$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/bedfd239-0021-3ee0-be05-d5cf473a267e.roa File: bedfd239-0021-3ee0-be05-d5cf473a267e.roa (raw, json) Hash identifier: qyA6hBRb21mugJp6y9dy2PTuhlsiN+n8L0o0PRqDHEY= Subject key identifier: 08:40:D9:5D:0B:A5:00:9A:96:65:44:1D:D5:38:F1:47:AE:F7:02:CA Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584CC77733191FE5EA150DEBCF80 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/bedfd239-0021-3ee0-be05-d5cf473a267e.roa Signing time: Sat 07 Feb 2026 02:00:31 +0000 ROA not before: Sat 07 Feb 2026 02:00:31 +0000 ROA not after: Fri 08 May 2026 01:00:31 +0000 asID: 13414 IP address blocks: 64.63.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c7:77:33:19:1f:e5:ea:15:0d:eb:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Feb 7 02:00:31 2026 GMT Not After : May 8 01:00:31 2026 GMT Subject: CN=d61c789d-aafd-46d6-b2f5-ce09191404fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:52:ae:d7:77:cd:0a:f6:e2:68:e6:a4:29:ba: d4:9e:3d:97:92:19:44:14:11:bb:41:63:2a:7b:eb: 4d:91:7d:b0:8e:7c:6b:da:2d:5d:87:fe:14:57:2a: 5e:a3:2b:4a:69:27:4c:11:54:6c:1e:99:87:34:9b: b6:ae:ff:11:9d:d2:07:cf:9d:eb:d4:3a:e1:07:39: be:ca:57:74:95:10:fa:89:d5:73:b8:b2:fd:87:9c: 52:80:7e:e4:ee:e9:db:72:fc:8f:0f:3b:e0:b6:35: d8:67:5e:41:d1:78:d2:10:e6:c5:b0:7b:dc:de:c4: 5e:30:50:d9:b4:63:aa:b0:ed:1b:f6:c0:5d:6e:a5: f2:3b:8f:28:03:fd:6c:ff:84:bf:35:f8:25:f5:f5: 41:4d:43:0a:02:e4:80:b9:d4:47:ef:01:8a:76:87: 87:a5:ca:22:95:81:09:d7:ef:d7:a6:d3:97:9a:f3: 46:2c:1d:8f:59:0c:06:de:87:40:f7:46:12:f1:da: 49:76:1f:a3:13:f2:b8:19:84:67:ee:2e:a3:29:0d: 8b:95:c1:db:eb:de:f2:5d:81:f9:04:1b:76:37:c7: 14:17:b9:26:c1:b8:c7:97:e5:17:55:4b:cd:65:7a: 1b:1c:b6:05:bf:64:3a:3b:a1:f9:7f:4e:a6:2b:3d: af:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:40:D9:5D:0B:A5:00:9A:96:65:44:1D:D5:38:F1:47:AE:F7:02:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/bedfd239-0021-3ee0-be05-d5cf473a267e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:c2:9c:96:2b:cc:0f:f3:2d:9b:4d:38:a9:83:52:50:34:ed: 41:0c:52:d9:31:4d:4a:d4:7d:13:5e:bd:2b:0c:e6:a4:a8:7e: e2:97:7e:85:96:36:a2:3e:c3:7a:44:59:46:20:f3:e4:65:7b: 8a:79:ed:a8:7c:ba:af:e6:49:c2:62:c5:85:ec:12:55:92:2a: 3d:b5:06:b4:7b:2d:c7:d4:81:8e:75:93:79:43:d4:55:12:55: 68:8e:45:6e:ef:aa:84:bd:7e:9a:53:59:8b:14:e7:4c:00:87: ad:b5:b4:83:96:17:80:1f:7e:c3:52:f3:85:de:f3:9d:e4:7c: 30:f8:7b:e6:f6:af:ad:32:a5:31:50:50:e8:6a:90:39:58:4c: f2:78:ac:6d:01:c1:8c:90:61:85:ce:6a:6e:6d:2e:58:ee:fc: 40:12:15:b1:14:22:53:59:f6:3e:f0:6c:4a:00:a8:29:09:f5: e8:ef:f1:8d:cf:50:6b:3c:81:ca:f7:93:43:76:79:b4:ff:d2: ba:65:61:06:2c:19:00:c4:90:7a:b2:8d:11:c7:0c:f8:15:c7: aa:90:58:b2:5b:b4:bb:47:20:2c:49:c0:6f:5e:9b:d6:d8:1c: 87:4c:23:36:9a:15:30:f5:3d:d0:35:74:4a:d2:38:2a:b9:a7: 62:ac:f3:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzHdzMZH+XqFQ3rz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk ZDYxYzc4OWQtYWFmZC00NmQ2LWIyZjUtY2UwOTE5MTQwNGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VKu13fNCvbiaOakKbrUnj2XkhlEFBG7QWMq e+tNkX2wjnxr2i1dh/4UVypeoytKaSdMEVRsHpmHNJu2rv8RndIHz53r1DrhBzm+ yld0lRD6idVzuLL9h5xSgH7k7unbcvyPDzvgtjXYZ15B0XjSEObFsHvc3sReMFDZ tGOqsO0b9sBdbqXyO48oA/1s/4S/Nfgl9fVBTUMKAuSAudRH7wGKdoeHpcoilYEJ 1+/XptOXmvNGLB2PWQwG3odA90YS8dpJdh+jE/K4GYRn7i6jKQ2LlcHb697yXYH5 BBt2N8cUF7kmwbjHl+UXVUvNZXobHLYFv2Q6O6H5f06mKz2vEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhA2V0LpQCalmVEHdU48Ueu9wLKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYmVkZmQyMzktMDAyMS0z ZWUwLWJlMDUtZDVjZjQ3M2EyNjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnCnJYrzA/zLZtNOKmDUlA07UEMUtkxTUrUfRNevSsM5qSofuKXfoWW NqI+w3pEWUYg8+Rle4p57ah8uq/mScJixYXsElWSKj21BrR7LcfUgY51k3lD1FUS VWiORW7vqoS9fppTWYsU50wAh621tIOWF4AffsNS84Xe853kfDD4e+b2r60ypTFQ UOhqkDlYTPJ4rG0BwYyQYYXOam5tLlju/EASFbEUIlNZ9j7wbEoAqCkJ9ejv8Y3P UGs8gcr3k0N2ebT/0rplYQYsGQDEkHqyjRHHDPgVx6qQWLJbtLtHICxJwG9em9bY HIdMIzaaFTD1PdA1dErSOCq5p2Ks8+U= -----END CERTIFICATE-----Generated at Mon Mar 2 01:13:59 2026 by rpki-client