$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29/3856ddeb-1a7b-3d87-9349-f60c0633eecf.roa File: 3856ddeb-1a7b-3d87-9349-f60c0633eecf.roa (raw, json) Hash identifier: TWC078p/i+fgQ4Jszjy1TexB/AYo6OwGhWv9tZ0sqOI= Subject key identifier: 2F:B3:B0:8E:72:43:1B:4C:50:CA:77:10:4E:C9:7F:5C:DE:9E:CF:FA Certificate issuer: /CN=829fa5a7-a3d5-4117-b578-3b0df4686c29 Certificate serial: 010D0C9F4328584D730A73771D916B9E176B3580 Authority key identifier: 54:F8:C1:10:2B:9F:46:36:07:E2:9B:C9:F0:17:DF:21:75:D1:67:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29/3856ddeb-1a7b-3d87-9349-f60c0633eecf.roa Signing time: Thu 09 Apr 2026 13:00:30 +0000 ROA not before: Thu 09 Apr 2026 13:00:30 +0000 ROA not after: Wed 08 Jul 2026 13:00:30 +0000 asID: 812 IP address blocks: 64.87.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29/829fa5a7-a3d5-4117-b578-3b0df4686c29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29/829fa5a7-a3d5-4117-b578-3b0df4686c29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:0a:73:77:1d:91:6b:9e:17:6b:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=829fa5a7-a3d5-4117-b578-3b0df4686c29 Validity Not Before: Apr 9 13:00:30 2026 GMT Not After : Jul 8 13:00:30 2026 GMT Subject: CN=36d73ac5-f9f3-402a-b74e-11aadf0303df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:79:2b:19:7e:a4:43:3d:95:84:a2:16:9c:5d: cf:4e:24:58:79:54:6f:88:e8:72:72:94:59:f0:eb: 21:1f:b7:97:ff:39:b2:5a:b2:cd:7f:97:66:79:75: b2:04:95:29:60:f7:ce:df:7e:8e:6b:17:5a:72:d5: 5c:10:a8:fc:16:06:7e:d6:08:e4:61:45:d0:5b:89: ac:73:bb:1f:f5:75:3f:e7:56:67:b2:02:cd:4c:13: 1c:60:ac:c4:d4:4b:1e:71:f6:93:d7:41:b0:03:7a: f5:d6:eb:ee:a2:3b:c0:a1:01:78:9f:a8:43:66:6f: c6:fe:76:8f:09:3b:4c:9d:78:80:c1:77:e5:50:90: eb:a3:06:9c:cf:f8:58:aa:93:e6:40:1c:1c:e8:50: e6:b1:d4:b1:68:dd:73:65:ce:4e:dd:fc:36:9c:28: f3:63:dd:95:c2:b8:19:34:75:6d:d3:b2:ee:1c:85: 03:a4:5a:7e:b0:15:c3:b9:57:80:c0:f9:58:65:1e: ec:3a:4d:91:8a:46:22:6a:de:cb:7d:8b:8b:28:fe: 37:cf:7a:b2:79:a6:09:c0:52:95:a0:12:e8:8a:3b: 5b:9e:de:4d:d9:13:61:7a:1e:6f:5f:60:bd:a7:79: 59:90:2d:11:b6:44:1d:83:30:87:c4:6c:45:40:6b: 2c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B3:B0:8E:72:43:1B:4C:50:CA:77:10:4E:C9:7F:5C:DE:9E:CF:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29/3856ddeb-1a7b-3d87-9349-f60c0633eecf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29/829fa5a7-a3d5-4117-b578-3b0df4686c29.crl X509v3 Authority Key Identifier: keyid:54:F8:C1:10:2B:9F:46:36:07:E2:9B:C9:F0:17:DF:21:75:D1:67:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29.cer sbgp-ipAddrBlock: critical IPv4: 64.87.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:0b:9e:e8:32:f0:86:4b:59:52:9d:1f:9b:bc:92:3e:c0:1b: 18:70:02:34:f6:b1:41:2a:c8:78:70:6f:07:ac:bd:10:92:31: fd:bc:21:6d:53:36:04:3b:7e:12:86:e6:f3:6c:f2:bf:4e:fa: 74:44:ef:d2:d2:b3:64:1d:2e:93:8e:f5:62:b7:79:38:4c:12: d7:83:8a:e3:c4:0b:9a:3b:ee:7b:aa:7d:25:49:b8:02:3f:5f: 13:f3:d6:97:74:37:11:09:ee:3c:50:3f:fe:1d:05:e2:b8:cb: bd:32:2b:e4:0d:9c:17:6e:0e:fc:7d:08:a6:17:ca:eb:c4:81: 96:5e:99:84:f0:6d:7a:df:aa:9a:40:64:a3:b5:77:db:29:49: 1d:16:7e:d8:26:ec:e5:91:0b:1b:c5:b1:3c:1e:9b:89:3a:8c: 10:09:f8:23:92:a7:fb:01:b9:c5:3e:c9:f9:ba:7b:f7:fd:ad: 49:5c:84:5a:27:9c:10:be:66:5d:0e:dc:16:94:c5:8d:11:e3: ed:47:f7:e0:31:dd:2a:38:8b:d2:ac:ca:9e:c7:ea:0a:01:72: 83:2e:75:85:26:10:04:5b:4a:e5:df:87:8c:b3:45:92:84:f7: 48:b4:42:48:86:c9:63:4e:e8:d2:3e:91:02:68:80:54:8d:8e: 39:9f:6b:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1zCnN3HZFrnhdrNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI5ZmE1YTctYTNkNS00MTE3LWI1NzgtM2IwZGY0Njg2 YzI5MB4XDTI2MDQwOTEzMDAzMFoXDTI2MDcwODEzMDAzMFowLzEtMCsGA1UEAxMk MzZkNzNhYzUtZjlmMy00MDJhLWI3NGUtMTFhYWRmMDMwM2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHkrGX6kQz2VhKIWnF3PTiRYeVRviOhycpRZ 8OshH7eX/zmyWrLNf5dmeXWyBJUpYPfO336OaxdactVcEKj8FgZ+1gjkYUXQW4ms c7sf9XU/51ZnsgLNTBMcYKzE1EsecfaT10GwA3r11uvuojvAoQF4n6hDZm/G/naP CTtMnXiAwXflUJDrowacz/hYqpPmQBwc6FDmsdSxaN1zZc5O3fw2nCjzY92VwrgZ NHVt07LuHIUDpFp+sBXDuVeAwPlYZR7sOk2RikYiat7LfYuLKP43z3qyeaYJwFKV oBLoijtbnt5N2RNheh5vX2C9p3lZkC0RtkQdgzCHxGxFQGssfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+zsI5yQxtMUMp3EE7Jf1zens/6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84Mjlm YTVhNy1hM2Q1LTQxMTctYjU3OC0zYjBkZjQ2ODZjMjkvMzg1NmRkZWItMWE3Yi0z ZDg3LTkzNDktZjYwYzA2MzNlZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODI5ZmE1YTctYTNkNS00MTE3LWI1 NzgtM2IwZGY0Njg2YzI5LzgyOWZhNWE3LWEzZDUtNDExNy1iNTc4LTNiMGRmNDY4 NmMyOS5jcmwwHwYDVR0jBBgwFoAUVPjBECufRjYH4pvJ8BffIXXRZ3swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84MjlmYTVhNy1hM2Q1LTQxMTctYjU3OC0zYjBk ZjQ2ODZjMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQFdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADULnugy8IZLWVKdH5u8kj7AGxhwAjT2sUEqyHhwbwesvRCSMf28IW1T NgQ7fhKG5vNs8r9O+nRE79LSs2QdLpOO9WK3eThMEteDiuPEC5o77nuqfSVJuAI/ XxPz1pd0NxEJ7jxQP/4dBeK4y70yK+QNnBduDvx9CKYXyuvEgZZemYTwbXrfqppA ZKO1d9spSR0Wftgm7OWRCxvFsTwem4k6jBAJ+COSp/sBucU+yfm6e/f9rUlchFon nBC+Zl0O3BaUxY0R4+1H9+Ax3So4i9Ksyp7H6goBcoMudYUmEARbSuXfh4yzRZKE 90i0QkiGyWNO6NI+kQJogFSNjjmfa5s= -----END CERTIFICATE-----Generated at Fri Apr 17 10:05:05 2026 by rpki-client