$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/679e7dc6-943b-3b84-805b-72be1c2428d2.roa File: 679e7dc6-943b-3b84-805b-72be1c2428d2.roa (raw, json) Hash identifier: vE/J4aVK2clR9oTOMT5W/sBxkGcC/jUDc4fOtN/ES0c= Subject key identifier: 0F:D7:85:A3:DE:71:C8:AE:D9:F3:AA:8D:3B:A8:56:72:32:1D:04:87 Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Certificate serial: 010D0C9F4328584CB121C217F24A2E1DF4BDD980 Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/679e7dc6-943b-3b84-805b-72be1c2428d2.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 36236 IP address blocks: 64.68.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:c2:17:f2:4a:2e:1d:f4:bd:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=3eca56f6-c4f6-44e4-a86e-583d8bba9b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:65:67:04:6b:08:0e:93:07:d6:59:b3:ef:90: 79:4b:60:44:ad:50:9b:78:67:23:e3:f0:95:da:50: 86:c2:da:6b:44:ac:57:d3:02:ad:a0:d0:ea:f9:b1: 32:2f:87:2f:c4:ff:56:f8:93:d6:c8:2f:f1:91:1c: 14:18:1a:7f:f4:6b:62:2f:64:44:bf:60:76:3f:52: 04:55:ed:a0:5c:92:d6:af:fa:8e:3b:9f:30:0f:ab: 01:59:b8:0e:06:c3:93:17:f7:cd:6b:f8:ff:1d:27: 7f:9c:d5:dc:aa:43:47:9b:4c:f8:de:77:29:f5:8b: 73:aa:40:46:f5:43:82:7c:b1:29:32:a0:72:67:6b: de:ad:ad:af:d6:e3:c1:bd:b3:10:56:98:c2:45:e0: 49:2e:34:2f:be:3b:82:63:6c:9f:4d:9f:b0:52:e7: 30:32:77:da:8d:28:a6:3f:85:30:f7:c1:66:04:9e: 7b:77:96:6a:50:17:d7:a7:e2:4a:d7:aa:a8:21:0f: 64:0a:f0:b0:91:2f:68:62:3a:ef:93:d5:3d:1b:8c: 6a:38:9f:d6:8e:44:8e:9f:a4:e7:20:ea:63:34:aa: 57:ed:db:a3:28:d9:7f:8a:d7:01:39:fb:9e:4c:2c: ba:43:de:29:64:94:49:f9:05:9f:c0:8f:fe:75:d0: 1b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D7:85:A3:DE:71:C8:AE:D9:F3:AA:8D:3B:A8:56:72:32:1D:04:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/679e7dc6-943b-3b84-805b-72be1c2428d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl X509v3 Authority Key Identifier: keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer sbgp-ipAddrBlock: critical IPv4: 64.68.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:12:d3:6a:87:f6:6e:1b:66:58:6c:94:8d:0e:2a:dc:89:d7: 4d:af:5e:99:67:26:fe:fb:4b:50:37:ca:2e:32:db:05:58:30: 64:be:5e:9b:6f:e8:c6:48:a1:1e:f8:cf:28:27:5b:9c:a7:a0: 3e:2e:33:52:63:fc:28:8e:65:c8:38:9d:77:d4:70:9a:66:2c: dc:f2:79:87:7e:d1:1e:b4:96:cf:c8:fa:c0:bf:5d:0f:4a:16: e0:e9:73:f0:66:d2:20:e6:3e:1a:f5:33:22:63:95:15:55:01: eb:53:8e:90:80:19:4c:3f:fb:a6:3d:61:76:a3:a6:64:8e:54: 02:ca:a3:af:67:99:48:94:a3:5c:a8:d6:43:67:83:5d:ad:74: d1:13:4c:0a:ab:c4:a1:4f:4f:e7:e1:b6:fb:c3:cb:21:19:51: 1d:93:12:c7:9b:65:31:6d:a5:5c:82:a9:09:a9:ae:11:fd:d0: 45:4b:17:47:61:b7:54:0e:1e:16:27:7e:1a:12:97:28:49:86: de:8a:e3:8e:c3:00:d3:88:3d:b5:68:bd:bc:e9:72:56:7d:c1: 12:08:09:8b:4c:27:e2:7a:86:77:b6:98:7c:47:9f:7e:48:25: bc:9c:e9:5c:69:d3:26:e9:48:d9:ab:e9:a6:2d:11:e5:09:c9: dd:af:24:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIcIX8kouHfS92YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdm MzEyMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk M2VjYTU2ZjYtYzRmNi00NGU0LWE4NmUtNTgzZDhiYmE5YjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGVnBGsIDpMH1lmz75B5S2BErVCbeGcj4/CV 2lCGwtprRKxX0wKtoNDq+bEyL4cvxP9W+JPWyC/xkRwUGBp/9GtiL2REv2B2P1IE Ve2gXJLWr/qOO58wD6sBWbgOBsOTF/fNa/j/HSd/nNXcqkNHm0z43ncp9YtzqkBG 9UOCfLEpMqByZ2vera2v1uPBvbMQVpjCReBJLjQvvjuCY2yfTZ+wUucwMnfajSim P4Uw98FmBJ57d5ZqUBfXp+JK16qoIQ9kCvCwkS9oYjrvk9U9G4xqOJ/WjkSOn6Tn IOpjNKpX7dujKNl/itcBOfueTCy6Q94pZJRJ+QWfwI/+ddAb8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/XhaPecciu2fOqjTuoVnIyHQSHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3 NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvNjc5ZTdkYzYtOTQzYi0z Yjg0LTgwNWItNzJiZTFjMjQyOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDAwNzQ5ZWQtNzBlZi00NDdjLWIx N2MtZGE2YmU4ZDdmMzEyL2QwMDc0OWVkLTcwZWYtNDQ3Yy1iMTdjLWRhNmJlOGQ3 ZjMxMi5jcmwwHwYDVR0jBBgwFoAU9SAVhzNYxRJ4ZGbzsONdivR4eXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZi ZThkN2YzMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQETEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcS02qH9m4bZlhslI0OKtyJ102vXplnJv77S1A3yi4y2wVYMGS+Xptv 6MZIoR74zygnW5ynoD4uM1Jj/CiOZcg4nXfUcJpmLNzyeYd+0R60ls/I+sC/XQ9K FuDpc/Bm0iDmPhr1MyJjlRVVAetTjpCAGUw/+6Y9YXajpmSOVALKo69nmUiUo1yo 1kNng12tdNETTAqrxKFPT+fhtvvDyyEZUR2TEsebZTFtpVyCqQmprhH90EVLF0dh t1QOHhYnfhoSlyhJht6K447DANOIPbVovbzpclZ9wRIICYtMJ+J6hne2mHxHn35I Jbyc6Vxp0ybpSNmr6aYtEeUJyd2vJEI= -----END CERTIFICATE-----Generated at Mon Mar 2 06:36:25 2026 by rpki-client