$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/d4de5de1-5b41-39a7-b73e-1e492dfbacea.roa File: d4de5de1-5b41-39a7-b73e-1e492dfbacea.roa (raw, json) Hash identifier: ddXf5eSjiI2IKYPuSVcdFxdAoc1Bc67HQY0VmuqJCJM= Subject key identifier: 94:36:0F:E1:C0:0F:73:6B:5C:B3:CB:F9:ED:C3:B3:4A:88:05:92:16 Certificate issuer: /CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0 Certificate serial: 010D0C9F4328584D3704BB3415DED517A46455C0 Authority key identifier: B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/d4de5de1-5b41-39a7-b73e-1e492dfbacea.roa Signing time: Thu 19 Mar 2026 01:00:31 +0000 ROA not before: Thu 19 Mar 2026 01:00:31 +0000 ROA not after: Wed 17 Jun 2026 01:00:31 +0000 asID: 400956 IP address blocks: 64.111.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:37:04:bb:34:15:de:d5:17:a4:64:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0 Validity Not Before: Mar 19 01:00:31 2026 GMT Not After : Jun 17 01:00:31 2026 GMT Subject: CN=2ed678ac-bbca-4c8a-9bca-d705ecab4740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:44:e7:92:0f:0b:15:55:19:89:ec:1b:98:1f: 35:4e:97:1f:b1:ea:a0:c0:75:5f:6e:48:1b:c1:f4: 19:8b:df:71:99:db:07:4b:26:72:06:a3:bd:e1:80: 00:4a:b2:e3:30:78:06:c5:f2:69:34:f4:ee:5d:4d: fa:52:da:c4:e7:78:77:54:89:a1:fc:d5:16:fd:18: 72:9b:37:03:57:d2:4b:6a:c6:68:eb:60:b6:fc:24: 2c:b6:54:20:1b:c8:e5:61:db:f6:51:31:fd:c6:66: 87:ae:db:2b:37:81:df:f4:b4:46:8c:88:bc:9f:98: 67:f9:0a:62:35:d6:cc:c7:95:7e:5a:5d:a1:35:22: c1:7f:6d:c2:97:fe:68:0a:19:89:17:ee:22:bb:03: 37:2f:06:6e:75:4c:dd:94:cc:80:cb:a1:75:d4:6b: 92:1b:86:14:0b:0b:13:6f:9d:d6:19:38:82:46:55: fb:01:24:41:9a:06:66:d2:93:60:8c:4f:b4:ed:36: 15:d0:3b:0a:2c:12:ec:36:f8:a7:d6:d6:e7:37:61: 93:fa:bd:9c:c2:cc:7b:3f:c2:60:c4:24:de:99:fe: b4:42:9f:48:c3:bb:54:58:7a:fb:cc:b7:0f:d4:54: bb:28:07:e0:c4:38:d4:5c:c1:7c:ae:3e:4a:29:de: bb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:36:0F:E1:C0:0F:73:6B:5C:B3:CB:F9:ED:C3:B3:4A:88:05:92:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/d4de5de1-5b41-39a7-b73e-1e492dfbacea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl X509v3 Authority Key Identifier: keyid:B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer sbgp-ipAddrBlock: critical IPv4: 64.111.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:95:a8:f7:18:ba:59:71:82:45:ce:5f:79:d9:a8:70:f8:2d: d8:3d:be:84:11:ed:09:bf:8a:b3:24:fe:96:71:38:98:e6:f9: 16:96:72:2d:cc:b4:e7:ea:30:5f:a3:ab:a0:36:80:f9:07:b7: 1e:b8:02:50:5e:4a:e9:8e:f0:52:d5:51:2a:5c:75:52:32:9a: 8a:db:a5:7e:f1:74:13:a7:69:89:0e:f2:6c:a0:13:02:cd:e2: ce:85:3b:88:56:41:75:69:e4:a5:09:61:95:96:cf:bf:26:c4: 6b:9f:11:bf:aa:fe:4f:4c:e1:b2:ef:ca:b7:e0:b7:45:0a:2d: 0e:18:74:de:6a:4f:97:11:5e:62:70:90:b1:ea:8e:15:e5:fd: f2:f7:df:9e:b9:bf:c4:d2:8a:de:b2:3b:ba:7c:5c:df:e9:4a: 65:49:49:02:da:bf:cb:40:a7:32:d2:a5:26:06:b3:45:b7:52: e0:44:6b:60:0e:e3:4b:b8:7c:5c:17:a9:6b:de:05:2d:db:d3: f8:fd:07:dd:19:f3:df:92:6f:c7:d0:e2:5b:1d:44:cd:5e:15: c2:e4:6d:9e:a1:e5:49:55:47:86:9c:31:a5:aa:9e:53:ee:88: 84:fb:43:0f:40:7c:42:12:54:40:5e:b0:70:52:bc:42:85:33: d1:5d:90:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE03BLs0Fd7VF6RkVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmUzZTEwNGUtZGFlZi00ZmRiLTlkNjUtYWExZWU2ZGM0 YmUwMB4XDTI2MDMxOTAxMDAzMVoXDTI2MDYxNzAxMDAzMVowLzEtMCsGA1UEAxMk MmVkNjc4YWMtYmJjYS00YzhhLTliY2EtZDcwNWVjYWI0NzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkTnkg8LFVUZiewbmB81TpcfseqgwHVfbkgb wfQZi99xmdsHSyZyBqO94YAASrLjMHgGxfJpNPTuXU36UtrE53h3VImh/NUW/Rhy mzcDV9JLasZo62C2/CQstlQgG8jlYdv2UTH9xmaHrtsrN4Hf9LRGjIi8n5hn+Qpi NdbMx5V+Wl2hNSLBf23Cl/5oChmJF+4iuwM3LwZudUzdlMyAy6F11GuSG4YUCwsT b53WGTiCRlX7ASRBmgZm0pNgjE+07TYV0DsKLBLsNvin1tbnN2GT+r2cwsx7P8Jg xCTemf60Qp9Iw7tUWHr7zLcP1FS7KAfgxDjUXMF8rj5KKd67iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQ2D+HAD3NrXLPL+e3Ds0qIBZIWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZTNl MTA0ZS1kYWVmLTRmZGItOWQ2NS1hYTFlZTZkYzRiZTAvZDRkZTVkZTEtNWI0MS0z OWE3LWI3M2UtMWU0OTJkZmJhY2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmUzZTEwNGUtZGFlZi00ZmRiLTlk NjUtYWExZWU2ZGM0YmUwL2ZlM2UxMDRlLWRhZWYtNGZkYi05ZDY1LWFhMWVlNmRj NGJlMC5jcmwwHwYDVR0jBBgwFoAUufWiUaI76sSwD1L8hmm6LjRR5AswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZTNlMTA0ZS1kYWVmLTRmZGItOWQ2NS1hYTFl ZTZkYzRiZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQG94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCVqPcYullxgkXOX3nZqHD4Ldg9voQR7Qm/irMk/pZxOJjm+RaWci3M tOfqMF+jq6A2gPkHtx64AlBeSumO8FLVUSpcdVIymorbpX7xdBOnaYkO8mygEwLN 4s6FO4hWQXVp5KUJYZWWz78mxGufEb+q/k9M4bLvyrfgt0UKLQ4YdN5qT5cRXmJw kLHqjhXl/fL33565v8TSit6yO7p8XN/pSmVJSQLav8tApzLSpSYGs0W3UuBEa2AO 40u4fFwXqWveBS3b0/j9B90Z89+Sb8fQ4lsdRM1eFcLkbZ6h5UlVR4acMaWqnlPu iIT7Qw9AfEISVEBesHBSvEKFM9FdkGA= -----END CERTIFICATE-----Generated at Thu Mar 26 22:49:44 2026 by rpki-client