$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a15a491d-dae0-4736-92ff-cf270fef8865/211c833e-1de5-3c98-bfc6-06b8ac959560.roa File: 211c833e-1de5-3c98-bfc6-06b8ac959560.roa (raw, json) Hash identifier: PCetU3Uw2vqufX8/IyOOzw6ZqDVKOHfZPLKTPZ5VUTc= Subject key identifier: 6E:E8:91:7A:98:FC:98:F2:86:90:4F:CF:7F:BF:36:DA:49:55:06:06 Certificate issuer: /CN=a15a491d-dae0-4736-92ff-cf270fef8865 Certificate serial: 010D0C9F4328584CA89443DB0D94EE77B2F06D60 Authority key identifier: 8E:F9:E2:67:2E:78:91:4E:8D:BA:01:BE:E9:A9:CF:EC:06:4B:8F:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a15a491d-dae0-4736-92ff-cf270fef8865.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a15a491d-dae0-4736-92ff-cf270fef8865/211c833e-1de5-3c98-bfc6-06b8ac959560.roa Signing time: Tue 27 Jan 2026 00:29:11 +0000 ROA not before: Tue 27 Jan 2026 00:29:11 +0000 ROA not after: Sun 26 Apr 2026 23:29:11 +0000 asID: 401755 IP address blocks: 64.56.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a15a491d-dae0-4736-92ff-cf270fef8865/a15a491d-dae0-4736-92ff-cf270fef8865.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a15a491d-dae0-4736-92ff-cf270fef8865/a15a491d-dae0-4736-92ff-cf270fef8865.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a15a491d-dae0-4736-92ff-cf270fef8865.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a8:94:43:db:0d:94:ee:77:b2:f0:6d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15a491d-dae0-4736-92ff-cf270fef8865 Validity Not Before: Jan 27 00:29:11 2026 GMT Not After : Apr 26 23:29:11 2026 GMT Subject: CN=aaa98f0b-c9aa-42dd-9157-e7c7aa9508b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:76:2e:02:a5:ba:48:62:fd:3f:1f:02:b4:0b: d2:3e:06:06:37:7e:7b:ce:bc:c1:0d:dc:3b:bf:ac: bc:79:5e:9c:71:33:7f:34:02:63:4b:2c:4d:05:06: f5:29:6d:ca:a4:f6:0a:8d:dd:96:08:a9:f1:e4:12: 3f:0e:13:cc:cb:3e:a5:a1:b4:c7:25:8e:eb:ed:21: 6a:4e:21:d4:09:5b:30:c5:47:86:ea:69:78:9d:b8: fd:20:16:f5:2f:c6:39:78:2c:5f:c0:03:13:35:03: 1a:fd:88:df:28:35:60:63:e2:b5:75:f7:40:4d:d5: 79:79:fe:bd:b9:c8:e8:3e:bd:bf:a2:bf:ff:cc:a4: 95:45:6a:be:da:24:31:aa:3f:a6:25:1d:0f:4d:6f: c1:83:00:69:9e:8b:d2:90:95:1e:b2:8a:50:55:5d: 4c:89:c3:53:5e:d3:79:dc:d5:a9:39:66:ff:01:24: a7:f3:23:8a:a2:d0:9f:8b:9a:66:12:e2:ef:0e:38: c2:b8:03:35:42:7e:ef:39:70:ce:97:98:80:9b:91: 68:eb:70:7f:4e:56:16:2b:d8:0a:89:21:d4:92:1f: 98:7d:21:98:92:53:df:ed:23:11:df:f0:38:be:29: 12:b6:ef:28:1e:7e:0b:85:77:2d:da:e6:24:2d:17: 55:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E8:91:7A:98:FC:98:F2:86:90:4F:CF:7F:BF:36:DA:49:55:06:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a15a491d-dae0-4736-92ff-cf270fef8865/211c833e-1de5-3c98-bfc6-06b8ac959560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a15a491d-dae0-4736-92ff-cf270fef8865/a15a491d-dae0-4736-92ff-cf270fef8865.crl X509v3 Authority Key Identifier: keyid:8E:F9:E2:67:2E:78:91:4E:8D:BA:01:BE:E9:A9:CF:EC:06:4B:8F:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a15a491d-dae0-4736-92ff-cf270fef8865.cer sbgp-ipAddrBlock: critical IPv4: 64.56.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:4a:ff:f9:54:6d:d2:af:89:65:9c:02:90:5f:2d:1a:75:54: e1:10:4d:f4:47:b0:a3:95:16:75:f1:48:92:75:d6:80:92:d0: f0:55:7c:e8:00:d3:f9:4b:35:6a:9e:81:2a:6c:52:ce:ba:98: 10:6d:8a:dd:67:00:bb:78:8c:0f:f4:22:ab:59:2d:14:cc:3c: d8:c9:d1:ba:ce:ee:df:79:10:f7:22:cc:b1:bd:67:cf:9c:d5: f4:7c:08:4b:a6:b2:92:e7:61:07:fd:ac:fd:41:f6:d9:d3:4a: 7c:5a:89:7d:45:94:ca:fe:73:6b:f9:da:e9:5a:c8:75:24:fa: 8e:0f:89:38:37:9d:85:d5:2d:5b:bc:db:fd:e7:46:cb:25:a9: 6a:84:22:11:eb:16:8e:5e:c5:c9:97:7a:3c:4f:26:55:b3:f7: 94:68:11:62:07:fa:dd:42:bc:8d:37:1b:30:6c:57:82:44:36: 33:b1:23:18:55:c2:cd:d9:8e:6c:c1:62:d6:f6:36:b2:b6:8e: 1b:f9:6d:95:0a:7c:89:7c:13:36:81:fc:1b:62:4e:00:1b:16: 89:7d:0d:3b:95:36:b9:a9:df:15:25:da:1a:ac:79:c8:1c:44: b8:f8:04:db:9b:ef:28:d0:1d:dc:11:54:02:10:de:0c:2b:6c: c3:f1:c9:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyolEPbDZTud7LwbWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTE1YTQ5MWQtZGFlMC00NzM2LTkyZmYtY2YyNzBmZWY4 ODY1MB4XDTI2MDEyNzAwMjkxMVoXDTI2MDQyNjIzMjkxMVowLzEtMCsGA1UEAxMk YWFhOThmMGItYzlhYS00MmRkLTkxNTctZTdjN2FhOTUwOGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3YuAqW6SGL9Px8CtAvSPgYGN357zrzBDdw7 v6y8eV6ccTN/NAJjSyxNBQb1KW3KpPYKjd2WCKnx5BI/DhPMyz6lobTHJY7r7SFq TiHUCVswxUeG6ml4nbj9IBb1L8Y5eCxfwAMTNQMa/YjfKDVgY+K1dfdATdV5ef69 ucjoPr2/or//zKSVRWq+2iQxqj+mJR0PTW/BgwBpnovSkJUesopQVV1MicNTXtN5 3NWpOWb/ASSn8yOKotCfi5pmEuLvDjjCuAM1Qn7vOXDOl5iAm5Fo63B/TlYWK9gK iSHUkh+YfSGYklPf7SMR3/A4vikStu8oHn4LhXct2uYkLRdVXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7okXqY/JjyhpBPz3+/NtpJVQYGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9hMTVh NDkxZC1kYWUwLTQ3MzYtOTJmZi1jZjI3MGZlZjg4NjUvMjExYzgzM2UtMWRlNS0z Yzk4LWJmYzYtMDZiOGFjOTU5NTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYTE1YTQ5MWQtZGFlMC00NzM2LTky ZmYtY2YyNzBmZWY4ODY1L2ExNWE0OTFkLWRhZTAtNDczNi05MmZmLWNmMjcwZmVm ODg2NS5jcmwwHwYDVR0jBBgwFoAUjvniZy54kU6NugG+6anP7AZLj0wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9hMTVhNDkxZC1kYWUwLTQ3MzYtOTJmZi1jZjI3 MGZlZjg4NjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQDjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBK//lUbdKviWWcApBfLRp1VOEQTfRHsKOVFnXxSJJ11oCS0PBVfOgA 0/lLNWqegSpsUs66mBBtit1nALt4jA/0IqtZLRTMPNjJ0brO7t95EPcizLG9Z8+c 1fR8CEumspLnYQf9rP1B9tnTSnxaiX1FlMr+c2v52ulayHUk+o4PiTg3nYXVLVu8 2/3nRsslqWqEIhHrFo5excmXejxPJlWz95RoEWIH+t1CvI03GzBsV4JENjOxIxhV ws3ZjmzBYtb2NrK2jhv5bZUKfIl8EzaB/BtiTgAbFol9DTuVNrmp3xUl2hqsecgc RLj4BNub7yjQHdwRVAIQ3gwrbMPxyYY= -----END CERTIFICATE-----Generated at Mon Mar 2 07:18:50 2026 by rpki-client