$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ac18ad68-7a7a-38c0-8866-f14b39a8a037.roa File: ac18ad68-7a7a-38c0-8866-f14b39a8a037.roa (raw, json) Hash identifier: t0zsNdHtwsVZOwxeWGd/LPbPog5C6c6MeVQE5Dva/Lo= Subject key identifier: 07:7D:02:13:28:4C:4C:98:D7:9A:B1:1D:F1:A9:DC:FC:65:E4:37:71 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EAA0412D310D26C51F3740 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ac18ad68-7a7a-38c0-8866-f14b39a8a037.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 397787 IP address blocks: 64.62.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:a0:41:2d:31:0d:26:c5:1f:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=33b79e3e-c8c7-48a8-b7f0-ba2c077be403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0c:50:47:87:67:10:9b:4a:b0:97:85:63:07: 30:30:60:b1:05:2a:80:00:bc:4f:da:b1:ba:56:fc: 2e:91:39:66:fe:63:43:34:0c:5f:ab:07:6e:c4:cd: 73:f3:a2:50:62:46:f3:07:70:15:b2:07:64:65:0d: d4:3e:46:09:18:ea:f2:6a:c8:65:16:f1:6d:ba:c6: 03:b7:96:59:2d:f4:ed:30:b7:59:65:a1:d6:ab:f6: dc:10:88:f0:61:6d:91:c9:6f:08:ee:4f:87:b4:19: 2f:da:4e:73:88:47:64:fa:2a:21:0b:d9:bb:eb:7d: 3a:bb:aa:39:06:d7:cb:5b:c4:38:4d:29:c0:13:13: 43:f8:02:ff:05:0b:79:a9:d5:de:f5:46:f2:e1:c1: 52:3b:41:64:69:94:86:73:4d:c9:2b:1f:62:c5:1b: 2b:db:72:0a:0d:2e:46:26:86:26:de:6f:29:77:2f: b2:3d:22:b5:7f:60:ad:0c:3c:8b:f3:bf:db:4a:ee: ac:9c:0d:90:ce:a4:64:8d:3e:ca:df:68:1d:00:80: 32:b7:24:cb:70:6a:5a:bb:3c:ef:2b:1f:df:89:a0: cd:ee:38:3c:68:ee:5c:24:d0:4f:6d:72:89:28:90: 2e:e8:c0:20:d9:86:13:48:da:ba:70:a7:be:b6:7b: 70:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7D:02:13:28:4C:4C:98:D7:9A:B1:1D:F1:A9:DC:FC:65:E4:37:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ac18ad68-7a7a-38c0-8866-f14b39a8a037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.62.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:dd:42:e9:f9:ef:2e:eb:fe:d2:b5:de:ad:7d:97:05:46:78: 91:a5:34:3c:e7:b9:90:92:20:6a:45:63:88:92:97:c8:5c:22: fc:dd:d5:4c:83:29:ce:31:b6:27:3c:79:b4:71:4d:e9:bf:45: c2:df:fd:cf:36:f5:d0:84:4d:4a:7a:3a:f7:93:3e:d6:b1:c4: 54:00:a2:68:8a:7f:00:db:5a:7a:cf:96:89:8f:e0:b1:a4:53: 30:27:f8:2e:04:f4:44:98:98:84:ed:9a:8d:38:ce:89:9f:8d: 6d:8d:d6:44:87:f0:c7:8a:44:0c:0d:f1:72:41:b0:2d:e1:4e: ee:15:82:8d:6a:30:f4:cb:8f:b8:c5:a3:94:6a:d8:c7:25:57: a7:da:37:9c:b7:ad:78:f9:b7:23:f5:31:c7:26:37:a2:01:e7: 77:1f:5d:ec:15:eb:4f:76:f2:11:5a:2d:35:4f:12:94:3f:eb: b5:ca:94:c2:f1:37:40:53:8e:bc:6d:11:03:03:fe:dc:d5:5d: 32:5c:78:0f:72:03:46:e4:71:11:25:b7:14:c5:4e:b7:c5:48: 08:07:d6:c8:8f:a6:04:8a:a5:7a:9e:99:d8:94:71:a5:e7:ad: 1d:bf:d8:fb:5d:79:5f:83:87:2e:4c:14:0c:88:08:2b:6c:a3: f4:dc:67:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6qBBLTENJsUfN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MzNiNzllM2UtYzhjNy00OGE4LWI3ZjAtYmEyYzA3N2JlNDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwxQR4dnEJtKsJeFYwcwMGCxBSqAALxP2rG6 VvwukTlm/mNDNAxfqwduxM1z86JQYkbzB3AVsgdkZQ3UPkYJGOryashlFvFtusYD t5ZZLfTtMLdZZaHWq/bcEIjwYW2RyW8I7k+HtBkv2k5ziEdk+iohC9m76306u6o5 BtfLW8Q4TSnAExND+AL/BQt5qdXe9Uby4cFSO0FkaZSGc03JKx9ixRsr23IKDS5G JoYm3m8pdy+yPSK1f2CtDDyL87/bSu6snA2QzqRkjT7K32gdAIAytyTLcGpauzzv Kx/fiaDN7jg8aO5cJNBPbXKJKJAu6MAg2YYTSNq6cKe+tntwmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAd9AhMoTEyY15qxHfGp3Pxl5DdxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWMxOGFkNjgtN2E3YS0z OGMwLTg4NjYtZjE0YjM5YThhMDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD6qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/dQun57y7r/tK13q19lwVGeJGlNDznuZCSIGpFY4iSl8hcIvzd1UyD Kc4xtic8ebRxTem/RcLf/c829dCETUp6OveTPtaxxFQAomiKfwDbWnrPlomP4LGk UzAn+C4E9ESYmITtmo04zomfjW2N1kSH8MeKRAwN8XJBsC3hTu4Vgo1qMPTLj7jF o5Rq2MclV6faN5y3rXj5tyP1MccmN6IB53cfXewV60928hFaLTVPEpQ/67XKlMLx N0BTjrxtEQMD/tzVXTJceA9yA0bkcREltxTFTrfFSAgH1siPpgSKpXqemdiUcaXn rR2/2PtdeV+Dhy5MFAyICCtso/TcZ5g= -----END CERTIFICATE-----Generated at Fri Apr 17 18:45:55 2026 by rpki-client