$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/1dafa895-ce97-3c2b-9067-e9ff7279b148.roa File: 1dafa895-ce97-3c2b-9067-e9ff7279b148.roa (raw, json) Hash identifier: /Gx11ZNFNYQ0Gpa0Y6pFJCs0K5t+PGY0sVkMKYHlh1M= Subject key identifier: CB:99:79:5B:7D:4E:B4:2C:7E:67:76:56:16:8E:F6:F1:45:C7:FD:50 Certificate issuer: /CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Certificate serial: 010D0C9F4328584D47C4E5ACC80B2E23E199FF80 Authority key identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/1dafa895-ce97-3c2b-9067-e9ff7279b148.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 46672 IP address blocks: 199.30.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:e5:ac:c8:0b:2e:23:e1:99:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=8ce10e48-3799-4a6b-91c0-bc405f6014c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5a:2d:41:8d:bb:40:03:18:36:8b:6a:47:a2: 83:aa:b7:88:04:07:2a:83:8f:ff:84:b3:06:66:af: 3e:59:66:78:8c:c5:d1:f0:48:ae:17:ac:1d:03:7f: fe:80:e9:38:53:7c:5b:a0:c7:b6:e1:7e:00:df:26: 66:b3:8d:f9:9e:a3:1d:31:61:3a:79:4e:9b:4b:1f: ca:f4:ad:97:f8:0f:97:2f:2f:0d:2f:91:2d:83:c0: 91:55:9b:ba:1b:e1:63:9d:5b:66:49:c3:1c:a9:eb: b5:12:c5:2e:df:37:34:86:da:ff:05:ef:f7:92:8d: 2b:a9:bf:f5:90:cf:f7:12:33:6b:81:d6:6a:ae:03: 22:7c:69:6f:1f:3c:9d:46:2f:5e:a3:d2:db:f6:72: 57:ce:8e:02:87:fc:b3:29:be:ef:d5:eb:c6:ea:38: 81:82:dc:89:ce:c7:27:ad:ff:37:19:0a:c8:f7:b4: fa:63:1b:40:1e:be:3a:2e:6f:97:90:6d:9b:36:78: 80:f6:1b:24:39:24:ef:92:dc:a5:32:15:ae:e4:7d: 40:32:be:0e:4f:10:1e:3e:4f:2a:50:db:20:24:ca: ee:e2:0d:a4:67:00:c4:ab:59:78:b6:c5:19:74:45: 7b:47:cf:1b:a3:02:c3:70:de:18:fb:b2:90:f4:f2: 91:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:99:79:5B:7D:4E:B4:2C:7E:67:76:56:16:8E:F6:F1:45:C7:FD:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/1dafa895-ce97-3c2b-9067-e9ff7279b148.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl X509v3 Authority Key Identifier: keyid:D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer sbgp-ipAddrBlock: critical IPv4: 199.30.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:a0:91:cc:4f:a3:58:28:6f:2e:c8:fd:9c:57:b2:18:58:f8: ea:d5:d9:40:0f:4b:b6:cc:20:42:5d:01:98:84:72:7d:c8:d4: db:a5:f4:e5:6b:e7:39:c9:b5:d4:76:39:89:ae:c7:98:01:22: 86:b1:c3:53:7d:30:83:38:93:1e:ff:2a:34:a4:86:64:06:2a: 82:55:6a:b4:ba:c8:6f:dc:df:9c:21:5e:3b:71:b0:5d:5a:be: 41:77:54:b1:7e:7d:2f:f2:11:48:ea:19:fa:99:df:f8:ab:62: 8f:d0:7d:4b:b3:90:b2:0f:f2:90:50:c2:13:93:ae:05:bb:09: 8b:9b:15:18:4b:77:f4:71:b4:80:18:9c:b9:89:7b:d3:e4:bf: 30:9b:78:3e:d3:eb:9e:84:66:b1:ab:0f:ef:42:35:aa:cd:bd: ce:94:8a:5f:67:a8:e8:94:e5:db:d8:53:f3:ef:df:0c:3e:06: f2:7d:0a:1e:4b:fa:56:75:3d:6c:3d:f3:5c:44:6c:d2:1f:c5: ec:7a:ab:19:b0:e3:d5:b9:d3:ec:59:ec:47:32:94:dc:ea:6b: 27:c1:f9:4b:ea:90:68:c0:d4:aa:c8:89:23:13:5d:a3:f2:b1: e1:c0:f5:cd:d7:9d:d0:6f:2b:a5:82:ae:f0:e1:af:8a:4c:c4: ae:0f:65:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxOWsyAsuI+GZ/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY0YjFjYjctNWZiMi00YTM5LWI0MzEtYzEzOTdmNjNh ODE4MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk OGNlMTBlNDgtMzc5OS00YTZiLTkxYzAtYmM0MDVmNjAxNGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFotQY27QAMYNotqR6KDqreIBAcqg4//hLMG Zq8+WWZ4jMXR8EiuF6wdA3/+gOk4U3xboMe24X4A3yZms435nqMdMWE6eU6bSx/K 9K2X+A+XLy8NL5Etg8CRVZu6G+FjnVtmScMcqeu1EsUu3zc0htr/Be/3ko0rqb/1 kM/3EjNrgdZqrgMifGlvHzydRi9eo9Lb9nJXzo4Ch/yzKb7v1evG6jiBgtyJzscn rf83GQrI97T6YxtAHr46Lm+XkG2bNniA9hskOSTvktylMhWu5H1AMr4OTxAePk8q UNsgJMru4g2kZwDEq1l4tsUZdEV7R88bowLDcN4Y+7KQ9PKRiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuZeVt9TrQsfmd2VhaO9vFFx/1QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRi MWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5N2Y2M2E4MTgvMWRhZmE4OTUtY2U5Ny0z YzJiLTkwNjctZTlmZjcyNzliMTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDY0YjFjYjctNWZiMi00YTM5LWI0 MzEtYzEzOTdmNjNhODE4LzA2NGIxY2I3LTVmYjItNGEzOS1iNDMxLWMxMzk3ZjYz YTgxOC5jcmwwHwYDVR0jBBgwFoAU1T4vELW7cKEguZWHWaSc6pjU1OswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRiMWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5 N2Y2M2E4MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxx6CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWgkcxPo1goby7I/ZxXshhY+OrV2UAPS7bMIEJdAZiEcn3I1Nul9OVr 5znJtdR2OYmux5gBIoaxw1N9MIM4kx7/KjSkhmQGKoJVarS6yG/c35whXjtxsF1a vkF3VLF+fS/yEUjqGfqZ3/irYo/QfUuzkLIP8pBQwhOTrgW7CYubFRhLd/RxtIAY nLmJe9PkvzCbeD7T656EZrGrD+9CNarNvc6Uil9nqOiU5dvYU/Pv3ww+BvJ9Ch5L +lZ1PWw981xEbNIfxex6qxmw49W50+xZ7EcylNzqayfB+UvqkGjA1KrIiSMTXaPy seHA9c3XndBvK6WCrvDhr4pMxK4PZZ8= -----END CERTIFICATE-----Generated at Thu Mar 26 13:12:54 2026 by rpki-client