$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa File: f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa (raw, json) Hash identifier: 8iq9biYS9Uhksv3UhmyBwxwLuL6f4sw5NJ1Y66fXurs= Subject key identifier: 57:28:A3:B9:2D:F4:8B:E1:57:C3:55:23:40:B4:C3:B8:39:A2:B1:C9 Certificate issuer: /CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Certificate serial: 010D0C9F4328584D59EA63CEE0222468C328ED70 Authority key identifier: 56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 395035 IP address blocks: 64.239.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:63:ce:e0:22:24:68:c3:28:ed:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=f7c74f8a-6850-49db-9088-c5f383e030b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e5:eb:e0:4f:70:3e:85:1f:b4:d8:71:e8:e8: 94:22:8d:52:3a:9d:fc:52:99:46:6e:a2:8c:c6:05: 1c:4a:14:4b:01:a8:a3:d6:a0:f9:a0:27:ef:16:7e: 45:59:9e:47:12:98:d0:c0:1c:84:2e:be:99:1c:95: 43:0b:a5:e2:8f:09:cd:71:08:56:d4:fe:85:4b:6b: 24:f0:a4:47:b4:76:64:1b:71:e0:45:ec:7f:46:60: 17:a6:e1:c7:50:d9:58:69:3c:47:f3:99:5d:3f:04: ce:27:0a:66:58:6c:05:77:84:07:98:37:e1:cb:f6: 0b:7e:fe:39:ba:0a:eb:03:d1:d4:05:16:65:89:e7: a9:4f:93:3e:02:3e:e2:02:d1:da:bc:05:56:6b:6e: 34:99:b7:d8:41:24:05:5f:e2:b3:dd:d8:56:15:9b: 8a:3f:5f:73:24:59:49:ba:46:ec:bb:0c:a0:b6:1c: 5c:8f:7d:c6:d1:30:56:70:f5:97:a9:07:de:8d:56: a9:ca:50:4b:08:3a:cc:06:31:2a:8c:5b:af:b1:3e: f8:8c:e8:c5:d1:8c:be:25:18:ee:e1:fa:47:5a:79: 34:3b:59:86:ac:24:7f:54:24:d2:2d:a9:41:b8:54: fd:50:8f:6a:47:18:29:d6:ea:d2:e1:40:ea:de:ed: 71:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:28:A3:B9:2D:F4:8B:E1:57:C3:55:23:40:B4:C3:B8:39:A2:B1:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl X509v3 Authority Key Identifier: keyid:56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer sbgp-ipAddrBlock: critical IPv4: 64.239.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:94:b0:65:6b:62:48:50:56:7e:6c:41:3e:09:3d:69:2d:3a: 21:bd:34:dd:46:33:42:73:d2:3f:57:d4:1e:87:4c:ac:6e:25: 90:d5:10:12:11:f5:eb:1c:f2:98:f5:bb:4d:44:9d:6f:51:21: 30:7a:d3:52:03:b4:a3:12:19:27:2d:8e:b8:3d:de:b2:41:91: 7b:a7:1d:57:a8:db:21:39:90:15:53:f8:35:58:26:89:37:3e: 98:12:45:76:51:81:39:7a:55:ae:3b:21:f2:f2:04:5f:4a:db: d6:69:b5:bc:ac:b2:25:70:b1:e2:84:21:e9:ff:24:04:b2:9e: 23:b4:f0:3b:3b:ee:e8:a4:e9:8a:e6:ad:99:a3:6e:4a:d0:ab: 9b:70:6a:44:7a:3d:67:f1:4e:24:d0:b8:17:ff:a5:c9:39:73: 39:40:a7:56:79:d7:b9:1a:42:3d:5d:82:11:75:00:3e:b5:68: f4:d6:a4:29:33:9a:2c:69:53:54:6b:f9:74:04:5a:31:72:e5: e9:e8:ee:fc:bc:80:f9:4b:bd:fd:a1:c7:49:d1:f3:6a:73:0d: 8d:f8:34:31:ee:a0:f5:74:07:d8:f7:a2:cd:ae:f8:5d:5f:45: c6:2a:2f:6a:21:0c:f6:24:26:78:be:ab:c9:64:d3:93:16:f3: a7:98:4a:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6mPO4CIkaMMo7XAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3MGQ1MmMtZDNhMS00Njg3LWE3MTItMjEyYTQ0ZWUw ZmIyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZjdjNzRmOGEtNjg1MC00OWRiLTkwODgtYzVmMzgzZTAzMGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+Xr4E9wPoUftNhx6OiUIo1SOp38UplGbqKM xgUcShRLAaij1qD5oCfvFn5FWZ5HEpjQwByELr6ZHJVDC6XijwnNcQhW1P6FS2sk 8KRHtHZkG3HgRex/RmAXpuHHUNlYaTxH85ldPwTOJwpmWGwFd4QHmDfhy/YLfv45 ugrrA9HUBRZlieepT5M+Aj7iAtHavAVWa240mbfYQSQFX+Kz3dhWFZuKP19zJFlJ ukbsuwygthxcj33G0TBWcPWXqQfejVapylBLCDrMBjEqjFuvsT74jOjF0Yy+JRju 4fpHWnk0O1mGrCR/VCTSLalBuFT9UI9qRxgp1urS4UDq3u1xPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcoo7kt9IvhV8NVI0C0w7g5orHJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OTcw ZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJhNDRlZTBmYjIvZjc5NDA1N2EtNmFjYi0z ZTBjLWFmYWMtYWIyM2I0ZDJhMGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTk3MGQ1MmMtZDNhMS00Njg3LWE3 MTItMjEyYTQ0ZWUwZmIyLzk5NzBkNTJjLWQzYTEtNDY4Ny1hNzEyLTIxMmE0NGVl MGZiMi5jcmwwHwYDVR0jBBgwFoAUVtE8CMf2LAtCo8s6F+hr2dh34XYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OTcwZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJh NDRlZTBmYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQO8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiUsGVrYkhQVn5sQT4JPWktOiG9NN1GM0Jz0j9X1B6HTKxuJZDVEBIR 9esc8pj1u01EnW9RITB601IDtKMSGSctjrg93rJBkXunHVeo2yE5kBVT+DVYJok3 PpgSRXZRgTl6Va47IfLyBF9K29ZptbyssiVwseKEIen/JASyniO08Ds77uik6Yrm rZmjbkrQq5twakR6PWfxTiTQuBf/pck5czlAp1Z517kaQj1dghF1AD61aPTWpCkz mixpU1Rr+XQEWjFy5eno7vy8gPlLvf2hx0nR82pzDY34NDHuoPV0B9j3os2u+F1f RcYqL2ohDPYkJni+q8lk05MW86eYSqQ= -----END CERTIFICATE-----Generated at Sat Apr 18 01:08:01 2026 by rpki-client