$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/d55da693-e506-31b8-be3f-ec86fb9e0b12.roa File: d55da693-e506-31b8-be3f-ec86fb9e0b12.roa (raw, json) Hash identifier: SwMcdq44pu41Af3adH+ec/o4H/8+3FymsUWeMqt0Dek= Subject key identifier: CC:58:D1:9F:54:91:88:0E:A0:28:C5:7D:D4:3C:A3:C4:05:64:4E:5B Certificate issuer: /CN=743d3e7e-7c36-48e5-942f-c28c4741bf5b Certificate serial: 010D0C9F4328584D3DFF8BC8D4DE840195D12580 Authority key identifier: C5:17:B2:2E:5C:1F:CD:23:E5:4C:4E:D8:CD:7B:41:F5:8A:1C:1E:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/d55da693-e506-31b8-be3f-ec86fb9e0b12.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 400731 IP address blocks: 64.239.70.0/24 maxlen: 24 64.255.14.0/24 maxlen: 24 2602:812:c000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/743d3e7e-7c36-48e5-942f-c28c4741bf5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/743d3e7e-7c36-48e5-942f-c28c4741bf5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:8b:c8:d4:de:84:01:95:d1:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743d3e7e-7c36-48e5-942f-c28c4741bf5b Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=aee2d665-14c6-4280-9136-ade8f668c29f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d8:29:7a:40:f5:f7:a2:6f:8d:ca:10:e9:7f: a4:1f:18:ea:89:9f:71:ee:85:b4:72:3c:46:63:13: f0:8c:17:5f:e9:37:92:a7:27:7f:d3:73:1b:73:0c: 7e:45:0c:2f:14:61:a9:4a:6f:d3:ad:ae:2c:2d:b4: 2a:2f:09:a8:12:ce:d6:d5:d1:ae:3c:c0:03:a1:05: fc:b8:59:f2:3f:f4:9f:e3:2c:3c:19:af:e5:33:94: 43:d2:7c:2a:01:13:71:b5:13:3f:a5:fe:75:24:d4: 09:53:47:7c:7c:0a:e1:c3:e3:46:ac:60:5e:43:fa: 0d:d1:70:ed:b4:76:9b:4a:85:0e:c8:5b:12:a6:45: 5c:f4:91:28:1f:d5:8f:7e:e3:a5:30:aa:c2:33:fd: b0:29:2d:f4:34:e0:35:8f:2f:28:c6:ca:54:a2:e9: f1:ca:f1:47:72:b6:32:d4:94:82:6c:ff:05:9f:37: 3f:93:ae:e2:10:9f:e6:d0:07:75:5c:8b:1b:e3:8a: 89:ac:88:c0:41:76:33:e2:ab:a1:4b:a4:9d:58:cc: 34:3d:3c:21:6d:7a:93:b7:aa:25:4c:99:e0:2b:54: bf:16:a8:39:40:2a:d6:bb:99:a0:1d:62:5f:32:f7: a1:06:de:0c:5b:17:18:66:9e:ec:ce:7d:21:d4:b0: 83:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:58:D1:9F:54:91:88:0E:A0:28:C5:7D:D4:3C:A3:C4:05:64:4E:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/d55da693-e506-31b8-be3f-ec86fb9e0b12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/743d3e7e-7c36-48e5-942f-c28c4741bf5b.crl X509v3 Authority Key Identifier: keyid:C5:17:B2:2E:5C:1F:CD:23:E5:4C:4E:D8:CD:7B:41:F5:8A:1C:1E:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer sbgp-ipAddrBlock: critical IPv4: 64.239.70.0/24 64.255.14.0/24 IPv6: 2602:812:c000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:6d:fc:94:9e:48:c7:8c:17:2c:97:75:b3:7f:f7:40:93:f3: 56:7d:a3:d6:8d:1a:00:d0:bf:a6:00:63:77:e4:90:b9:6d:e4: 6e:38:ad:db:eb:2b:c4:09:34:85:ac:e7:78:07:dd:7f:ca:01: 7e:1d:61:84:ad:29:a8:d1:5c:53:ba:e6:2d:bc:4a:02:de:8b: 33:34:1d:4a:b8:b8:65:5b:1a:ca:a3:12:c0:9b:72:1a:95:55: 96:49:fa:0e:be:30:07:e0:0d:d1:40:c3:6e:ac:72:dc:74:70: 4e:d7:ca:d2:4b:37:43:c2:aa:72:03:88:a7:c4:8f:d0:17:df: 93:16:fd:bb:e4:e4:c6:2e:05:a6:fc:f8:32:e6:fc:45:c5:70: c4:d5:79:28:c4:2e:dc:ac:86:0a:ba:71:b7:24:c9:89:30:05: e8:4f:3a:ee:a5:40:5f:8b:9e:c8:dc:75:1b:ec:a2:98:49:8b: 05:26:71:fd:90:6e:a1:7f:dd:a2:8d:f7:06:57:c6:e0:03:d2: de:7a:5f:9c:e0:9b:11:00:f9:ae:63:34:79:3b:3c:0e:61:77: bd:1b:4a:d3:84:41:95:b6:2e:83:0a:7a:bc:f5:59:4f:81:96: 25:91:92:13:ba:b4:ba:fa:ca:90:28:34:df:4a:da:b8:c8:89: 33:ce:d7:1d -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWE09/4vI1N6EAZXRJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzZDNlN2UtN2MzNi00OGU1LTk0MmYtYzI4YzQ3NDFi ZjViMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YWVlMmQ2NjUtMTRjNi00MjgwLTkxMzYtYWRlOGY2NjhjMjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdgpekD196JvjcoQ6X+kHxjqiZ9x7oW0cjxG YxPwjBdf6TeSpyd/03Mbcwx+RQwvFGGpSm/Tra4sLbQqLwmoEs7W1dGuPMADoQX8 uFnyP/Sf4yw8Ga/lM5RD0nwqARNxtRM/pf51JNQJU0d8fArhw+NGrGBeQ/oN0XDt tHabSoUOyFsSpkVc9JEoH9WPfuOlMKrCM/2wKS30NOA1jy8oxspUounxyvFHcrYy 1JSCbP8Fnzc/k67iEJ/m0Ad1XIsb44qJrIjAQXYz4quhS6SdWMw0PTwhbXqTt6ol TJngK1S/Fqg5QCrWu5mgHWJfMvehBt4MWxcYZp7szn0h1LCDnQIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFMxY0Z9UkYgOoCjFfdQ8o8QFZE5bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NDNk M2U3ZS03YzM2LTQ4ZTUtOTQyZi1jMjhjNDc0MWJmNWIvZDU1ZGE2OTMtZTUwNi0z MWI4LWJlM2YtZWM4NmZiOWUwYjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzQzZDNlN2UtN2MzNi00OGU1LTk0 MmYtYzI4YzQ3NDFiZjViLzc0M2QzZTdlLTdjMzYtNDhlNS05NDJmLWMyOGM0NzQx YmY1Yi5jcmwwHwYDVR0jBBgwFoAUxReyLlwfzSPlTE7YzXtB9YocHpkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NDNkM2U3ZS03YzM2LTQ4ZTUtOTQyZi1jMjhj NDc0MWJmNWIuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAQO9GAwQA QP8OMA8EAgACMAkDBwQmAggSwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAiG38lJ5Ix4wXLJd1s3/3QJPz Vn2j1o0aANC/pgBjd+SQuW3kbjit2+srxAk0hazneAfdf8oBfh1hhK0pqNFcU7rm LbxKAt6LMzQdSri4ZVsayqMSwJtyGpVVlkn6Dr4wB+AN0UDDbqxy3HRwTtfK0ks3 Q8KqcgOIp8SP0Bffkxb9u+Tkxi4Fpvz4Mub8RcVwxNV5KMQu3KyGCrpxtyTJiTAF 6E867qVAX4ueyNx1G+yimEmLBSZx/ZBuoX/doo33BlfG4APS3npfnOCbEQD5rmM0 eTs8DmF3vRtK04RBlbYugwp6vPVZT4GWJZGSE7q0uvrKkCg030rauMiJM87XHQ== -----END CERTIFICATE-----Generated at Thu Mar 26 05:43:11 2026 by rpki-client