$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/aedbe3d8-a938-347c-a902-e7d97e409a71.roa File: aedbe3d8-a938-347c-a902-e7d97e409a71.roa (raw, json) Hash identifier: kyo0aSqVZjSaafxMsGYFqMfol8D23Kk74ESynHi0uiU= Subject key identifier: 1B:89:3C:1C:62:6A:64:5C:F3:89:3E:CB:0B:0D:DE:38:9D:DE:55:1C Certificate issuer: /CN=328ebe8e-32d9-4873-ad53-1a5e421126d5 Certificate serial: 010D0C9F4328584D15A267DB3DC29514B95C3380 Authority key identifier: 88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/aedbe3d8-a938-347c-a902-e7d97e409a71.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 13631 IP address blocks: 64.22.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:67:db:3d:c2:95:14:b9:5c:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=328ebe8e-32d9-4873-ad53-1a5e421126d5 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=71cce461-143d-4f0e-b5e8-ae814d7364f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:37:fc:1e:bb:e5:8a:cb:2b:84:f3:21:9d:f4: 5a:71:31:36:ac:47:e9:43:f7:ad:56:83:c7:89:68: 80:f2:5d:4f:9c:a3:5b:e5:71:27:9f:22:07:f5:ac: e3:e4:74:f0:8a:68:e4:ea:f3:cb:67:d4:15:2f:f8: 89:e3:f3:6c:b6:19:76:c9:b5:a0:98:21:7a:56:14: 39:e1:ae:09:dc:a2:fe:3f:03:6d:5f:9c:e3:21:ad: 9c:48:73:b2:ea:e4:4d:83:12:9e:ce:2a:7f:c1:43: 62:d0:db:0a:7f:61:00:83:61:38:45:93:8e:aa:fb: 10:99:85:18:29:21:fc:b0:b0:2e:e7:20:a9:64:60: a5:87:87:95:cd:d1:2d:35:7f:b1:2c:95:e3:6e:6d: e5:6d:4f:99:4d:e1:82:ee:58:c7:3f:03:00:be:e1: 93:af:3a:18:e3:d2:f6:33:68:6b:15:72:f5:78:7c: fb:e3:a4:ec:04:5f:02:0d:ff:a4:3f:26:09:f3:51: ad:ff:74:63:d5:c9:2f:e0:e2:6c:b5:45:67:ae:00: 3f:1c:1a:8c:55:96:a7:9d:f4:3d:d5:5c:dc:e9:02: 56:b1:0a:2f:af:51:58:15:17:f8:07:f5:e5:77:cd: c8:c5:bf:fb:bd:e9:04:23:6b:dd:57:e3:35:69:6e: 90:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:89:3C:1C:62:6A:64:5C:F3:89:3E:CB:0B:0D:DE:38:9D:DE:55:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/aedbe3d8-a938-347c-a902-e7d97e409a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.crl X509v3 Authority Key Identifier: keyid:88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer sbgp-ipAddrBlock: critical IPv4: 64.22.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:28:95:1a:8c:cc:77:cb:7e:d5:1f:7c:0e:29:3a:30:6f:d5: 6a:2b:52:d5:3f:ff:a0:83:88:28:61:c2:ee:e0:0b:f8:06:db: 02:c4:70:34:67:c9:2f:16:6c:89:b0:26:9d:09:35:f0:c0:8a: ac:54:b8:66:fb:b4:cb:96:0a:16:50:b0:be:be:fd:9d:2e:1f: a0:e2:64:7b:af:9f:70:bd:32:7b:48:c9:56:aa:3d:eb:21:bb: f7:cc:a8:54:53:2a:00:f2:22:79:a3:bb:be:a5:bf:eb:58:f8: f9:dd:ab:a8:e8:c1:0f:b5:f1:cb:8f:ce:1e:dc:62:04:f8:e1: 3d:cf:02:44:36:89:87:62:61:99:af:f1:c0:9a:1c:b4:95:2a: 64:38:6a:d0:15:a2:b5:08:8c:6c:15:da:3b:7d:6e:96:80:a9: b8:58:b0:fb:dc:6b:49:37:7f:24:98:0f:4c:26:6a:b1:b7:df: 10:f0:d2:dd:9b:31:88:b1:21:80:34:73:de:dd:1f:15:1b:cd: 89:ed:0c:b3:82:41:f0:9f:fd:c7:4d:40:f5:41:1d:49:aa:35: d0:68:0d:ba:87:86:7e:fd:44:f7:f8:83:48:c1:a3:03:e3:3f: 37:af:a8:18:10:ce:6c:1b:9c:dd:c6:1f:48:6b:7d:8e:c5:a4: 02:8d:68:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VomfbPcKVFLlcM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI4ZWJlOGUtMzJkOS00ODczLWFkNTMtMWE1ZTQyMTEy NmQ1MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk NzFjY2U0NjEtMTQzZC00ZjBlLWI1ZTgtYWU4MTRkNzM2NGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDf8HrvlissrhPMhnfRacTE2rEfpQ/etVoPH iWiA8l1PnKNb5XEnnyIH9azj5HTwimjk6vPLZ9QVL/iJ4/Nsthl2ybWgmCF6VhQ5 4a4J3KL+PwNtX5zjIa2cSHOy6uRNgxKezip/wUNi0NsKf2EAg2E4RZOOqvsQmYUY KSH8sLAu5yCpZGClh4eVzdEtNX+xLJXjbm3lbU+ZTeGC7ljHPwMAvuGTrzoY49L2 M2hrFXL1eHz746TsBF8CDf+kPyYJ81Gt/3Rj1ckv4OJstUVnrgA/HBqMVZannfQ9 1Vzc6QJWsQovr1FYFRf4B/Xld83Ixb/7vekEI2vdV+M1aW6QawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuJPBxiamRc84k+ywsN3jid3lUcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjhl YmU4ZS0zMmQ5LTQ4NzMtYWQ1My0xYTVlNDIxMTI2ZDUvYWVkYmUzZDgtYTkzOC0z NDdjLWE5MDItZTdkOTdlNDA5YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzI4ZWJlOGUtMzJkOS00ODczLWFk NTMtMWE1ZTQyMTEyNmQ1LzMyOGViZThlLTMyZDktNDg3My1hZDUzLTFhNWU0MjEx MjZkNS5jcmwwHwYDVR0jBBgwFoAUiIBLAkTafnbXZO4xKEi2F+/d7g0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjhlYmU4ZS0zMmQ5LTQ4NzMtYWQ1My0xYTVl NDIxMTI2ZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQBagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0olRqMzHfLftUffA4pOjBv1WorUtU//6CDiChhwu7gC/gG2wLEcDRn yS8WbImwJp0JNfDAiqxUuGb7tMuWChZQsL6+/Z0uH6DiZHuvn3C9MntIyVaqPesh u/fMqFRTKgDyInmju76lv+tY+Pndq6jowQ+18cuPzh7cYgT44T3PAkQ2iYdiYZmv 8cCaHLSVKmQ4atAVorUIjGwV2jt9bpaAqbhYsPvca0k3fySYD0wmarG33xDw0t2b MYixIYA0c97dHxUbzYntDLOCQfCf/cdNQPVBHUmqNdBoDbqHhn79RPf4g0jBowPj PzevqBgQzmwbnN3GH0hrfY7FpAKNaJg= -----END CERTIFICATE-----Generated at Thu Mar 26 06:20:21 2026 by rpki-client