$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/64db7fdd-16d1-3399-a90b-2ec2083580a3.roa File: 64db7fdd-16d1-3399-a90b-2ec2083580a3.roa (raw, json) Hash identifier: 1kuqAKuuZBOePnl+8iknFIyhv+iX2FbZUXgl0Q0vHT4= Subject key identifier: 5C:FB:0C:5F:E8:3C:3A:89:17:1F:6B:E7:A9:BF:67:B4:71:5F:ED:6F Certificate issuer: /CN=a01c464d-9d20-46a1-858b-c36c8c1a3776 Certificate serial: 010D0C9F4328584D571FAE9403C3FE84EE49D200 Authority key identifier: 42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/64db7fdd-16d1-3399-a90b-2ec2083580a3.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 35889 IP address blocks: 192.35.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:ae:94:03:c3:fe:84:ee:49:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a01c464d-9d20-46a1-858b-c36c8c1a3776 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=3b996a2d-b64a-423b-922a-a9877da1f2c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c1:3b:e9:b9:2f:08:ac:52:91:99:7c:3d:36: 76:38:ad:3e:00:aa:1a:1f:3c:5c:75:83:02:0f:fa: 89:4d:41:1c:67:fe:bd:25:0c:73:58:53:79:8f:c5: 35:b8:91:a6:a6:77:54:92:fb:a0:d8:0d:f6:c8:4c: 1b:43:57:39:86:a3:b0:0e:7b:f3:2b:f8:91:c3:7a: 0f:13:d5:16:ad:db:5e:14:34:9b:53:fe:b3:a7:5c: a9:04:63:2a:ff:62:61:bc:27:ac:56:f2:81:24:18: be:45:af:8a:e1:05:00:6c:56:a4:cb:64:68:ec:81: 5c:db:1f:cc:c2:ca:e9:92:ec:31:c8:79:d2:3c:9e: e3:fd:3f:5b:7a:f6:99:af:9c:2a:b1:18:f4:c6:8a: 40:71:b2:5d:cf:2e:47:b0:50:9a:9a:eb:ff:fb:01: 19:b6:86:b1:2f:87:8a:d6:62:64:8c:7b:bf:0c:8c: 62:b8:8b:b3:0b:2b:ee:15:11:91:ce:51:c0:ab:12: 73:2e:c0:08:cc:f3:3b:dd:4b:11:3e:47:32:23:44: d2:b4:cf:d8:55:b0:a9:32:de:bd:38:c3:c5:51:8b: 30:3d:fb:39:04:0d:41:5b:0c:7a:3b:a1:8e:0b:35: b6:11:55:78:0c:52:c5:8d:cf:b6:7d:3c:d0:07:c8: 23:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FB:0C:5F:E8:3C:3A:89:17:1F:6B:E7:A9:BF:67:B4:71:5F:ED:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/64db7fdd-16d1-3399-a90b-2ec2083580a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl X509v3 Authority Key Identifier: keyid:42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer sbgp-ipAddrBlock: critical IPv4: 192.35.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:a3:02:91:94:0b:87:98:54:4d:c8:5e:db:7e:2b:b2:31:57: 15:1d:c1:8f:43:c9:f0:13:2d:0b:fb:8a:4d:a8:26:45:a5:b1: 97:8c:d5:be:67:24:47:80:24:49:8c:04:5c:56:07:62:09:c9: 61:27:9a:96:d0:35:ac:2b:90:5c:71:28:07:00:43:f3:72:84: 88:3c:71:5b:10:01:47:29:1d:17:0d:d4:ec:db:b3:3b:11:8c: f3:16:bc:8b:42:ee:1a:4a:84:cf:61:fc:37:e2:b9:72:85:e2: d8:79:83:07:a6:54:b1:ba:3e:0d:3d:af:03:9a:96:1c:ee:c4: b4:94:01:38:49:ae:c7:60:19:a2:5a:56:13:c6:aa:ef:64:1d: 3a:bd:a9:6e:96:93:57:3b:1a:04:50:49:25:b4:20:f0:f8:dc: 68:7b:23:b3:7c:27:62:97:14:93:ff:90:a8:97:5a:12:1b:6d: a0:cf:0c:58:e0:71:01:f8:47:84:57:70:63:bf:aa:0b:22:ce: 79:12:e6:e9:29:a3:af:67:4d:98:9f:b0:27:d8:1d:db:8c:10: 59:35:b8:26:0a:c6:e6:11:98:20:5b:3c:f9:42:c4:2f:b0:85: 0e:20:28:98:86:8a:aa:1b:5e:82:c0:79:f7:c5:ea:98:b4:c8: c1:32:c8:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH66UA8P+hO5J0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTAxYzQ2NGQtOWQyMC00NmExLTg1OGItYzM2YzhjMWEz Nzc2MB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk M2I5OTZhMmQtYjY0YS00MjNiLTkyMmEtYTk4NzdkYTFmMmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicE76bkvCKxSkZl8PTZ2OK0+AKoaHzxcdYMC D/qJTUEcZ/69JQxzWFN5j8U1uJGmpndUkvug2A32yEwbQ1c5hqOwDnvzK/iRw3oP E9UWrdteFDSbU/6zp1ypBGMq/2JhvCesVvKBJBi+Ra+K4QUAbFaky2Ro7IFc2x/M wsrpkuwxyHnSPJ7j/T9bevaZr5wqsRj0xopAcbJdzy5HsFCamuv/+wEZtoaxL4eK 1mJkjHu/DIxiuIuzCyvuFRGRzlHAqxJzLsAIzPM73UsRPkcyI0TStM/YVbCpMt69 OMPFUYswPfs5BA1BWwx6O6GOCzW2EVV4DFLFjc+2fTzQB8gjRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFz7DF/oPDqJFx9r56m/Z7RxX+1vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFj NDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZjOGMxYTM3NzYvNjRkYjdmZGQtMTZkMS0z Mzk5LWE5MGItMmVjMjA4MzU4MGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTAxYzQ2NGQtOWQyMC00NmExLTg1 OGItYzM2YzhjMWEzNzc2L2EwMWM0NjRkLTlkMjAtNDZhMS04NThiLWMzNmM4YzFh Mzc3Ni5jcmwwHwYDVR0jBBgwFoAUQo2GNS7VIXZWdKOP4reK/APen14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFjNDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZj OGMxYTM3NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCORMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqjApGUC4eYVE3IXtt+K7IxVxUdwY9DyfATLQv7ik2oJkWlsZeM1b5n JEeAJEmMBFxWB2IJyWEnmpbQNawrkFxxKAcAQ/NyhIg8cVsQAUcpHRcN1OzbszsR jPMWvItC7hpKhM9h/DfiuXKF4th5gwemVLG6Pg09rwOalhzuxLSUAThJrsdgGaJa VhPGqu9kHTq9qW6Wk1c7GgRQSSW0IPD43Gh7I7N8J2KXFJP/kKiXWhIbbaDPDFjg cQH4R4RXcGO/qgsiznkS5ukpo69nTZifsCfYHduMEFk1uCYKxuYRmCBbPPlCxC+w hQ4gKJiGiqobXoLAeffF6pi0yMEyyEw= -----END CERTIFICATE-----Generated at Fri Apr 17 17:07:13 2026 by rpki-client