$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/add0a9ff-c124-381c-9d60-5f74979be3f7.roa File: add0a9ff-c124-381c-9d60-5f74979be3f7.roa (raw, json) Hash identifier: Kb6i/bSQ12cd+I/K3zDYIM3Tdg76NHIt1hzdWqTRfzM= Subject key identifier: 54:17:77:8E:EC:63:DA:3E:DE:11:F8:E2:AE:E8:06:12:07:F9:03:06 Certificate issuer: /CN=afc2bf64-2cba-4362-8b12-56844da30e4e Certificate serial: 010D0C9F4328584D5024F39F2FE0B4900634FC40 Authority key identifier: 43:5D:5A:CD:27:CD:09:AF:C9:76:63:2C:28:78:AF:73:FA:9F:5F:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/add0a9ff-c124-381c-9d60-5f74979be3f7.roa Signing time: Sat 28 Mar 2026 01:00:31 +0000 ROA not before: Sat 28 Mar 2026 01:00:31 +0000 ROA not after: Fri 26 Jun 2026 01:00:31 +0000 asID: 14343 IP address blocks: 64.26.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:50:24:f3:9f:2f:e0:b4:90:06:34:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc2bf64-2cba-4362-8b12-56844da30e4e Validity Not Before: Mar 28 01:00:31 2026 GMT Not After : Jun 26 01:00:31 2026 GMT Subject: CN=f275ba7c-2542-4eab-845f-819d21bace21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:14:d0:3b:ad:99:2b:6c:6b:31:43:f5:ca:6c: 36:cb:ce:2f:18:15:36:ce:43:90:2b:ae:a2:fd:e2: 69:1e:0d:41:37:ca:6e:c2:1d:b2:10:65:0c:d8:39: 5e:aa:7a:18:14:27:56:0f:34:18:1e:ce:9b:ae:41: 5f:c1:c7:2c:13:f5:9e:39:5b:81:5c:27:83:35:e6: 82:6e:70:ec:81:7c:cd:78:37:bc:e5:af:72:5d:61: e6:d5:1f:01:53:18:7d:e8:70:b8:4c:d1:b7:88:f9: 40:7f:d5:4b:6b:7f:36:12:f5:9d:4f:24:30:b5:75: 3c:86:c1:9c:54:d4:b1:b6:03:46:22:d6:ed:fb:e9: 23:f7:cf:08:b7:ec:02:9c:0a:f1:7c:24:9c:4d:45: 0b:d8:82:41:1b:0b:d4:4c:dd:d2:40:4d:41:31:7a: 5b:03:0d:53:b4:e0:be:8e:c7:b0:3a:c7:49:14:6f: 7f:88:45:f6:91:e0:ca:45:36:b5:c1:73:35:23:55: e7:cc:8a:65:0c:77:1e:c6:dd:82:f2:8f:93:cb:3c: f0:dd:0e:5c:ea:71:7a:b3:fd:6c:15:29:2c:bd:7b: 3c:24:38:0d:58:c4:d2:9c:0b:5a:66:02:7b:b4:52: d1:9a:8a:f8:12:9b:d5:49:ef:37:f2:9a:fb:56:ae: 29:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:17:77:8E:EC:63:DA:3E:DE:11:F8:E2:AE:E8:06:12:07:F9:03:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/add0a9ff-c124-381c-9d60-5f74979be3f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.crl X509v3 Authority Key Identifier: keyid:43:5D:5A:CD:27:CD:09:AF:C9:76:63:2C:28:78:AF:73:FA:9F:5F:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer sbgp-ipAddrBlock: critical IPv4: 64.26.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:bd:95:9e:fb:54:6b:db:ff:a7:08:f9:5c:31:df:a9:aa:95: 85:a4:72:ca:15:8d:ad:52:aa:d9:17:51:28:c1:82:c5:a9:6b: 39:80:94:fd:47:ad:14:da:67:25:be:78:59:7c:86:34:f4:84: d5:2d:01:3f:4c:45:0b:01:89:23:94:f0:6a:ac:03:f0:68:c8: b8:34:10:f6:1d:58:d0:28:70:be:db:bc:f5:4a:db:a5:ee:df: 6f:91:bf:9b:14:a6:c7:39:fb:90:2b:99:ae:22:7a:aa:78:4f: 46:84:d9:08:fc:d5:f5:4c:ae:eb:37:e2:ed:06:59:20:0a:b7: 3c:49:73:43:94:67:b9:cc:8d:2d:2f:ca:c7:da:7d:6c:80:90: 54:98:d8:92:49:09:80:a3:1d:25:06:4c:4c:54:f9:83:dc:bf: a0:c0:42:82:a4:dd:ce:ba:07:0a:45:dc:8e:36:49:5f:26:56: 6d:8a:b8:16:65:88:e0:94:b1:c9:50:41:3e:5d:5c:02:a9:4e: b8:f5:c9:07:51:ef:84:a3:54:68:3c:2f:ac:21:cb:4e:2e:d0: 2c:7b:7e:06:e2:04:05:1e:a1:5a:99:f7:1b:2e:1d:85:44:c9: 8a:88:55:3b:8d:68:98:cf:65:ca:b3:f6:46:04:22:86:92:9c: 20:f7:83:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1QJPOfL+C0kAY0/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjMmJmNjQtMmNiYS00MzYyLThiMTItNTY4NDRkYTMw ZTRlMB4XDTI2MDMyODAxMDAzMVoXDTI2MDYyNjAxMDAzMVowLzEtMCsGA1UEAxMk ZjI3NWJhN2MtMjU0Mi00ZWFiLTg0NWYtODE5ZDIxYmFjZTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRTQO62ZK2xrMUP1ymw2y84vGBU2zkOQK66i /eJpHg1BN8puwh2yEGUM2DleqnoYFCdWDzQYHs6brkFfwccsE/WeOVuBXCeDNeaC bnDsgXzNeDe85a9yXWHm1R8BUxh96HC4TNG3iPlAf9VLa382EvWdTyQwtXU8hsGc VNSxtgNGItbt++kj988It+wCnArxfCScTUUL2IJBGwvUTN3SQE1BMXpbAw1TtOC+ jsewOsdJFG9/iEX2keDKRTa1wXM1I1XnzIplDHcext2C8o+Tyzzw3Q5c6nF6s/1s FSksvXs8JDgNWMTSnAtaZgJ7tFLRmor4EpvVSe838pr7Vq4pXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQXd47sY9o+3hH44q7oBhIH+QMGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZmMy YmY2NC0yY2JhLTQzNjItOGIxMi01Njg0NGRhMzBlNGUvYWRkMGE5ZmYtYzEyNC0z ODFjLTlkNjAtNWY3NDk3OWJlM2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWZjMmJmNjQtMmNiYS00MzYyLThi MTItNTY4NDRkYTMwZTRlL2FmYzJiZjY0LTJjYmEtNDM2Mi04YjEyLTU2ODQ0ZGEz MGU0ZS5jcmwwHwYDVR0jBBgwFoAUQ11azSfNCa/JdmMsKHivc/qfX0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZmMyYmY2NC0yY2JhLTQzNjItOGIxMi01Njg0 NGRhMzBlNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBrkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABu9lZ77VGvb/6cI+Vwx36mqlYWkcsoVja1SqtkXUSjBgsWpazmAlP1H rRTaZyW+eFl8hjT0hNUtAT9MRQsBiSOU8GqsA/BoyLg0EPYdWNAocL7bvPVK26Xu 32+Rv5sUpsc5+5Arma4ieqp4T0aE2Qj81fVMrus34u0GWSAKtzxJc0OUZ7nMjS0v ysfafWyAkFSY2JJJCYCjHSUGTExU+YPcv6DAQoKk3c66BwpF3I42SV8mVm2KuBZl iOCUsclQQT5dXAKpTrj1yQdR74SjVGg8L6why04u0Cx7fgbiBAUeoVqZ9xsuHYVE yYqIVTuNaJjPZcqz9kYEIoaSnCD3g78= -----END CERTIFICATE-----Generated at Fri Apr 17 11:03:03 2026 by rpki-client