$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/285cb5a5-3e3e-3899-b8cb-41d1a992c26b.roa File: 285cb5a5-3e3e-3899-b8cb-41d1a992c26b.roa (raw, json) Hash identifier: QMZeH1BH7rnnHE08SFByi3N4iiSUE9HOJ2AnxiSBKBQ= Subject key identifier: 67:DB:09:5B:34:DC:ED:C9:2D:4C:00:E9:4E:F0:49:19:EE:10:A7:21 Certificate issuer: /CN=b2797f94-84cd-4d6b-a254-94f6593d32af Certificate serial: 010D0C9F4328584D35A01A5DFB803CC154703D00 Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/285cb5a5-3e3e-3899-b8cb-41d1a992c26b.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22079 IP address blocks: 64.136.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:a0:1a:5d:fb:80:3c:c1:54:70:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=d05581a6-07b3-4c83-879e-aba345164c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:df:50:9f:e5:71:4e:45:26:f2:e8:08:01:e4: ee:6a:fe:3b:4a:a7:a5:e2:ab:34:b2:70:2c:4c:64: 66:31:60:54:78:63:c6:82:f2:16:f5:0f:8c:a3:80: e3:5f:ff:ca:3d:43:8e:0a:85:7d:81:ad:46:c1:71: 24:cc:d5:5b:38:6d:a4:83:c8:f8:7b:b8:72:fd:2e: 27:78:d3:18:45:65:1a:22:99:36:74:fa:d9:94:d5: 03:97:5f:2e:52:6a:7c:1d:5a:77:43:46:c9:74:ac: 04:e8:74:8d:66:0c:80:d4:11:2d:c0:01:67:22:3b: b2:7d:d3:61:38:21:a4:63:e3:67:fe:2b:de:02:3f: e6:8b:8d:2c:ab:bc:55:52:e4:2b:cc:6f:cc:66:18: 4a:0f:b4:3c:6b:0e:85:3b:b8:94:18:7b:38:4c:22: 52:ee:0f:42:8c:b0:84:ba:a3:86:dd:49:2a:0c:6f: 56:c7:b3:a4:ca:81:40:ac:24:ef:3b:dc:24:57:3f: ef:ae:ed:fc:84:11:57:7d:80:ff:81:7d:3b:1a:84: 50:54:10:ee:bc:30:66:79:1d:fa:22:0e:bc:a1:ff: a1:b4:6b:ae:60:97:d0:3e:71:c7:32:9d:ac:97:4b: 01:35:5f:ec:9d:72:7d:5c:21:f1:05:36:52:a8:30: f4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DB:09:5B:34:DC:ED:C9:2D:4C:00:E9:4E:F0:49:19:EE:10:A7:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/285cb5a5-3e3e-3899-b8cb-41d1a992c26b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl X509v3 Authority Key Identifier: keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer sbgp-ipAddrBlock: critical IPv4: 64.136.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:75:fb:b2:0c:0e:4b:32:de:56:f1:43:38:41:74:01:7a:62: eb:eb:26:eb:d2:93:18:dd:de:6c:43:22:38:9f:66:2a:bc:57: 26:43:2e:32:dd:a8:0c:5d:ba:99:7e:0f:8d:50:e0:ac:e8:55: c1:27:51:bd:49:9e:54:cf:62:c0:fb:9e:44:4c:b5:b7:4f:e6: de:ec:e7:8a:48:cc:b0:8e:94:7e:2f:05:df:3c:cf:b7:31:cf: 7e:a3:f1:45:6a:26:f5:92:66:eb:59:00:00:80:e6:f1:8b:5e: 0f:97:4c:38:93:0a:e5:42:34:95:0a:29:da:ac:71:5a:ca:07: fe:c7:b4:18:ff:c5:d1:da:a0:55:c6:2a:73:d6:7c:44:b5:73: e6:76:d2:6e:bb:34:38:ae:36:eb:49:6c:19:36:99:c5:61:aa: 75:b7:ad:06:da:ca:38:5a:bc:e8:2b:4f:b4:78:ff:75:2c:b1: 2a:1e:2a:df:40:29:0b:57:0c:3d:b7:8c:59:7e:47:12:a5:a1: a6:76:5b:93:01:c3:87:51:a8:ce:b0:a4:76:4a:83:50:dd:58: 30:00:73:1a:39:8b:da:4e:3e:61:c3:48:7b:3d:59:12:f8:68: bf:52:4a:a0:07:c3:fb:dc:0c:0e:55:83:0d:c2:ff:ee:ca:74: ff:37:77:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01oBpd+4A8wVRwPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI3OTdmOTQtODRjZC00ZDZiLWEyNTQtOTRmNjU5M2Qz MmFmMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ZDA1NTgxYTYtMDdiMy00YzgzLTg3OWUtYWJhMzQ1MTY0YzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid9Qn+VxTkUm8ugIAeTuav47Sqel4qs0snAs TGRmMWBUeGPGgvIW9Q+Mo4DjX//KPUOOCoV9ga1GwXEkzNVbOG2kg8j4e7hy/S4n eNMYRWUaIpk2dPrZlNUDl18uUmp8HVp3Q0bJdKwE6HSNZgyA1BEtwAFnIjuyfdNh OCGkY+Nn/iveAj/mi40sq7xVUuQrzG/MZhhKD7Q8aw6FO7iUGHs4TCJS7g9CjLCE uqOG3UkqDG9Wx7OkyoFArCTvO9wkVz/vru38hBFXfYD/gX07GoRQVBDuvDBmeR36 Ig68of+htGuuYJfQPnHHMp2sl0sBNV/snXJ9XCHxBTZSqDD0FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfbCVs03O3JLUwA6U7wSRnuEKchMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5 N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2NTkzZDMyYWYvMjg1Y2I1YTUtM2UzZS0z ODk5LWI4Y2ItNDFkMWE5OTJjMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjI3OTdmOTQtODRjZC00ZDZiLWEy NTQtOTRmNjU5M2QzMmFmL2IyNzk3Zjk0LTg0Y2QtNGQ2Yi1hMjU0LTk0ZjY1OTNk MzJhZi5jcmwwHwYDVR0jBBgwFoAUaliZMYRR7DUFeyI1/3BS6hhsVyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2 NTkzZDMyYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQIhtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG51+7IMDksy3lbxQzhBdAF6YuvrJuvSkxjd3mxDIjifZiq8VyZDLjLd qAxdupl+D41Q4KzoVcEnUb1JnlTPYsD7nkRMtbdP5t7s54pIzLCOlH4vBd88z7cx z36j8UVqJvWSZutZAACA5vGLXg+XTDiTCuVCNJUKKdqscVrKB/7HtBj/xdHaoFXG KnPWfES1c+Z20m67NDiuNutJbBk2mcVhqnW3rQbayjhavOgrT7R4/3UssSoeKt9A KQtXDD23jFl+RxKloaZ2W5MBw4dRqM6wpHZKg1DdWDAAcxo5i9pOPmHDSHs9WRL4 aL9SSqAHw/vcDA5Vgw3C/+7KdP83d9s= -----END CERTIFICATE-----Generated at Thu Mar 26 11:29:40 2026 by rpki-client