$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d51fd254-9132-3c5e-9f20-b890540aa448.roa File: d51fd254-9132-3c5e-9f20-b890540aa448.roa (raw, json) Hash identifier: XqS3eNhgIu63+SABbvvsm2Gd+ZcBhAK6qZeRRDvCEGs= Subject key identifier: 68:E2:78:57:25:35:64:A7:49:36:4B:09:6D:2A:DD:F8:40:EA:05:D7 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584E0C1ED5AB9A690B7834C36440 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d51fd254-9132-3c5e-9f20-b890540aa448.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 11090 IP address blocks: 64.4.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:d5:ab:9a:69:0b:78:34:c3:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=424ef3ab-51a2-44da-a0e8-fcd8c4b549c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9a:06:02:85:81:13:59:5d:df:e5:70:c9:98: ff:e2:fa:c1:c5:da:ee:d5:0c:c9:b2:44:9c:b2:ef: 0e:04:02:5d:c7:80:ae:ce:ad:33:3c:be:b9:bc:40: ef:76:97:c8:08:06:96:5b:64:50:ed:46:e0:02:8d: ee:f9:ac:af:43:92:09:d5:ed:20:56:cb:55:8c:76: 36:cd:75:9e:d4:d5:48:88:9d:f3:8d:09:78:38:64: 6c:6e:6e:f0:7c:e7:f2:69:d0:a7:8d:22:ea:94:04: 02:38:28:d3:5d:86:14:65:b5:b3:84:3b:da:64:e2: 6f:dc:83:73:d8:52:56:48:5b:4d:39:db:d8:61:90: de:9b:07:1f:66:81:71:76:45:a4:f7:87:14:b2:f4: de:f8:0b:65:8d:ff:76:0e:58:24:50:2f:99:2d:db: 84:e5:28:fd:d6:4f:4a:72:d0:f1:8d:6f:01:65:e5: a1:99:24:85:01:1e:72:90:a3:5e:5f:a0:15:13:c4: 52:e4:a7:12:52:ef:75:6f:0a:3a:05:b3:ed:af:56: 6c:b5:63:e1:69:98:ca:bb:5c:fc:af:01:df:4d:91: 50:cb:de:2e:ae:e8:45:01:91:f7:56:6b:46:32:82: 52:4a:9a:f1:18:a0:58:f2:4e:dd:9c:17:af:cb:00: 3d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E2:78:57:25:35:64:A7:49:36:4B:09:6D:2A:DD:F8:40:EA:05:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d51fd254-9132-3c5e-9f20-b890540aa448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:9d:f9:b8:37:69:35:04:e0:a0:f2:da:f6:12:4c:98:ef:be: e7:41:f3:e5:43:6f:cd:88:64:65:4a:8a:e7:ab:bd:e7:7c:5f: 55:9e:9f:ce:70:4c:ae:96:13:c9:63:69:14:b5:7b:80:24:4d: e7:a5:0f:8d:9d:45:24:35:28:f8:27:a4:b4:d3:57:e5:d5:b3: aa:7e:7b:5b:92:72:4a:f0:0b:ce:dd:d1:11:40:b8:fe:fe:5f: c2:5f:1a:d0:fd:9d:2e:80:87:d4:f5:ad:f7:44:d4:3e:03:e3: a2:64:e8:df:7a:95:3e:b3:25:c5:64:55:d4:92:f6:b2:25:63: 95:ea:5e:6f:f2:20:61:67:26:1c:e7:48:d2:1f:b8:3e:9a:ca: 1b:31:28:73:25:f6:14:96:7c:14:af:e2:91:67:1a:72:82:c6: 33:59:d1:af:6d:db:71:2e:f9:a6:c8:78:41:21:77:1c:aa:07: 7a:31:ab:0a:f3:b0:51:53:2c:d8:85:0e:53:3e:6e:a8:9d:7c: c8:89:32:9f:6b:e6:ac:21:d2:11:8a:e1:62:c4:2f:24:fa:13: 1d:7c:a9:4b:bb:df:a6:31:ab:fc:49:df:0c:97:5a:7d:d4:a2: d1:6c:e1:b4:f9:2f:54:80:1d:57:18:cf:ae:09:9f:d0:cd:4d: a0:89:63:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHtWrmmkLeDTDZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk NDI0ZWYzYWItNTFhMi00NGRhLWEwZTgtZmNkOGM0YjU0OWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZoGAoWBE1ld3+VwyZj/4vrBxdru1QzJskSc su8OBAJdx4Cuzq0zPL65vEDvdpfICAaWW2RQ7UbgAo3u+ayvQ5IJ1e0gVstVjHY2 zXWe1NVIiJ3zjQl4OGRsbm7wfOfyadCnjSLqlAQCOCjTXYYUZbWzhDvaZOJv3INz 2FJWSFtNOdvYYZDemwcfZoFxdkWk94cUsvTe+Atljf92DlgkUC+ZLduE5Sj91k9K ctDxjW8BZeWhmSSFAR5ykKNeX6AVE8RS5KcSUu91bwo6BbPtr1ZstWPhaZjKu1z8 rwHfTZFQy94uruhFAZH3VmtGMoJSSprxGKBY8k7dnBevywA9XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjieFclNWSnSTZLCW0q3fhA6gXXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZDUxZmQyNTQtOTEzMi0z YzVlLTlmMjAtYjg5MDU0MGFhNDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQATuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGd+bg3aTUE4KDy2vYSTJjvvudB8+VDb82IZGVKiuerved8X1Wen85w TK6WE8ljaRS1e4AkTeelD42dRSQ1KPgnpLTTV+XVs6p+e1uSckrwC87d0RFAuP7+ X8JfGtD9nS6Ah9T1rfdE1D4D46Jk6N96lT6zJcVkVdSS9rIlY5XqXm/yIGFnJhzn SNIfuD6ayhsxKHMl9hSWfBSv4pFnGnKCxjNZ0a9t23Eu+abIeEEhdxyqB3oxqwrz sFFTLNiFDlM+bqidfMiJMp9r5qwh0hGK4WLELyT6Ex18qUu736Yxq/xJ3wyXWn3U otFs4bT5L1SAHVcYz64Jn9DNTaCJY5k= -----END CERTIFICATE-----Generated at Sat Jun 13 13:32:15 2026 by rpki-client