$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa File: 8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa (raw, json) Hash identifier: zShlbAI2tjNivphnysFU7IQlr3nH+sdYiwqrTgaG0yU= Subject key identifier: 80:10:02:78:2E:BA:D6:49:D2:58:EC:3F:3D:5E:87:AA:88:F3:19:CB Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F4328584D3DFFB4AAA65CAC3425E66580 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 16509 IP address blocks: 64.29.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b4:aa:a6:5c:ac:34:25:e6:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=ac532b36-67f3-40f7-bd26-b3c18c4e567b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:22:c0:8c:e2:d3:a0:66:63:c0:35:c5:51:22: fb:b1:9b:eb:24:1c:84:ca:2d:89:30:d5:d4:57:84: 91:67:69:44:c0:87:79:f1:40:b7:77:7a:fd:f7:b5: 56:ea:d8:d3:fd:ff:c2:51:25:b2:41:13:c4:ca:48: 50:71:c8:9d:8e:45:f4:ba:0d:0c:ac:f5:f9:69:78: 53:4a:d6:d2:59:bf:ae:5d:e2:06:e7:d2:91:08:05: f9:25:ee:db:28:7c:5c:0d:88:ab:bd:61:8b:19:53: 8c:0c:57:ed:ba:e2:90:b6:31:f9:84:bd:35:ac:98: 41:8d:9d:c8:7d:f3:a5:f8:3e:0f:d4:a5:1f:e2:41: 0a:3d:2a:d9:89:a1:49:c3:b1:7a:ad:09:8a:67:d5: 16:88:73:21:28:12:a7:75:14:0f:89:4b:d6:20:39: 65:7f:5f:d2:aa:4f:d7:d7:fa:48:0e:e7:6b:b3:4c: bf:1b:bd:a4:c0:1f:2b:ef:74:0a:c7:3d:06:5b:9c: 99:84:34:88:1f:61:c4:cf:a9:e7:b7:e8:b5:7e:ae: 9a:cf:62:fc:65:e0:15:d5:80:d9:6a:e9:3a:f9:19: 78:39:88:50:c2:a2:b5:b2:eb:d5:7d:c7:83:3b:24: 7c:88:4b:c9:8d:bb:1e:11:a9:73:d7:3c:7b:1b:34: 97:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:10:02:78:2E:BA:D6:49:D2:58:EC:3F:3D:5E:87:AA:88:F3:19:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 64.29.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:a5:ce:e7:25:76:e1:d3:2e:c2:01:5d:a0:c6:38:80:bf:86: df:c2:e2:8a:e5:00:2b:e8:24:20:8e:bf:ca:13:70:ba:e3:01: 65:02:d9:11:02:d0:c0:88:e6:22:e3:c9:7c:61:8d:58:04:36: 91:42:cd:37:03:e2:a6:61:07:c0:b5:90:69:5e:1d:43:fc:1e: dc:2e:bb:c2:a5:9c:3d:98:57:84:6c:f8:ee:3c:63:81:f8:6b: 58:d0:ae:f2:cf:4e:9e:63:db:c0:41:02:ce:ee:03:75:ca:8f: 2e:45:10:61:bd:ef:03:84:73:bb:14:b8:5b:07:d6:e8:fc:73: d2:2e:28:4c:66:68:d9:51:ae:7b:e6:c5:a3:d8:d2:4e:78:89: d9:49:95:14:9b:56:91:9d:ef:29:c1:89:48:18:c4:1a:6e:f7: a6:a6:67:91:2b:2b:19:de:47:f8:b7:d9:83:7d:7a:ff:0b:b8: 3a:64:e5:20:fb:1e:57:08:b4:8e:76:ec:cc:9d:0c:87:64:62: 1a:e3:95:42:28:84:b0:94:b2:19:71:c4:b3:b0:e6:0b:6f:0a: 84:09:02:71:01:4f:4f:78:e9:d1:6c:26:ad:04:26:6b:40:83: 83:ee:10:a8:ac:2b:8e:7f:88:bd:2e:f7:61:25:a5:b7:d1:4a: f5:42:40:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7SqplysNCXmZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YWM1MzJiMzYtNjdmMy00MGY3LWJkMjYtYjNjMThjNGU1NjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyLAjOLToGZjwDXFUSL7sZvrJByEyi2JMNXU V4SRZ2lEwId58UC3d3r997VW6tjT/f/CUSWyQRPEykhQccidjkX0ug0MrPX5aXhT StbSWb+uXeIG59KRCAX5Je7bKHxcDYirvWGLGVOMDFftuuKQtjH5hL01rJhBjZ3I ffOl+D4P1KUf4kEKPSrZiaFJw7F6rQmKZ9UWiHMhKBKndRQPiUvWIDllf1/Sqk/X 1/pIDudrs0y/G72kwB8r73QKxz0GW5yZhDSIH2HEz6nnt+i1fq6az2L8ZeAV1YDZ auk6+Rl4OYhQwqK1suvVfceDOyR8iEvJjbseEalz1zx7GzSX+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAQAnguutZJ0ljsPz1eh6qI8xnLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvOGE1YjhiMzgtZDRiNy0z YjQ4LWE4YWMtZWYyOTM4YjExOTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQB0RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMKlzuclduHTLsIBXaDGOIC/ht/C4orlACvoJCCOv8oTcLrjAWUC2REC 0MCI5iLjyXxhjVgENpFCzTcD4qZhB8C1kGleHUP8Htwuu8KlnD2YV4Rs+O48Y4H4 a1jQrvLPTp5j28BBAs7uA3XKjy5FEGG97wOEc7sUuFsH1uj8c9IuKExmaNlRrnvm xaPY0k54idlJlRSbVpGd7ynBiUgYxBpu96amZ5ErKxneR/i32YN9ev8LuDpk5SD7 HlcItI527MydDIdkYhrjlUIohLCUshlxxLOw5gtvCoQJAnEBT0946dFsJq0EJmtA g4PuEKisK45/iL0u92ElpbfRSvVCQJk= -----END CERTIFICATE-----Generated at Thu Mar 26 03:43:03 2026 by rpki-client