$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0fb8a8db-dfd8-3f36-af87-3ccc97778ff9.roa File: 0fb8a8db-dfd8-3f36-af87-3ccc97778ff9.roa (raw, json) Hash identifier: LqPD3i4+XYTJszxzmUUZftnprjn758VdHQGKSupAwtw= Subject key identifier: E6:66:F4:1C:FC:EA:2F:87:C2:61:2F:71:B4:BF:80:4F:B5:F7:1D:1A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C9D96E4A6C1485DA2CA9F3C74 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0fb8a8db-dfd8-3f36-af87-3ccc97778ff9.roa Signing time: Fri 23 Jan 2026 02:00:30 +0000 ROA not before: Fri 23 Jan 2026 02:00:30 +0000 ROA not after: Thu 23 Apr 2026 01:00:30 +0000 asID: 30036 IP address blocks: 64.237.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9d:96:e4:a6:c1:48:5d:a2:ca:9f:3c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 23 02:00:30 2026 GMT Not After : Apr 23 01:00:30 2026 GMT Subject: CN=f95da2ab-8406-4cf8-af33-74755e09a86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f7:2a:ba:3a:55:cd:96:5d:5d:24:ab:09:81: 95:df:f3:66:0f:7c:1c:a1:fc:87:1e:a4:57:10:8e: d5:41:b8:5d:0a:ca:52:dd:9c:5a:51:5a:bd:cd:70: 51:19:ad:d4:4f:80:59:dc:29:20:7f:c1:92:0e:d8: 0c:7e:e7:2d:27:b4:46:4b:ff:a8:44:af:d3:22:3a: 20:8f:c0:b2:1f:c1:c9:48:53:c9:7b:22:a5:61:32: 54:23:cd:65:ec:e9:4f:48:9b:51:9d:25:17:57:b9: a3:bd:7b:6f:f2:38:e8:01:94:2d:db:ee:65:33:8d: 46:91:45:b1:8a:64:b4:df:f8:5a:d7:d1:60:a7:c1: de:2e:60:85:7c:a6:9c:11:01:f0:6d:84:4e:f0:35: a7:cc:6f:4a:24:3c:35:a7:dc:cb:94:df:2b:85:4c: 23:82:29:62:cb:05:b3:92:34:21:0d:4d:5b:42:29: e7:93:be:25:26:ae:c9:2e:96:29:9f:d1:27:7d:f6: 56:27:23:ea:6d:a2:68:c1:9a:48:9a:46:c7:90:b2: 7e:82:d6:f8:29:7d:b6:0a:f0:ea:32:14:61:b4:4e: be:08:53:20:ae:3b:97:18:61:6a:b4:46:44:44:06: 5d:ab:fe:8a:75:a9:bf:7f:61:ae:bf:7a:c2:a9:9c: 2e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:66:F4:1C:FC:EA:2F:87:C2:61:2F:71:B4:BF:80:4F:B5:F7:1D:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0fb8a8db-dfd8-3f36-af87-3ccc97778ff9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 64.237.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:c5:e3:03:eb:a7:14:c1:40:c2:f5:de:35:52:fa:ac:95:62: a5:b5:9b:82:54:0d:73:2f:52:41:7d:51:4f:65:94:e0:7b:6f: d7:dd:0b:30:30:48:86:0a:32:70:b6:ce:71:cd:dd:2d:f6:23: 0e:0e:73:54:57:6e:cb:ad:d0:a0:7b:b2:88:55:b7:73:c7:69: 6e:76:5b:9e:81:a5:10:f8:d4:24:27:8a:94:ee:40:a8:35:87: 74:cf:1e:03:06:2b:a8:95:8c:d1:db:a7:a4:87:d0:d7:2c:cd: 8c:db:83:28:55:70:37:62:69:60:ef:5c:a9:64:62:3b:9b:a4: 37:cf:10:f5:1a:7f:17:76:a6:c9:4e:d6:7e:88:84:9c:f5:12: 89:ca:29:43:73:61:fb:71:4a:88:c3:e1:8e:a0:ea:23:87:06: 21:89:c0:f3:5c:8d:06:70:fc:6f:34:30:17:7f:2b:fe:33:83: d1:0b:7c:3e:51:bf:1b:10:a0:0c:9a:dd:f5:11:b4:df:36:99: 35:c3:46:1c:5b:b5:e2:21:94:80:a2:24:02:be:8c:ed:b3:75: e8:fd:77:24:e2:3a:c1:31:8d:de:4f:fe:fe:0a:b6:0a:7c:83: 27:06:1a:39:57:c9:c4:77:4c:de:61:ca:e6:9c:28:55:77:bf: 50:2e:43:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEydluSmwUhdosqfPHQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDEyMzAyMDAzMFoXDTI2MDQyMzAxMDAzMFowLzEtMCsGA1UEAxMk Zjk1ZGEyYWItODQwNi00Y2Y4LWFmMzMtNzQ3NTVlMDlhODZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPcqujpVzZZdXSSrCYGV3/NmD3wcofyHHqRX EI7VQbhdCspS3ZxaUVq9zXBRGa3UT4BZ3Ckgf8GSDtgMfuctJ7RGS/+oRK/TIjog j8CyH8HJSFPJeyKlYTJUI81l7OlPSJtRnSUXV7mjvXtv8jjoAZQt2+5lM41GkUWx imS03/ha19Fgp8HeLmCFfKacEQHwbYRO8DWnzG9KJDw1p9zLlN8rhUwjgiliywWz kjQhDU1bQinnk74lJq7JLpYpn9EnffZWJyPqbaJowZpImkbHkLJ+gtb4KX22CvDq MhRhtE6+CFMgrjuXGGFqtEZERAZdq/6Kdam/f2Guv3rCqZwuYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZm9Bz86i+HwmEvcbS/gE+19x0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGZiOGE4ZGItZGZkOC0z ZjM2LWFmODctM2NjYzk3Nzc4ZmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQO0VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbF4wPrpxTBQML13jVS+qyVYqW1m4JUDXMvUkF9UU9llOB7b9fdCzAw SIYKMnC2znHN3S32Iw4Oc1RXbsut0KB7sohVt3PHaW52W56BpRD41CQnipTuQKg1 h3TPHgMGK6iVjNHbp6SH0NcszYzbgyhVcDdiaWDvXKlkYjubpDfPEPUafxd2pslO 1n6IhJz1EonKKUNzYftxSojD4Y6g6iOHBiGJwPNcjQZw/G80MBd/K/4zg9ELfD5R vxsQoAya3fURtN82mTXDRhxbteIhlICiJAK+jO2zdej9dyTiOsExjd5P/v4Ktgp8 gycGGjlXycR3TN5hyuacKFV3v1AuQ8o= -----END CERTIFICATE-----Generated at Sun Mar 1 20:37:39 2026 by rpki-client