$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/e4ff1bfa-87ff-397c-b887-0a8f8dafdc76.roa File: e4ff1bfa-87ff-397c-b887-0a8f8dafdc76.roa (raw, json) Hash identifier: HX7fSA1RTtUSV/S7C8JRC4bLkvGboA+oH9u1Yxf+k1s= Subject key identifier: 47:1E:6E:92:06:93:95:44:AB:63:28:1D:57:39:94:90:34:4C:C8:66 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584D2BDA171D5971DA4512856D40 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/e4ff1bfa-87ff-397c-b887-0a8f8dafdc76.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 11090 IP address blocks: 64.4.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:17:1d:59:71:da:45:12:85:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=235b6265-c0a6-4b6b-b18c-87ba3817c2af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4e:2c:52:65:24:6c:8e:55:b0:2d:28:16:44: 9d:d8:7a:a2:df:7b:b9:fc:86:80:d5:66:ed:86:c4: 0e:ab:b8:b3:8d:c2:3e:66:67:cc:cf:3d:a0:7b:ec: 7b:b8:66:0a:7b:40:dc:54:75:1b:3b:5c:3b:99:71: 21:fa:7f:84:14:05:0e:94:dc:15:70:35:e7:31:0b: bf:e5:7d:fc:1d:7b:2a:f5:7c:ae:f3:21:fb:f3:c1: db:84:2a:60:39:6c:5e:b1:47:0f:90:a7:47:20:5c: f7:1f:1a:ed:df:fa:e6:ce:23:3c:8b:21:20:cf:23: 4a:4d:91:f8:1f:92:1c:c1:fd:f3:91:b6:5e:d1:83: 63:5b:c9:b2:8d:da:40:ce:d3:e1:ff:7c:d6:6d:d2: c3:7f:a8:8f:cf:fb:1c:0f:4c:ae:c3:2a:58:b9:4d: 9a:61:4d:80:4c:77:fb:11:45:80:59:ec:99:1a:32: ec:e2:3a:37:35:82:ae:ce:f2:f9:38:d2:07:6a:56: e7:4b:19:2b:37:ed:e8:cb:86:b8:a4:8a:2b:c3:6f: 96:d0:f6:61:59:85:65:0c:2e:dd:cb:44:14:fd:4d: 7d:03:8e:b0:40:1e:7d:28:09:00:b1:82:a6:65:8b: 08:a1:f7:93:30:c4:fa:df:62:b1:b6:09:1b:da:27: dc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1E:6E:92:06:93:95:44:AB:63:28:1D:57:39:94:90:34:4C:C8:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/e4ff1bfa-87ff-397c-b887-0a8f8dafdc76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:15:90:98:7d:2e:02:c1:e3:36:68:ae:53:54:da:b6:2c:8c: 9b:2a:c7:be:dc:77:c8:33:22:4f:71:c1:2d:fd:e5:02:3a:78: 27:a2:4f:12:3d:77:d8:8b:c3:81:fb:72:db:3e:b8:0f:96:7e: 37:64:3a:db:5b:1b:d5:66:b6:99:d5:ac:b6:46:1e:66:29:b8: 51:14:2e:d6:81:23:d1:1e:59:a1:c5:e2:e7:26:1c:f2:ee:cb: c1:f7:fa:7a:77:d9:88:4e:4e:03:f4:da:c4:1b:af:c2:69:0c: 02:e9:dc:e0:c6:e2:8b:35:f9:29:dc:c9:21:a3:8d:c9:6a:01: d8:17:3a:2a:8a:34:56:f2:da:75:46:1b:57:05:22:c2:fe:89: 7e:f7:95:37:1c:9e:ba:6b:e9:c9:46:b4:73:a8:ed:d6:d3:fe: 1d:13:5f:d5:71:57:89:d7:7a:bb:ba:86:3c:ef:2d:b1:79:85: 42:31:3d:40:bb:9f:78:a1:f7:12:86:9a:a8:64:18:15:b2:2b: 6b:0a:cc:e2:11:ec:6c:45:b3:b0:f1:51:9b:af:0a:54:f7:59: 4e:0d:70:fd:87:94:3b:ef:8c:5e:9b:79:46:2e:5f:a4:2c:d0: f4:ba:46:92:1b:6c:14:2d:18:eb:e9:e1:5a:2a:58:26:f0:72: a8:09:df:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hcdWXHaRRKFbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk MjM1YjYyNjUtYzBhNi00YjZiLWIxOGMtODdiYTM4MTdjMmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU4sUmUkbI5VsC0oFkSd2Hqi33u5/IaA1Wbt hsQOq7izjcI+ZmfMzz2ge+x7uGYKe0DcVHUbO1w7mXEh+n+EFAUOlNwVcDXnMQu/ 5X38HXsq9Xyu8yH788HbhCpgOWxesUcPkKdHIFz3Hxrt3/rmziM8iyEgzyNKTZH4 H5Icwf3zkbZe0YNjW8myjdpAztPh/3zWbdLDf6iPz/scD0yuwypYuU2aYU2ATHf7 EUWAWeyZGjLs4jo3NYKuzvL5ONIHalbnSxkrN+3oy4a4pIorw2+W0PZhWYVlDC7d y0QU/U19A46wQB59KAkAsYKmZYsIofeTMMT632Kxtgkb2ifc9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcebpIGk5VEq2MoHVc5lJA0TMhmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZTRmZjFiZmEtODdmZi0z OTdjLWI4ODctMGE4ZjhkYWZkYzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQATkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0VkJh9LgLB4zZorlNU2rYsjJsqx77cd8gzIk9xwS395QI6eCeiTxI9 d9iLw4H7cts+uA+WfjdkOttbG9VmtpnVrLZGHmYpuFEULtaBI9EeWaHF4ucmHPLu y8H3+np32YhOTgP02sQbr8JpDALp3ODG4os1+SncySGjjclqAdgXOiqKNFby2nVG G1cFIsL+iX73lTccnrpr6clGtHOo7dbT/h0TX9VxV4nXeru6hjzvLbF5hUIxPUC7 n3ih9xKGmqhkGBWyK2sKzOIR7GxFs7DxUZuvClT3WU4NcP2HlDvvjF6beUYuX6Qs 0PS6RpIbbBQtGOvp4VoqWCbwcqgJ34A= -----END CERTIFICATE-----Generated at Thu Mar 26 15:58:47 2026 by rpki-client