$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/3c531f86-93ab-3895-9a5b-924845a382d9.roa File: 3c531f86-93ab-3895-9a5b-924845a382d9.roa (raw, json) Hash identifier: yh8XgjGbeAaY+Ehbt5ZL4NtdF8mLgiNSO59sJe2dPoI= Subject key identifier: E3:58:50:69:01:7A:C9:E2:59:95:78:E2:8D:51:AB:C7:8B:30:08:63 Certificate issuer: /CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d Certificate serial: 010D0C9F4328584DFEA075720E92303144954100 Authority key identifier: 72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/3c531f86-93ab-3895-9a5b-924845a382d9.roa Signing time: Fri 29 May 2026 13:00:10 +0000 ROA not before: Fri 29 May 2026 13:00:10 +0000 ROA not after: Thu 27 Aug 2026 13:00:10 +0000 asID: 63073 IP address blocks: 64.186.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fe:a0:75:72:0e:92:30:31:44:95:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d Validity Not Before: May 29 13:00:10 2026 GMT Not After : Aug 27 13:00:10 2026 GMT Subject: CN=d1096b0e-c4f9-463e-bc44-a3e7fb5c605d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:38:be:f1:e4:65:f4:d7:03:a6:3c:aa:b0:89: 2b:f3:10:6c:be:6e:f5:64:fa:15:e5:3a:6f:d7:62: 22:06:f4:02:7a:9a:d7:56:00:79:b5:4c:5e:46:c6: d1:97:1c:56:34:5f:25:29:0a:ef:4a:8e:fc:16:86: c6:25:ab:c3:40:81:42:5e:21:60:57:b0:a2:7c:2f: 12:df:38:80:b8:7a:5c:6d:ec:47:dc:98:e0:ea:12: a5:cb:71:fa:6b:05:7b:04:21:26:91:e2:d5:5d:e8: 30:73:b7:64:52:d2:53:86:4e:b0:6f:3a:66:41:04: d8:60:44:69:c1:a1:98:1c:21:90:12:f9:de:65:65: 18:22:1f:5f:03:a6:33:66:1b:1e:e5:6f:05:d3:c3: e9:67:92:fb:6d:ec:45:b0:a1:3b:a4:4c:c7:9d:4a: 06:e0:bf:f4:11:c0:c7:70:93:02:fa:1b:6e:6b:7f: d5:30:19:18:09:41:05:d0:36:7c:3a:01:94:0a:3b: 11:48:a5:5f:08:fc:3e:b8:8d:3a:2c:b4:dc:20:7a: be:39:d1:c8:d8:52:15:3e:1d:95:47:09:1c:2e:18: 48:ed:13:a9:bb:3c:b6:91:69:43:68:e5:e7:e9:b1: b0:09:2d:fe:88:c9:66:f0:46:30:1c:2a:a4:9f:76: eb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:58:50:69:01:7A:C9:E2:59:95:78:E2:8D:51:AB:C7:8B:30:08:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/3c531f86-93ab-3895-9a5b-924845a382d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl X509v3 Authority Key Identifier: keyid:72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer sbgp-ipAddrBlock: critical IPv4: 64.186.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:cf:79:dd:34:02:8e:de:62:12:9a:47:c0:51:6c:fa:6d:6b: a6:f4:3b:3e:94:1c:e3:f1:ef:fc:7f:fc:66:60:be:9a:53:2a: c4:ce:c8:ad:08:6c:b1:41:67:28:0e:87:1b:2c:3b:af:49:39: 48:c7:87:c1:b0:8c:01:a0:50:9b:78:18:4c:57:fa:d7:dd:09: d3:d6:4d:38:74:86:c9:d9:33:bb:fe:96:2e:2f:75:64:c4:36: 4b:6e:b1:e4:af:31:a4:b3:7b:91:67:31:ee:7f:42:28:da:91: 90:c0:cf:8b:f1:70:99:17:4f:ab:38:ab:48:bc:47:d2:6a:0f: 14:07:17:7b:36:e9:8a:79:d8:c9:96:87:2e:a4:26:d6:5f:a7: 87:40:83:ed:2e:e3:33:33:c6:f2:04:c2:b1:55:dd:2d:a1:a7: 32:12:f9:ff:1b:66:4f:1a:27:73:cc:23:e4:00:52:df:dd:81: eb:5f:56:cc:63:3a:33:fb:3a:ca:19:47:73:26:66:9a:85:c4: e1:37:0e:26:90:b9:4d:4b:50:28:e4:d9:2d:ef:2d:6e:29:23: 22:f9:5b:35:f7:d6:a3:e6:c9:a1:a2:64:a7:8f:89:bc:5d:7a: 6d:39:c3:c7:19:c2:8c:69:d6:2b:62:02:22:6f:d2:e9:56:25: 3b:3e:a2:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3+oHVyDpIwMUSVQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU0YzAxYmEtZDlhZC00NGU4LWI0OGMtMWE0OGYyMGQ4 YjdkMB4XDTI2MDUyOTEzMDAxMFoXDTI2MDgyNzEzMDAxMFowLzEtMCsGA1UEAxMk ZDEwOTZiMGUtYzRmOS00NjNlLWJjNDQtYTNlN2ZiNWM2MDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDi+8eRl9NcDpjyqsIkr8xBsvm71ZPoV5Tpv 12IiBvQCeprXVgB5tUxeRsbRlxxWNF8lKQrvSo78FobGJavDQIFCXiFgV7CifC8S 3ziAuHpcbexH3Jjg6hKly3H6awV7BCEmkeLVXegwc7dkUtJThk6wbzpmQQTYYERp waGYHCGQEvneZWUYIh9fA6YzZhse5W8F08PpZ5L7bexFsKE7pEzHnUoG4L/0EcDH cJMC+htua3/VMBkYCUEF0DZ8OgGUCjsRSKVfCPw+uI06LLTcIHq+OdHI2FIVPh2V RwkcLhhI7ROpuzy2kWlDaOXn6bGwCS3+iMlm8EYwHCqkn3brTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONYUGkBesniWZV44o1Rq8eLMAhjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRj MDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4ZjIwZDhiN2QvM2M1MzFmODYtOTNhYi0z ODk1LTlhNWItOTI0ODQ1YTM4MmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTU0YzAxYmEtZDlhZC00NGU4LWI0 OGMtMWE0OGYyMGQ4YjdkLzk1NGMwMWJhLWQ5YWQtNDRlOC1iNDhjLTFhNDhmMjBk OGI3ZC5jcmwwHwYDVR0jBBgwFoAUcqg9V4xmiDSMniuO8EO94nylkNwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRjMDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4 ZjIwZDhiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLqHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfPed00Ao7eYhKaR8BRbPpta6b0Oz6UHOPx7/x//GZgvppTKsTOyK0I bLFBZygOhxssO69JOUjHh8GwjAGgUJt4GExX+tfdCdPWTTh0hsnZM7v+li4vdWTE NktuseSvMaSze5FnMe5/QijakZDAz4vxcJkXT6s4q0i8R9JqDxQHF3s26Yp52MmW hy6kJtZfp4dAg+0u4zMzxvIEwrFV3S2hpzIS+f8bZk8aJ3PMI+QAUt/dgetfVsxj OjP7OsoZR3MmZpqFxOE3DiaQuU1LUCjk2S3vLW4pIyL5WzX31qPmyaGiZKePibxd em05w8cZwoxp1itiAiJv0ulWJTs+on4= -----END CERTIFICATE-----Generated at Sat Jun 13 15:51:37 2026 by rpki-client