$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/d8d06444-9d5b-387b-a943-41304f3a690f.roa File: d8d06444-9d5b-387b-a943-41304f3a690f.roa (raw, json) Hash identifier: uetMPelYFM8IvHjkp1QJS3ZB4lya9OSUSl6V9JY6MxU= Subject key identifier: B0:40:2E:07:CB:30:B6:F4:6E:9F:59:65:7F:FA:BF:6E:6E:88:FE:E5 Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F4328584D67DFD20BEC0290398251BB27 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/d8d06444-9d5b-387b-a943-41304f3a690f.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 36832 IP address blocks: 64.112.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:d2:0b:ec:02:90:39:82:51:bb:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=91f21d04-01cc-41f9-8897-9e706205f93c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:14:f7:86:dc:5f:6d:2a:ad:e8:11:b0:a4:b4: 7a:3a:55:2f:36:79:44:f1:f6:12:7c:db:db:a3:ae: ba:ed:fc:5d:bd:67:2b:18:01:7e:6a:a6:c5:3c:1f: b4:e1:6a:f2:2f:b8:3b:d9:42:39:eb:fa:0e:12:b6: ef:25:66:2c:26:5e:fe:41:07:71:89:50:43:89:e2: 8f:a1:e6:5a:02:bb:1b:39:fa:7f:ac:1e:ab:b0:aa: 2c:1a:b4:c9:0d:fb:56:6f:3d:44:cf:5e:7d:bc:b0: 19:02:29:07:ee:f3:d8:43:ee:06:35:cd:95:c3:7d: 75:ad:88:59:bd:16:a2:cf:aa:ab:a9:13:81:9c:5c: 7f:d8:81:05:b1:10:d8:9b:9d:b6:e9:9c:b5:fe:d6: dc:c2:13:47:5d:ff:4d:2f:89:6c:7a:5f:3a:f6:3d: 53:b2:4b:cb:bf:0b:65:9c:40:0a:f8:11:da:79:18: 57:d1:19:ea:1c:10:61:e3:4f:78:5a:78:7a:03:77: 56:82:4a:af:ea:46:69:d0:61:41:e6:a8:e8:f6:8c: 27:9a:20:5f:67:93:69:83:f8:99:57:03:00:c0:50: ab:4d:3f:5f:f6:b5:66:57:30:f2:df:40:80:58:dd: 58:09:72:4a:bc:53:b3:29:83:9f:f4:fa:99:0c:09: 7d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:40:2E:07:CB:30:B6:F4:6E:9F:59:65:7F:FA:BF:6E:6E:88:FE:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/d8d06444-9d5b-387b-a943-41304f3a690f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 64.112.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:5d:b5:db:35:ee:db:9b:1d:f4:3e:69:14:ee:30:43:62:61: 1c:ee:e9:48:4c:7b:51:d3:65:c3:54:7a:4f:ee:2d:8d:c3:b7: aa:75:99:69:c7:9d:16:6c:cd:c1:b9:0b:ca:1d:1a:b7:6d:0f: f1:6d:45:83:9e:84:d4:99:92:d7:02:1d:29:7c:e8:8f:29:41: a1:ab:9a:76:4b:aa:ff:02:eb:f1:e0:ac:24:ee:18:6a:0f:ac: d2:d2:45:bd:f2:85:79:f6:37:21:fb:46:97:91:e6:01:54:bd: ad:e5:12:c5:bc:f2:4a:14:a0:d9:1a:91:9e:27:19:d7:6b:ee: 98:58:26:69:f4:ee:45:f7:19:af:fd:2a:ea:17:ba:de:28:a2: 4d:b7:97:0a:28:27:e6:be:af:2c:fb:8c:ea:5d:02:b3:f7:33: 4c:4f:23:53:92:64:c2:a3:f8:d0:97:2b:04:97:b5:14:ed:af: 79:ae:a5:5a:9a:b2:37:77:4a:ce:fd:27:11:f4:97:06:32:11: f0:0a:66:62:3c:71:05:8e:c5:8a:b2:84:7d:1f:fd:3c:96:25: b2:7a:51:15:a9:e3:e9:4a:8c:23:81:70:e4:a3:38:70:e1:2a: 26:75:9f:2e:73:5a:02:06:d5:0e:63:cf:6a:d3:88:6f:e3:b3: 50:2d:4d:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n39IL7AKQOYJRuycwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk OTFmMjFkMDQtMDFjYy00MWY5LTg4OTctOWU3MDYyMDVmOTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBT3htxfbSqt6BGwpLR6OlUvNnlE8fYSfNvb o6667fxdvWcrGAF+aqbFPB+04WryL7g72UI56/oOErbvJWYsJl7+QQdxiVBDieKP oeZaArsbOfp/rB6rsKosGrTJDftWbz1Ez159vLAZAikH7vPYQ+4GNc2Vw311rYhZ vRaiz6qrqROBnFx/2IEFsRDYm5226Zy1/tbcwhNHXf9NL4lsel869j1TskvLvwtl nEAK+BHaeRhX0RnqHBBh4094Wnh6A3dWgkqv6kZp0GFB5qjo9ownmiBfZ5Npg/iZ VwMAwFCrTT9f9rVmVzDy30CAWN1YCXJKvFOzKYOf9PqZDAl9dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBALgfLMLb0bp9ZZX/6v25uiP7lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvZDhkMDY0NDQtOWQ1Yi0z ODdiLWE5NDMtNDEzMDRmM2E2OTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHBiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBdtds17tubHfQ+aRTuMENiYRzu6UhMe1HTZcNUek/uLY3Dt6p1mWnH nRZszcG5C8odGrdtD/FtRYOehNSZktcCHSl86I8pQaGrmnZLqv8C6/HgrCTuGGoP rNLSRb3yhXn2NyH7RpeR5gFUva3lEsW88koUoNkakZ4nGddr7phYJmn07kX3Ga/9 KuoXut4ook23lwooJ+a+ryz7jOpdArP3M0xPI1OSZMKj+NCXKwSXtRTtr3mupVqa sjd3Ss79JxH0lwYyEfAKZmI8cQWOxYqyhH0f/TyWJbJ6URWp4+lKjCOBcOSjOHDh KiZ1ny5zWgIG1Q5jz2rTiG/js1AtTb0= -----END CERTIFICATE-----Generated at Fri Apr 17 15:17:56 2026 by rpki-client