$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/6851468d-791f-3582-8090-bbf757f8e43b.roa File: 6851468d-791f-3582-8090-bbf757f8e43b.roa (raw, json) Hash identifier: eNBabG/TinFT2+pKQ9uZQxGTTe+9cv8Xf/VCROkeDnQ= Subject key identifier: BD:79:62:5D:33:47:22:FB:A3:B4:BA:4E:1A:A0:A7:DF:5C:4C:16:E9 Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Certificate serial: 010D0C9F4328584CB121C2268D16A3CA705BA3A0 Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/6851468d-791f-3582-8090-bbf757f8e43b.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 36236 IP address blocks: 64.68.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:c2:26:8d:16:a3:ca:70:5b:a3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=09a33595-1790-45f0-8124-71193eba9638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:af:88:d1:53:72:f9:27:93:8c:cb:bc:75:50: ab:c3:01:a9:57:98:56:33:e5:fc:14:27:93:bf:91: 88:af:e6:1b:8e:30:95:57:ce:8a:bd:15:46:e7:49: 6c:4b:61:f0:54:92:a9:11:cc:8d:44:1f:fe:97:52: 9f:2c:f1:07:5b:a1:d4:dd:b8:75:b3:78:30:aa:0e: 30:51:03:2d:d4:cb:5f:84:07:e4:10:0e:a2:7e:ca: 8f:9f:0a:ec:bd:1c:56:a0:7b:3c:88:8b:ff:a7:cc: a7:9c:27:73:43:9a:3f:70:b7:80:05:09:46:e5:a1: 94:cf:3c:65:c3:78:c4:4d:ad:37:53:66:da:c7:09: 85:88:77:00:09:d0:8b:87:f1:a0:f7:8a:33:62:9f: 96:61:64:28:b1:3c:48:89:d6:8f:22:01:1f:a8:c8: a4:9f:b9:02:02:a0:f2:9a:02:a5:27:b1:30:8f:dd: dd:0e:10:b6:0f:73:80:4f:2f:19:b4:40:ca:26:7c: 43:12:8c:64:c9:55:cd:e5:75:65:eb:e6:0f:7d:9a: 80:a2:b6:1b:97:d9:d0:f0:26:32:8b:bc:92:c2:e1: b6:95:ea:be:76:2c:71:f8:f9:88:e9:1c:3d:dc:28: 54:a8:0d:5f:1f:1e:30:74:1b:1e:e7:04:81:32:b4: 96:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:79:62:5D:33:47:22:FB:A3:B4:BA:4E:1A:A0:A7:DF:5C:4C:16:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/6851468d-791f-3582-8090-bbf757f8e43b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl X509v3 Authority Key Identifier: keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer sbgp-ipAddrBlock: critical IPv4: 64.68.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:86:3a:4b:e6:d6:cb:e2:8d:cd:fd:4f:f6:9e:d4:21:2a:3d: 7a:8c:5f:49:cb:96:d5:99:88:03:6c:53:aa:1f:00:9c:a0:5c: ad:c3:f2:ef:96:4a:52:a5:55:d9:ab:05:b8:9d:f1:d8:16:34: 34:3f:b2:b0:45:ba:bd:c5:5e:fc:40:fb:88:86:a2:19:5c:41: 63:61:7f:a5:a2:3e:10:a6:e9:a0:fe:fc:60:18:46:e5:36:d8: ea:13:30:7a:ea:fc:e9:04:0d:80:80:d7:ce:4b:f1:50:3e:2c: fe:f3:97:37:bc:5f:93:be:64:7a:a4:0e:a6:d8:42:5e:5b:39: 23:68:e0:80:57:16:0e:c1:bc:c6:b7:6c:c0:da:f6:4b:78:20: 9b:35:fb:50:d7:5d:47:93:8f:a6:10:47:6b:0c:22:ba:7f:4e: 89:85:4c:e7:bd:f4:4e:59:31:9d:52:7f:3c:af:3b:f7:15:00: 90:92:43:25:f5:c6:76:5f:55:90:93:fb:ce:6d:0e:56:d9:08: d2:8d:93:35:0c:3a:7b:13:e6:f1:e2:e9:74:b6:9b:82:87:f2: 6f:ef:68:be:41:28:12:c0:d2:35:56:e2:a5:64:a9:0a:cb:0d: c1:8b:a3:5c:39:bb:f9:41:19:9f:0f:9a:72:68:7c:72:c6:25: 85:c7:6c:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIcImjRajynBbo6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdm MzEyMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk MDlhMzM1OTUtMTc5MC00NWYwLTgxMjQtNzExOTNlYmE5NjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha+I0VNy+SeTjMu8dVCrwwGpV5hWM+X8FCeT v5GIr+YbjjCVV86KvRVG50lsS2HwVJKpEcyNRB/+l1KfLPEHW6HU3bh1s3gwqg4w UQMt1MtfhAfkEA6ifsqPnwrsvRxWoHs8iIv/p8ynnCdzQ5o/cLeABQlG5aGUzzxl w3jETa03U2baxwmFiHcACdCLh/Gg94ozYp+WYWQosTxIidaPIgEfqMikn7kCAqDy mgKlJ7Ewj93dDhC2D3OATy8ZtEDKJnxDEoxkyVXN5XVl6+YPfZqAorYbl9nQ8CYy i7ySwuG2leq+dixx+PmI6Rw93ChUqA1fHx4wdBse5wSBMrSWkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL15Yl0zRyL7o7S6Thqgp99cTBbpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3 NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvNjg1MTQ2OGQtNzkxZi0z NTgyLTgwOTAtYmJmNzU3ZjhlNDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDAwNzQ5ZWQtNzBlZi00NDdjLWIx N2MtZGE2YmU4ZDdmMzEyL2QwMDc0OWVkLTcwZWYtNDQ3Yy1iMTdjLWRhNmJlOGQ3 ZjMxMi5jcmwwHwYDVR0jBBgwFoAU9SAVhzNYxRJ4ZGbzsONdivR4eXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZi ZThkN2YzMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQETFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWGOkvm1svijc39T/ae1CEqPXqMX0nLltWZiANsU6ofAJygXK3D8u+W SlKlVdmrBbid8dgWNDQ/srBFur3FXvxA+4iGohlcQWNhf6WiPhCm6aD+/GAYRuU2 2OoTMHrq/OkEDYCA185L8VA+LP7zlze8X5O+ZHqkDqbYQl5bOSNo4IBXFg7BvMa3 bMDa9kt4IJs1+1DXXUeTj6YQR2sMIrp/TomFTOe99E5ZMZ1SfzyvO/cVAJCSQyX1 xnZfVZCT+85tDlbZCNKNkzUMOnsT5vHi6XS2m4KH8m/vaL5BKBLA0jVW4qVkqQrL DcGLo1w5u/lBGZ8PmnJofHLGJYXHbNI= -----END CERTIFICATE-----Generated at Mon Mar 2 10:14:07 2026 by rpki-client