$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f7a0b9a5-0700-4c1e-93db-74254d55b68c/9aff6a88-a808-32a5-9c2a-c8d6b1313fd7.roa File: 9aff6a88-a808-32a5-9c2a-c8d6b1313fd7.roa (raw, json) Hash identifier: tI1kWI8opFrrK3CsqRfmL76erdcTG1A0c00+0LW0Dpw= Subject key identifier: 99:70:DA:27:47:C6:1A:B0:B6:7C:1A:91:2B:CB:E5:E6:D5:79:CC:91 Certificate issuer: /CN=f7a0b9a5-0700-4c1e-93db-74254d55b68c Certificate serial: 010D0C9F4328584D9539640044AEA7ACC4B7ED80 Authority key identifier: 61:1D:89:78:38:F5:4C:DF:79:EB:20:51:9B:9E:00:A6:43:48:CE:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f7a0b9a5-0700-4c1e-93db-74254d55b68c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f7a0b9a5-0700-4c1e-93db-74254d55b68c/9aff6a88-a808-32a5-9c2a-c8d6b1313fd7.roa Signing time: Tue 21 Apr 2026 18:52:39 +0000 ROA not before: Tue 21 Apr 2026 18:52:39 +0000 ROA not after: Mon 20 Jul 2026 18:52:39 +0000 asID: 15083 IP address blocks: 64.39.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f7a0b9a5-0700-4c1e-93db-74254d55b68c/f7a0b9a5-0700-4c1e-93db-74254d55b68c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f7a0b9a5-0700-4c1e-93db-74254d55b68c/f7a0b9a5-0700-4c1e-93db-74254d55b68c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f7a0b9a5-0700-4c1e-93db-74254d55b68c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:39:64:00:44:ae:a7:ac:c4:b7:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7a0b9a5-0700-4c1e-93db-74254d55b68c Validity Not Before: Apr 21 18:52:39 2026 GMT Not After : Jul 20 18:52:39 2026 GMT Subject: CN=64626e88-3a5a-4f11-b1f7-39428d62135e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6b:09:ab:63:0d:df:73:f0:de:08:85:3d:96: 12:24:99:26:bc:b4:5b:e2:d3:19:bd:63:73:9c:b0: 5f:c5:38:84:3e:f9:ba:ad:dd:1e:16:4b:cd:dd:9d: c5:37:4c:90:11:81:fd:6b:16:fc:e1:2d:d1:76:c6: 84:45:a0:69:e1:24:05:d5:f6:81:59:00:59:18:09: 5c:b4:47:2c:15:21:a7:7d:77:c7:6f:41:25:e5:83: b9:ee:5c:ac:b1:26:bb:87:2e:f6:72:58:3f:d4:af: 68:07:92:be:46:0f:11:9b:83:18:c1:46:19:76:d5: 96:85:9e:3d:f7:43:e5:31:5f:7d:30:9a:00:42:94: fe:59:f0:f9:89:13:dd:2b:48:00:82:24:4e:62:42: 99:cc:3e:68:88:d1:02:4e:48:9f:cc:42:f4:b4:ec: c9:64:71:93:cc:68:f0:bb:34:51:a2:00:7a:1d:18: 84:eb:dc:69:5b:2e:00:5d:1e:1c:25:57:7b:e2:c7: fd:16:a1:e8:a7:66:e8:8a:71:c0:7f:d6:32:74:d5: 21:67:c9:77:b8:a3:b1:52:39:66:fb:fd:0f:08:92: 15:d6:6a:91:55:cc:e2:92:2b:4d:cc:dd:e0:33:45: a7:3f:a9:f9:b3:0c:94:40:e0:a0:77:e2:5a:b4:2d: 75:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:70:DA:27:47:C6:1A:B0:B6:7C:1A:91:2B:CB:E5:E6:D5:79:CC:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f7a0b9a5-0700-4c1e-93db-74254d55b68c/9aff6a88-a808-32a5-9c2a-c8d6b1313fd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f7a0b9a5-0700-4c1e-93db-74254d55b68c/f7a0b9a5-0700-4c1e-93db-74254d55b68c.crl X509v3 Authority Key Identifier: keyid:61:1D:89:78:38:F5:4C:DF:79:EB:20:51:9B:9E:00:A6:43:48:CE:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f7a0b9a5-0700-4c1e-93db-74254d55b68c.cer sbgp-ipAddrBlock: critical IPv4: 64.39.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:64:a7:07:3e:5b:ac:52:9d:57:3a:1d:b6:7b:e3:dc:0d:7f: 5c:23:38:5c:a7:bc:49:bc:48:0c:35:9c:27:9f:9e:5c:54:1b: 46:90:e8:fd:3a:fb:91:dc:cb:ee:ca:4b:20:87:07:23:f0:44: f7:93:82:db:37:67:3b:94:d1:07:d4:e7:23:ea:90:e2:9f:f5: cc:73:44:39:94:70:d1:35:16:4e:b0:cc:15:ff:9e:59:ab:e4: de:8f:19:d6:7c:65:ec:c4:de:0b:83:ad:e0:de:19:27:c4:5d: 73:c8:fb:77:5d:82:12:a0:bf:ac:6e:d3:25:26:68:1e:37:88: 64:87:21:96:24:9f:66:e5:b0:26:38:49:8a:26:64:fc:d4:86: 13:60:2e:0f:46:4e:d5:4e:6c:8d:6b:31:cf:9d:27:99:1e:b0: 82:a8:16:d4:15:44:20:a4:57:47:ef:cf:1d:fc:ed:4f:61:bb: b8:bc:a5:62:62:d3:e9:60:8c:37:58:51:ed:45:fa:3c:27:15: 2c:12:1e:6b:74:bb:57:33:b3:30:97:2a:70:b8:34:7a:4d:d6: 25:a8:8d:20:15:74:fb:6d:9c:ec:9c:6d:54:1a:65:52:40:63: bb:5a:5c:d3:67:95:9f:bb:da:f6:ee:a8:4e:a8:de:d8:a9:ce: 5d:bd:e3:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2VOWQARK6nrMS37YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjdhMGI5YTUtMDcwMC00YzFlLTkzZGItNzQyNTRkNTVi NjhjMB4XDTI2MDQyMTE4NTIzOVoXDTI2MDcyMDE4NTIzOVowLzEtMCsGA1UEAxMk NjQ2MjZlODgtM2E1YS00ZjExLWIxZjctMzk0MjhkNjIxMzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWsJq2MN33Pw3giFPZYSJJkmvLRb4tMZvWNz nLBfxTiEPvm6rd0eFkvN3Z3FN0yQEYH9axb84S3RdsaERaBp4SQF1faBWQBZGAlc tEcsFSGnfXfHb0El5YO57lyssSa7hy72clg/1K9oB5K+Rg8Rm4MYwUYZdtWWhZ49 90PlMV99MJoAQpT+WfD5iRPdK0gAgiROYkKZzD5oiNECTkifzEL0tOzJZHGTzGjw uzRRogB6HRiE69xpWy4AXR4cJVd74sf9FqHop2boinHAf9YydNUhZ8l3uKOxUjlm +/0PCJIV1mqRVczikitNzN3gM0WnP6n5swyUQOCgd+JatC11yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlw2idHxhqwtnwakSvL5ebVecyRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mN2Ew YjlhNS0wNzAwLTRjMWUtOTNkYi03NDI1NGQ1NWI2OGMvOWFmZjZhODgtYTgwOC0z MmE1LTljMmEtYzhkNmIxMzEzZmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjdhMGI5YTUtMDcwMC00YzFlLTkz ZGItNzQyNTRkNTViNjhjL2Y3YTBiOWE1LTA3MDAtNGMxZS05M2RiLTc0MjU0ZDU1 YjY4Yy5jcmwwHwYDVR0jBBgwFoAUYR2JeDj1TN956yBRm54ApkNIzqcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mN2EwYjlhNS0wNzAwLTRjMWUtOTNkYi03NDI1 NGQ1NWI2OGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCfqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlkpwc+W6xSnVc6HbZ749wNf1wjOFynvEm8SAw1nCefnlxUG0aQ6P06 +5Hcy+7KSyCHByPwRPeTgts3ZzuU0QfU5yPqkOKf9cxzRDmUcNE1Fk6wzBX/nlmr 5N6PGdZ8ZezE3guDreDeGSfEXXPI+3ddghKgv6xu0yUmaB43iGSHIZYkn2blsCY4 SYomZPzUhhNgLg9GTtVObI1rMc+dJ5kesIKoFtQVRCCkV0fvzx387U9hu7i8pWJi 0+lgjDdYUe1F+jwnFSwSHmt0u1czszCXKnC4NHpN1iWojSAVdPttnOycbVQaZVJA Y7taXNNnlZ+72vbuqE6o3tipzl294xs= -----END CERTIFICATE-----Generated at Wed Apr 22 06:27:00 2026 by rpki-client