$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/356d4676-5529-3295-81bd-2ba35c7ca0f7.roa File: 356d4676-5529-3295-81bd-2ba35c7ca0f7.roa (raw, json) Hash identifier: g6a26+VarpyFJvRH0zAU/m/j+B6sx/bVG2SdbMak+Yw= Subject key identifier: 10:08:FD:8A:3C:92:7D:82:6D:3A:D3:82:D6:1F:CD:D5:25:67:21:C3 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D773A80ADDC82BCFB8FC096E0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/356d4676-5529-3295-81bd-2ba35c7ca0f7.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 53735 IP address blocks: 64.114.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:80:ad:dc:82:bc:fb:8f:c0:96:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=6f8f57e5-4e7f-4c10-88aa-ea370eface6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:50:c4:50:c6:e9:a9:b2:8b:0e:d8:ae:29:78: 74:d1:e4:e1:c5:8c:f4:76:63:0b:17:5a:c4:4a:22: 71:a0:96:d2:e3:cd:63:6f:c7:4e:0e:20:65:7c:3d: ab:e4:b6:f5:69:25:36:e6:0e:f3:60:73:3e:92:d2: 31:44:16:0d:1a:8e:08:8a:70:a1:af:a4:04:f7:50: ec:81:a1:ac:a3:27:99:68:dd:90:0a:95:f3:f0:8a: 7b:77:d6:65:0a:9f:62:41:d7:ad:7e:12:c3:90:2b: 41:c5:b5:ec:08:04:30:31:09:b9:b5:6f:89:76:f8: ac:77:8b:c5:49:be:6b:3f:9c:36:d7:06:2c:d5:f7: 23:39:93:b4:69:11:2e:cb:e1:a5:e0:3d:9d:6e:30: 78:c8:5c:ac:97:2a:32:45:41:f8:81:0f:e2:20:5c: 42:c9:c8:43:82:ee:d1:b9:06:30:8d:fc:ef:d8:6a: 6a:1a:1f:17:97:8b:27:76:1e:db:01:75:21:ec:d2: 0f:73:9c:08:9e:71:a9:4b:1f:75:fe:1d:37:9f:76: 8b:7a:1f:f5:4c:db:88:b6:74:b5:73:91:41:3a:c1: 1e:e4:44:e8:8f:2b:2a:5b:c2:6a:15:89:02:d6:46: 98:78:d0:5a:30:84:ce:95:9c:20:99:ab:df:19:5a: 0a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:08:FD:8A:3C:92:7D:82:6D:3A:D3:82:D6:1F:CD:D5:25:67:21:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/356d4676-5529-3295-81bd-2ba35c7ca0f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 64.114.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:a0:43:ba:31:6b:c9:f5:1a:fd:3a:b2:e9:ad:e1:1e:91:00: ed:4c:26:4b:2e:33:cf:e4:8a:a6:aa:c7:fa:bf:19:4d:aa:83: c4:d6:5d:d1:5e:4c:27:72:91:61:be:a7:68:83:29:1f:38:8e: 97:46:1f:a7:ef:b7:e5:11:bd:3c:32:fb:79:6c:c6:2f:ff:f8: a5:7d:b7:2c:17:65:44:89:c8:9b:8e:33:ed:5a:d4:62:91:c1: cd:80:00:85:ea:20:af:82:af:0a:a1:d0:cc:ce:cb:9f:e1:38: 29:c4:00:b4:4f:d1:d6:3a:de:3e:70:e2:ca:a6:93:b3:2c:90: d2:76:00:a9:79:22:d1:a0:2b:be:7c:2b:c9:53:f4:43:06:da: 50:0f:c2:d8:17:23:c9:1f:b2:a1:67:4d:41:81:82:a8:70:d4: 34:58:8d:2c:31:b3:0b:0a:23:3c:1b:14:53:9b:80:da:30:8b: c0:5e:b4:31:36:91:27:cd:81:ec:25:e7:bb:b7:6d:96:9f:fe: 96:55:d0:27:c5:e2:e3:e7:37:45:00:c4:7e:4b:b1:b9:62:30: 42:82:24:95:e1:d2:ff:7a:16:f2:ce:8c:00:d9:0c:45:59:f6: d6:d6:e4:b3:99:4a:74:2c:ec:7b:b2:db:d8:13:bc:f1:38:f3: 71:d0:e1:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OoCt3IK8+4/AluAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk NmY4ZjU3ZTUtNGU3Zi00YzEwLTg4YWEtZWEzNzBlZmFjZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1DEUMbpqbKLDtiuKXh00eThxYz0dmMLF1rE SiJxoJbS481jb8dODiBlfD2r5Lb1aSU25g7zYHM+ktIxRBYNGo4IinChr6QE91Ds gaGsoyeZaN2QCpXz8Ip7d9ZlCp9iQdetfhLDkCtBxbXsCAQwMQm5tW+Jdvisd4vF Sb5rP5w21wYs1fcjOZO0aREuy+Gl4D2dbjB4yFyslyoyRUH4gQ/iIFxCychDgu7R uQYwjfzv2GpqGh8Xl4sndh7bAXUh7NIPc5wInnGpSx91/h03n3aLeh/1TNuItnS1 c5FBOsEe5ETojysqW8JqFYkC1kaYeNBaMITOlZwgmavfGVoKxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAI/Yo8kn2CbTrTgtYfzdUlZyHDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzU2ZDQ2NzYtNTUyOS0z Mjk1LTgxYmQtMmJhMzVjN2NhMGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHKMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMKgQ7oxa8n1Gv06sumt4R6RAO1MJksuM8/kiqaqx/q/GU2qg8TWXdFe TCdykWG+p2iDKR84jpdGH6fvt+URvTwy+3lsxi//+KV9tywXZUSJyJuOM+1a1GKR wc2AAIXqIK+Crwqh0MzOy5/hOCnEALRP0dY63j5w4sqmk7MskNJ2AKl5ItGgK758 K8lT9EMG2lAPwtgXI8kfsqFnTUGBgqhw1DRYjSwxswsKIzwbFFObgNowi8BetDE2 kSfNgewl57u3bZaf/pZV0CfF4uPnN0UAxH5LsbliMEKCJJXh0v96FvLOjADZDEVZ 9tbW5LOZSnQs7Huy29gTvPE483HQ4ZQ= -----END CERTIFICATE-----Generated at Sat Apr 18 03:03:42 2026 by rpki-client