$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/efafb3e1-c5fc-3111-b4db-21000f90654c.roa File: efafb3e1-c5fc-3111-b4db-21000f90654c.roa (raw, json) Hash identifier: Dre1SnZoqLhU3zMculhRJ1xDQk4/ace0LJ6tmEZugDU= Subject key identifier: 1B:3A:1B:6C:FB:A6:F5:76:29:7C:49:36:74:7D:4A:1B:19:8B:FF:74 Certificate issuer: /CN=f2a1f149-bc0c-4f6c-9fb5-e656515d197b Certificate serial: 010D0C9F4328584D0A77BCFD3883068C643DDA40 Authority key identifier: 7F:BD:4B:2F:5C:42:44:6D:0C:C7:5A:3F:20:EC:C3:76:8C:F5:32:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/efafb3e1-c5fc-3111-b4db-21000f90654c.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 401834 IP address blocks: 64.89.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:bc:fd:38:83:06:8c:64:3d:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2a1f149-bc0c-4f6c-9fb5-e656515d197b Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=f5cd038d-eb64-499a-8a95-da208256ddc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8e:f9:12:11:82:f9:2f:15:2d:01:ec:fc:d6: 7f:26:91:38:f1:cf:ab:b3:ba:d2:36:e6:d7:ac:2c: 24:a0:d9:2b:eb:78:31:88:27:e4:56:81:83:68:c0: 0d:ca:cb:17:82:4e:5a:c5:16:0e:2d:6b:a2:c6:81: 46:3d:1c:0b:5e:e3:8d:05:b3:f0:de:37:09:cb:3a: ca:9e:d1:e8:bf:fa:9e:36:1c:92:a2:c8:e8:bd:59: ac:df:44:1b:15:ba:a3:c1:cb:a2:9b:6d:8d:e0:b7: 66:fb:ce:51:17:5e:ff:f6:eb:13:26:fd:6e:26:6c: 9b:ca:ba:c2:23:28:47:20:25:5d:b6:03:56:af:1b: bd:19:bd:66:2d:6c:6b:53:3d:eb:71:ba:63:a3:ac: 17:54:71:7f:54:1e:af:32:dc:d6:84:fe:5c:92:87: 3c:7f:6f:a2:e4:8c:9f:f7:74:cd:ec:3c:e2:8b:7b: ca:fc:ce:53:4b:2b:18:03:26:17:ef:37:81:23:5a: c6:b7:ef:41:ab:6f:58:3e:12:20:11:aa:1f:a8:37: 15:af:ed:5d:85:cc:d4:5c:8f:a2:50:69:fc:5d:f6: 91:fd:45:e5:82:00:79:c1:96:2d:96:b7:67:bf:29: 68:c6:6c:49:70:38:1b:7a:33:a6:30:ac:51:fb:5a: 5d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3A:1B:6C:FB:A6:F5:76:29:7C:49:36:74:7D:4A:1B:19:8B:FF:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/efafb3e1-c5fc-3111-b4db-21000f90654c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.crl X509v3 Authority Key Identifier: keyid:7F:BD:4B:2F:5C:42:44:6D:0C:C7:5A:3F:20:EC:C3:76:8C:F5:32:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.cer sbgp-ipAddrBlock: critical IPv4: 64.89.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:6d:92:c6:26:6a:b3:d2:aa:03:01:2a:28:50:ea:14:43:46: 3e:3c:d0:10:9d:d1:49:e0:ce:c0:c5:71:d7:54:96:24:d1:aa: a1:11:9f:12:51:38:14:a5:6a:eb:17:35:27:a5:7f:d2:61:2d: 0f:b9:6d:3d:d5:eb:92:fc:1b:73:81:3f:7e:25:cd:01:51:3f: 81:8e:e5:62:e5:2d:94:b5:7b:17:cf:11:5f:29:73:f4:46:f5: 42:de:1e:3e:0b:fc:2b:6f:d1:cd:83:23:c0:32:c6:f2:73:9f: 25:5b:c4:cd:ea:20:99:66:72:2f:60:f9:15:96:8d:df:3c:27: f7:ad:67:66:bd:fd:41:a3:a4:06:cb:6a:fe:91:9f:45:23:be: fb:41:8a:b9:61:f5:85:b3:a3:9a:49:46:5e:1a:3f:f3:68:a4: de:1c:06:43:42:93:1b:06:18:45:12:1e:ff:c6:ae:d2:56:78: b5:ad:98:00:e3:a6:f0:39:17:db:93:b4:89:59:37:95:82:83: 5d:b2:4a:63:c4:fd:46:73:11:86:f8:85:c7:6b:35:05:d9:82: e7:3d:43:bf:e6:90:7e:f9:bb:65:00:01:cb:d0:4b:27:e0:dd: f1:3b:f3:a1:31:5c:a1:dd:d8:05:91:ad:d4:dd:42:40:cb:ce: 39:cd:d6:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd7z9OIMGjGQ92kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJhMWYxNDktYmMwYy00ZjZjLTlmYjUtZTY1NjUxNWQx OTdiMB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk ZjVjZDAzOGQtZWI2NC00OTlhLThhOTUtZGEyMDgyNTZkZGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso75EhGC+S8VLQHs/NZ/JpE48c+rs7rSNubX rCwkoNkr63gxiCfkVoGDaMANyssXgk5axRYOLWuixoFGPRwLXuONBbPw3jcJyzrK ntHov/qeNhySosjovVms30QbFbqjwcuim22N4Ldm+85RF17/9usTJv1uJmybyrrC IyhHICVdtgNWrxu9Gb1mLWxrUz3rcbpjo6wXVHF/VB6vMtzWhP5ckoc8f2+i5Iyf 93TN7Dzii3vK/M5TSysYAyYX7zeBI1rGt+9Bq29YPhIgEaofqDcVr+1dhczUXI+i UGn8XfaR/UXlggB5wZYtlrdnvyloxmxJcDgbejOmMKxR+1pdRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBs6G2z7pvV2KXxJNnR9ShsZi/90MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mMmEx ZjE0OS1iYzBjLTRmNmMtOWZiNS1lNjU2NTE1ZDE5N2IvZWZhZmIzZTEtYzVmYy0z MTExLWI0ZGItMjEwMDBmOTA2NTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZjJhMWYxNDktYmMwYy00ZjZjLTlm YjUtZTY1NjUxNWQxOTdiL2YyYTFmMTQ5LWJjMGMtNGY2Yy05ZmI1LWU2NTY1MTVk MTk3Yi5jcmwwHwYDVR0jBBgwFoAUf71LL1xCRG0Mx1o/IOzDdoz1MtowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mMmExZjE0OS1iYzBjLTRmNmMtOWZiNS1lNjU2 NTE1ZDE5N2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQFmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxtksYmarPSqgMBKihQ6hRDRj480BCd0UngzsDFcddUliTRqqERnxJR OBSlausXNSelf9JhLQ+5bT3V65L8G3OBP34lzQFRP4GO5WLlLZS1exfPEV8pc/RG 9ULeHj4L/Ctv0c2DI8AyxvJznyVbxM3qIJlmci9g+RWWjd88J/etZ2a9/UGjpAbL av6Rn0UjvvtBirlh9YWzo5pJRl4aP/NopN4cBkNCkxsGGEUSHv/GrtJWeLWtmADj pvA5F9uTtIlZN5WCg12ySmPE/UZzEYb4hcdrNQXZguc9Q7/mkH75u2UAAcvQSyfg 3fE786ExXKHd2AWRrdTdQkDLzjnN1gg= -----END CERTIFICATE-----Generated at Sat Mar 28 13:23:40 2026 by rpki-client