$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/430e4bbe-bf26-38f7-bb74-efd8b8905ee0.roa File: 430e4bbe-bf26-38f7-bb74-efd8b8905ee0.roa (raw, json) Hash identifier: upF23Yk6FzGELQDmzV203jdajyoRgTXukUF78gPrNAQ= Subject key identifier: 0B:6B:70:9B:BE:BF:C1:71:8B:EB:9A:11:9F:C0:76:6C:82:0A:B9:79 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C9D96E48EEEB63BDA928DC400 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/430e4bbe-bf26-38f7-bb74-efd8b8905ee0.roa Signing time: Fri 23 Jan 2026 02:00:30 +0000 ROA not before: Fri 23 Jan 2026 02:00:30 +0000 ROA not after: Thu 23 Apr 2026 01:00:30 +0000 asID: 30036 IP address blocks: 64.237.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9d:96:e4:8e:ee:b6:3b:da:92:8d:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 23 02:00:30 2026 GMT Not After : Apr 23 01:00:30 2026 GMT Subject: CN=8804bb77-36ea-435f-9644-a68c66dc9e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:da:8c:59:31:d0:54:34:d7:6f:be:83:49:6a: c2:fb:36:59:fb:1f:ef:95:8f:03:fb:e2:5d:98:1b: 0d:44:96:98:6d:5c:99:3d:2e:5d:65:d3:04:a7:27: 99:ba:20:cb:dc:93:68:5c:82:75:ca:1c:43:7a:48: 0e:35:5d:50:6d:09:b3:65:e4:39:94:70:fd:5b:01: 8b:21:6a:8d:96:25:fc:cf:be:6f:1d:f7:61:ce:8c: a2:20:ce:fb:ef:99:e8:fe:77:75:ad:cd:43:9a:96: 59:6d:81:e3:2d:0f:95:bc:ef:9d:37:c3:e1:90:ab: e4:81:45:f1:ef:e9:c6:0b:5c:b2:de:12:92:94:0b: c1:c0:03:18:52:f2:ce:44:ec:b8:57:d9:94:61:1f: e5:0d:da:64:17:6c:25:00:c7:cd:7b:48:5e:ca:9f: 41:25:31:4d:67:a8:ab:04:52:66:34:13:12:46:8d: 3d:56:f3:a3:da:e9:0c:63:51:e5:7f:ec:59:e6:d0: 5a:64:78:29:37:b5:a3:bd:1d:b1:8b:3d:68:8a:c8: f2:96:30:06:41:93:63:bb:53:45:90:40:c2:81:6d: 17:66:69:8e:f7:61:84:3e:71:12:2a:4b:86:80:79: 12:74:9a:ce:2e:ce:78:a8:73:5c:22:3b:eb:dc:78: b3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6B:70:9B:BE:BF:C1:71:8B:EB:9A:11:9F:C0:76:6C:82:0A:B9:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/430e4bbe-bf26-38f7-bb74-efd8b8905ee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 64.237.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:bd:05:72:28:14:4d:70:01:a4:c8:02:6f:3c:b2:56:9c:12: 28:f3:ca:9d:7e:f3:a4:57:28:40:7c:24:06:ae:0c:ab:46:e7: 8f:c2:0f:1e:f6:70:d0:86:5c:06:4c:ff:cd:c5:5b:a4:37:d3: cb:75:80:4a:85:f2:00:e1:1f:b3:40:86:13:ce:e5:0f:51:5d: 95:b0:a8:72:d6:47:9f:24:2f:d2:d6:b0:25:15:e8:6d:5b:9b: df:a7:b4:2e:34:06:a3:b7:18:71:41:8c:fb:01:21:b6:bf:f2: 54:5d:b8:69:4e:a8:6a:28:6a:60:ab:6f:9d:ae:75:1b:82:1e: 05:27:6d:80:92:c7:a8:9c:bd:d6:0f:f8:f8:59:13:be:3e:a0: c8:a6:08:f5:05:22:b0:cc:4d:11:b2:f6:52:92:b7:85:48:4a: c5:a0:18:5f:c6:ee:2b:34:57:c6:a2:14:c2:af:0f:59:6b:27: 34:50:ee:a8:a3:0d:df:5c:77:80:11:56:96:9a:3a:5d:45:ae: 9f:f8:93:cd:2d:9f:3f:32:b5:ba:ae:e1:ca:e2:6c:6e:41:7e: 72:96:de:96:00:d6:52:07:e2:e1:93:2c:29:93:c8:c3:17:d2: 3c:d0:05:58:f8:f4:8d:5f:d2:92:6b:b8:87:14:3b:21:45:7b: b1:52:6e:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEydluSO7rY72pKNxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDEyMzAyMDAzMFoXDTI2MDQyMzAxMDAzMFowLzEtMCsGA1UEAxMk ODgwNGJiNzctMzZlYS00MzVmLTk2NDQtYTY4YzY2ZGM5ZTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNqMWTHQVDTXb76DSWrC+zZZ+x/vlY8D++Jd mBsNRJaYbVyZPS5dZdMEpyeZuiDL3JNoXIJ1yhxDekgONV1QbQmzZeQ5lHD9WwGL IWqNliX8z75vHfdhzoyiIM7775no/nd1rc1DmpZZbYHjLQ+VvO+dN8PhkKvkgUXx 7+nGC1yy3hKSlAvBwAMYUvLOROy4V9mUYR/lDdpkF2wlAMfNe0heyp9BJTFNZ6ir BFJmNBMSRo09VvOj2ukMY1Hlf+xZ5tBaZHgpN7WjvR2xiz1oisjyljAGQZNju1NF kEDCgW0XZmmO92GEPnESKkuGgHkSdJrOLs54qHNcIjvr3HizKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtrcJu+v8Fxi+uaEZ/AdmyCCrl5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDMwZTRiYmUtYmYyNi0z OGY3LWJiNzQtZWZkOGI4OTA1ZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQO0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABq9BXIoFE1wAaTIAm88slacEijzyp1+86RXKEB8JAauDKtG54/CDx72 cNCGXAZM/83FW6Q308t1gEqF8gDhH7NAhhPO5Q9RXZWwqHLWR58kL9LWsCUV6G1b m9+ntC40BqO3GHFBjPsBIba/8lRduGlOqGooamCrb52udRuCHgUnbYCSx6icvdYP +PhZE74+oMimCPUFIrDMTRGy9lKSt4VISsWgGF/G7is0V8aiFMKvD1lrJzRQ7qij Dd9cd4ARVpaaOl1Frp/4k80tnz8ytbqu4cribG5BfnKW3pYA1lIH4uGTLCmTyMMX 0jzQBVj49I1f0pJruIcUOyFFe7FSboY= -----END CERTIFICATE-----Generated at Sun Mar 1 23:09:41 2026 by rpki-client