$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/d8561cc0-42de-398c-82a6-2cae487ec735.roa File: d8561cc0-42de-398c-82a6-2cae487ec735.roa (raw, json) Hash identifier: m3syXwQJF4i1tQXhaQcoh6E+1oH6FHu57D4wStg4GD0= Subject key identifier: 3F:EC:19:93:77:94:DD:A7:90:BC:1A:08:08:C9:53:D0:96:02:33:3F Certificate issuer: /CN=1b683a16-e9c4-489a-a5e9-3bb1b401f190 Certificate serial: 010D0C9F4328584D52434586DD0C6FDA7F098330 Authority key identifier: BA:9B:1D:28:3D:C9:F8:2F:10:17:0C:0E:A5:14:79:05:16:35:4D:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/d8561cc0-42de-398c-82a6-2cae487ec735.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 18863 IP address blocks: 64.28.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/1b683a16-e9c4-489a-a5e9-3bb1b401f190.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/1b683a16-e9c4-489a-a5e9-3bb1b401f190.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:45:86:dd:0c:6f:da:7f:09:83:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b683a16-e9c4-489a-a5e9-3bb1b401f190 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=d74f40c8-b697-4967-99fc-e944b1029365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6b:47:c8:05:3c:94:19:73:dd:c6:90:8d:6c: 5f:82:a8:2a:25:d1:e5:3a:3d:d4:72:64:73:b7:9d: ae:10:52:76:e0:34:5c:e7:df:91:6c:d4:8a:94:93: d2:80:ee:18:b2:01:c3:e0:02:1b:16:61:9e:6f:b9: 0e:52:57:be:08:f4:3f:0a:6c:51:6e:3f:ff:75:42: bb:c1:39:19:78:53:20:1f:8d:cc:4a:da:7a:d6:15: ee:31:4a:17:f3:15:f0:e4:95:35:34:fb:b2:14:75: 92:c6:8b:26:66:da:1c:c5:f5:42:2a:e4:4d:b0:f8: f3:96:82:51:8e:38:87:92:92:a0:5f:40:94:0b:64: f7:8e:25:22:cf:a9:3f:54:c8:be:e3:71:c2:08:f5: f1:d9:87:53:c7:5a:f7:38:68:d9:c4:d3:49:ee:6f: db:8a:7f:96:92:0b:43:57:90:84:c6:e2:2b:ce:be: d1:55:18:11:d0:0c:65:5e:31:8c:cb:86:76:17:d9: dc:b7:08:b1:1b:5b:cd:be:77:31:a0:b3:ee:4b:dc: 8d:74:d4:e9:1a:cc:01:3b:45:85:a9:70:9a:53:7d: a2:6f:45:1b:68:c1:d1:d6:b9:56:08:cb:45:44:cb: 0a:6a:4e:8c:f8:da:1b:a0:27:27:9f:1d:6c:7f:b4: f4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EC:19:93:77:94:DD:A7:90:BC:1A:08:08:C9:53:D0:96:02:33:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/d8561cc0-42de-398c-82a6-2cae487ec735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/1b683a16-e9c4-489a-a5e9-3bb1b401f190.crl X509v3 Authority Key Identifier: keyid:BA:9B:1D:28:3D:C9:F8:2F:10:17:0C:0E:A5:14:79:05:16:35:4D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190.cer sbgp-ipAddrBlock: critical IPv4: 64.28.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:ab:a5:45:08:ea:b2:fe:29:d9:d4:41:71:7f:e5:30:90:8e: ef:b9:b3:a4:4b:fd:b2:02:85:36:29:78:31:13:0b:b5:dc:a1: 39:80:56:14:ad:47:d2:1c:b4:2d:d9:62:1c:67:ef:06:57:c2: 26:15:41:e1:9d:d4:f2:44:c5:8e:c9:87:a2:64:06:9c:f6:e8: 7e:ec:e9:da:cf:27:19:0c:d3:cc:a7:cb:93:23:f3:70:62:a9: f1:6c:68:3c:61:aa:d7:d7:47:04:e4:12:85:38:5d:af:0a:f4: 08:c6:af:5a:55:83:cf:e4:40:77:2a:d7:f0:eb:74:82:27:d7: 10:31:c6:71:4c:cd:8e:2a:88:3b:52:82:d3:83:22:48:c3:29: cd:1a:87:d0:d3:09:21:32:d8:31:bd:ca:f8:be:a2:f2:f7:5a: 37:a9:8f:de:20:7e:28:d1:97:14:07:1d:f6:69:10:13:ab:82: c5:6f:fa:3a:06:46:ca:fa:a6:97:ed:59:50:ef:93:97:2c:c7: 55:27:93:e7:c5:8f:b5:d7:c1:e0:a5:73:06:6b:91:e5:06:b0: e3:e2:72:7b:13:49:40:d4:af:b8:b5:2a:57:5a:89:5b:82:df: c2:c4:16:c2:c0:9e:e5:4e:05:10:b5:0c:e4:3b:b5:76:e7:bc: 6b:b5:9a:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ0WG3Qxv2n8JgzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI2ODNhMTYtZTljNC00ODlhLWE1ZTktM2JiMWI0MDFm MTkwMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk ZDc0ZjQwYzgtYjY5Ny00OTY3LTk5ZmMtZTk0NGIxMDI5MzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmtHyAU8lBlz3caQjWxfgqgqJdHlOj3UcmRz t52uEFJ24DRc59+RbNSKlJPSgO4YsgHD4AIbFmGeb7kOUle+CPQ/CmxRbj//dUK7 wTkZeFMgH43MStp61hXuMUoX8xXw5JU1NPuyFHWSxosmZtocxfVCKuRNsPjzloJR jjiHkpKgX0CUC2T3jiUiz6k/VMi+43HCCPXx2YdTx1r3OGjZxNNJ7m/bin+WkgtD V5CExuIrzr7RVRgR0AxlXjGMy4Z2F9nctwixG1vNvncxoLPuS9yNdNTpGswBO0WF qXCaU32ib0UbaMHR1rlWCMtFRMsKak6M+NoboCcnnx1sf7T0zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/sGZN3lN2nkLwaCAjJU9CWAjM/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjY4 M2ExNi1lOWM0LTQ4OWEtYTVlOS0zYmIxYjQwMWYxOTAvZDg1NjFjYzAtNDJkZS0z OThjLTgyYTYtMmNhZTQ4N2VjNzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWI2ODNhMTYtZTljNC00ODlhLWE1 ZTktM2JiMWI0MDFmMTkwLzFiNjgzYTE2LWU5YzQtNDg5YS1hNWU5LTNiYjFiNDAx ZjE5MC5jcmwwHwYDVR0jBBgwFoAUupsdKD3J+C8QFwwOpRR5BRY1TZMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjY4M2ExNi1lOWM0LTQ4OWEtYTVlOS0zYmIx YjQwMWYxOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBzuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICrpUUI6rL+KdnUQXF/5TCQju+5s6RL/bIChTYpeDETC7XcoTmAVhSt R9IctC3ZYhxn7wZXwiYVQeGd1PJExY7Jh6JkBpz26H7s6drPJxkM08yny5Mj83Bi qfFsaDxhqtfXRwTkEoU4Xa8K9AjGr1pVg8/kQHcq1/DrdIIn1xAxxnFMzY4qiDtS gtODIkjDKc0ah9DTCSEy2DG9yvi+ovL3Wjepj94gfijRlxQHHfZpEBOrgsVv+joG Rsr6ppftWVDvk5csx1Unk+fFj7XXweClcwZrkeUGsOPicnsTSUDUr7i1KldaiVuC 38LEFsLAnuVOBRC1DOQ7tXbnvGu1mqw= -----END CERTIFICATE-----Generated at Thu Apr 9 02:28:46 2026 by rpki-client