$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/23961820-6832-3252-9dba-8aa2df70fc49.roa File: 23961820-6832-3252-9dba-8aa2df70fc49.roa (raw, json) Hash identifier: U6kjo+uXGIokQMY+y5iFofLx7lGITfX3sFtG+eltnFo= Subject key identifier: 5C:B7:20:DC:48:90:0C:40:F2:A4:17:1C:53:CB:48:43:17:67:52:5A Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584D1B19F0583D80DCCDE81F2420 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/23961820-6832-3252-9dba-8aa2df70fc49.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 21766 IP address blocks: 64.63.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:f0:58:3d:80:dc:cd:e8:1f:24:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=2b4f1e2e-5575-4532-8d6e-9c3a23113ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2d:4e:8e:80:57:ba:83:b6:b3:2f:81:ad:cd: d1:30:aa:e3:c8:5e:af:6a:49:13:4f:88:79:bd:c1: 1d:bf:f5:29:e3:a0:c6:65:34:db:f6:0a:ae:aa:2a: 77:e0:56:e9:43:2f:4c:06:b8:7e:f6:b1:ea:51:0a: 61:67:77:82:7f:06:e9:74:2b:12:7c:b7:22:04:f2: 25:0f:5d:50:c5:8a:40:03:4c:33:29:a4:c9:ee:5f: 11:8c:76:36:6b:c3:0e:47:ca:0a:94:45:83:de:9f: 87:88:b3:a3:2b:cd:04:12:5b:75:0d:0a:fa:49:0c: 9a:d5:5d:86:a1:ea:7f:5f:22:ec:e5:23:20:e7:3e: 2c:b7:e9:83:48:c0:dc:77:47:9a:c3:df:40:da:87: 69:59:d4:36:66:8a:19:2e:21:6c:50:a6:7e:c3:60: df:3f:30:b2:2e:4b:6a:09:10:b9:6d:fa:56:96:f7: bc:f2:89:b9:e8:21:df:d7:26:34:1e:0b:a2:68:62: 99:5d:c2:9d:c0:a7:35:50:da:46:d2:f9:92:38:0b: 9d:45:06:17:b2:41:ad:d7:df:c5:9f:51:f5:ec:41: 1e:b3:14:54:97:01:b6:e8:c4:e8:df:82:9e:8d:ae: 4e:03:a0:2f:59:a1:90:20:b2:6a:fe:b1:90:18:18: 97:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B7:20:DC:48:90:0C:40:F2:A4:17:1C:53:CB:48:43:17:67:52:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/23961820-6832-3252-9dba-8aa2df70fc49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 64.63.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:8c:6a:12:04:a3:fd:2f:3e:07:7e:37:6f:e4:d6:9a:61:9e: 30:04:67:26:64:70:86:09:a5:b0:2b:ed:ee:5a:ae:db:da:69: cf:97:de:6b:10:24:aa:dc:9f:67:1d:e5:67:57:12:54:58:24: 31:e6:2d:ec:62:15:ad:df:72:79:80:1e:79:de:18:ce:44:06: 41:f3:36:48:c3:5f:a1:84:9d:e8:25:e9:b9:0d:2f:5c:48:41: 8f:0d:3e:18:32:02:98:15:93:f7:f2:01:7a:9e:d9:c1:3a:27: 75:f6:52:65:d8:e7:a1:1c:c5:64:21:0c:8a:41:6e:a8:74:f7: 76:fa:b7:4a:ee:6e:e6:41:24:6c:bc:f9:e2:ef:1f:7d:c3:08: ca:55:92:31:b2:35:65:a5:6c:eb:a4:c8:39:68:e6:71:21:a3: 5b:65:5b:9a:2b:f2:5b:64:8e:a9:f6:66:da:56:a6:63:6f:22: 63:23:14:ff:77:e1:19:b7:0b:00:b9:56:0c:72:6e:80:7d:ee: de:7c:e9:eb:20:18:e1:d8:fb:ad:35:7b:84:27:50:eb:b3:0e: 7b:d6:9a:17:63:fd:e5:9e:b5:75:8b:30:9e:c8:60:24:84:b0: 72:8f:16:e1:2b:d1:a4:c3:a5:90:b6:74:f5:a7:a2:f2:cc:e3: d7:85:62:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGfBYPYDczegfJCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MmI0ZjFlMmUtNTU3NS00NTMyLThkNmUtOWMzYTIzMTEzZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi1OjoBXuoO2sy+Brc3RMKrjyF6vakkTT4h5 vcEdv/Up46DGZTTb9gquqip34FbpQy9MBrh+9rHqUQphZ3eCfwbpdCsSfLciBPIl D11QxYpAA0wzKaTJ7l8RjHY2a8MOR8oKlEWD3p+HiLOjK80EElt1DQr6SQya1V2G oep/XyLs5SMg5z4st+mDSMDcd0eaw99A2odpWdQ2ZooZLiFsUKZ+w2DfPzCyLktq CRC5bfpWlve88om56CHf1yY0HguiaGKZXcKdwKc1UNpG0vmSOAudRQYXskGt19/F n1H17EEesxRUlwG26MTo34Keja5OA6AvWaGQILJq/rGQGBiXmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFy3INxIkAxA8qQXHFPLSEMXZ1JaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvMjM5NjE4MjAtNjgzMi0z MjUyLTlkYmEtOGFhMmRmNzBmYzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQD/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeMahIEo/0vPgd+N2/k1pphnjAEZyZkcIYJpbAr7e5artvaac+X3msQ JKrcn2cd5WdXElRYJDHmLexiFa3fcnmAHnneGM5EBkHzNkjDX6GEnegl6bkNL1xI QY8NPhgyApgVk/fyAXqe2cE6J3X2UmXY56EcxWQhDIpBbqh093b6t0rubuZBJGy8 +eLvH33DCMpVkjGyNWWlbOukyDlo5nEho1tlW5or8ltkjqn2ZtpWpmNvImMjFP93 4Rm3CwC5VgxyboB97t586esgGOHY+601e4QnUOuzDnvWmhdj/eWetXWLMJ7IYCSE sHKPFuEr0aTDpZC2dPWnovLM49eFYoA= -----END CERTIFICATE-----Generated at Tue Mar 10 18:15:00 2026 by rpki-client