$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/c8de8597-366b-31fd-87f0-b43e807fba68.roa File: c8de8597-366b-31fd-87f0-b43e807fba68.roa (raw, json) Hash identifier: e5Xm4NNRVSsxB8AeWQcyS5IDup41hUeyKMrFwdBdxJo= Subject key identifier: DB:B0:37:DE:18:F3:98:EC:ED:41:5B:E8:27:9D:73:AE:F7:43:D8:F3 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584D3F64D0051530185B6A6A3600 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/c8de8597-366b-31fd-87f0-b43e807fba68.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 62943 IP address blocks: 65.255.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d0:05:15:30:18:5b:6a:6a:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=dafb4170-3c22-47a6-807b-dd9d6ab1a72d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:35:50:d4:02:44:46:3d:3d:8c:48:a7:f5:dd: 21:0e:a2:2e:65:e5:cf:a3:25:04:5e:f7:eb:8d:cd: a7:6a:38:0c:22:c3:96:f9:c2:a0:1c:20:cf:08:83: fb:a6:d9:50:86:20:04:77:49:16:d2:ab:f3:1e:7e: e4:59:98:8e:33:74:a4:c3:5b:0f:6f:59:6d:49:0e: 9c:b7:27:70:40:07:41:e0:80:7c:83:c6:cb:2c:cf: 8a:a8:d9:84:18:ab:d1:33:84:e5:28:3c:98:9c:0e: c3:61:58:b4:fb:bc:fd:ef:51:53:3b:e3:60:ef:43: f7:7a:f5:20:7a:8e:88:6b:dd:98:34:c5:06:77:f2: 13:a1:a8:52:9a:cc:41:42:f6:6e:e2:41:b7:2a:d1: fd:5d:12:7b:65:79:a8:b3:85:62:db:b8:66:4b:14: 80:d8:a9:f6:04:c2:10:89:23:74:63:20:7d:a0:5e: 5d:e8:ac:45:03:00:92:4e:54:14:42:7c:cb:1b:23: fd:4a:f7:49:8d:ee:1a:1b:a7:5e:47:49:ad:46:31: 98:b0:f4:2b:4e:12:cc:5b:6b:f7:0c:f2:84:9e:50: f7:b3:c4:19:e1:b7:2b:35:09:58:c5:4f:6e:e8:13: 7d:b0:81:3e:f8:a1:a8:8b:02:21:4c:e4:64:7c:e8: 95:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B0:37:DE:18:F3:98:EC:ED:41:5B:E8:27:9D:73:AE:F7:43:D8:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/c8de8597-366b-31fd-87f0-b43e807fba68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 65.255.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ca:7b:44:91:44:0a:3f:56:d0:3c:2c:6f:ad:c7:5e:2e:84: d8:7f:0e:a7:02:fc:f0:fe:ea:01:0e:5e:37:50:96:9e:89:c5: 77:eb:37:45:90:fc:53:eb:82:37:69:0c:5c:2c:d9:78:7d:62: dd:14:fa:9e:4a:1f:20:f5:75:2f:96:5b:12:a7:e9:85:4f:be: a2:c6:1b:14:62:cb:c5:48:41:cc:5e:8e:c8:d3:14:1e:ee:92: a7:f1:f5:01:f0:0d:f7:4e:e7:9a:26:97:f9:35:14:ab:1f:19: 45:38:c7:33:3c:54:f8:98:a8:46:d0:76:b9:be:ae:c1:13:5b: 0a:f5:d1:47:c6:b2:94:0d:a1:2c:35:f5:fa:7d:2d:0e:17:04: 7b:f7:45:ca:9f:44:fa:76:d5:59:dd:78:8a:1f:3b:16:ea:f1: 52:cc:95:0a:d3:42:7d:01:c8:b8:77:56:89:92:2d:58:04:0e: f4:8a:65:cf:25:55:a0:36:b6:5d:d2:21:47:af:61:67:be:ce: 47:9b:11:c1:0c:70:e9:7b:cc:c7:75:81:da:d7:98:48:43:48: 0a:21:e3:fd:56:77:50:ea:83:f9:7e:4a:e8:2c:55:28:18:2d: 27:89:4a:ba:ff:4a:9d:ec:28:97:ad:1c:b1:a6:10:91:86:7a: ef:2e:d6:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNAFFTAYW2pqNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ZGFmYjQxNzAtM2MyMi00N2E2LTgwN2ItZGQ5ZDZhYjFhNzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjVQ1AJERj09jEin9d0hDqIuZeXPoyUEXvfr jc2najgMIsOW+cKgHCDPCIP7ptlQhiAEd0kW0qvzHn7kWZiOM3Skw1sPb1ltSQ6c tydwQAdB4IB8g8bLLM+KqNmEGKvRM4TlKDyYnA7DYVi0+7z971FTO+Ng70P3evUg eo6Ia92YNMUGd/IToahSmsxBQvZu4kG3KtH9XRJ7ZXmos4Vi27hmSxSA2Kn2BMIQ iSN0YyB9oF5d6KxFAwCSTlQUQnzLGyP9SvdJje4aG6deR0mtRjGYsPQrThLMW2v3 DPKEnlD3s8QZ4bcrNQlYxU9u6BN9sIE++KGoiwIhTORkfOiVOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuwN94Y85js7UFb6Cedc673Q9jzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvYzhkZTg1OTctMzY2Yi0z MWZkLTg3ZjAtYjQzZTgwN2ZiYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQf+LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbKe0SRRAo/VtA8LG+tx14uhNh/DqcC/PD+6gEOXjdQlp6JxXfrN0WQ /FPrgjdpDFws2Xh9Yt0U+p5KHyD1dS+WWxKn6YVPvqLGGxRiy8VIQcxejsjTFB7u kqfx9QHwDfdO55oml/k1FKsfGUU4xzM8VPiYqEbQdrm+rsETWwr10UfGspQNoSw1 9fp9LQ4XBHv3RcqfRPp21VndeIofOxbq8VLMlQrTQn0ByLh3VomSLVgEDvSKZc8l VaA2tl3SIUevYWe+zkebEcEMcOl7zMd1gdrXmEhDSAoh4/1Wd1Dqg/l+SugsVSgY LSeJSrr/Sp3sKJetHLGmEJGGeu8u1mg= -----END CERTIFICATE-----Generated at Thu Mar 26 21:13:44 2026 by rpki-client