$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/da47acb3-62b2-36c6-8314-c3449c4ff7f3.roa File: da47acb3-62b2-36c6-8314-c3449c4ff7f3.roa (raw, json) Hash identifier: OENQG1XytfWPGAyvluYYQwZ2WBI7Q28Qr9pPljDTkag= Subject key identifier: 3A:BD:57:27:EB:A8:85:46:BC:AA:73:78:3A:93:9A:9D:19:C6:D6:73 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584CB81C72C085549414033D4400 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/da47acb3-62b2-36c6-8314-c3449c4ff7f3.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 11426 IP address blocks: 64.20.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:72:c0:85:54:94:14:03:3d:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=0b42d4e4-1c2f-4961-95d2-30388a679f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:74:c8:19:ff:5e:e4:74:9d:42:8d:31:ef:08: a4:8c:15:45:02:2b:6e:ff:54:46:87:cb:fe:df:3f: 2a:96:8d:1f:2b:4f:1c:5a:7c:a4:9c:04:8b:b9:5e: 45:43:09:a4:84:8b:47:e3:53:4f:02:23:c7:1d:d8: ce:49:9f:ff:33:66:ed:4c:bb:53:ac:a2:8c:62:15: 5b:8d:61:29:9f:f9:75:06:53:61:a9:67:d3:01:a5: 6e:2b:07:ce:0d:38:4a:ba:f0:c9:62:b0:43:97:72: 29:dd:dc:0d:1c:de:be:e8:ce:73:d8:40:c9:bf:3b: 5b:58:2e:6f:95:b2:b0:d9:ae:4a:7a:19:73:af:d4: f5:c6:ea:0a:1e:87:4e:ff:2f:0f:ec:c2:be:a3:1c: 3a:8e:d2:62:eb:11:4f:0d:d9:04:11:13:17:57:fb: 4a:e5:66:7d:04:74:88:3f:1c:21:01:58:a5:78:a4: 41:8a:d0:21:43:54:d4:1a:ab:63:27:41:12:f2:54: 6a:28:42:1d:34:fe:08:d7:35:42:a0:db:65:40:ec: 34:79:e9:f9:a5:77:fd:2a:fe:3f:d7:ec:18:93:2e: 26:1c:18:e1:e6:74:68:df:d2:32:9b:a6:20:c9:e0: 3c:a2:7a:45:c7:b2:79:c0:cf:5e:87:be:a3:67:6b: 7f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BD:57:27:EB:A8:85:46:BC:AA:73:78:3A:93:9A:9D:19:C6:D6:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/da47acb3-62b2-36c6-8314-c3449c4ff7f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 64.20.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:22:c2:ff:c4:95:9e:eb:7a:39:70:f3:73:ab:d7:8e:15:9a: df:cd:14:46:a3:51:55:82:02:d2:b3:b2:59:83:ab:b4:46:ad: a3:a9:63:c9:88:3c:f7:57:4a:56:5c:9d:f6:4f:e9:a4:76:f5: f1:a4:70:bd:e6:67:2c:4b:89:92:97:fa:e7:3e:5e:be:f7:4b: aa:f7:05:9b:64:15:dd:3e:fc:65:46:9e:01:85:83:1e:11:48: d5:2f:a7:d3:d3:a1:18:b2:c7:bd:7e:48:2b:45:17:af:b6:78: 27:92:cd:19:75:a3:98:73:23:62:98:7d:61:8f:67:38:ae:e3: fd:1c:b5:bc:c3:d5:11:e6:c8:2d:de:64:4b:e0:08:f0:72:29: f6:00:46:c2:b5:88:c5:e5:84:a3:8a:ca:21:ef:27:63:b3:50: a0:52:74:fc:00:3c:53:0b:bc:d4:7b:04:12:05:39:57:03:ef: ca:f9:37:fd:a7:f8:70:66:05:e4:cb:f9:57:b5:b3:d0:9d:69: 75:ae:0d:8b:02:74:2e:1b:5e:fb:4c:41:d3:82:fe:b5:d3:d0: 09:2f:cb:e3:51:d3:b6:a9:dd:74:0e:53:36:35:fa:84:36:51: c7:3c:f3:c3:9c:92:f8:b6:c0:bb:1c:db:6a:19:65:27:5b:ad: 5f:a6:ae:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HHLAhVSUFAM9RAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk MGI0MmQ0ZTQtMWMyZi00OTYxLTk1ZDItMzAzODhhNjc5ZjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXTIGf9e5HSdQo0x7wikjBVFAitu/1RGh8v+ 3z8qlo0fK08cWnyknASLuV5FQwmkhItH41NPAiPHHdjOSZ//M2btTLtTrKKMYhVb jWEpn/l1BlNhqWfTAaVuKwfODThKuvDJYrBDl3Ip3dwNHN6+6M5z2EDJvztbWC5v lbKw2a5Kehlzr9T1xuoKHodO/y8P7MK+oxw6jtJi6xFPDdkEERMXV/tK5WZ9BHSI PxwhAVileKRBitAhQ1TUGqtjJ0ES8lRqKEIdNP4I1zVCoNtlQOw0een5pXf9Kv4/ 1+wYky4mHBjh5nRo39Iym6YgyeA8onpFx7J5wM9eh76jZ2t/1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDq9VyfrqIVGvKpzeDqTmp0ZxtZzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvZGE0N2FjYjMtNjJiMi0z NmM2LTgzMTQtYzM0NDljNGZmN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBTRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIiwv/ElZ7rejlw83Or144Vmt/NFEajUVWCAtKzslmDq7RGraOpY8mI PPdXSlZcnfZP6aR29fGkcL3mZyxLiZKX+uc+Xr73S6r3BZtkFd0+/GVGngGFgx4R SNUvp9PToRiyx71+SCtFF6+2eCeSzRl1o5hzI2KYfWGPZziu4/0ctbzD1RHmyC3e ZEvgCPByKfYARsK1iMXlhKOKyiHvJ2OzUKBSdPwAPFMLvNR7BBIFOVcD78r5N/2n +HBmBeTL+Ve1s9CdaXWuDYsCdC4bXvtMQdOC/rXT0Akvy+NR07ap3XQOUzY1+oQ2 Ucc888Ockvi2wLsc22oZZSdbrV+mrhw= -----END CERTIFICATE-----Generated at Mon Mar 2 07:43:28 2026 by rpki-client