$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/d7aec6f7-46ff-3b64-9ffa-e2953521321f.roa File: d7aec6f7-46ff-3b64-9ffa-e2953521321f.roa (raw, json) Hash identifier: vM/yLq+4cHEUXoYOzHGimM73DMjjPYoe4xZ9XQQATlM= Subject key identifier: 41:5D:E6:48:BA:13:31:14:3D:A0:96:D0:FB:81:34:C6:B1:5F:D1:C2 Certificate issuer: /CN=2f4d2ef2-fbc2-4b15-8104-e53c358cf139 Certificate serial: 010D0C9F4328584D100CFFA2710ADC5D3E7FAB00 Authority key identifier: E6:A8:C2:3F:B5:82:80:19:7E:FB:33:A1:EF:7D:30:DC:A9:BB:DF:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/d7aec6f7-46ff-3b64-9ffa-e2953521321f.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 2535 IP address blocks: 164.63.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0c:ff:a2:71:0a:dc:5d:3e:7f:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f4d2ef2-fbc2-4b15-8104-e53c358cf139 Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=5063d177-9d52-46ad-ac10-8efaa2b8eaf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:64:f2:c8:f1:de:66:ff:19:f0:61:98:57:8d: ae:50:69:34:fc:25:e7:c5:5d:06:fc:d3:00:09:f6: ef:1b:35:3a:f3:3b:30:fc:48:8a:22:c4:41:1c:e7: 8b:88:05:24:59:27:65:7e:14:70:63:55:d2:aa:d4: 3b:49:6f:30:0c:f0:33:76:88:73:e0:3f:5c:66:33: d4:79:e5:3d:ca:47:b3:e1:b5:78:ac:87:04:37:9e: d1:27:b2:4b:d3:94:7e:c8:be:58:41:70:d0:2a:c6: 10:65:12:c2:18:01:cc:32:97:6b:05:d4:63:96:87: 6f:68:9a:af:2f:f2:74:94:64:b2:da:79:ac:b6:45: d6:9a:7b:5f:09:7a:c5:86:29:a0:64:bf:71:6b:3e: 8f:c7:1f:3b:ee:0d:7a:9a:98:cd:c3:9d:3f:03:be: eb:f6:5f:1a:15:f3:d7:98:85:e0:4b:9f:ad:6c:21: c5:3d:61:9b:98:97:b6:70:4d:46:a4:da:8b:9a:b6: 5c:f9:ee:70:c6:86:d5:be:b6:fe:c9:4d:53:ba:a9: 13:e6:f0:13:9d:f8:ca:e3:57:9b:b4:3c:18:48:f7: ba:45:f5:f6:14:d3:45:62:7d:dc:1c:22:46:1c:e5: 3a:1c:d8:d6:67:58:fa:29:c4:ab:41:22:92:dd:1c: ce:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5D:E6:48:BA:13:31:14:3D:A0:96:D0:FB:81:34:C6:B1:5F:D1:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/d7aec6f7-46ff-3b64-9ffa-e2953521321f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.crl X509v3 Authority Key Identifier: keyid:E6:A8:C2:3F:B5:82:80:19:7E:FB:33:A1:EF:7D:30:DC:A9:BB:DF:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.cer sbgp-ipAddrBlock: critical IPv4: 164.63.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:3b:55:26:66:45:35:f7:04:74:ee:55:29:2e:ab:64:8c:19: aa:b6:9b:96:6c:81:19:30:fc:19:94:7b:6f:f6:1d:13:dc:c3: 95:fc:10:ce:1a:e7:eb:01:2a:1d:08:f7:1f:1c:f9:22:8a:e8: 4a:ae:b3:68:ca:94:ba:ae:34:36:d7:ab:7a:82:60:2e:91:0a: 6a:ae:ef:67:f6:e9:0c:b3:53:f6:d3:db:e3:84:9d:96:64:4d: 46:56:6a:18:86:cf:93:a1:f6:df:95:96:ab:0e:3b:52:6a:67: 16:9f:09:86:71:f3:a8:57:7c:8e:c4:1e:bf:88:34:99:23:7c: a5:49:00:00:c3:93:3b:ac:ce:c2:94:15:92:25:e4:8e:56:00: 41:67:ca:b5:af:f9:43:39:31:bb:ae:22:c7:fb:1e:ac:e0:97: 8d:7e:91:f7:be:1f:6d:bf:2f:1d:06:75:02:ab:1d:17:c6:3a: a3:ba:8d:b4:5c:7b:e6:da:39:4d:4f:bc:31:44:f6:dc:51:cf: 4a:68:c8:dc:51:df:c8:e0:ad:db:6b:e6:84:24:55:9a:7b:b7: c2:30:0d:a7:ce:ae:78:1d:da:c0:c8:e4:77:c6:6b:bc:dc:54: ed:bb:45:a3:06:96:18:fe:6a:d4:2c:f3:45:81:af:90:3a:f4: e5:cc:de:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QDP+icQrcXT5/qwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmY0ZDJlZjItZmJjMi00YjE1LTgxMDQtZTUzYzM1OGNm MTM5MB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk NTA2M2QxNzctOWQ1Mi00NmFkLWFjMTAtOGVmYWEyYjhlYWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmTyyPHeZv8Z8GGYV42uUGk0/CXnxV0G/NMA CfbvGzU68zsw/EiKIsRBHOeLiAUkWSdlfhRwY1XSqtQ7SW8wDPAzdohz4D9cZjPU eeU9ykez4bV4rIcEN57RJ7JL05R+yL5YQXDQKsYQZRLCGAHMMpdrBdRjlodvaJqv L/J0lGSy2nmstkXWmntfCXrFhimgZL9xaz6Pxx877g16mpjNw50/A77r9l8aFfPX mIXgS5+tbCHFPWGbmJe2cE1GpNqLmrZc+e5wxobVvrb+yU1TuqkT5vATnfjK41eb tDwYSPe6RfX2FNNFYn3cHCJGHOU6HNjWZ1j6KcSrQSKS3RzOJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFd5ki6EzEUPaCW0PuBNMaxX9HCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZjRk MmVmMi1mYmMyLTRiMTUtODEwNC1lNTNjMzU4Y2YxMzkvZDdhZWM2ZjctNDZmZi0z YjY0LTlmZmEtZTI5NTM1MjEzMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmY0ZDJlZjItZmJjMi00YjE1LTgx MDQtZTUzYzM1OGNmMTM5LzJmNGQyZWYyLWZiYzItNGIxNS04MTA0LWU1M2MzNThj ZjEzOS5jcmwwHwYDVR0jBBgwFoAU5qjCP7WCgBl++zOh730w3Km730swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZjRkMmVmMi1mYmMyLTRiMTUtODEwNC1lNTNj MzU4Y2YxMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApD/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHk7VSZmRTX3BHTuVSkuq2SMGaq2m5ZsgRkw/BmUe2/2HRPcw5X8EM4a 5+sBKh0I9x8c+SKK6Equs2jKlLquNDbXq3qCYC6RCmqu72f26QyzU/bT2+OEnZZk TUZWahiGz5Oh9t+VlqsOO1JqZxafCYZx86hXfI7EHr+INJkjfKVJAADDkzuszsKU FZIl5I5WAEFnyrWv+UM5MbuuIsf7Hqzgl41+kfe+H22/Lx0GdQKrHRfGOqO6jbRc e+baOU1PvDFE9txRz0poyNxR38jgrdtr5oQkVZp7t8IwDafOrngd2sDI5HfGa7zc VO27RaMGlhj+atQs80WBr5A69OXM3js= -----END CERTIFICATE-----Generated at Thu Mar 26 23:21:51 2026 by rpki-client