$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/36e2d862-b69a-380e-9bcf-5feb88b2e3a3.roa File: 36e2d862-b69a-380e-9bcf-5feb88b2e3a3.roa (raw, json) Hash identifier: H6MJE0marMY1bg5cLdsWNrjRhMosH29I6dR7P7Hn/vI= Subject key identifier: 12:0F:A4:D6:D3:CB:5B:E0:72:36:4E:C7:27:E6:E7:84:65:75:0D:6C Certificate issuer: /CN=aae465c0-2a10-495a-b7d2-2aa048b286a0 Certificate serial: 010D0C9F4328584D571FB01E1AD27469E5BB2B80 Authority key identifier: AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/36e2d862-b69a-380e-9bcf-5feb88b2e3a3.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 21734 IP address blocks: 64.95.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b0:1e:1a:d2:74:69:e5:bb:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae465c0-2a10-495a-b7d2-2aa048b286a0 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=29176afd-f399-47dd-98c7-f0b5f1f7af86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:90:7b:dc:a8:dd:69:03:87:83:41:3f:e9:9f: b1:b5:62:7b:8d:f7:f2:c5:1e:0e:77:65:33:06:f4: 7b:57:bc:49:aa:55:e1:09:61:26:d2:14:47:de:93: 7c:79:09:82:46:62:9c:55:d3:34:c0:a8:a1:1f:dc: d5:e4:da:49:77:55:27:f4:da:ab:59:12:bb:bf:9a: fd:3e:ed:68:60:4f:9b:e7:d0:4a:f1:80:4a:3a:35: b4:e0:e5:5c:1e:50:3b:c0:65:f0:fc:83:f4:a0:f1: 39:70:2e:53:9a:d9:83:6f:94:cd:6b:f1:1d:d8:41: bb:52:90:08:66:11:f5:27:af:89:4b:1d:39:a6:c5: 0a:f8:4d:79:23:49:e8:85:70:ac:bb:b8:c1:4d:2c: f7:56:df:48:1d:db:1a:dc:5e:5c:fc:68:1a:91:6e: 0e:24:16:28:3f:91:0e:b5:5b:f7:b6:8e:5c:06:2b: 9f:42:ed:32:3c:ad:77:96:d8:a5:7c:5c:67:b1:2b: 3f:49:75:55:a8:14:56:0c:41:b0:ef:d4:1f:45:e4: b0:47:96:33:66:55:9b:02:32:e1:a0:79:42:f5:28: 30:43:1e:97:a9:14:d9:32:10:50:bd:76:03:87:fd: ef:cc:00:53:5d:af:02:b6:bc:a6:25:a6:15:c4:ea: 1c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0F:A4:D6:D3:CB:5B:E0:72:36:4E:C7:27:E6:E7:84:65:75:0D:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/36e2d862-b69a-380e-9bcf-5feb88b2e3a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl X509v3 Authority Key Identifier: keyid:AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer sbgp-ipAddrBlock: critical IPv4: 64.95.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:45:95:ee:d5:c0:81:ed:43:13:e9:d8:54:63:27:b7:cc:21: 5a:19:67:da:17:8a:16:c7:29:dd:9b:8d:42:61:31:e5:dc:d5: da:0d:ea:9b:95:43:62:ec:a3:21:8f:9c:5d:96:80:3b:a0:d0: 0a:f8:93:6a:0d:66:84:ae:00:fd:b2:ee:9e:ac:d1:1c:34:c5: 63:f1:0c:a2:3f:11:79:54:ab:d8:6b:d5:9b:69:e0:9d:0e:2b: 91:87:64:da:b9:b6:d5:10:2b:ca:cc:28:21:b8:46:f0:48:48: 87:35:f8:23:fa:a2:28:13:e6:81:65:23:a7:bf:1a:ac:47:f0: a4:ac:93:6a:51:58:83:98:cb:9e:5d:3d:fb:09:4b:fe:56:b3: 38:f7:60:d6:14:6b:89:31:84:37:08:dc:e6:73:62:c0:2d:25: 5e:a5:88:ca:b0:3a:59:18:61:57:28:a3:f1:ec:19:db:a0:d7: 97:7b:00:49:28:d0:fd:f0:a7:b7:4b:d3:c3:3a:f3:f1:de:8e: 9b:34:b0:8e:13:a8:28:73:46:a5:aa:74:76:9f:6f:74:5d:0a: 8d:b1:9e:ad:75:6f:bd:41:8e:30:51:f5:3a:32:a8:e6:8c:53: 43:df:07:3a:c2:7b:89:36:91:ea:b2:22:e5:aa:3a:2a:3b:37: ff:c3:48:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7AeGtJ0aeW7K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFlNDY1YzAtMmExMC00OTVhLWI3ZDItMmFhMDQ4YjI4 NmEwMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk MjkxNzZhZmQtZjM5OS00N2RkLTk4YzctZjBiNWYxZjdhZjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pB73KjdaQOHg0E/6Z+xtWJ7jffyxR4Od2Uz BvR7V7xJqlXhCWEm0hRH3pN8eQmCRmKcVdM0wKihH9zV5NpJd1Un9NqrWRK7v5r9 Pu1oYE+b59BK8YBKOjW04OVcHlA7wGXw/IP0oPE5cC5TmtmDb5TNa/Ed2EG7UpAI ZhH1J6+JSx05psUK+E15I0nohXCsu7jBTSz3Vt9IHdsa3F5c/GgakW4OJBYoP5EO tVv3to5cBiufQu0yPK13ltilfFxnsSs/SXVVqBRWDEGw79QfReSwR5YzZlWbAjLh oHlC9SgwQx6XqRTZMhBQvXYDh/3vzABTXa8CtrymJaYVxOockQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIPpNbTy1vgcjZOxyfm54RldQ1sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYWU0 NjVjMC0yYTEwLTQ5NWEtYjdkMi0yYWEwNDhiMjg2YTAvMzZlMmQ4NjItYjY5YS0z ODBlLTliY2YtNWZlYjg4YjJlM2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWFlNDY1YzAtMmExMC00OTVhLWI3 ZDItMmFhMDQ4YjI4NmEwL2FhZTQ2NWMwLTJhMTAtNDk1YS1iN2QyLTJhYTA0OGIy ODZhMC5jcmwwHwYDVR0jBBgwFoAUqvGlGuuoqNwlLVt4tOGaGNmKjyQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYWU0NjVjMC0yYTEwLTQ5NWEtYjdkMi0yYWEw NDhiMjg2YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQF+/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtFle7VwIHtQxPp2FRjJ7fMIVoZZ9oXihbHKd2bjUJhMeXc1doN6puV Q2LsoyGPnF2WgDug0Ar4k2oNZoSuAP2y7p6s0Rw0xWPxDKI/EXlUq9hr1Ztp4J0O K5GHZNq5ttUQK8rMKCG4RvBISIc1+CP6oigT5oFlI6e/GqxH8KSsk2pRWIOYy55d PfsJS/5Wszj3YNYUa4kxhDcI3OZzYsAtJV6liMqwOlkYYVcoo/HsGdug15d7AEko 0P3wp7dL08M68/Hejps0sI4TqChzRqWqdHafb3RdCo2xnq11b71BjjBR9ToyqOaM U0PfBzrCe4k2keqyIuWqOio7N//DSOA= -----END CERTIFICATE-----Generated at Fri Apr 17 15:14:44 2026 by rpki-client