$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/a3355fb3-d03a-3f23-ab1e-a37d0f03a377.roa File: a3355fb3-d03a-3f23-ab1e-a37d0f03a377.roa (raw, json) Hash identifier: zRLgbXv81wMq0+cTVP5H5qiyEDPZk9bagr5fh2nPfVo= Subject key identifier: 37:87:F9:80:EC:68:2A:4F:42:4F:66:80:1E:E4:88:14:62:6A:23:C6 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584D60E4FC48AF01158EBEFA0C00 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/a3355fb3-d03a-3f23-ab1e-a37d0f03a377.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 63.243.228.0/24 maxlen: 24 63.243.230.0/24 maxlen: 24 64.86.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e4:fc:48:af:01:15:8e:be:fa:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=99c89ea5-4088-4811-a172-36b3a2437e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:08:10:97:52:f4:13:af:59:9f:ba:01:6e:20: 28:79:f6:45:05:34:c3:00:c3:ee:aa:4b:5e:19:8f: 27:1a:d7:4f:d9:cd:5e:6b:40:47:3a:d3:6f:67:d5: e7:c6:9c:f4:d0:bb:6a:51:d1:4f:45:4a:a8:a1:0f: 4b:d3:39:dd:60:9a:38:a1:1a:ce:6c:a4:87:c0:69: a5:5b:d1:49:dc:6e:d9:af:c4:07:d9:31:fc:3d:a8: 83:76:1b:19:65:69:57:cb:08:04:05:71:42:c0:b7: 24:86:d0:9c:04:95:2b:82:6f:83:49:96:2b:2c:62: 54:f0:3c:43:1e:68:6e:97:e1:a0:d1:a7:f2:fa:f9: 7d:10:7d:ae:be:54:61:59:af:50:f0:01:9b:59:25: 5f:ce:e1:57:36:63:35:d7:ea:e9:ff:97:14:4d:bc: 35:96:f1:30:df:cc:85:d4:ca:3b:f5:36:e0:3a:9f: 2b:cb:db:2c:fe:c1:c5:20:52:9d:a5:24:00:56:82: 85:cb:25:fe:4e:91:f1:cb:11:7c:55:ff:3c:40:61: 76:3b:99:a5:58:b4:2a:fd:c6:c8:54:d4:73:59:4d: dd:df:83:a3:0a:5b:2a:7e:70:f5:38:f1:68:19:06: 46:56:60:9c:50:7e:f0:f3:47:d6:61:ad:c7:f9:0c: d8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:87:F9:80:EC:68:2A:4F:42:4F:66:80:1E:E4:88:14:62:6A:23:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/a3355fb3-d03a-3f23-ab1e-a37d0f03a377.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 63.243.228.0/24 63.243.230.0/24 64.86.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:46:88:52:9a:c6:17:30:d2:63:58:d7:d4:76:de:7f:42:61: a1:42:34:9b:c7:d1:10:83:5f:45:91:6e:3a:8c:5a:2f:bb:07: 4b:37:a6:ee:8d:36:be:9e:09:98:d0:81:bd:09:aa:53:bf:2e: 23:22:88:36:6e:aa:1e:69:05:19:23:5f:fe:ea:4f:dc:be:63: 9a:24:b5:22:58:bb:8f:0f:20:65:5c:c4:fc:bb:dd:be:92:88: df:3d:9d:d9:10:f0:6e:e2:ac:dc:70:fe:dc:71:57:c9:f1:2d: 2b:25:84:8b:4b:47:6d:18:a7:ad:c5:5c:10:71:69:6e:f8:b4: d8:00:03:d5:0e:08:f2:7d:1c:90:ed:37:33:3a:98:bc:d3:bb: 57:67:5c:c0:0b:12:0f:42:5a:0e:ce:88:1b:59:cf:a2:62:39: 9c:9d:33:47:03:3f:7b:4a:81:c6:24:24:ec:ae:8e:f1:bd:84: f5:7a:61:15:45:f9:47:57:2c:4d:c3:c8:1b:f8:dd:7f:13:a1: bd:e8:d9:4e:8b:8a:da:ee:84:79:d6:80:7f:ed:a4:e9:1d:77: 74:0f:bf:8f:af:55:0b:2a:24:f0:c7:c3:fa:c0:1c:b1:93:13: 97:b0:03:cc:ae:af:1c:ec:4b:eb:8e:9e:7d:fc:30:52:c2:3f: 1c:fc:21:b8 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE1g5PxIrwEVjr76DAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk OTljODllYTUtNDA4OC00ODExLWExNzItMzZiM2EyNDM3ZTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwgQl1L0E69Zn7oBbiAoefZFBTTDAMPuqkte GY8nGtdP2c1ea0BHOtNvZ9Xnxpz00LtqUdFPRUqooQ9L0zndYJo4oRrObKSHwGml W9FJ3G7Zr8QH2TH8PaiDdhsZZWlXywgEBXFCwLckhtCcBJUrgm+DSZYrLGJU8DxD Hmhul+Gg0afy+vl9EH2uvlRhWa9Q8AGbWSVfzuFXNmM11+rp/5cUTbw1lvEw38yF 1Mo79TbgOp8ry9ss/sHFIFKdpSQAVoKFyyX+TpHxyxF8Vf88QGF2O5mlWLQq/cbI VNRzWU3d34OjClsqfnD1OPFoGQZGVmCcUH7w80fWYa3H+QzY/wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFDeH+YDsaCpPQk9mgB7kiBRiaiPGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvYTMzNTVmYjMtZDAzYS0z ZjIzLWFiMWUtYTM3ZDBmMDNhMzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAP/PkAwQA P/PmAwQAQFbOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEJGiFKaxhcw0mNY19R23n9CYaFCNJvH0RCDX0WR bjqMWi+7B0s3pu6NNr6eCZjQgb0JqlO/LiMiiDZuqh5pBRkjX/7qT9y+Y5oktSJY u48PIGVcxPy73b6SiN89ndkQ8G7irNxw/txxV8nxLSslhItLR20Yp63FXBBxaW74 tNgAA9UOCPJ9HJDtNzM6mLzTu1dnXMALEg9CWg7OiBtZz6JiOZydM0cDP3tKgcYk JOyujvG9hPV6YRVF+UdXLE3DyBv43X8Tob3o2U6LitruhHnWgH/tpOkdd3QPv4+v VQsqJPDHw/rAHLGTE5ewA8yurxzsS+uOnn38MFLCPxz8Ibg= -----END CERTIFICATE-----Generated at Fri Apr 17 19:12:50 2026 by rpki-client