$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa File: 3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa (raw, json) Hash identifier: lRpnMYcuIRUZTDA3qJC5Ed+knynn0wuHoV32QZVesXw= Subject key identifier: CA:8A:E1:AB:F9:03:93:CF:BF:D6:CE:3B:A6:31:41:20:9F:E0:1E:A5 Certificate issuer: /CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Certificate serial: 010D0C9F4328584D47C4E586D1998A7B95E2AB80 Authority key identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 16509 IP address blocks: 199.30.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:e5:86:d1:99:8a:7b:95:e2:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=1defbb6e-8fab-431d-a6c2-d0a67f19b831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:59:d2:e5:fa:e5:23:b8:f6:1b:1d:79:58:be: c3:ce:81:72:85:da:e1:5c:fd:d7:11:73:32:61:6c: 5e:d6:1f:a2:b2:05:bd:42:d1:12:0c:89:44:60:e3: 63:ac:f3:a8:43:4c:8d:4a:26:64:11:0a:0b:d3:ae: dd:4f:04:71:9b:60:8a:40:82:c2:0e:21:bb:52:d1: 30:df:5f:3f:62:fa:31:b3:42:ff:02:c1:68:0c:22: 52:7a:19:5f:00:98:fc:b2:6f:c4:6c:bf:89:44:eb: 2b:31:05:56:73:4e:ef:43:de:e9:4c:30:5b:5e:c2: b0:33:af:53:98:3a:51:a3:d1:ea:06:dc:3b:55:46: 2e:f8:06:b8:f4:74:13:66:bb:08:6c:19:98:a9:1b: 09:06:05:aa:a9:62:3b:49:13:71:48:67:2d:ca:2a: b0:9e:8c:d8:1a:96:39:55:2c:2c:26:dc:bd:29:c5: a3:ba:a1:c1:de:4f:14:1e:96:20:f5:5a:ed:12:5f: 90:40:64:b9:e4:78:10:cb:3f:5d:81:7b:4a:4d:c7: b3:fd:87:9b:04:67:60:ad:b2:20:33:91:45:68:54: 18:b8:61:fe:f8:7f:74:06:de:16:0c:5a:c2:9b:4f: 21:9c:6a:59:c8:4e:aa:95:fa:6c:15:1f:d2:79:f8: 73:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8A:E1:AB:F9:03:93:CF:BF:D6:CE:3B:A6:31:41:20:9F:E0:1E:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl X509v3 Authority Key Identifier: keyid:D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer sbgp-ipAddrBlock: critical IPv4: 199.30.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:2e:dd:96:7f:52:77:1c:44:87:aa:57:4f:54:38:e0:3f:58: 71:5b:c0:ee:2d:bc:33:93:e0:cf:39:a3:f8:c1:dc:6b:85:4d: bd:ca:74:0c:bd:53:b0:f9:e8:8b:da:68:01:15:40:8b:ea:a9: 60:be:f6:75:ca:f0:1a:9f:ae:8b:76:53:b2:92:11:6f:6d:86: 03:cc:bb:4c:9a:a4:8c:1d:ca:36:39:75:d6:23:72:5c:8f:4c: a7:ce:49:4d:4d:a4:3c:28:52:f8:ef:dd:3d:76:63:94:34:2b: bc:31:39:57:27:6f:08:45:83:26:09:0e:24:6b:ea:3b:f5:a5: b0:a9:45:7c:2a:89:b5:f2:98:f5:12:20:5e:03:ac:0a:50:84: 79:88:c9:c7:cc:5d:fe:41:b5:24:3f:9c:88:4a:ae:eb:a4:9b: bc:65:34:22:46:d8:06:e1:cc:f5:5c:be:c7:8e:12:6a:33:e5: 6b:80:be:b8:ed:47:a2:31:86:86:ce:f8:d7:6f:82:14:a8:f7: 3a:df:fc:ce:5c:15:ed:ef:a3:20:7a:68:9f:37:8f:d9:7e:c3: 21:ad:90:7a:a0:1f:d2:85:05:8d:a6:f2:f7:41:50:2e:7e:80: 8d:67:4a:18:59:b4:0c:55:0c:a1:ee:88:f5:3b:c3:05:fd:62: 18:82:08:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxOWG0ZmKe5Xiq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY0YjFjYjctNWZiMi00YTM5LWI0MzEtYzEzOTdmNjNh ODE4MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk MWRlZmJiNmUtOGZhYi00MzFkLWE2YzItZDBhNjdmMTliODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklnS5frlI7j2Gx15WL7DzoFyhdrhXP3XEXMy YWxe1h+isgW9QtESDIlEYONjrPOoQ0yNSiZkEQoL067dTwRxm2CKQILCDiG7UtEw 318/Yvoxs0L/AsFoDCJSehlfAJj8sm/EbL+JROsrMQVWc07vQ97pTDBbXsKwM69T mDpRo9HqBtw7VUYu+Aa49HQTZrsIbBmYqRsJBgWqqWI7SRNxSGctyiqwnozYGpY5 VSwsJty9KcWjuqHB3k8UHpYg9VrtEl+QQGS55HgQyz9dgXtKTcez/YebBGdgrbIg M5FFaFQYuGH++H90Bt4WDFrCm08hnGpZyE6qlfpsFR/Sefhz0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqK4av5A5PPv9bOO6YxQSCf4B6lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRi MWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5N2Y2M2E4MTgvMzk4OGU1YWQtYzFmMy0z YTI5LWIxOTYtNzBiMjk2YTNmODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDY0YjFjYjctNWZiMi00YTM5LWI0 MzEtYzEzOTdmNjNhODE4LzA2NGIxY2I3LTVmYjItNGEzOS1iNDMxLWMxMzk3ZjYz YTgxOC5jcmwwHwYDVR0jBBgwFoAU1T4vELW7cKEguZWHWaSc6pjU1OswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRiMWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5 N2Y2M2E4MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxx6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIu3ZZ/UnccRIeqV09UOOA/WHFbwO4tvDOT4M85o/jB3GuFTb3KdAy9 U7D56IvaaAEVQIvqqWC+9nXK8Bqfrot2U7KSEW9thgPMu0yapIwdyjY5ddYjclyP TKfOSU1NpDwoUvjv3T12Y5Q0K7wxOVcnbwhFgyYJDiRr6jv1pbCpRXwqibXymPUS IF4DrApQhHmIycfMXf5BtSQ/nIhKruukm7xlNCJG2AbhzPVcvseOEmoz5WuAvrjt R6IxhobO+NdvghSo9zrf/M5cFe3voyB6aJ83j9l+wyGtkHqgH9KFBY2m8vdBUC5+ gI1nShhZtAxVDKHuiPU7wwX9YhiCCA0= -----END CERTIFICATE-----Generated at Thu Mar 26 02:09:54 2026 by rpki-client