d:df:b6:a0:b3:e6:73: 32:c4:54:26:69:3f:c1:85:8c:60:4c:0a:09:b1:08: 1a:78:45:0e:71:43:98:85:8d:f8:a3:89:cf:2d:b3: db:0a:40:94:82:3a:ba:57:1a:98:2c:33:41:13:44: 0e:e7:04:53:fc:81:10:0c:a0:46:ef:fa:f5:d0:6f: 5c:14:fd:59:90:52:dd:82:52:6d:08:2b:22:4f:56: 97:a8:61:2a:74:b7:9e:7f:40:2a:d1:08:72:c0:e5: ff:3a:82:8b:25:8b:08:f4:d0:74:b7:07:c4:12:b5: 6f:ec:83:b2:37:7b:94:b0:59:ec:a9:bc:b2:8c:89: 0e:da:bd:85:94:5d:f7:e7:cd:aa:38:5f:30:f3:bc: 78:8b:65:fd:8c:ab:73:07:4e:9e:ed:41:e3:9a:ea: ce:95:32:71:07:43:0d:76:82:c8:3f:34:75:aa:4b: 68:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:ED:7A:6C:8E:8B:97:1E:45:73:37:A2:50:78:C1:8C:B7:18:F9:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:84:f2:e4:bb:f1:da:0d:7c:8f:94:06:cb:ce:4a:86:9e:fe: 9b:7c:56:1f:e4:a0:ff:b4:e7:0f:61:36:53:0d:f5:7e:6c:e7: bf:e9:34:de:fa:54:92:8b:1c:f0:ff:eb:6a:44:50:28:f0:11: d2:04:4e:03:67:4c:fe:d2:41:40:db:c9:01:6a:68:8a:bf:95: 42:25:1e:28:a1:a3:03:c0:4f:40:dd:fd:2a:31:05:63:5a:81: 24:33:cf:04:98:1f:d0:5f:e1:4a:65:cb:27:0d:0e:3d:e8:ce: 50:42:82:64:9e:f2:57:a5:e9:bb:23:ac:3c:29:d9:b6:cc:65: cb:95:b6:72:91:7a:70:db:87:d2:b8:ee:38:17:83:0e:b8:0a: 26:0f:75:75:75:fb:4f:e6:71:ed:82:09:44:b3:cd:a4:b6:de: 49:41:da:1f:e2:b3:43:89:08:12:e6:91:f0:39:22:a3:a2:14: 33:f3:9a:3d:be:ad:06:4d:b4:50:73:ff:64:bb:61:d4:72:e2: ae:7a:48:f5:9c:a3:a8:d8:85:5f:c1:7b:fe:c4:18:32:47:eb: 80:53:ed:4f:0f:9f:0b:fc:d3:cc:c0:01:16:77:2e:ef:53:9b: ea:c7:90:23:38:71:a9:38:17:78:65:b7:b9:0a:46:74:44:0f: fd:e0:b4:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2heIJdSGT17fKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk MTk0MjRmZGQtMTU5OS00NWQ2LTk3YWItNjBlNzFjOTk0NmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGWijcnxlU81EOQvKXpPeawOfS7BVhpKQkqD 4y2kWqg2/DHVg+FGF4DTFAn+ufF/q2CUVtQvwkVuj1j7a2wZyttVSbTVafM+15Tn YwNSufWpSR3ftqCz5nMyxFQmaT/BhYxgTAoJsQgaeEUOcUOYhY34o4nPLbPbCkCU gjq6VxqYLDNBE0QO5wRT/IEQDKBG7/r10G9cFP1ZkFLdglJtCCsiT1aXqGEqdLee f0Aq0QhywOX/OoKLJYsI9NB0twfEErVv7IOyN3uUsFnsqbyyjIkO2r2FlF33582q OF8w87x4i2X9jKtzB06e7UHjmurOlTJxB0MNdoLIPzR1qktoXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbtemyOi5ceRXM3olB4wYy3GPk1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZGZmYzk3ZmItNzg2ZS0z MThiLWI0ZWUtMjkzZDFhMGYxZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQATgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOE8uS78doNfI+UBsvOSoae/pt8Vh/koP+05w9hNlMN9X5s57/pNN76 VJKLHPD/62pEUCjwEdIETgNnTP7SQUDbyQFqaIq/lUIlHiihowPAT0Dd/SoxBWNa gSQzzwSYH9Bf4UplyycNDj3ozlBCgmSe8lel6bsjrDwp2bbMZcuVtnKRenDbh9K4 7jgXgw64CiYPdXV1+0/mce2CCUSzzaS23klB2h/is0OJCBLmkfA5IqOiFDPzmj2+ rQZNtFBz/2S7YdRy4q56SPWco6jYhV/Be/7EGDJH64BT7U8Pnwv808zAARZ3Lu9T m+rHkCM4cak4F3hlt7kKRnRED/3gtIg= -----END CERTIFICATE-----Generated at Thu Mar 26 12:55:27 2026 by rpki-client