$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/7be3ce67-426a-397a-9a74-e2c03aae3762.roa File: 7be3ce67-426a-397a-9a74-e2c03aae3762.roa (raw, json) Hash identifier: hRUm/srfdDK11meHY3yISLeol5zTDYRM55xMrBy+A7M= Subject key identifier: 33:8C:28:B9:BF:E6:0B:30:58:D2:F4:CA:FE:6A:91:9C:2A:1B:B6:B5 Certificate issuer: /CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Certificate serial: 010D0C9F4328584CAE5E7D3B09AF42212B7D7300 Authority key identifier: 88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/7be3ce67-426a-397a-9a74-e2c03aae3762.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 19905 IP address blocks: 64.57.32.0/20 maxlen: 24 216.230.48.0/20 maxlen: 24 2620:110:7000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:7d:3b:09:af:42:21:2b:7d:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=70e53ed6-fd5e-46ed-a1cf-6bac9c0b370e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:72:6b:22:de:4b:d6:c4:09:4c:5a:7c:c7:be: 3c:ac:8c:75:5c:70:1b:06:53:51:8e:d0:26:05:36: 8f:53:1f:13:97:64:6a:99:82:66:25:67:29:4f:3a: f4:93:33:2b:3c:a4:32:21:68:58:38:b9:2a:4c:13: e3:f9:b4:88:80:74:bc:ee:0c:f8:77:2e:54:ae:96: 3c:a2:47:39:50:53:7f:95:09:bf:74:39:b2:61:61: 27:35:c3:38:29:e7:64:ed:85:d7:f9:ea:48:56:5d: c0:df:79:a4:35:8c:03:87:90:3a:e4:96:04:f4:f7: a9:0b:92:ff:93:dc:c2:5a:17:a9:72:8d:3f:d1:76: 20:4c:ea:35:99:78:59:86:b3:e4:58:fb:da:fe:cc: aa:4f:17:db:24:da:7c:63:bb:2b:0d:dc:f5:b3:cd: 4a:7b:01:82:b6:5f:1e:d6:d6:84:bf:cc:a6:7b:9d: bc:51:ac:c2:9c:2f:3f:5c:8f:56:ae:96:af:dc:b6: 98:ca:10:87:08:60:d4:04:34:d6:ff:ba:2c:7f:ba: 5e:e1:95:0e:fc:47:43:5d:6d:c8:d7:17:b3:9a:cc: f6:12:a5:b1:71:8d:42:2e:99:9a:f4:3f:07:f9:aa: 2a:d7:0d:a7:58:64:da:34:04:19:b9:47:08:7e:bf: 67:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8C:28:B9:BF:E6:0B:30:58:D2:F4:CA:FE:6A:91:9C:2A:1B:B6:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/7be3ce67-426a-397a-9a74-e2c03aae3762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl X509v3 Authority Key Identifier: keyid:88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer sbgp-ipAddrBlock: critical IPv4: 64.57.32.0/20 216.230.48.0/20 IPv6: 2620:110:7000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:77:eb:48:3d:1f:0d:da:68:69:bb:c1:04:b4:d1:04:db:45: 92:91:a7:08:fc:35:01:97:97:8d:2a:70:b9:af:0c:eb:29:db: 5d:39:58:d5:af:8c:91:d4:04:dd:d2:6f:0e:11:62:be:6f:f5: 36:15:fb:ad:81:b9:30:42:1f:08:09:bd:2d:58:c7:59:86:91: 41:6c:04:d5:e9:f4:a4:0c:52:6e:3c:1d:ff:c3:7c:02:23:99: cc:27:ad:40:4a:78:84:09:75:23:a0:96:28:ca:b7:5f:34:da: f1:f5:2e:29:e4:b1:54:a7:04:e1:39:7d:2c:2a:92:f0:a4:53: 96:b6:b7:50:b0:21:d7:5d:4b:51:45:d2:6a:fc:9e:ce:43:ed: 06:f6:84:38:f9:99:76:fc:50:fb:eb:c7:bf:0c:52:21:38:b8: b2:d4:66:43:ee:71:72:f6:5a:d4:d0:45:c4:ad:98:06:f1:e1: 31:3f:a7:c0:35:5a:51:74:d3:27:75:af:11:e5:f1:48:87:85: a1:f8:f5:35:20:71:62:69:24:d4:c6:60:4a:3d:c9:e8:19:a1: 8f:78:ea:1d:3d:af:f7:99:32:d4:23:ac:03:a3:a5:4b:61:ac: 4d:79:36:f2:a9:80:76:39:05:39:21:1f:d6:86:bb:be:d4:42: 32:b5:fc:32 -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEyuXn07Ca9CISt9cwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQzZjY2MjAtMDU3Ni00NmQ4LWIwNWQtM2UyY2RkMDZh ZmEzMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NzBlNTNlZDYtZmQ1ZS00NmVkLWExY2YtNmJhYzljMGIzNzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnJrIt5L1sQJTFp8x748rIx1XHAbBlNRjtAm BTaPUx8Tl2RqmYJmJWcpTzr0kzMrPKQyIWhYOLkqTBPj+bSIgHS87gz4dy5UrpY8 okc5UFN/lQm/dDmyYWEnNcM4Kedk7YXX+epIVl3A33mkNYwDh5A65JYE9PepC5L/ k9zCWhepco0/0XYgTOo1mXhZhrPkWPva/syqTxfbJNp8Y7srDdz1s81KewGCtl8e 1taEv8yme528UazCnC8/XI9Wrpav3LaYyhCHCGDUBDTW/7osf7pe4ZUO/EdDXW3I 1xezmsz2EqWxcY1CLpma9D8H+aoq1w2nWGTaNAQZuUcIfr9nBQIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFDOMKLm/5gswWNL0yv5qkZwqG7a1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNm NjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJjZGQwNmFmYTMvN2JlM2NlNjctNDI2YS0z OTdhLTlhNzQtZTJjMDNhYWUzNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWQzZjY2MjAtMDU3Ni00NmQ4LWIw NWQtM2UyY2RkMDZhZmEzL2FkM2Y2NjIwLTA1NzYtNDZkOC1iMDVkLTNlMmNkZDA2 YWZhMy5jcmwwHwYDVR0jBBgwFoAUiN/bmDDB0UzVtzGE7Kf8YPRf8tMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNmNjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJj ZGQwNmFmYTMuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQEQDkgAwQE 2OYwMA8EAgACMAkDBwQmIAEQcAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARnfrSD0fDdpoabvBBLTRBNtF kpGnCPw1AZeXjSpwua8M6ynbXTlY1a+MkdQE3dJvDhFivm/1NhX7rYG5MEIfCAm9 LVjHWYaRQWwE1en0pAxSbjwd/8N8AiOZzCetQEp4hAl1I6CWKMq3XzTa8fUuKeSx VKcE4Tl9LCqS8KRTlra3ULAh111LUUXSavyezkPtBvaEOPmZdvxQ++vHvwxSITi4 stRmQ+5xcvZa1NBFxK2YBvHhMT+nwDVaUXTTJ3WvEeXxSIeFofj1NSBxYmkk1MZg Sj3J6Bmhj3jqHT2v95ky1COsA6OlS2GsTXk28qmAdjkFOSEf1oa7vtRCMrX8Mg== -----END CERTIFICATE-----Generated at Mon Mar 2 10:55:50 2026 by rpki-client