$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/89ff9dac-df0a-3835-aa2c-bd3d94b98b8b.roa File: 89ff9dac-df0a-3835-aa2c-bd3d94b98b8b.roa (raw, json) Hash identifier: D8VhUhSYJNbE2xhPhqV7xXc2R1dM+KHe4IEw1vfbuy8= Subject key identifier: C6:2B:3B:19:F7:E7:A1:02:3D:C2:65:8F:9B:20:94:BD:9E:69:0A:43 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA50AA7CA9206DBF016AC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/89ff9dac-df0a-3835-aa2c-bd3d94b98b8b.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 64.233.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:50:aa:7c:a9:20:6d:bf:01:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=498c1ad4-1b92-41ee-8623-ee13dbbd8d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:eb:50:b6:73:e1:9b:a8:74:98:bc:c8:dc:97: 62:6e:fd:54:f9:10:ce:16:9b:2a:8d:69:90:e0:27: 67:03:52:f0:42:11:4f:6b:f9:08:5d:1f:ae:77:bb: 47:12:56:8e:3f:ee:ba:de:e7:ab:6e:44:a8:2f:17: e6:ec:36:c9:8a:a8:5a:1b:d3:e6:8a:73:fb:2b:ff: 96:17:aa:84:4c:f7:58:d1:c4:24:17:bd:37:b7:7c: 98:70:eb:46:91:d1:67:53:35:a1:1d:b4:6a:7d:f3: 38:ec:f4:dc:40:6e:9f:0b:a4:ba:e9:f6:b0:97:9a: fa:21:46:ad:a7:8f:ae:cc:78:96:c9:d8:cb:a0:25: c8:6c:e7:45:38:48:90:b9:4c:f8:fd:78:f7:da:35: 21:43:df:ab:a6:af:b0:50:09:bd:81:34:a8:ab:1f: d1:25:01:da:7c:a3:ad:2c:53:44:f5:cc:5c:5c:5d: 09:fe:86:e9:d1:31:77:8a:e5:ef:80:c1:d1:39:76: 7f:a0:ea:46:0d:e6:df:c8:d8:69:f0:f3:57:27:05: cd:c1:f1:d2:ff:13:f4:b6:ab:16:cf:f4:83:3f:2e: 24:03:aa:d1:15:71:0a:4f:cb:41:52:66:8c:33:55: da:52:2a:76:83:17:f1:9a:15:1a:24:11:f7:7c:91: e6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2B:3B:19:F7:E7:A1:02:3D:C2:65:8F:9B:20:94:BD:9E:69:0A:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/89ff9dac-df0a-3835-aa2c-bd3d94b98b8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:23:6f:d8:62:9e:79:c7:f1:51:16:4a:06:2e:9c:93:4f:7f: 00:97:92:79:e7:a4:3f:44:15:b4:45:07:91:5a:9c:73:41:ef: 7b:0c:9a:37:31:cd:09:e5:aa:61:c7:51:3c:0f:28:44:dd:28: 74:68:74:20:71:86:8e:37:a8:13:3a:25:1d:f4:7b:c1:46:ff: b3:e7:ef:13:9b:b0:cc:cd:5b:94:3e:7c:a4:73:9f:fb:66:36: 66:92:50:66:f8:d0:48:1d:2f:2c:de:77:a2:21:39:f1:08:2c: e3:30:f8:e9:23:42:de:c1:4b:94:75:89:b2:5d:62:d2:37:bc: 16:33:de:5f:1a:d6:5d:83:44:9e:74:68:d1:d0:9d:f3:7c:2e: d3:4f:62:9f:95:a4:3b:48:54:72:75:99:b9:1a:13:4e:f4:c0: c7:bf:0a:a2:fd:30:b7:ab:bf:a8:4c:8e:38:f7:3a:1e:9d:fa: ac:e9:f7:b2:69:ef:ee:28:d4:ff:09:9a:0d:ce:c5:80:2a:06: bc:ee:d3:d0:ec:19:69:b2:29:c3:aa:fe:50:52:b0:43:54:67: bc:92:02:b1:5b:01:de:6a:98:88:6c:12:1c:fc:8d:7e:ba:cb: 76:f2:56:17:87:3f:91:12:f4:99:88:81:2c:f0:99:97:5c:ca: f6:da:56:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqlCqfKkgbb8BasAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NDk4YzFhZDQtMWI5Mi00MWVlLTg2MjMtZWUxM2RiYmQ4ZDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+tQtnPhm6h0mLzI3Jdibv1U+RDOFpsqjWmQ 4CdnA1LwQhFPa/kIXR+ud7tHElaOP+663uerbkSoLxfm7DbJiqhaG9PminP7K/+W F6qETPdY0cQkF703t3yYcOtGkdFnUzWhHbRqffM47PTcQG6fC6S66fawl5r6IUat p4+uzHiWydjLoCXIbOdFOEiQuUz4/Xj32jUhQ9+rpq+wUAm9gTSoqx/RJQHafKOt LFNE9cxcXF0J/obp0TF3iuXvgMHROXZ/oOpGDebfyNhp8PNXJwXNwfHS/xP0tqsW z/SDPy4kA6rRFXEKT8tBUmaMM1XaUip2gxfxmhUaJBH3fJHmqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYrOxn356ECPcJlj5sglL2eaQpDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODlmZjlkYWMtZGYwYS0z ODM1LWFhMmMtYmQzZDk0Yjk4YjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOm/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAjb9hinnnH8VEWSgYunJNPfwCXknnnpD9EFbRFB5FanHNB73sMmjcx zQnlqmHHUTwPKETdKHRodCBxho43qBM6JR30e8FG/7Pn7xObsMzNW5Q+fKRzn/tm NmaSUGb40EgdLyzed6IhOfEILOMw+OkjQt7BS5R1ibJdYtI3vBYz3l8a1l2DRJ50 aNHQnfN8LtNPYp+VpDtIVHJ1mbkaE070wMe/CqL9MLerv6hMjjj3Oh6d+qzp97Jp 7+4o1P8Jmg3OxYAqBrzu09DsGWmyKcOq/lBSsENUZ7ySArFbAd5qmIhsEhz8jX66 y3byVheHP5ES9JmIgSzwmZdcyvbaVig= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:52 2026 by rpki-client