$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/22ffa8f4-e794-3a66-89df-98333aa3af9f.roa File: 22ffa8f4-e794-3a66-89df-98333aa3af9f.roa (raw, json) Hash identifier: Bw7SXvXnFqFborhsWJA2eScDKXa2An89lridpx3nqrU= Subject key identifier: EE:43:F0:5F:9B:8B:05:CA:DC:BB:D7:BF:92:B6:45:0A:A2:69:14:65 Certificate issuer: /CN=29c10060-705c-45ae-937b-544864b670d7 Certificate serial: 010D0C9F4328584D44FA30F3F8E48F4E7378DA00 Authority key identifier: 7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/22ffa8f4-e794-3a66-89df-98333aa3af9f.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 14618 IP address blocks: 64.71.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:30:f3:f8:e4:8f:4e:73:78:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c10060-705c-45ae-937b-544864b670d7 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=c7b57b45-a06a-4100-a0c5-fd981826f743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:34:60:0d:62:e3:f9:90:9e:60:4b:bc:af:b8: 5e:b8:de:69:57:18:c2:49:1c:ea:ea:27:ef:0a:9a: 54:c4:9f:6e:a9:7a:3c:f8:8c:c2:30:83:60:bf:2e: f3:f6:65:6d:15:6b:35:41:f0:87:7d:c2:e9:c8:7e: 31:88:5f:1b:16:09:55:b3:23:e9:5a:2a:a3:5b:0f: 02:8e:14:7f:d6:0f:5d:12:b5:24:c6:b1:e2:b7:85: 5f:27:4e:d7:77:af:18:b3:b7:0b:00:a5:c9:96:b7: 32:4d:c7:64:3a:8d:61:64:06:cd:d9:37:02:3c:e4: c2:0e:fb:28:85:89:78:ea:5e:c8:03:44:1e:3e:ca: 8d:20:f6:e2:4d:af:ce:c9:75:72:2f:29:1e:c1:91: 7f:62:aa:7f:28:1e:26:08:3a:46:ad:91:7f:5e:94: 26:d9:0c:78:fa:ae:33:6f:1b:c5:6c:91:be:54:aa: a6:54:0e:17:2d:4d:82:33:28:a8:a1:6b:13:25:8e: da:dd:72:9a:6f:0e:95:74:c0:29:8b:b1:ff:cb:be: 55:36:01:e6:76:ac:48:c1:16:3e:04:17:0b:2e:ef: e1:f0:67:d4:68:1a:97:dc:a8:8b:f7:2a:82:f9:3f: 70:ea:88:75:a7:da:97:70:8e:93:fb:a9:04:ff:7f: b6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:43:F0:5F:9B:8B:05:CA:DC:BB:D7:BF:92:B6:45:0A:A2:69:14:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/22ffa8f4-e794-3a66-89df-98333aa3af9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl X509v3 Authority Key Identifier: keyid:7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer sbgp-ipAddrBlock: critical IPv4: 64.71.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:64:8d:8a:c6:66:ba:ef:e4:93:4c:86:58:5f:33:4c:8d:d0: 97:17:fc:09:b7:80:42:7d:45:09:96:e4:ed:33:45:bd:9c:54: d5:46:59:7e:28:db:9b:70:14:b1:cb:9a:32:ed:ff:4b:3b:09: 88:f6:fb:74:8a:39:20:2d:25:38:c5:2b:02:62:0c:10:d8:8d: 95:a7:02:2b:06:9e:eb:9f:57:58:c0:f4:bf:f8:ce:ea:5f:6e: 33:79:81:33:88:9e:b5:3e:19:69:24:f5:1e:58:62:5f:04:e2: df:22:48:2c:dc:78:9e:e0:c1:65:06:28:12:d7:d6:1c:24:1f: 59:b8:d6:e2:12:ae:61:e2:d9:f9:de:ad:53:14:c3:3d:2c:86: ee:e3:fb:a7:5e:31:45:dd:81:8a:50:ae:4e:82:66:de:54:fb: f9:f6:39:87:34:aa:ba:6a:16:d4:08:b8:c7:87:09:52:be:3b: f7:3b:cd:ca:1f:e9:e2:3e:da:12:f2:c8:5d:f6:e5:f9:0b:f1: 11:f8:41:f2:c4:23:f2:28:85:fa:de:23:19:0f:6b:bf:9e:7e: 2a:ab:71:b2:d4:6f:4e:2a:f0:2e:a3:a1:0e:17:a8:b1:55:ea: 5f:4d:a5:d1:8a:9c:2c:83:82:44:d7:ca:0b:59:a5:9b:8f:49: a7:a0:7f:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+jDz+OSPTnN42gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjljMTAwNjAtNzA1Yy00NWFlLTkzN2ItNTQ0ODY0YjY3 MGQ3MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YzdiNTdiNDUtYTA2YS00MTAwLWEwYzUtZmQ5ODE4MjZmNzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTRgDWLj+ZCeYEu8r7heuN5pVxjCSRzq6ifv CppUxJ9uqXo8+IzCMINgvy7z9mVtFWs1QfCHfcLpyH4xiF8bFglVsyPpWiqjWw8C jhR/1g9dErUkxrHit4VfJ07Xd68Ys7cLAKXJlrcyTcdkOo1hZAbN2TcCPOTCDvso hYl46l7IA0QePsqNIPbiTa/OyXVyLykewZF/Yqp/KB4mCDpGrZF/XpQm2Qx4+q4z bxvFbJG+VKqmVA4XLU2CMyiooWsTJY7a3XKabw6VdMApi7H/y75VNgHmdqxIwRY+ BBcLLu/h8GfUaBqX3KiL9yqC+T9w6oh1p9qXcI6T+6kE/3+2twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5D8F+biwXK3LvXv5K2RQqiaRRlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWMx MDA2MC03MDVjLTQ1YWUtOTM3Yi01NDQ4NjRiNjcwZDcvMjJmZmE4ZjQtZTc5NC0z YTY2LTg5ZGYtOTgzMzNhYTNhZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjljMTAwNjAtNzA1Yy00NWFlLTkz N2ItNTQ0ODY0YjY3MGQ3LzI5YzEwMDYwLTcwNWMtNDVhZS05MzdiLTU0NDg2NGI2 NzBkNy5jcmwwHwYDVR0jBBgwFoAUerujR0uJvb0x9xey3AKylKEuC8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWMxMDA2MC03MDVjLTQ1YWUtOTM3Yi01NDQ4 NjRiNjcwZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEfuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJkjYrGZrrv5JNMhlhfM0yN0JcX/Am3gEJ9RQmW5O0zRb2cVNVGWX4o 25twFLHLmjLt/0s7CYj2+3SKOSAtJTjFKwJiDBDYjZWnAisGnuufV1jA9L/4zupf bjN5gTOInrU+GWkk9R5YYl8E4t8iSCzceJ7gwWUGKBLX1hwkH1m41uISrmHi2fne rVMUwz0shu7j+6deMUXdgYpQrk6CZt5U+/n2OYc0qrpqFtQIuMeHCVK+O/c7zcof 6eI+2hLyyF325fkL8RH4QfLEI/IohfreIxkPa7+efiqrcbLUb04q8C6joQ4XqLFV 6l9NpdGKnCyDgkTXygtZpZuPSaegf0E= -----END CERTIFICATE-----Generated at Thu Mar 26 03:45:09 2026 by rpki-client