$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/ef290b1f-5b52-39da-9484-acbda5333639.roa File: ef290b1f-5b52-39da-9484-acbda5333639.roa (raw, json) Hash identifier: faV9QXaWcSgScu/QlGgtnXdyA0AzBk5M4IfQ+mPoDYY= Subject key identifier: 71:07:AA:FC:57:C4:96:22:19:4A:3D:5D:7B:E0:5D:6A:52:85:F5:FE Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584D2BDA16A4FB4860ACF649D0A0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/ef290b1f-5b52-39da-9484-acbda5333639.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 11090 IP address blocks: 64.4.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:16:a4:fb:48:60:ac:f6:49:d0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=e75f95db-346e-4b31-bc18-d85898279a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:de:99:50:1a:cb:9b:7a:fa:2e:a7:99:ad:d4: 42:85:28:1a:c5:33:2c:08:84:09:ee:02:1a:04:98: bc:03:02:b3:e6:1c:7f:9a:49:18:fe:7a:9a:35:3e: b1:71:ca:89:99:cd:ea:16:52:91:85:bf:9e:44:36: 21:86:61:89:86:f7:b4:56:20:4f:28:0e:b2:af:08: ba:60:e5:28:36:72:76:da:49:ab:c5:b0:60:dd:02: ab:a8:21:9d:d8:32:6f:75:9f:0c:8d:1c:cb:b4:55: fa:f3:83:59:09:96:22:29:11:cd:2b:94:79:c7:fb: b8:fb:93:b0:e8:53:2e:59:40:8f:82:b8:1e:67:3c: db:00:ce:0f:93:f4:ea:1e:49:54:fb:6c:b1:aa:6c: 0a:23:05:6f:21:5d:c4:61:8b:3e:32:19:df:a3:3e: da:43:f0:1f:ee:7e:77:83:39:9a:ef:66:e5:a0:b6: 96:bf:b2:b4:e1:74:9c:e4:0a:c1:2f:fc:95:9d:7f: 4c:88:44:a9:4f:4f:5c:f4:08:a6:0d:b5:dd:d7:3f: a8:03:31:5c:e6:cd:88:f9:d3:94:99:48:63:70:c4: 79:65:19:a9:98:b3:9f:48:15:bb:16:29:0d:e9:c7: 99:02:72:e9:09:03:68:ba:e0:18:f0:51:b4:20:b6: 55:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:07:AA:FC:57:C4:96:22:19:4A:3D:5D:7B:E0:5D:6A:52:85:F5:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/ef290b1f-5b52-39da-9484-acbda5333639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:e5:c0:18:c0:66:6d:d6:87:f3:a1:41:bd:42:20:90:e5:14: 62:31:61:5e:62:83:a6:b2:c4:20:79:c8:94:d8:1b:14:09:95: 61:0c:76:27:16:ae:5e:82:9c:55:41:c1:73:8b:bc:f1:4d:f6: 58:06:d7:d4:ef:fd:a0:e9:1a:de:83:c3:8a:5a:09:68:c7:a4: e5:7c:8b:cf:2c:64:d9:fb:73:31:1a:34:9b:c9:c4:5e:91:da: ee:2f:06:74:c0:b8:f2:ec:2e:b4:f8:a8:d0:47:d9:a6:c7:ea: 8d:96:a7:5e:8b:51:ba:36:e2:45:3f:b3:a5:94:c2:9f:84:39: 2d:eb:ed:0c:25:5a:e1:d8:55:11:03:b2:5d:87:67:93:07:37: ee:5e:1e:01:94:e8:eb:04:55:81:e6:e9:5e:17:aa:bf:35:fc: 5c:bb:08:a2:f1:56:9b:49:7a:44:c1:88:55:44:14:f8:c4:3d: a8:b4:4b:e4:d7:13:73:da:42:de:73:2e:f6:64:fa:ff:d7:8b: 4b:68:f7:d2:11:d9:03:da:43:ef:20:0f:4b:04:85:4b:55:8f: 7b:07:57:4b:74:5a:4e:ea:1e:4a:50:ec:96:2f:59:0b:56:0f: 58:05:55:28:2f:5b:60:4a:62:c4:18:66:f9:c2:e9:42:c2:28: a0:59:2d:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hak+0hgrPZJ0KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZTc1Zjk1ZGItMzQ2ZS00YjMxLWJjMTgtZDg1ODk4Mjc5YTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN6ZUBrLm3r6LqeZrdRChSgaxTMsCIQJ7gIa BJi8AwKz5hx/mkkY/nqaNT6xccqJmc3qFlKRhb+eRDYhhmGJhve0ViBPKA6yrwi6 YOUoNnJ22kmrxbBg3QKrqCGd2DJvdZ8MjRzLtFX684NZCZYiKRHNK5R5x/u4+5Ow 6FMuWUCPgrgeZzzbAM4Pk/TqHklU+2yxqmwKIwVvIV3EYYs+Mhnfoz7aQ/Af7n53 gzma72bloLaWv7K04XSc5ArBL/yVnX9MiESpT09c9AimDbXd1z+oAzFc5s2I+dOU mUhjcMR5ZRmpmLOfSBW7FikN6ceZAnLpCQNouuAY8FG0ILZVYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEHqvxXxJYiGUo9XXvgXWpShfX+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZWYyOTBiMWYtNWI1Mi0z OWRhLTk0ODQtYWNiZGE1MzMzNjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQATsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzlwBjAZm3Wh/OhQb1CIJDlFGIxYV5ig6ayxCB5yJTYGxQJlWEMdicW rl6CnFVBwXOLvPFN9lgG19Tv/aDpGt6Dw4paCWjHpOV8i88sZNn7czEaNJvJxF6R 2u4vBnTAuPLsLrT4qNBH2abH6o2Wp16LUbo24kU/s6WUwp+EOS3r7QwlWuHYVRED sl2HZ5MHN+5eHgGU6OsEVYHm6V4Xqr81/Fy7CKLxVptJekTBiFVEFPjEPai0S+TX E3PaQt5zLvZk+v/Xi0to99IR2QPaQ+8gD0sEhUtVj3sHV0t0Wk7qHkpQ7JYvWQtW D1gFVSgvW2BKYsQYZvnC6ULCKKBZLXo= -----END CERTIFICATE-----Generated at Thu Mar 26 11:36:26 2026 by rpki-client