$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/620ebd4f-8711-3675-9cfc-211bb7d52f0b.roa File: 620ebd4f-8711-3675-9cfc-211bb7d52f0b.roa (raw, json) Hash identifier: ArHMlvHkdOLYBp7+H/O2qZxsbzGy7bI02nzfnqCKBNA= Subject key identifier: C6:AE:76:A8:46:C0:72:E1:32:8F:62:BB:09:2B:80:B0:DA:8B:DC:96 Certificate issuer: /CN=7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1 Certificate serial: 010D0C9F4328584D13D9914856E4853F74B6B800 Authority key identifier: 31:55:1F:1B:33:E6:E5:B7:AB:AC:0D:36:B6:7D:DD:EA:B4:60:E3:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/620ebd4f-8711-3675-9cfc-211bb7d52f0b.roa Signing time: Fri 06 Mar 2026 10:40:18 +0000 ROA not before: Fri 06 Mar 2026 10:40:18 +0000 ROA not after: Thu 04 Jun 2026 09:40:18 +0000 asID: 29789 IP address blocks: 64.88.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:13:d9:91:48:56:e4:85:3f:74:b6:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1 Validity Not Before: Mar 6 10:40:18 2026 GMT Not After : Jun 4 09:40:18 2026 GMT Subject: CN=83c84f68-9061-4786-aea9-9b936a993f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f8:b9:9d:eb:44:e1:42:eb:9d:cd:ab:d7:8f: 35:c9:4c:a7:42:c2:ff:54:1b:f6:86:32:74:fd:f7: 27:26:3d:b6:7d:63:33:0a:ea:36:63:34:4c:c7:ff: 18:e9:2b:e6:95:3a:a9:4e:c3:88:c0:28:9b:2a:3b: 44:5d:63:32:b5:7a:3d:f2:51:1d:dc:09:08:4e:b1: 6c:44:55:5a:7c:c8:08:98:66:37:fa:27:31:fc:66: ff:ce:fe:f6:89:5b:ed:fa:ae:4b:53:a3:9c:06:6f: 5a:cd:12:31:35:14:9d:62:55:35:a7:a1:60:29:02: 61:b8:4a:c4:70:23:84:76:a5:c9:93:84:54:81:84: 91:88:22:8e:95:fb:12:91:1b:85:2f:c8:0b:ff:76: 81:b7:98:71:6f:82:2c:ee:ff:c7:47:47:5d:d8:1b: 60:56:09:88:25:bd:31:12:0d:68:3f:2c:a9:b9:90: 70:43:96:fa:cd:ce:7c:5d:8b:1c:28:95:c4:90:ac: 16:a7:e4:2b:a2:39:14:52:cd:dc:63:a5:26:e1:cd: 20:7a:5e:76:3c:46:0d:53:f2:51:a0:71:12:59:6f: 61:a3:7f:06:3e:b4:05:0c:b6:52:e2:f4:aa:e9:d5: a3:57:4a:04:e6:6b:a4:4a:da:52:89:71:d2:82:7a: 4b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AE:76:A8:46:C0:72:E1:32:8F:62:BB:09:2B:80:B0:DA:8B:DC:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/620ebd4f-8711-3675-9cfc-211bb7d52f0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.crl X509v3 Authority Key Identifier: keyid:31:55:1F:1B:33:E6:E5:B7:AB:AC:0D:36:B6:7D:DD:EA:B4:60:E3:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.cer sbgp-ipAddrBlock: critical IPv4: 64.88.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b5:2a:44:df:04:a2:80:33:a6:44:74:a0:bd:52:5d:47:f6: 34:df:18:8e:75:7f:9f:6e:55:f1:ba:5d:c8:09:02:98:ec:9e: e5:81:2d:4e:f0:35:c5:b7:a2:9e:01:67:6d:52:0f:d0:ed:72: 6a:7e:2a:35:7c:0a:ee:56:d5:8f:06:6f:99:d2:68:30:48:6e: c1:4d:dd:92:ec:bc:8a:d1:2a:db:27:50:04:5e:ba:b7:da:62: 27:c1:4d:47:47:4d:3e:d5:82:68:c9:85:1c:f5:14:f4:fc:2f: 19:64:27:a4:c9:8d:4e:f6:81:04:80:13:4f:7c:e2:a7:d9:98: 75:46:44:1b:8b:34:80:26:45:a4:5f:b2:17:3f:5b:22:1f:bd: 01:84:50:c1:fc:72:e3:7e:9d:ad:94:16:af:c8:e8:87:6e:47: 4d:c6:9a:bc:f8:3a:29:ed:8a:24:4f:41:39:63:29:46:f1:2b: 62:a5:96:af:00:3b:51:a3:5d:28:cc:99:3d:18:1f:61:42:d9: e1:2a:d6:9d:b6:79:db:05:59:f3:d7:a0:c1:79:92:91:aa:bb: 72:f9:0b:5e:28:e4:96:46:e2:15:1b:39:d3:f2:26:fd:4f:1e: bd:2f:23:5d:f4:d0:d6:b7:48:13:6e:bf:52:90:2f:51:9d:69: d7:1b:ca:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0T2ZFIVuSFP3S2uAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwYWQyYzUtNmY3MC00Y2QwLThlMDQtZmZhOWQ5Y2Rl ZmYxMB4XDTI2MDMwNjEwNDAxOFoXDTI2MDYwNDA5NDAxOFowLzEtMCsGA1UEAxMk ODNjODRmNjgtOTA2MS00Nzg2LWFlYTktOWI5MzZhOTkzZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfi5netE4ULrnc2r1481yUynQsL/VBv2hjJ0 /fcnJj22fWMzCuo2YzRMx/8Y6SvmlTqpTsOIwCibKjtEXWMytXo98lEd3AkITrFs RFVafMgImGY3+icx/Gb/zv72iVvt+q5LU6OcBm9azRIxNRSdYlU1p6FgKQJhuErE cCOEdqXJk4RUgYSRiCKOlfsSkRuFL8gL/3aBt5hxb4Is7v/HR0dd2BtgVgmIJb0x Eg1oPyypuZBwQ5b6zc58XYscKJXEkKwWp+QrojkUUs3cY6Um4c0gel52PEYNU/JR oHESWW9ho38GPrQFDLZS4vSq6dWjV0oE5mukStpSiXHSgnpL1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMaudqhGwHLhMo9iuwkrgLDai9yWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83YTBh ZDJjNS02ZjcwLTRjZDAtOGUwNC1mZmE5ZDljZGVmZjEvNjIwZWJkNGYtODcxMS0z Njc1LTljZmMtMjExYmI3ZDUyZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvN2EwYWQyYzUtNmY3MC00Y2QwLThl MDQtZmZhOWQ5Y2RlZmYxLzdhMGFkMmM1LTZmNzAtNGNkMC04ZTA0LWZmYTlkOWNk ZWZmMS5jcmwwHwYDVR0jBBgwFoAUMVUfGzPm5berrA02tn3d6rRg4yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83YTBhZDJjNS02ZjcwLTRjZDAtOGUwNC1mZmE5 ZDljZGVmZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFj4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC21KkTfBKKAM6ZEdKC9Ul1H9jTfGI51f59uVfG6XcgJApjsnuWBLU7w NcW3op4BZ21SD9Dtcmp+KjV8Cu5W1Y8Gb5nSaDBIbsFN3ZLsvIrRKtsnUAReurfa YifBTUdHTT7VgmjJhRz1FPT8LxlkJ6TJjU72gQSAE0984qfZmHVGRBuLNIAmRaRf shc/WyIfvQGEUMH8cuN+na2UFq/I6IduR03Gmrz4OintiiRPQTljKUbxK2Kllq8A O1GjXSjMmT0YH2FC2eEq1p22edsFWfPXoMF5kpGqu3L5C14o5JZG4hUbOdPyJv1P Hr0vI1300Na3SBNuv1KQL1GdadcbylA= -----END CERTIFICATE-----Generated at Thu Mar 26 08:11:36 2026 by rpki-client