$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/57509a4e-ea2f-3de5-b13e-07090ad8968b.roa File: 57509a4e-ea2f-3de5-b13e-07090ad8968b.roa (raw, json) Hash identifier: hBTtKuckBTFXHHlrROw3JGBOA/hGG0vkzayDC5/7w6o= Subject key identifier: E2:D2:8D:9F:59:DC:8E:20:8F:4D:10:31:5A:EF:5F:44:99:3F:28:82 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584D3F64C63C93288D3D7F6CF280 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/57509a4e-ea2f-3de5-b13e-07090ad8968b.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 62943 IP address blocks: 64.111.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:c6:3c:93:28:8d:3d:7f:6c:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=8258e5b6-39db-4b11-a24e-87fb73645085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:64:f2:89:28:a6:85:3d:68:83:66:85:4c:cb: 77:d1:e3:c6:0f:ce:2d:cf:bc:a7:1d:e6:0c:ea:3a: cb:14:cd:27:6e:4c:5b:df:d5:6f:cf:81:16:f1:10: 4e:ac:01:a6:8b:54:7e:ff:57:8f:27:b4:d9:be:56: 63:24:e5:8c:7c:35:5b:b2:8a:40:24:4e:20:ea:8f: cd:ff:8f:a0:50:ba:05:c1:9d:81:af:79:e4:39:bf: 62:f7:6e:26:f7:ae:74:11:39:e0:cc:5f:a6:79:2d: 2f:76:92:70:7f:e0:46:2a:b9:24:a6:5b:4d:b5:82: 92:cb:56:9e:83:9d:a0:e1:8f:a9:5c:97:fc:05:29: 93:b1:00:da:d5:54:9a:3e:39:63:3d:f9:87:2f:c7: a4:c2:a7:9e:cc:1f:e6:c9:7e:3e:b8:51:ce:56:b7: 91:af:89:a3:3d:c4:ed:3e:9a:41:d9:17:5a:01:9b: 25:c5:48:ae:ee:fd:f2:7e:7b:99:8a:60:d9:57:72: 14:1a:3b:d6:fb:27:d4:c6:c4:e1:69:b4:0f:ca:2c: 7a:a1:ba:71:a9:ad:3c:98:7d:72:0c:ec:21:63:a5: cd:bd:1b:51:25:e9:96:a7:ba:c1:4a:9d:92:36:37: 3e:08:98:c1:13:ea:06:ed:fa:b3:6d:58:0c:22:d7: 11:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D2:8D:9F:59:DC:8E:20:8F:4D:10:31:5A:EF:5F:44:99:3F:28:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/57509a4e-ea2f-3de5-b13e-07090ad8968b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 64.111.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:2c:89:fa:1e:9d:a2:39:2a:ec:30:10:a7:09:12:48:68:de: a4:0b:1e:76:49:04:5f:fe:29:09:4b:2b:70:0d:9f:75:75:e1: 69:ad:ba:25:09:39:89:1b:54:3c:f4:d9:ff:d3:ac:06:25:20: 92:a9:82:29:76:ac:9a:7e:3c:b0:34:df:b6:71:9c:29:76:f9: 11:4c:7b:f3:f4:09:28:84:05:cb:5b:e0:2e:c9:67:2c:db:0e: 2f:f8:fc:20:59:d9:45:9c:dc:80:3b:f9:15:16:c5:77:d0:2d: 4c:0f:78:d4:dd:54:02:8a:95:a0:7c:82:0c:ec:e4:18:96:77: 96:05:e0:d6:be:0d:72:48:0f:18:1a:19:44:b9:05:99:73:4e: ce:fe:16:24:cb:aa:58:dc:46:63:56:17:5e:b5:d1:cf:8e:56: a4:77:fd:f1:9c:d9:cd:04:c9:91:73:ee:c9:88:33:d2:c2:17: 4f:f0:7e:26:e7:6d:b3:7b:0b:89:dd:c0:a3:0d:f1:ec:de:61: 5f:37:1b:35:14:e4:f2:8e:4e:f0:5b:d5:d2:96:5c:32:16:4f: 06:b4:e2:52:4d:07:56:62:b2:1b:c3:d6:02:2c:dc:8b:3d:5c: a1:57:a9:1c:5f:4d:13:de:64:89:f0:c8:11:1b:71:ad:19:b9: 0a:b0:b4:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZMY8kyiNPX9s8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ODI1OGU1YjYtMzlkYi00YjExLWEyNGUtODdmYjczNjQ1MDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2TyiSimhT1og2aFTMt30ePGD84tz7ynHeYM 6jrLFM0nbkxb39Vvz4EW8RBOrAGmi1R+/1ePJ7TZvlZjJOWMfDVbsopAJE4g6o/N /4+gULoFwZ2Br3nkOb9i924m9650ETngzF+meS0vdpJwf+BGKrkkpltNtYKSy1ae g52g4Y+pXJf8BSmTsQDa1VSaPjljPfmHL8ekwqeezB/myX4+uFHOVreRr4mjPcTt PppB2RdaAZslxUiu7v3yfnuZimDZV3IUGjvW+yfUxsThabQPyix6obpxqa08mH1y DOwhY6XNvRtRJemWp7rBSp2SNjc+CJjBE+oG7fqzbVgMItcRgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLSjZ9Z3I4gj00QMVrvX0SZPyiCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvNTc1MDlhNGUtZWEyZi0z ZGU1LWIxM2UtMDcwOTBhZDg5NjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQG8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIsifoenaI5KuwwEKcJEkho3qQLHnZJBF/+KQlLK3ANn3V14WmtuiUJ OYkbVDz02f/TrAYlIJKpgil2rJp+PLA037ZxnCl2+RFMe/P0CSiEBctb4C7JZyzb Di/4/CBZ2UWc3IA7+RUWxXfQLUwPeNTdVAKKlaB8ggzs5BiWd5YF4Na+DXJIDxga GUS5BZlzTs7+FiTLqljcRmNWF1610c+OVqR3/fGc2c0EyZFz7smIM9LCF0/wfibn bbN7C4ndwKMN8ezeYV83GzUU5PKOTvBb1dKWXDIWTwa04lJNB1ZishvD1gIs3Is9 XKFXqRxfTRPeZInwyBEbca0ZuQqwtNw= -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:07 2026 by rpki-client