$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/829121bb-ad6c-3bdb-a8a4-eba4a2b950e5.roa File: 829121bb-ad6c-3bdb-a8a4-eba4a2b950e5.roa (raw, json) Hash identifier: 0+wrhljr2NiTeetNyAN3lzvAR2UMIqUdu6REwL8R/YE= Subject key identifier: 52:CA:99:EB:15:04:3C:30:71:90:BA:4D:75:14:5D:A1:33:79:F4:2D Certificate issuer: /CN=4e84d19a-da77-4951-9413-0914c81e76e1 Certificate serial: 010D0C9F4328584D359FFD16DE037D4813EAA340 Authority key identifier: C7:C9:7C:EF:6D:1F:19:1E:41:FE:17:4C:7E:AF:BB:AE:C9:09:71:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/829121bb-ad6c-3bdb-a8a4-eba4a2b950e5.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 8987 IP address blocks: 64.190.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:fd:16:de:03:7d:48:13:ea:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e84d19a-da77-4951-9413-0914c81e76e1 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=6c6df67e-8541-43a7-bdbc-0cc2d53b4a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f8:98:f7:0d:2b:70:a8:6c:6b:90:72:90:29: 0f:fb:49:5a:61:ed:a7:af:d5:3a:65:43:29:98:1d: ae:ea:66:0d:c9:b2:4c:1e:ed:91:a8:98:af:7e:24: 1b:75:e9:89:ef:e1:08:42:08:b9:d7:d8:01:58:e1: 7f:cc:73:26:fa:09:ef:63:b4:19:c0:c4:d0:18:ee: 33:eb:bd:2d:6d:eb:9f:f2:60:58:44:89:2a:04:28: dc:ee:a0:c3:74:15:b5:21:09:5c:b0:77:64:61:cc: a6:f9:3a:0e:68:8c:33:c7:65:a0:08:2f:66:ee:43: e2:2c:42:87:1e:ca:7f:03:22:ab:d1:2c:5c:0f:db: bc:b4:cd:83:e7:8e:5a:3b:e3:5b:b7:cf:21:be:39: a4:5d:e0:a8:15:a6:bc:49:10:a7:0f:47:0c:83:77: fc:be:a0:c0:ba:26:5c:74:23:ab:6b:69:29:f7:1d: 64:69:a3:dd:56:52:9e:b4:c3:5d:80:40:f8:3b:8d: d7:8e:4e:63:51:74:48:f0:b3:06:e9:86:77:a3:0e: d1:07:af:33:02:39:83:50:cd:92:31:29:6f:ed:62: 77:85:14:46:d3:7a:17:fa:a8:00:af:33:80:65:c3: 83:2e:13:27:8f:72:b8:5f:80:e6:a5:b9:ab:a9:06: 41:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CA:99:EB:15:04:3C:30:71:90:BA:4D:75:14:5D:A1:33:79:F4:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/829121bb-ad6c-3bdb-a8a4-eba4a2b950e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.crl X509v3 Authority Key Identifier: keyid:C7:C9:7C:EF:6D:1F:19:1E:41:FE:17:4C:7E:AF:BB:AE:C9:09:71:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer sbgp-ipAddrBlock: critical IPv4: 64.190.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:0a:7a:9d:9e:be:41:ed:02:10:e8:03:0e:d8:f0:54:72:a6: ee:47:c0:f4:08:f1:04:25:a6:a2:94:ad:4f:f4:b1:e0:54:21: c4:53:cd:bb:16:aa:5b:9e:04:4e:04:8c:00:24:cd:12:b0:0c: f9:36:89:0d:66:26:76:95:e7:17:52:c8:cf:a3:70:ab:89:0e: 58:94:e2:b2:df:8a:37:5a:32:cd:0a:1b:f4:11:b6:5e:43:39: 48:a5:3a:da:fc:18:d7:a2:fb:7d:9c:5d:7d:05:be:52:38:c6: f8:83:8a:c9:82:1c:da:e6:68:35:6d:86:92:58:e4:dc:94:dd: eb:3c:7c:86:eb:6e:d5:1a:ec:87:af:a8:a1:ba:47:57:f1:e7: 97:8f:72:73:e4:c2:bf:2f:ea:5f:50:84:6b:4a:83:42:4e:6b: 02:79:83:38:a6:20:14:54:3e:2b:d5:d2:61:b8:3b:15:ad:a7: 2e:16:6c:8c:c2:5e:a0:50:cd:66:fe:7c:1c:11:40:b9:a6:84: 4a:b6:b0:0a:8e:8a:d6:e8:05:10:35:51:6c:a0:8a:2b:92:4e: 80:32:c6:4f:6e:f8:13:75:2d:37:8e:03:27:60:07:29:30:10: 20:16:1a:e3:76:c4:0d:c3:8e:66:6f:b9:90:1b:f7:92:84:09: 0a:17:5c:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n/0W3gN9SBPqo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4NGQxOWEtZGE3Ny00OTUxLTk0MTMtMDkxNGM4MWU3 NmUxMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NmM2ZGY2N2UtODU0MS00M2E3LWJkYmMtMGNjMmQ1M2I0YTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPiY9w0rcKhsa5BykCkP+0laYe2nr9U6ZUMp mB2u6mYNybJMHu2RqJivfiQbdemJ7+EIQgi519gBWOF/zHMm+gnvY7QZwMTQGO4z 670tbeuf8mBYRIkqBCjc7qDDdBW1IQlcsHdkYcym+ToOaIwzx2WgCC9m7kPiLEKH Hsp/AyKr0SxcD9u8tM2D545aO+Nbt88hvjmkXeCoFaa8SRCnD0cMg3f8vqDAuiZc dCOra2kp9x1kaaPdVlKetMNdgED4O43Xjk5jUXRI8LMG6YZ3ow7RB68zAjmDUM2S MSlv7WJ3hRRG03oX+qgArzOAZcODLhMnj3K4X4DmpbmrqQZBHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLKmesVBDwwcZC6TXUUXaEzefQtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80ZTg0 ZDE5YS1kYTc3LTQ5NTEtOTQxMy0wOTE0YzgxZTc2ZTEvODI5MTIxYmItYWQ2Yy0z YmRiLWE4YTQtZWJhNGEyYjk1MGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGU4NGQxOWEtZGE3Ny00OTUxLTk0 MTMtMDkxNGM4MWU3NmUxLzRlODRkMTlhLWRhNzctNDk1MS05NDEzLTA5MTRjODFl NzZlMS5jcmwwHwYDVR0jBBgwFoAUx8l8720fGR5B/hdMfq+7rskJcVgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80ZTg0ZDE5YS1kYTc3LTQ5NTEtOTQxMy0wOTE0 YzgxZTc2ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL7UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIKep2evkHtAhDoAw7Y8FRypu5HwPQI8QQlpqKUrU/0seBUIcRTzbsW qlueBE4EjAAkzRKwDPk2iQ1mJnaV5xdSyM+jcKuJDliU4rLfijdaMs0KG/QRtl5D OUilOtr8GNei+32cXX0FvlI4xviDismCHNrmaDVthpJY5NyU3es8fIbrbtUa7Iev qKG6R1fx55ePcnPkwr8v6l9QhGtKg0JOawJ5gzimIBRUPivV0mG4OxWtpy4WbIzC XqBQzWb+fBwRQLmmhEq2sAqOitboBRA1UWygiiuSToAyxk9u+BN1LTeOAydgBykw ECAWGuN2xA3DjmZvuZAb95KECQoXXAQ= -----END CERTIFICATE-----Generated at Thu Mar 26 05:10:46 2026 by rpki-client