$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b97b9d29-ad3a-3462-819f-40c870d6de63.roa File: b97b9d29-ad3a-3462-819f-40c870d6de63.roa (raw, json) Hash identifier: XYjQsENwLGozrkVcWwsXQf+0+In1i6g6z++iy5PmPYI= Subject key identifier: 2F:3C:2E:CA:72:89:5B:F8:37:D8:4E:C2:33:07:04:2B:75:43:EE:37 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584D40CA4C9AA79CE852A400D800 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b97b9d29-ad3a-3462-819f-40c870d6de63.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 11537 IP address blocks: 64.57.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:4c:9a:a7:9c:e8:52:a4:00:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=2bebac9e-2aab-435b-bbd0-dd0b35dbb4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4f:76:63:84:03:cc:bc:b8:01:2e:cb:71:35: 91:42:58:7c:d8:9a:e1:8c:82:a6:d1:98:23:8b:55: 4c:71:b1:42:c5:7f:d6:42:9c:42:62:06:b2:26:ac: 29:b0:50:03:df:58:7a:bc:7b:1b:11:4d:51:2c:4d: 36:87:19:0c:f6:47:31:37:29:e0:5c:83:5d:6d:02: 22:ad:e8:76:f3:7e:f0:65:86:7a:7c:6f:59:ed:3f: 93:b4:9d:a6:ca:85:f7:70:0c:aa:ad:94:e9:73:83: 10:b3:73:6c:cc:2d:79:63:fa:26:ac:d6:7b:15:45: 25:5f:28:dd:cf:33:6a:00:49:f7:00:ee:e6:5b:98: c1:3a:f9:ca:76:2b:3a:95:ec:d3:1a:6e:19:f6:f6: cd:0d:77:32:f3:bb:ca:d0:9e:56:d7:43:bb:3a:ac: d6:d6:4d:37:16:c7:39:93:b0:a0:fd:f6:4b:9d:38: f4:5d:92:2a:e9:60:99:c0:b0:ee:82:08:44:77:f7: 4e:e0:e2:c8:41:46:8a:bc:17:0a:0d:0e:a4:28:3e: 17:31:a2:46:2c:e4:55:52:a4:cd:be:c4:40:6c:e2: 86:16:ef:5f:d0:b5:f1:79:8c:99:b4:6b:ed:5a:8f: 8e:86:ac:36:8c:9a:48:e4:d5:53:90:80:c4:39:c1: aa:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3C:2E:CA:72:89:5B:F8:37:D8:4E:C2:33:07:04:2B:75:43:EE:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b97b9d29-ad3a-3462-819f-40c870d6de63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 64.57.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:0b:04:2c:05:eb:40:39:c5:a6:22:10:f2:41:50:cf:11:1a: b0:e5:15:81:61:7a:a4:14:c8:e3:52:e9:cf:2a:d4:df:40:de: 9b:be:11:0d:4d:54:87:5d:f0:4c:e9:eb:56:63:c6:f5:47:21: b6:c9:92:2b:9d:6b:33:d6:dc:f0:f1:26:75:0c:f8:11:cc:c0: 15:ab:2a:50:b1:34:7f:0c:a2:2e:24:80:64:95:50:47:4d:4c: f6:ce:91:8f:24:1c:52:33:d2:ec:64:36:d9:2c:b9:87:5a:c1: 37:a1:5e:a4:e2:59:66:8e:1d:47:25:9f:ee:e2:8d:62:f5:a2: 7d:f1:ba:8a:26:66:74:57:89:6c:fe:3f:71:d1:5a:42:80:a5: 00:7c:80:e7:41:53:fb:09:fb:80:de:20:7e:fd:ea:72:50:c8: 12:25:99:e5:67:77:0c:d5:13:24:92:3f:7e:61:81:7f:1c:e7: 92:f2:06:43:ce:29:54:94:55:27:89:63:20:a4:e0:97:0b:a0: 77:52:c6:17:10:2c:bf:73:51:80:63:f2:ca:93:5c:73:3c:d7: 80:b7:2d:52:c4:d5:3e:90:ad:f6:37:d6:5f:69:2a:ab:7e:27: fe:ba:d1:fa:a3:20:52:e4:bc:d3:58:b2:af:0b:ad:90:fa:f7: 12:80:df:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Aykyap5zoUqQA2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk MmJlYmFjOWUtMmFhYi00MzViLWJiZDAtZGQwYjM1ZGJiNGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE92Y4QDzLy4AS7LcTWRQlh82JrhjIKm0Zgj i1VMcbFCxX/WQpxCYgayJqwpsFAD31h6vHsbEU1RLE02hxkM9kcxNyngXINdbQIi reh2837wZYZ6fG9Z7T+TtJ2myoX3cAyqrZTpc4MQs3NszC15Y/omrNZ7FUUlXyjd zzNqAEn3AO7mW5jBOvnKdis6lezTGm4Z9vbNDXcy87vK0J5W10O7OqzW1k03Fsc5 k7Cg/fZLnTj0XZIq6WCZwLDugghEd/dO4OLIQUaKvBcKDQ6kKD4XMaJGLORVUqTN vsRAbOKGFu9f0LXxeYyZtGvtWo+Ohqw2jJpI5NVTkIDEOcGqfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC88LspyiVv4N9hOwjMHBCt1Q+43MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYjk3YjlkMjktYWQzYS0z NDYyLTgxOWYtNDBjODcwZDZkZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQDkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoLBCwF60A5xaYiEPJBUM8RGrDlFYFheqQUyONS6c8q1N9A3pu+EQ1N VIdd8Ezp61ZjxvVHIbbJkiudazPW3PDxJnUM+BHMwBWrKlCxNH8Moi4kgGSVUEdN TPbOkY8kHFIz0uxkNtksuYdawTehXqTiWWaOHUcln+7ijWL1on3xuoomZnRXiWz+ P3HRWkKApQB8gOdBU/sJ+4DeIH796nJQyBIlmeVndwzVEySSP35hgX8c55LyBkPO KVSUVSeJYyCk4JcLoHdSxhcQLL9zUYBj8sqTXHM814C3LVLE1T6QrfY31l9pKqt+ J/660fqjIFLkvNNYsq8LrZD69xKA3x8= -----END CERTIFICATE-----Generated at Tue Mar 24 22:19:51 2026 by rpki-client