$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/8f44a5ad-b955-3151-98f8-be4475fd9b8c.roa File: 8f44a5ad-b955-3151-98f8-be4475fd9b8c.roa (raw, json) Hash identifier: eqFDnuwm1FE0ImSR8IxS3u9qQvhL6PgPKh9VsbsWxj4= Subject key identifier: BE:6C:2E:22:1F:A5:43:2C:7B:28:71:30:9D:1E:FB:79:D6:48:B5:F7 Certificate issuer: /CN=02df9026-5ea2-4718-a55c-d46da7505348 Certificate serial: 010D0C9F4328584D15A24BE9AA5C02D66480A000 Authority key identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/8f44a5ad-b955-3151-98f8-be4475fd9b8c.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 14291 IP address blocks: 64.7.40.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:4b:e9:aa:5c:02:d6:64:80:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02df9026-5ea2-4718-a55c-d46da7505348 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=d5f47e95-4f15-48b4-8103-b194644b462d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:93:97:95:dc:60:02:c6:9a:23:ba:72:c3:a3: c7:94:cd:b9:72:cf:06:41:aa:12:ac:dc:6e:b8:38: cb:a9:00:5f:e5:84:62:03:87:fb:ea:3e:a7:06:31: 7b:85:d4:50:e8:67:82:73:2a:00:f5:a0:8a:c6:fa: f0:03:4b:9b:ee:0c:b4:23:19:2e:ac:23:0e:7c:e7: 26:fa:66:ce:f2:84:60:00:0f:25:24:11:22:c0:40: 62:54:06:91:70:93:55:48:87:04:35:d1:28:62:a0: 9f:5d:8a:2f:9e:f2:24:9b:c8:c0:82:17:5d:bf:08: 67:a8:12:39:a5:b1:e2:c7:3f:d9:07:f7:c8:e7:0a: 96:8c:f2:b6:d8:23:d0:e1:f3:3a:fb:03:cf:19:02: e5:b4:c2:c1:d0:ac:b5:68:c1:46:aa:73:a1:fb:58: e2:a1:d8:e9:8b:20:fc:eb:1e:6e:1c:18:49:69:7b: 1b:af:35:20:5f:0a:c6:db:30:e7:bb:38:74:8a:79: 4b:25:7d:8c:b2:cd:7d:94:fe:5f:7a:bf:bd:f0:37: df:cf:62:19:27:fd:ca:2e:4b:cf:25:42:24:89:e9: 21:73:12:70:09:b2:bd:03:a5:87:b1:03:38:5e:40: 38:9d:7c:0c:6c:8b:d2:b7:0d:1c:a4:35:07:2f:5b: 6c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6C:2E:22:1F:A5:43:2C:7B:28:71:30:9D:1E:FB:79:D6:48:B5:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/8f44a5ad-b955-3151-98f8-be4475fd9b8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl X509v3 Authority Key Identifier: keyid:C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer sbgp-ipAddrBlock: critical IPv4: 64.7.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:32:60:ad:69:67:2a:78:88:43:34:d8:d6:13:c2:8a:2b:d4: d8:ab:49:72:e9:e2:b9:fd:fc:04:df:84:a3:da:49:96:9d:b1: 91:5d:46:76:01:e7:e4:e2:6b:16:8d:41:0f:60:cc:6f:3c:f2: 25:d7:30:cb:32:06:be:f7:a6:fd:38:c7:8e:76:ed:94:cb:72: ef:98:87:71:85:8e:1c:17:f2:4b:ae:0e:34:fc:06:d4:36:c1: 6c:87:ed:fe:c4:62:d2:c8:36:5d:b9:5a:65:ba:56:de:c0:2b: 5e:2b:c6:31:c3:f0:0c:ef:e0:e7:3d:af:43:3e:56:bc:44:65: c7:be:d0:24:3c:a2:09:2c:e3:65:c1:7f:d8:24:5a:fa:22:49: 07:de:57:70:ef:2f:ec:4b:5d:0e:b9:ba:71:8f:da:d4:cb:e7: eb:a3:c2:eb:a7:6a:06:0c:26:fc:80:56:f4:f3:6a:69:26:70: a0:12:0c:49:24:a6:fc:40:fc:e1:c3:81:08:01:0a:11:e1:36: af:57:a6:c0:2e:e3:5d:6b:af:81:b0:a5:5f:8e:e3:0e:c8:59: ca:50:fa:cd:de:a7:6e:bb:4d:e5:ff:24:b1:68:4e:9c:25:bf: fc:5f:f5:96:34:a9:f9:e0:89:2f:b9:1f:27:45:82:2a:36:01: 00:87:1f:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VokvpqlwC1mSAoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJkZjkwMjYtNWVhMi00NzE4LWE1NWMtZDQ2ZGE3NTA1 MzQ4MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk ZDVmNDdlOTUtNGYxNS00OGI0LTgxMDMtYjE5NDY0NGI0NjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpOXldxgAsaaI7pyw6PHlM25cs8GQaoSrNxu uDjLqQBf5YRiA4f76j6nBjF7hdRQ6GeCcyoA9aCKxvrwA0ub7gy0IxkurCMOfOcm +mbO8oRgAA8lJBEiwEBiVAaRcJNVSIcENdEoYqCfXYovnvIkm8jAghddvwhnqBI5 pbHixz/ZB/fI5wqWjPK22CPQ4fM6+wPPGQLltMLB0Ky1aMFGqnOh+1jiodjpiyD8 6x5uHBhJaXsbrzUgXwrG2zDnuzh0inlLJX2Mss19lP5fer+98Dffz2IZJ/3KLkvP JUIkiekhcxJwCbK9A6WHsQM4XkA4nXwMbIvStw0cpDUHL1tswwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5sLiIfpUMseyhxMJ0e+3nWSLX3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRm OTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZkYTc1MDUzNDgvOGY0NGE1YWQtYjk1NS0z MTUxLTk4ZjgtYmU0NDc1ZmQ5YjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDJkZjkwMjYtNWVhMi00NzE4LWE1 NWMtZDQ2ZGE3NTA1MzQ4LzAyZGY5MDI2LTVlYTItNDcxOC1hNTVjLWQ0NmRhNzUw NTM0OC5jcmwwHwYDVR0jBBgwFoAUyBt2Ol6lM34AGtjZ+ZDa9s1kXqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRmOTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZk YTc1MDUzNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQAcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0yYK1pZyp4iEM02NYTwoor1NirSXLp4rn9/ATfhKPaSZadsZFdRnYB 5+TiaxaNQQ9gzG888iXXMMsyBr73pv04x4527ZTLcu+Yh3GFjhwX8kuuDjT8BtQ2 wWyH7f7EYtLINl25WmW6Vt7AK14rxjHD8Azv4Oc9r0M+VrxEZce+0CQ8ogks42XB f9gkWvoiSQfeV3DvL+xLXQ65unGP2tTL5+ujwuunagYMJvyAVvTzamkmcKASDEkk pvxA/OHDgQgBChHhNq9XpsAu411rr4GwpV+O4w7IWcpQ+s3ep267TeX/JLFoTpwl v/xf9ZY0qfngiS+5HydFgio2AQCHHxg= -----END CERTIFICATE-----Generated at Thu Mar 26 13:05:40 2026 by rpki-client