$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8/3e4f0c0b-4248-3f6f-ab2e-675c67037122.roa File: 3e4f0c0b-4248-3f6f-ab2e-675c67037122.roa (raw, json) Hash identifier: +8zxQWU0z3Khc8e+xAfD/tcNqgXukpxOZ/knKDLF7uM= Subject key identifier: 4B:53:74:76:8E:14:15:FA:76:BA:D2:CA:F9:B8:CB:17:E6:6D:82:3E Certificate issuer: /CN=0b3e78b3-bf49-4038-b7a9-71936b1370d8 Certificate serial: 010D0C9F4328584D343A36DED687462DCD880A80 Authority key identifier: A4:5B:B2:43:41:87:9F:58:0E:6B:44:13:BD:A7:08:16:72:2B:DA:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8/3e4f0c0b-4248-3f6f-ab2e-675c67037122.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 398465 IP address blocks: 64.7.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8/0b3e78b3-bf49-4038-b7a9-71936b1370d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8/0b3e78b3-bf49-4038-b7a9-71936b1370d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:36:de:d6:87:46:2d:cd:88:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b3e78b3-bf49-4038-b7a9-71936b1370d8 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=038daa5c-062f-45a5-a07f-1fb7fc2e0079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7d:97:58:64:6e:84:af:06:af:47:9a:a2:0a: 34:c1:ed:70:70:45:a2:e1:3c:bc:b1:ae:cc:6e:6d: 81:2b:4a:ce:fe:20:51:54:d4:96:9c:91:c8:d1:d5: 5a:45:b1:08:22:82:45:ca:6b:45:e9:78:f7:48:05: 96:7d:25:28:b6:a3:24:c9:94:55:3c:8d:c2:93:bd: 9b:51:c9:ac:88:5d:f7:0b:18:22:d3:cd:41:10:bf: 41:18:25:86:30:38:76:92:6a:da:cf:f4:96:80:25: 7f:e4:6d:11:29:ce:d1:eb:29:c8:d4:70:4c:dd:a4: 01:57:2a:e7:35:a5:01:1c:3b:18:5e:66:12:79:0b: e2:53:c7:0e:f0:7c:49:8b:4a:41:a2:e6:59:ca:60: b9:74:15:c3:3f:ab:08:bc:c1:9d:85:08:19:c5:78: 17:d9:89:8c:7c:87:f9:66:a7:35:d0:11:3f:94:68: 02:44:83:37:b5:64:c6:6b:69:2a:f7:4b:56:33:48: 96:85:36:ed:82:04:2d:60:61:43:dc:3a:56:d8:c4: db:4b:27:c4:62:32:f4:95:11:e6:00:64:eb:4d:1b: b0:d5:75:17:4a:69:b9:56:9f:d5:3f:90:87:86:9a: 29:42:3e:5f:f8:ee:32:87:7f:a9:38:52:44:ea:39: 99:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:53:74:76:8E:14:15:FA:76:BA:D2:CA:F9:B8:CB:17:E6:6D:82:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8/3e4f0c0b-4248-3f6f-ab2e-675c67037122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8/0b3e78b3-bf49-4038-b7a9-71936b1370d8.crl X509v3 Authority Key Identifier: keyid:A4:5B:B2:43:41:87:9F:58:0E:6B:44:13:BD:A7:08:16:72:2B:DA:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8.cer sbgp-ipAddrBlock: critical IPv4: 64.7.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:e9:6b:55:88:e1:44:65:b9:e1:78:6c:fd:da:bf:cb:8a:8c: 71:a9:e9:ea:3c:a7:1a:28:0a:51:38:16:2a:e6:5d:93:91:66: 4a:6a:3a:55:51:1d:77:d1:71:b8:62:a1:79:d2:bf:9c:38:fa: 1b:28:0e:db:20:5c:64:e3:60:ad:27:0b:05:74:ee:d8:58:77: 30:22:cc:a6:64:55:4e:ef:3c:ab:35:57:3d:d8:bc:0c:a1:21: 51:c3:73:5e:ee:99:48:32:77:07:d0:5e:28:8f:41:74:5f:f1: 99:df:5e:75:48:5d:81:7a:ed:58:3a:d0:c7:fd:47:3f:17:e6: 02:bd:4c:f8:7a:06:6f:dd:ec:9b:88:59:76:b2:58:15:29:6e: 56:b4:da:69:ce:f4:26:f8:f7:6b:4c:6e:aa:7a:d5:72:b4:26: 21:29:79:ed:f6:87:28:d0:bb:10:f1:c3:18:f9:21:39:32:89: 1d:09:a0:94:17:77:10:80:eb:3e:06:bf:7b:5a:b8:db:8f:7e: bf:7f:1e:ac:6e:68:b1:6a:06:f8:ec:d1:1c:58:d1:4c:35:64: 7c:08:d1:88:a5:0f:65:c6:8e:ee:cf:6c:15:d8:5c:38:bd:97: 81:ab:91:03:70:cc:1c:a9:00:01:e8:59:e4:ef:a8:b3:e7:6a: d8:54:21:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00Ojbe1odGLc2ICoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIzZTc4YjMtYmY0OS00MDM4LWI3YTktNzE5MzZiMTM3 MGQ4MB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk MDM4ZGFhNWMtMDYyZi00NWE1LWEwN2YtMWZiN2ZjMmUwMDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH2XWGRuhK8Gr0eaogo0we1wcEWi4Ty8sa7M bm2BK0rO/iBRVNSWnJHI0dVaRbEIIoJFymtF6Xj3SAWWfSUotqMkyZRVPI3Ck72b UcmsiF33Cxgi081BEL9BGCWGMDh2kmraz/SWgCV/5G0RKc7R6ynI1HBM3aQBVyrn NaUBHDsYXmYSeQviU8cO8HxJi0pBouZZymC5dBXDP6sIvMGdhQgZxXgX2YmMfIf5 Zqc10BE/lGgCRIM3tWTGa2kq90tWM0iWhTbtggQtYGFD3DpW2MTbSyfEYjL0lRHm AGTrTRuw1XUXSmm5Vp/VP5CHhpopQj5f+O4yh3+pOFJE6jmZTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtTdHaOFBX6drrSyvm4yxfmbYI+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYjNl NzhiMy1iZjQ5LTQwMzgtYjdhOS03MTkzNmIxMzcwZDgvM2U0ZjBjMGItNDI0OC0z ZjZmLWFiMmUtNjc1YzY3MDM3MTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGIzZTc4YjMtYmY0OS00MDM4LWI3 YTktNzE5MzZiMTM3MGQ4LzBiM2U3OGIzLWJmNDktNDAzOC1iN2E5LTcxOTM2YjEz NzBkOC5jcmwwHwYDVR0jBBgwFoAUpFuyQ0GHn1gOa0QTvacIFnIr2lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYjNlNzhiMy1iZjQ5LTQwMzgtYjdhOS03MTkz NmIxMzcwZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQAf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHpa1WI4URlueF4bP3av8uKjHGp6eo8pxooClE4FirmXZORZkpqOlVR HXfRcbhioXnSv5w4+hsoDtsgXGTjYK0nCwV07thYdzAizKZkVU7vPKs1Vz3YvAyh IVHDc17umUgydwfQXiiPQXRf8ZnfXnVIXYF67Vg60Mf9Rz8X5gK9TPh6Bm/d7JuI WXayWBUpbla02mnO9Cb492tMbqp61XK0JiEpee32hyjQuxDxwxj5ITkyiR0JoJQX dxCA6z4Gv3tauNuPfr9/HqxuaLFqBvjs0RxY0Uw1ZHwI0YilD2XGju7PbBXYXDi9 l4GrkQNwzBypAAHoWeTvqLPnathUIew= -----END CERTIFICATE-----Generated at Thu Mar 26 15:28:40 2026 by rpki-client