$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/400c0738-5d51-3d90-bd87-79c08fe6e27a.roa File: 400c0738-5d51-3d90-bd87-79c08fe6e27a.roa (raw, json) Hash identifier: WJJAwMu5/mRq2pMkjC52T63tgLx5C640svuP38EXH3g= Subject key identifier: CE:B1:BC:6E:E1:A6:3A:5B:5B:8B:C7:65:77:80:AA:06:14:F1:05:A6 Certificate issuer: /CN=f29fac19-e536-4e67-a788-6a1d4483389f Certificate serial: 010D0C9F4328584D4A8FA2F7F8A57B50512C77C0 Authority key identifier: DB:6D:43:CE:3D:45:18:70:71:B4:83:AB:35:B7:D2:65:A6:1C:F6:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/400c0738-5d51-3d90-bd87-79c08fe6e27a.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 397715 IP address blocks: 64.4.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/f29fac19-e536-4e67-a788-6a1d4483389f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/f29fac19-e536-4e67-a788-6a1d4483389f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:a2:f7:f8:a5:7b:50:51:2c:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fac19-e536-4e67-a788-6a1d4483389f Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=fefb8e13-6bca-4508-ad75-11cab63410d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:91:dc:27:6a:c9:9f:79:cc:f7:08:ae:ed:39: 57:80:0b:27:e1:4e:7c:cb:eb:4f:d6:5c:99:99:ee: da:2c:77:30:4a:27:4c:ef:ce:bb:bd:9e:f0:e5:48: 6c:7c:2b:ba:ef:e5:98:9e:65:3d:9e:47:b8:8a:52: a4:62:33:03:3f:44:39:84:8c:e2:0e:f0:03:4b:76: 80:c0:d0:94:69:95:2e:21:09:d3:f3:f5:4f:c5:7f: 31:d0:97:51:fa:9e:d9:d8:f1:88:1f:63:14:ef:04: 00:b9:ac:b2:be:87:ad:9b:11:49:2b:b5:40:d2:b6: c9:2a:82:13:b7:a4:89:ed:83:f1:a4:c3:7a:9b:93: 6b:87:58:fb:6d:e7:a0:78:75:46:23:37:2b:5f:ac: 3c:09:ec:12:60:e0:4d:19:f0:dd:f7:5f:e1:97:dc: 22:d5:ec:9d:58:81:76:01:52:5b:0d:c0:40:e5:fc: d9:fc:88:c0:4d:34:7a:6e:ba:75:94:79:4c:3a:58: 75:bd:d7:0f:28:65:55:40:49:99:ba:6a:2b:90:fd: 91:19:d0:62:28:bb:13:78:84:f9:55:b7:39:4a:0c: bf:2b:5b:c9:c8:08:18:5b:55:4e:07:0c:3e:c5:40: aa:8a:ef:4d:51:56:fe:77:d1:49:97:84:d4:5a:f1: 0a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B1:BC:6E:E1:A6:3A:5B:5B:8B:C7:65:77:80:AA:06:14:F1:05:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/400c0738-5d51-3d90-bd87-79c08fe6e27a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/f29fac19-e536-4e67-a788-6a1d4483389f.crl X509v3 Authority Key Identifier: keyid:DB:6D:43:CE:3D:45:18:70:71:B4:83:AB:35:B7:D2:65:A6:1C:F6:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f.cer sbgp-ipAddrBlock: critical IPv4: 64.4.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:3a:38:5e:da:f2:b4:93:ad:47:be:b6:86:2d:20:b7:36:94: 7f:0b:ea:76:e0:03:31:12:d1:fc:ad:89:48:b5:77:2a:6f:e5: f6:06:b2:85:20:e5:91:be:d6:db:90:96:48:33:54:8b:53:96: 39:c8:a3:0d:38:e3:1f:49:27:1f:6a:d1:f8:33:20:d5:ff:1d: 7e:1e:f8:37:fb:30:f5:ac:63:05:92:57:5c:be:1c:57:9c:80: d2:00:44:3e:12:d2:57:77:3b:7a:21:dd:8a:7d:c0:c9:33:d7: 11:09:5c:13:6e:72:ab:3a:32:07:1a:88:31:31:b3:72:5f:68: f5:d2:72:bb:8c:24:2e:11:d7:a0:6c:fc:66:76:ad:72:76:98: 3e:f3:2b:c9:5c:e4:d0:41:f3:2a:e9:6f:bd:e7:84:33:64:6c: 73:5c:1f:90:a8:50:3d:76:96:59:3c:5f:a1:4b:19:fa:dd:93: e5:99:b7:a8:93:74:49:3f:68:8c:cd:d9:f7:ae:35:23:33:34: e5:c6:3b:25:b9:25:fa:2c:73:e3:d0:80:90:4a:f4:2b:d4:1a: f1:46:70:d6:51:e9:cd:32:91:14:1b:f4:37:29:ec:13:1b:ae: 6b:3e:83:96:c0:d3:a5:ad:48:0c:6d:f8:fd:9a:1c:49:a5:c9: 83:f3:75:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj6L3+KV7UFEsd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI5ZmFjMTktZTUzNi00ZTY3LWE3ODgtNmExZDQ0ODMz ODlmMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk ZmVmYjhlMTMtNmJjYS00NTA4LWFkNzUtMTFjYWI2MzQxMGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5HcJ2rJn3nM9wiu7TlXgAsn4U58y+tP1lyZ me7aLHcwSidM7867vZ7w5UhsfCu67+WYnmU9nke4ilKkYjMDP0Q5hIziDvADS3aA wNCUaZUuIQnT8/VPxX8x0JdR+p7Z2PGIH2MU7wQAuayyvoetmxFJK7VA0rbJKoIT t6SJ7YPxpMN6m5Nrh1j7beegeHVGIzcrX6w8CewSYOBNGfDd91/hl9wi1eydWIF2 AVJbDcBA5fzZ/IjATTR6brp1lHlMOlh1vdcPKGVVQEmZumorkP2RGdBiKLsTeIT5 Vbc5Sgy/K1vJyAgYW1VOBww+xUCqiu9NUVb+d9FJl4TUWvEKFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6xvG7hpjpbW4vHZXeAqgYU8QWmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMjlm YWMxOS1lNTM2LTRlNjctYTc4OC02YTFkNDQ4MzM4OWYvNDAwYzA3MzgtNWQ1MS0z ZDkwLWJkODctNzljMDhmZTZlMjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjI5ZmFjMTktZTUzNi00ZTY3LWE3 ODgtNmExZDQ0ODMzODlmL2YyOWZhYzE5LWU1MzYtNGU2Ny1hNzg4LTZhMWQ0NDgz Mzg5Zi5jcmwwHwYDVR0jBBgwFoAU221Dzj1FGHBxtIOrNbfSZaYc9mswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMjlmYWMxOS1lNTM2LTRlNjctYTc4OC02YTFk NDQ4MzM4OWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQASvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK46OF7a8rSTrUe+toYtILc2lH8L6nbgAzES0fytiUi1dypv5fYGsoUg 5ZG+1tuQlkgzVItTljnIow044x9JJx9q0fgzINX/HX4e+Df7MPWsYwWSV1y+HFec gNIARD4S0ld3O3oh3Yp9wMkz1xEJXBNucqs6MgcaiDExs3JfaPXScruMJC4R16Bs /GZ2rXJ2mD7zK8lc5NBB8yrpb73nhDNkbHNcH5CoUD12llk8X6FLGfrdk+WZt6iT dEk/aIzN2feuNSMzNOXGOyW5Jfosc+PQgJBK9CvUGvFGcNZR6c0ykRQb9Dcp7BMb rms+g5bA06WtSAxt+P2aHEmlyYPzdbs= -----END CERTIFICATE-----Generated at Thu Mar 26 12:23:34 2026 by rpki-client