$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/35c68db1-b27f-3428-b312-c03d86e4f9fd.roa File: 35c68db1-b27f-3428-b312-c03d86e4f9fd.roa (raw, json) Hash identifier: +UnnrBeotOgb8fC3WML0tnPuZGobcoOy6ARRaG4ZRHk= Subject key identifier: F1:D9:D9:FC:2C:D1:DF:92:41:7A:0B:32:EC:E3:6F:44:E9:E8:30:2E Certificate issuer: /CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Certificate serial: 010D0C9F4328584D59EA609B4437895347678300 Authority key identifier: 43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/35c68db1-b27f-3428-b312-c03d86e4f9fd.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 23316 IP address blocks: 64.136.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:60:9b:44:37:89:53:47:67:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=646bf7a3-4ebb-4343-8acd-69cbeffb12d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:66:c7:e7:13:64:fc:e2:82:21:40:59:f8:08: 23:70:7b:8b:2e:3d:27:dd:6d:4a:d4:f7:82:04:f2: 2a:66:a0:a3:ef:06:62:d8:7d:47:88:9e:6d:52:c0: ae:12:77:f1:1a:82:6f:4e:70:94:88:2c:26:94:11: 82:4c:2b:51:fc:2d:91:6f:2b:58:e3:6c:21:be:eb: f5:78:04:88:b7:07:d5:1a:4f:bd:54:f4:c2:37:7c: bb:20:90:5f:33:01:21:5f:62:eb:d9:db:5f:66:af: fc:9d:56:30:b9:c3:b2:60:33:88:01:13:9f:3f:f8: 7e:5b:ea:5e:c4:ef:ec:aa:57:0a:1e:79:03:20:16: 90:9b:1c:f8:8c:7b:a2:ee:65:b5:0f:8e:19:e6:cf: 22:43:89:c1:2a:17:0b:aa:fc:ea:e0:87:ba:f6:5a: ab:2e:3c:01:a9:2b:62:3e:4c:3f:fb:fc:26:c8:3f: 58:81:18:67:55:ba:58:97:c9:33:7d:45:ed:54:5a: e2:77:4f:9c:7b:c7:04:da:67:3d:9c:13:6a:b0:c2: 89:e6:d7:5c:30:e5:87:f9:56:ef:f6:46:83:be:97: 26:d9:90:15:a1:bb:74:82:a4:0e:2a:d1:d2:69:67: 21:51:3a:e8:c2:5a:c4:55:8c:99:b3:13:43:af:a0: b8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D9:D9:FC:2C:D1:DF:92:41:7A:0B:32:EC:E3:6F:44:E9:E8:30:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/35c68db1-b27f-3428-b312-c03d86e4f9fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl X509v3 Authority Key Identifier: keyid:43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer sbgp-ipAddrBlock: critical IPv4: 64.136.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:9e:b6:0c:bc:13:58:6b:70:ac:54:d9:22:84:31:fd:af:84: e6:ee:e1:f6:6c:92:c3:bb:ef:5f:fb:99:2a:ad:87:1d:50:eb: 8b:61:e9:5c:8a:4f:6a:33:c2:74:bb:5d:38:a9:4b:96:a9:1f: 28:3c:ed:75:54:9f:2f:7d:a2:79:2f:8a:0a:bd:db:02:9a:d7: 2a:27:ad:55:ef:2f:03:21:57:f7:46:ed:dc:72:37:5d:c7:86: e7:84:44:c6:32:06:8b:c5:85:25:82:42:72:04:a4:5f:e4:0e: 99:c7:11:01:c5:bb:48:74:81:f2:cd:14:16:02:8a:12:2d:3c: ae:b8:c6:8b:dd:12:b7:9d:a3:73:0a:56:3c:a0:bd:8b:e4:2e: e7:7e:df:d2:45:86:ca:f5:a7:36:bb:aa:f6:81:f7:35:c6:77: f3:75:87:37:41:fc:8e:03:ef:31:51:a9:20:b4:c6:29:e1:27: ef:1b:d3:7b:e9:93:cc:a8:43:d6:92:ea:a1:bc:c3:5c:1f:e8: 68:78:93:74:82:d9:66:6e:8c:cd:a8:54:c7:08:c9:de:8a:49: 45:29:bd:6d:73:7d:fd:68:e8:b2:05:7a:e5:e7:33:93:9f:23: 87:d4:a3:cc:5d:7a:24:52:5c:7f:8d:29:86:1b:26:c1:b9:d4: a8:19:e4:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6mCbRDeJU0dngwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFjNTgwYzEtYTA1ZC00ZTI4LWE0OGQtOWVhMGVjNWVk Y2FjMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NjQ2YmY3YTMtNGViYi00MzQzLThhY2QtNjljYmVmZmIxMmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGbH5xNk/OKCIUBZ+AgjcHuLLj0n3W1K1PeC BPIqZqCj7wZi2H1HiJ5tUsCuEnfxGoJvTnCUiCwmlBGCTCtR/C2RbytY42whvuv1 eASItwfVGk+9VPTCN3y7IJBfMwEhX2Lr2dtfZq/8nVYwucOyYDOIAROfP/h+W+pe xO/sqlcKHnkDIBaQmxz4jHui7mW1D44Z5s8iQ4nBKhcLqvzq4Ie69lqrLjwBqSti Pkw/+/wmyD9YgRhnVbpYl8kzfUXtVFrid0+ce8cE2mc9nBNqsMKJ5tdcMOWH+Vbv 9kaDvpcm2ZAVobt0gqQOKtHSaWchUTrowlrEVYyZsxNDr6C4awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHZ2fws0d+SQXoLMuzjb0Tp6DAuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1 ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEwZWM1ZWRjYWMvMzVjNjhkYjEtYjI3Zi0z NDI4LWIzMTItYzAzZDg2ZTRmOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFjNTgwYzEtYTA1ZC00ZTI4LWE0 OGQtOWVhMGVjNWVkY2FjLzIxYzU4MGMxLWEwNWQtNGUyOC1hNDhkLTllYTBlYzVl ZGNhYy5jcmwwHwYDVR0jBBgwFoAUQ0wTbklWxi+/syRqFJpDaZOdm+AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEw ZWM1ZWRjYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQIiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeetgy8E1hrcKxU2SKEMf2vhObu4fZsksO771/7mSqthx1Q64th6VyK T2ozwnS7XTipS5apHyg87XVUny99onkvigq92wKa1yonrVXvLwMhV/dG7dxyN13H hueERMYyBovFhSWCQnIEpF/kDpnHEQHFu0h0gfLNFBYCihItPK64xovdEredo3MK VjygvYvkLud+39JFhsr1pza7qvaB9zXGd/N1hzdB/I4D7zFRqSC0xinhJ+8b03vp k8yoQ9aS6qG8w1wf6Gh4k3SC2WZujM2oVMcIyd6KSUUpvW1zff1o6LIFeuXnM5Of I4fUo8xdeiRSXH+NKYYbJsG51KgZ5Bg= -----END CERTIFICATE-----Generated at Fri Apr 17 21:24:06 2026 by rpki-client