$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/db9f9283-9f59-3943-9b5d-414b64f0037f.roa File: db9f9283-9f59-3943-9b5d-414b64f0037f.roa (raw, json) Hash identifier: wki1z/q04RFZGsTkOQekMkXEfLWtzL5+xN1Dqpq5Ckc= Subject key identifier: 5B:02:B7:B3:D2:30:DC:71:06:FF:47:9C:AA:0D:4C:8B:F7:39:47:B1 Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584D9B854FF6DE3E4479CAFB4B80 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/db9f9283-9f59-3943-9b5d-414b64f0037f.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 401659 IP address blocks: 64.255.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:4f:f6:de:3e:44:79:ca:fb:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=871167df-5c3e-43a0-bf61-2331200d1d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:21:5d:70:18:8b:7c:3c:5b:9c:2d:bf:65:49: c1:a3:af:a7:af:21:2e:89:6c:47:74:ca:93:61:96: a2:d2:42:e4:24:34:78:8e:70:8d:0e:5e:4c:65:6d: e6:e5:a6:0c:2a:40:22:87:1a:cb:d4:47:07:62:0e: 92:43:e5:7c:e0:17:d0:75:ff:36:c5:c3:62:2b:ca: 1d:08:ce:87:95:a0:13:1f:12:c1:d0:af:37:36:98: b8:84:67:82:0b:ee:2f:b1:2f:83:25:74:b6:4c:88: 6f:8a:9c:e2:77:7a:3c:99:45:44:19:ae:19:75:cf: 89:dc:b0:9f:f4:d2:06:e6:9b:5d:32:03:66:7d:bc: 01:c0:cc:38:81:ab:cb:b7:dc:29:bc:e5:44:76:3d: e9:5f:70:2d:90:bb:fe:ce:54:69:87:cb:ad:97:77: 26:d2:e0:3e:fe:e9:fe:73:ad:32:38:84:47:ae:1f: a9:2a:8c:b1:6f:55:df:2d:9b:a6:ca:1e:a2:17:34: cc:08:fd:26:73:eb:62:ef:5f:9d:c8:28:d4:64:a1: 41:f7:a3:6a:f1:8a:7f:e8:be:02:de:b3:4d:b6:88: 1d:f4:d4:cf:e1:27:1c:e9:f5:38:1d:85:51:bf:09: c7:b3:f0:d4:82:a4:57:4a:9e:24:af:be:c2:54:28: 8b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:02:B7:B3:D2:30:DC:71:06:FF:47:9C:AA:0D:4C:8B:F7:39:47:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/db9f9283-9f59-3943-9b5d-414b64f0037f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 64.255.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:4b:45:3c:fe:fc:b8:5e:78:f0:b3:7a:88:b1:5d:34:69:b6: 0c:5a:b7:64:b1:79:54:69:c6:d6:36:c2:0f:8e:76:ab:9a:14: f8:9d:1e:64:ef:da:58:aa:ca:51:f1:40:e8:67:6e:0b:91:65: 4a:b8:6f:5c:9f:aa:ce:5c:09:ee:69:f5:78:e2:bb:64:57:4a: 58:c8:9c:08:61:0c:17:f8:58:1a:ba:5e:90:c2:88:e2:58:9e: ee:bd:73:20:f4:1f:1a:eb:d6:c7:3e:18:c4:44:b9:49:f6:0f: d4:16:a4:c8:c7:ef:11:ab:fe:8d:57:de:1b:ea:6a:b8:16:9f: 73:44:dc:da:1f:3b:33:7e:dd:66:94:b8:4c:19:35:0b:09:43: ec:ff:37:32:3c:f5:3e:52:61:af:ac:99:13:c7:88:ee:b1:11: 8b:3d:10:1f:6a:23:2a:63:65:0f:88:5f:89:6a:72:12:8a:94: 49:35:96:e3:ca:20:5f:00:0f:de:f9:40:bd:13:8d:3e:51:83: 63:06:1d:61:55:e0:44:3c:54:39:39:0a:b8:11:1c:f9:cc:ee: 35:ab:f7:ca:38:4f:f2:d4:1d:3c:af:f2:4b:21:89:45:2c:92: 7b:35:92:91:39:1a:c5:e4:50:5e:bd:27:d1:dd:3b:50:d4:7a: ea:9b:69:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bhU/23j5Eecr7S4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk ODcxMTY3ZGYtNWMzZS00M2EwLWJmNjEtMjMzMTIwMGQxZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyFdcBiLfDxbnC2/ZUnBo6+nryEuiWxHdMqT YZai0kLkJDR4jnCNDl5MZW3m5aYMKkAihxrL1EcHYg6SQ+V84BfQdf82xcNiK8od CM6HlaATHxLB0K83Npi4hGeCC+4vsS+DJXS2TIhvipzid3o8mUVEGa4Zdc+J3LCf 9NIG5ptdMgNmfbwBwMw4gavLt9wpvOVEdj3pX3AtkLv+zlRph8utl3cm0uA+/un+ c60yOIRHrh+pKoyxb1XfLZumyh6iFzTMCP0mc+ti71+dyCjUZKFB96Nq8Yp/6L4C 3rNNtogd9NTP4Scc6fU4HYVRvwnHs/DUgqRXSp4kr77CVCiLGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsCt7PSMNxxBv9HnKoNTIv3OUexMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvZGI5ZjkyODMtOWY1OS0z OTQzLTliNWQtNDE0YjY0ZjAwMzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQP8vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5LRTz+/LheePCzeoixXTRptgxat2SxeVRpxtY2wg+OdquaFPidHmTv 2liqylHxQOhnbguRZUq4b1yfqs5cCe5p9Xjiu2RXSljInAhhDBf4WBq6XpDCiOJY nu69cyD0Hxrr1sc+GMREuUn2D9QWpMjH7xGr/o1X3hvqargWn3NE3NofOzN+3WaU uEwZNQsJQ+z/NzI89T5SYa+smRPHiO6xEYs9EB9qIypjZQ+IX4lqchKKlEk1luPK IF8AD975QL0TjT5Rg2MGHWFV4EQ8VDk5CrgRHPnM7jWr98o4T/LUHTyv8kshiUUs kns1kpE5GsXkUF69J9HdO1DUeuqbaWQ= -----END CERTIFICATE-----Generated at Wed Apr 29 00:54:07 2026 by rpki-client