$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/beed4dfc-6eab-3efe-8ed0-638f08c24a3e.roa File: beed4dfc-6eab-3efe-8ed0-638f08c24a3e.roa (raw, json) Hash identifier: +d/UKn3CJ895JU9swsaoNDZYlOPvtAIVwMYf1bFNjZc= Subject key identifier: B7:F7:9F:4D:2A:31:4A:31:06:57:60:78:D8:74:4F:CE:2F:11:84:10 Certificate issuer: /CN=7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1 Certificate serial: 010D0C9F4328584CAFBC697032D72BB4B33F3C80 Authority key identifier: 31:55:1F:1B:33:E6:E5:B7:AB:AC:0D:36:B6:7D:DD:EA:B4:60:E3:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/beed4dfc-6eab-3efe-8ed0-638f08c24a3e.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 29789 IP address blocks: 64.88.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:69:70:32:d7:2b:b4:b3:3f:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1 Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=7b17b1d3-bd6f-4981-83e8-8bd7b9768d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:da:80:81:35:08:06:c4:e7:aa:fc:92:d2:8a: a1:08:72:9f:26:ba:69:ea:99:1e:b6:5f:9c:ab:09: 63:a2:ce:f3:64:a7:76:06:d1:8e:ae:01:58:f5:fb: 46:97:64:98:5b:34:ab:1f:5b:25:1f:b8:0c:14:9d: bf:5c:d2:ad:7e:01:67:97:e1:17:8c:4e:3f:26:3c: dd:2c:f3:b7:ad:aa:0b:90:da:6c:0f:71:00:cc:75: a3:26:52:27:a6:fb:c1:a9:9e:03:b5:7b:48:f9:c9: 68:5b:ae:ba:1c:82:66:24:01:cf:13:a0:bd:7b:87: ed:5c:b2:d6:76:a0:af:b1:c5:db:41:89:17:72:04: cb:62:d4:0d:37:64:ab:f2:fe:4f:23:d3:f4:89:66: 06:18:ba:07:2c:8c:01:42:1b:a5:cd:3d:7a:e8:04: 14:63:01:f0:38:18:4c:a3:5d:a1:89:0b:2b:b1:f7: 11:0e:2e:dc:15:6d:33:6a:53:b8:59:a7:ea:09:7b: d2:f7:b9:44:9c:1f:73:82:55:ea:f6:8c:a0:bb:14: fb:4f:63:80:b5:e6:a1:f9:97:a4:4a:07:87:82:48: a3:5c:13:51:bb:bf:33:18:0f:3c:d9:5c:ac:3b:23: 0b:aa:65:89:28:a4:10:37:f1:b9:a8:35:45:6f:b5: e8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F7:9F:4D:2A:31:4A:31:06:57:60:78:D8:74:4F:CE:2F:11:84:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/beed4dfc-6eab-3efe-8ed0-638f08c24a3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.crl X509v3 Authority Key Identifier: keyid:31:55:1F:1B:33:E6:E5:B7:AB:AC:0D:36:B6:7D:DD:EA:B4:60:E3:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.cer sbgp-ipAddrBlock: critical IPv4: 64.88.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:00:03:3e:c8:9c:9b:37:e1:47:bf:5e:52:d7:70:18:c1:d1: 0c:ee:68:f2:b9:7f:38:b6:7e:75:5a:0f:8f:02:da:19:38:15: 0e:8c:e0:7f:4a:58:06:6e:e2:c1:c5:e1:cf:21:3a:4f:74:bd: 2c:31:27:a6:36:fe:b9:90:e5:0c:d1:14:9d:04:ab:d9:46:70: 4c:c4:a4:c7:d1:49:71:a9:41:0e:a0:35:b5:43:78:64:da:5d: cf:64:e6:b5:e8:ed:7f:70:6c:e8:68:0d:48:25:92:7e:89:39: db:af:d5:53:4b:93:cf:f8:e0:01:a3:78:b8:93:6a:46:d3:63: f1:a2:e8:e0:41:24:32:7c:d5:c0:5d:3c:39:c1:00:5d:aa:6a: 10:36:26:91:4e:1e:e6:8d:29:71:aa:cd:22:05:7a:e0:68:5b: ee:7e:31:ff:25:b0:14:6b:f4:79:22:b9:65:93:cc:9a:0b:ab: 5d:a5:51:b1:75:17:e9:4a:60:b3:4b:3b:3e:7c:3c:ca:02:2d: ea:c0:fb:55:d5:51:f2:55:38:ee:63:85:d6:24:30:42:27:3a: 6b:03:c4:33:54:be:07:9d:d8:92:33:9e:b5:52:be:c0:c6:e8: 4d:2d:60:43:37:b9:4f:f4:84:e5:45:0b:e8:c3:d0:31:53:63: 30:bd:d1:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvGlwMtcrtLM/PIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwYWQyYzUtNmY3MC00Y2QwLThlMDQtZmZhOWQ5Y2Rl ZmYxMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk N2IxN2IxZDMtYmQ2Zi00OTgxLTgzZTgtOGJkN2I5NzY4ZDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNqAgTUIBsTnqvyS0oqhCHKfJrpp6pketl+c qwljos7zZKd2BtGOrgFY9ftGl2SYWzSrH1slH7gMFJ2/XNKtfgFnl+EXjE4/Jjzd LPO3raoLkNpsD3EAzHWjJlInpvvBqZ4DtXtI+cloW666HIJmJAHPE6C9e4ftXLLW dqCvscXbQYkXcgTLYtQNN2Sr8v5PI9P0iWYGGLoHLIwBQhulzT166AQUYwHwOBhM o12hiQsrsfcRDi7cFW0zalO4WafqCXvS97lEnB9zglXq9oyguxT7T2OAteah+Zek SgeHgkijXBNRu78zGA882VysOyMLqmWJKKQQN/G5qDVFb7XoJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLf3n00qMUoxBldgeNh0T84vEYQQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83YTBh ZDJjNS02ZjcwLTRjZDAtOGUwNC1mZmE5ZDljZGVmZjEvYmVlZDRkZmMtNmVhYi0z ZWZlLThlZDAtNjM4ZjA4YzI0YTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvN2EwYWQyYzUtNmY3MC00Y2QwLThl MDQtZmZhOWQ5Y2RlZmYxLzdhMGFkMmM1LTZmNzAtNGNkMC04ZTA0LWZmYTlkOWNk ZWZmMS5jcmwwHwYDVR0jBBgwFoAUMVUfGzPm5berrA02tn3d6rRg4yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83YTBhZDJjNS02ZjcwLTRjZDAtOGUwNC1mZmE5 ZDljZGVmZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFj2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgAAz7InJs34Ue/XlLXcBjB0QzuaPK5fzi2fnVaD48C2hk4FQ6M4H9K WAZu4sHF4c8hOk90vSwxJ6Y2/rmQ5QzRFJ0Eq9lGcEzEpMfRSXGpQQ6gNbVDeGTa Xc9k5rXo7X9wbOhoDUglkn6JOduv1VNLk8/44AGjeLiTakbTY/Gi6OBBJDJ81cBd PDnBAF2qahA2JpFOHuaNKXGqzSIFeuBoW+5+Mf8lsBRr9HkiuWWTzJoLq12lUbF1 F+lKYLNLOz58PMoCLerA+1XVUfJVOO5jhdYkMEInOmsDxDNUvged2JIznrVSvsDG 6E0tYEM3uU/0hOVFC+jD0DFTYzC90aw= -----END CERTIFICATE-----Generated at Mon Mar 2 14:21:20 2026 by rpki-client