$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/d347ed32-e2bd-3361-8277-9049ef1fab74.roa File: d347ed32-e2bd-3361-8277-9049ef1fab74.roa (raw, json) Hash identifier: rh9n8k5SJQN9ajgFTrLeuWz7dyRxYg436IYpN2u2Ij0= Subject key identifier: D6:60:F5:3C:08:B0:26:35:7E:D8:1A:B0:A5:CC:B4:B8:FE:A1:91:22 Certificate issuer: /CN=7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1 Certificate serial: 010D0C9F4328584D9E500DC65ABE03B450394F00 Authority key identifier: 31:55:1F:1B:33:E6:E5:B7:AB:AC:0D:36:B6:7D:DD:EA:B4:60:E3:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/d347ed32-e2bd-3361-8277-9049ef1fab74.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 29789 IP address blocks: 64.88.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:0d:c6:5a:be:03:b4:50:39:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=ea42b9b9-e84a-4fc8-8df1-88401d277da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5c:f7:64:11:56:21:06:d8:ca:8c:60:31:82: 58:a2:d3:ea:c3:24:52:db:33:7f:23:c3:b5:f9:58: 30:95:b8:bb:90:06:c0:2b:26:2c:59:31:8f:af:ed: 91:17:44:f8:87:ea:b6:d6:ef:7a:4d:7a:fa:17:ce: 05:b5:02:23:1c:74:b1:1f:1d:6e:c6:ca:44:c5:9a: 24:8a:8c:c9:e7:a8:95:ec:b4:ce:fc:6b:58:93:d1: 93:86:0d:36:9e:47:12:2c:cc:9f:30:72:8a:61:e2: 5d:41:a7:70:d5:0a:72:45:7e:a1:a4:76:d2:62:32: 71:ae:df:2f:77:e5:50:62:59:f0:7b:da:08:7c:75: 32:b1:e9:de:7c:26:2b:f6:32:d0:f5:5e:d1:ba:51: dc:78:46:91:42:19:cc:05:15:54:cc:3e:f3:1c:44: a8:d7:ca:9e:51:ec:36:26:b9:d9:7b:fe:a4:57:49: cf:78:81:73:7d:4f:22:d2:c3:12:0b:ad:42:e2:a6: 90:b1:b8:d1:93:fa:3a:56:d4:e6:d3:06:16:10:34: a5:08:d8:8f:4d:38:cc:20:bb:99:06:81:df:2c:bd: df:da:0d:78:a5:c2:f6:8a:fe:40:d8:1f:4d:82:43: d4:e3:9e:ef:95:65:25:be:a5:cc:9e:84:08:39:68: 09:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:60:F5:3C:08:B0:26:35:7E:D8:1A:B0:A5:CC:B4:B8:FE:A1:91:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/d347ed32-e2bd-3361-8277-9049ef1fab74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.crl X509v3 Authority Key Identifier: keyid:31:55:1F:1B:33:E6:E5:B7:AB:AC:0D:36:B6:7D:DD:EA:B4:60:E3:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.cer sbgp-ipAddrBlock: critical IPv4: 64.88.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:6a:68:66:a0:5f:0f:11:f9:32:bf:14:d5:df:ce:e3:57:f1: e8:57:d1:4e:d6:c9:99:cb:ab:ca:8b:5a:db:9d:98:73:a9:38: 25:53:da:ff:26:97:bc:93:93:1e:51:cf:48:22:24:59:cb:a0: 66:23:59:82:0e:e5:3d:48:04:2c:76:48:66:f4:04:b8:9c:c2: e7:f3:48:4f:67:05:1a:b3:82:fe:91:98:de:30:b7:9c:3b:f0: fe:e3:e3:fb:ec:15:72:be:5b:94:52:b8:e4:6c:23:b9:f0:d1: e7:10:b6:fa:35:63:a3:b5:ea:30:85:55:d9:35:3a:4a:2d:31: ef:c2:a7:98:0b:6c:e3:38:31:0a:fd:23:84:95:f5:21:0b:c4: d3:f5:9a:9b:fc:63:cf:75:c3:c7:ea:ef:a1:3f:3d:63:74:2d: 4f:dd:97:ee:c4:73:5e:5b:d4:48:eb:db:cc:8c:d2:1d:3a:9e: c3:e6:b7:69:90:60:26:87:8f:be:ce:39:6b:31:55:ed:02:1d: 31:7e:93:14:58:55:29:3c:d1:71:df:46:71:76:81:bb:2e:02: 08:10:ef:ae:16:bd:05:23:3a:8e:8d:97:b6:7a:38:63:9f:a6: 69:9b:22:c2:58:d2:b2:39:46:46:d8:95:9d:ee:a7:b0:ec:18: dc:41:e7:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUA3GWr4DtFA5TwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwYWQyYzUtNmY3MC00Y2QwLThlMDQtZmZhOWQ5Y2Rl ZmYxMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk ZWE0MmI5YjktZTg0YS00ZmM4LThkZjEtODg0MDFkMjc3ZGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlz3ZBFWIQbYyoxgMYJYotPqwyRS2zN/I8O1 +Vgwlbi7kAbAKyYsWTGPr+2RF0T4h+q21u96TXr6F84FtQIjHHSxHx1uxspExZok iozJ56iV7LTO/GtYk9GThg02nkcSLMyfMHKKYeJdQadw1QpyRX6hpHbSYjJxrt8v d+VQYlnwe9oIfHUysenefCYr9jLQ9V7RulHceEaRQhnMBRVUzD7zHESo18qeUew2 JrnZe/6kV0nPeIFzfU8i0sMSC61C4qaQsbjRk/o6VtTm0wYWEDSlCNiPTTjMILuZ BoHfLL3f2g14pcL2iv5A2B9NgkPU457vlWUlvqXMnoQIOWgJCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZg9TwIsCY1ftgasKXMtLj+oZEiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83YTBh ZDJjNS02ZjcwLTRjZDAtOGUwNC1mZmE5ZDljZGVmZjEvZDM0N2VkMzItZTJiZC0z MzYxLTgyNzctOTA0OWVmMWZhYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvN2EwYWQyYzUtNmY3MC00Y2QwLThl MDQtZmZhOWQ5Y2RlZmYxLzdhMGFkMmM1LTZmNzAtNGNkMC04ZTA0LWZmYTlkOWNk ZWZmMS5jcmwwHwYDVR0jBBgwFoAUMVUfGzPm5berrA02tn3d6rRg4yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83YTBhZDJjNS02ZjcwLTRjZDAtOGUwNC1mZmE5 ZDljZGVmZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFj0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtqaGagXw8R+TK/FNXfzuNX8ehX0U7WyZnLq8qLWtudmHOpOCVT2v8m l7yTkx5Rz0giJFnLoGYjWYIO5T1IBCx2SGb0BLicwufzSE9nBRqzgv6RmN4wt5w7 8P7j4/vsFXK+W5RSuORsI7nw0ecQtvo1Y6O16jCFVdk1OkotMe/Cp5gLbOM4MQr9 I4SV9SELxNP1mpv8Y891w8fq76E/PWN0LU/dl+7Ec15b1Ejr28yM0h06nsPmt2mQ YCaHj77OOWsxVe0CHTF+kxRYVSk80XHfRnF2gbsuAggQ764WvQUjOo6Nl7Z6OGOf pmmbIsJY0rI5RkbYlZ3up7DsGNxB56s= -----END CERTIFICATE-----Generated at Wed May 13 01:09:49 2026 by rpki-client