$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0fb8a8db-dfd8-3f36-af87-3ccc97778ff9.roa File: 0fb8a8db-dfd8-3f36-af87-3ccc97778ff9.roa (raw, json) Hash identifier: 8FxecwSK4TZ2kTEcSXfNFJyr8okmFfeXaUQ7zn2a4IE= Subject key identifier: 82:CB:FA:B3:D0:60:EB:81:F4:DB:29:32:73:2E:86:40:35:65:B1:7B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D7E3530A870E4F03F0A5D1000 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0fb8a8db-dfd8-3f36-af87-3ccc97778ff9.roa Signing time: Mon 13 Apr 2026 13:00:30 +0000 ROA not before: Mon 13 Apr 2026 13:00:30 +0000 ROA not after: Sun 12 Jul 2026 13:00:30 +0000 asID: 30036 IP address blocks: 64.237.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7e:35:30:a8:70:e4:f0:3f:0a:5d:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 13 13:00:30 2026 GMT Not After : Jul 12 13:00:30 2026 GMT Subject: CN=d6afe36e-81a2-4f99-82c8-91b51cd16961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:52:96:17:79:c7:1b:60:b8:f3:29:e9:77:9e: e4:aa:9f:13:9e:ff:bb:ab:04:a6:c4:cb:b6:9b:22: b6:3b:2f:cb:3e:66:d2:84:ef:bf:8e:50:7f:d7:39: df:02:98:fc:81:72:3a:dd:39:8d:58:aa:b5:6e:7f: 24:2b:e9:e1:ef:4c:20:30:7b:a1:20:01:6e:31:ff: 3c:4c:18:b0:3e:9d:3b:16:d2:67:53:9e:ea:72:d3: 57:43:32:b1:a4:2a:1a:dc:a2:b8:14:a5:30:90:f5: 02:a9:52:a0:9e:e6:09:95:b7:d2:24:25:aa:ad:d6: 8b:47:0d:5b:ce:52:e7:10:79:24:50:bb:ff:91:71: 52:20:24:1c:1a:5e:82:e5:4b:8d:e3:d7:fd:71:1e: ca:ba:d2:3e:33:16:5b:c4:60:9f:37:7d:ab:33:44: 90:1f:7c:05:14:5c:79:56:0b:33:80:31:85:05:2e: d8:bb:ae:47:fa:c0:51:3b:63:49:84:21:c4:0a:19: f0:a6:dd:3b:9b:6d:f6:71:69:e4:ab:bf:70:1d:5e: 0e:44:ce:06:8b:05:64:d5:9a:53:db:ec:94:60:27: a7:a2:f8:b1:6b:ef:c8:fb:98:b3:1e:3b:d6:76:92: 2f:89:6a:1d:22:7e:4b:50:0c:cc:67:41:7b:5b:e6: 7d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CB:FA:B3:D0:60:EB:81:F4:DB:29:32:73:2E:86:40:35:65:B1:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0fb8a8db-dfd8-3f36-af87-3ccc97778ff9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 64.237.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:dc:b7:4a:6c:af:07:51:46:87:ea:9f:f5:d2:4a:10:65:7a: 92:1e:36:11:ed:ae:d9:ea:24:1d:db:a6:41:92:d2:65:1b:33: 74:96:4f:48:16:a3:6e:24:a4:83:6f:a3:65:21:fa:85:2f:92: 2d:4e:da:ad:77:de:00:21:9a:e3:b2:22:e4:72:60:d4:2d:86: d3:32:91:4d:1a:ba:9a:40:51:d0:cc:e8:f5:03:eb:6a:f8:58: 74:11:02:24:b4:6c:c5:c5:b3:0f:86:dc:fd:8f:de:2d:fa:ae: 55:86:71:f0:9e:b2:85:e8:ec:07:84:11:b8:9b:c1:29:b4:34: 16:bb:72:3e:3a:c0:7e:d4:be:3c:ea:6b:66:7f:24:2a:db:08: 07:37:17:10:39:b4:36:66:08:63:33:80:00:84:39:9e:8a:8e: de:17:20:71:2e:d5:1c:9d:e9:0a:06:76:c8:d9:8b:0b:82:fa: fc:26:35:14:b3:b6:1a:95:c9:b5:54:ca:a1:22:f1:8c:4e:d6: ab:3c:0c:fe:4d:b9:0c:d0:82:88:53:81:84:fd:ed:69:9c:1b: 7b:9e:87:af:87:c2:9f:f7:c1:e3:eb:8c:09:f0:52:b6:98:1b: 26:ca:39:94:23:51:17:f4:ad:39:1b:93:eb:fc:29:13:94:3f: fa:50:2f:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1+NTCocOTwPwpdEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQxMzEzMDAzMFoXDTI2MDcxMjEzMDAzMFowLzEtMCsGA1UEAxMk ZDZhZmUzNmUtODFhMi00Zjk5LTgyYzgtOTFiNTFjZDE2OTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1KWF3nHG2C48ynpd57kqp8Tnv+7qwSmxMu2 myK2Oy/LPmbShO+/jlB/1znfApj8gXI63TmNWKq1bn8kK+nh70wgMHuhIAFuMf88 TBiwPp07FtJnU57qctNXQzKxpCoa3KK4FKUwkPUCqVKgnuYJlbfSJCWqrdaLRw1b zlLnEHkkULv/kXFSICQcGl6C5UuN49f9cR7KutI+MxZbxGCfN32rM0SQH3wFFFx5 VgszgDGFBS7Yu65H+sBRO2NJhCHEChnwpt07m232cWnkq79wHV4ORM4GiwVk1ZpT 2+yUYCenovixa+/I+5izHjvWdpIviWodIn5LUAzMZ0F7W+Z9kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILL+rPQYOuB9NspMnMuhkA1ZbF7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGZiOGE4ZGItZGZkOC0z ZjM2LWFmODctM2NjYzk3Nzc4ZmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQO0VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbct0psrwdRRofqn/XSShBlepIeNhHtrtnqJB3bpkGS0mUbM3SWT0gW o24kpINvo2Uh+oUvki1O2q133gAhmuOyIuRyYNQthtMykU0auppAUdDM6PUD62r4 WHQRAiS0bMXFsw+G3P2P3i36rlWGcfCesoXo7AeEEbibwSm0NBa7cj46wH7Uvjzq a2Z/JCrbCAc3FxA5tDZmCGMzgACEOZ6Kjt4XIHEu1Ryd6QoGdsjZiwuC+vwmNRSz thqVybVUyqEi8YxO1qs8DP5NuQzQgohTgYT97WmcG3ueh6+Hwp/3wePrjAnwUraY GybKOZQjURf0rTkbk+v8KROUP/pQL0E= -----END CERTIFICATE-----Generated at Fri Apr 17 11:33:27 2026 by rpki-client