$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8b56c3d5-1640-3af3-bff4-fd4d64189e3e.roa File: 8b56c3d5-1640-3af3-bff4-fd4d64189e3e.roa (raw, json) Hash identifier: 4lQtMxoa8oPmtWz4WB3palajM6npc897CFgflJYrGYU= Subject key identifier: 86:DA:1A:B1:83:52:01:A1:56:24:8A:CA:84:D0:79:1D:10:24:AB:27 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D15A256D4BF72C9317CC9F900 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8b56c3d5-1640-3af3-bff4-fd4d64189e3e.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 852 IP address blocks: 64.114.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:56:d4:bf:72:c9:31:7c:c9:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=8b4d6807-6f0a-482e-a152-7a1d30024ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:be:01:d5:11:8e:b5:c9:3e:19:9b:44:f5:3a: d6:0d:d0:d3:aa:1e:e7:5c:14:e5:2b:fe:02:7c:02: ba:80:5f:d2:b2:03:5d:f3:bd:ed:c2:37:69:4a:82: a5:ed:65:81:9f:c7:3e:dd:c3:24:da:61:c0:4f:16: 36:da:46:ff:d4:14:ed:db:80:a9:12:30:3f:de:6f: 60:8d:20:c0:cb:63:17:16:8c:3a:19:c6:87:6e:21: 2f:35:07:ee:82:9e:b1:85:12:2e:f1:cc:c2:a4:36: 48:b9:c5:81:8f:e6:5b:b9:0d:f7:48:ad:ee:b0:8c: 17:ef:c0:55:59:b9:35:0c:f4:20:66:34:d6:47:aa: c4:80:14:c2:d1:8c:ac:70:29:e3:4e:b1:68:73:cf: e5:65:db:a0:8f:45:cd:9e:6f:1f:6b:4a:a5:40:e3: 56:24:2d:f1:b0:5f:83:e1:3a:bc:f5:36:66:9d:8a: f9:01:2b:07:89:0f:c3:9e:d8:8b:30:8d:bd:42:3b: 29:63:d9:c9:1d:18:59:eb:de:1e:78:db:38:85:f3: 36:10:dc:0f:d0:43:2e:05:bc:d3:05:b3:af:35:1b: fe:65:5a:86:c0:7b:28:b6:33:33:a2:29:7a:1c:09: ad:28:4c:41:13:e1:02:05:af:34:a6:d1:d0:c3:12: 0e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DA:1A:B1:83:52:01:A1:56:24:8A:CA:84:D0:79:1D:10:24:AB:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8b56c3d5-1640-3af3-bff4-fd4d64189e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 64.114.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:4c:4d:ed:e7:34:f8:6c:85:99:fb:e5:2b:3f:cf:0a:fd:e1: b4:cc:c8:bd:7c:a4:2c:a1:32:77:89:f5:99:2a:24:eb:c4:ec: 7b:43:66:62:6e:23:a7:e1:38:b0:c9:5f:e5:6f:43:62:fd:8f: b9:09:10:8b:76:f2:bb:6a:80:9d:18:22:71:a1:5f:fc:00:24: 16:8e:f2:8e:9f:af:16:6b:2b:85:46:a8:13:6d:0b:07:c6:a7: 75:ad:e3:0c:f5:92:2c:fd:8e:aa:9b:5e:f1:cc:a0:c5:ce:ef: ae:72:c6:98:76:60:c7:54:fb:c9:7c:0d:73:76:90:09:2c:21: 18:1b:bc:88:85:b7:90:37:51:8d:a9:b5:9b:f5:7d:4d:24:f7: e5:3f:80:81:d5:06:9f:8c:c3:be:e7:46:c9:56:bc:f9:7f:16: d5:41:ab:c8:b3:8d:40:e3:fb:5c:89:fe:50:ca:53:71:1b:e6: da:d1:ad:b1:09:9b:bb:69:f0:33:37:e5:e9:36:bf:0b:6a:5d: 86:bc:64:40:68:9d:88:33:00:51:4e:0b:f1:e4:8a:ab:79:3b: e8:7a:65:13:38:4b:5d:83:e3:3c:23:17:b5:77:be:9d:41:b5: cd:39:bc:59:8c:b9:74:7f:28:8a:cb:3c:e3:55:51:02:5a:84: 81:29:72:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VolbUv3LJMXzJ+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk OGI0ZDY4MDctNmYwYS00ODJlLWExNTItN2ExZDMwMDI0Y2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b4B1RGOtck+GZtE9TrWDdDTqh7nXBTlK/4C fAK6gF/SsgNd873twjdpSoKl7WWBn8c+3cMk2mHATxY22kb/1BTt24CpEjA/3m9g jSDAy2MXFow6GcaHbiEvNQfugp6xhRIu8czCpDZIucWBj+ZbuQ33SK3usIwX78BV Wbk1DPQgZjTWR6rEgBTC0YyscCnjTrFoc8/lZdugj0XNnm8fa0qlQONWJC3xsF+D 4Tq89TZmnYr5ASsHiQ/DntiLMI29QjspY9nJHRhZ694eeNs4hfM2ENwP0EMuBbzT BbOvNRv+ZVqGwHsotjMzoil6HAmtKExBE+ECBa80ptHQwxIOQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbaGrGDUgGhViSKyoTQeR0QJKsnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOGI1NmMzZDUtMTY0MC0z YWYzLWJmZjQtZmQ0ZDY0MTg5ZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHIcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxMTe3nNPhshZn75Ss/zwr94bTMyL18pCyhMneJ9ZkqJOvE7HtDZmJu I6fhOLDJX+VvQ2L9j7kJEIt28rtqgJ0YInGhX/wAJBaO8o6frxZrK4VGqBNtCwfG p3Wt4wz1kiz9jqqbXvHMoMXO765yxph2YMdU+8l8DXN2kAksIRgbvIiFt5A3UY2p tZv1fU0k9+U/gIHVBp+Mw77nRslWvPl/FtVBq8izjUDj+1yJ/lDKU3Eb5trRrbEJ m7tp8DM35ek2vwtqXYa8ZEBonYgzAFFOC/Hkiqt5O+h6ZRM4S12D4zwjF7V3vp1B tc05vFmMuXR/KIrLPONVUQJahIEpcqY= -----END CERTIFICATE-----Generated at Fri Mar 13 23:53:04 2026 by rpki-client