$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5cb3bdd-c958-31fc-802f-21f4f125fdba.roa File: b5cb3bdd-c958-31fc-802f-21f4f125fdba.roa (raw, json) Hash identifier: DWe/8s66kvblzo0KVA40hGlYQ9hdeTME9j3+afzWclg= Subject key identifier: D2:23:25:21:8A:5D:48:AB:9D:7D:28:A7:67:6F:54:69:18:55:00:9B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EA9E47F0046D4897C0B0C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5cb3bdd-c958-31fc-802f-21f4f125fdba.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 57 IP address blocks: 64.62.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:9e:47:f0:04:6d:48:97:c0:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=95a04a17-78c7-4364-9e2e-e33cbd096b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:59:d5:52:c6:ce:ee:d3:86:85:0f:15:b3:dc: 6f:83:76:b4:95:80:80:e2:86:b9:aa:18:9b:c4:4e: c0:5c:71:7f:f1:c6:00:1d:5f:03:0c:3d:0b:cb:0f: 76:57:b4:4c:b3:dc:5f:c4:df:3d:6e:21:8e:7b:d5: 3c:f4:14:99:b6:fa:4b:11:fa:73:14:3c:76:e6:d4: 22:bd:de:3e:c5:ce:51:4e:8f:40:7c:d1:00:4c:ac: 6f:ba:36:54:c8:e7:be:38:e1:16:13:6c:aa:f9:bf: 0a:4b:8b:d7:cf:88:85:e8:4b:fd:ac:7e:56:b1:93: 25:1e:fc:30:b0:5a:c8:b7:21:bf:e1:d6:8f:7a:00: 77:1a:bd:b6:77:64:99:7b:e0:28:03:e1:4b:43:27: 07:0e:3e:a5:eb:4a:81:d1:e4:c2:6e:14:6b:07:e6: cf:69:ef:13:6c:ca:da:7f:a9:45:3b:69:34:9a:5a: be:35:1b:e5:bf:5f:85:00:f8:e9:24:46:9d:f0:4a: 6a:6e:e3:dd:b8:d8:83:0a:43:ef:18:5b:da:8d:9d: 9e:cc:ed:95:c4:2d:54:21:61:22:7a:17:92:65:7c: 37:44:88:79:95:01:5c:a0:0a:4f:51:2f:f4:e7:1a: 21:93:40:09:b9:00:80:de:70:0d:d4:a6:07:28:df: 36:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:23:25:21:8A:5D:48:AB:9D:7D:28:A7:67:6F:54:69:18:55:00:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5cb3bdd-c958-31fc-802f-21f4f125fdba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.62.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:c6:f2:ad:3d:3e:db:61:6e:15:d6:95:53:bb:ec:a1:22:8f: a6:00:89:d2:83:8a:64:52:8d:4f:15:2b:ac:a1:aa:ea:95:ef: 11:92:30:ce:32:f4:af:43:5e:52:24:9f:2a:e6:3b:47:a6:9f: 82:8b:ad:12:87:24:0b:ca:23:ee:87:a1:a0:d3:d4:4d:57:5d: ae:20:f7:65:b3:e1:c9:2d:90:5a:d4:a2:f2:1c:31:69:83:14: 72:4f:87:f8:d0:47:fe:72:0a:89:dd:e6:b2:93:d1:cf:13:10: da:42:aa:c2:1a:36:e9:12:87:94:00:7a:98:62:34:d7:9b:5e: c9:3f:28:36:1b:9c:0e:d5:ef:65:3c:08:10:13:a5:94:87:a9: 12:5c:74:0c:9a:f3:09:67:2d:94:6f:5f:e5:e0:22:e4:f6:4f: d1:44:ef:94:86:c2:6f:aa:c4:01:a5:29:25:87:66:b8:b7:25: f2:94:7f:b9:85:34:27:a6:ec:5e:81:fc:1f:58:3e:ae:14:24: 8a:0e:66:a7:a8:7b:31:4d:74:3a:12:f1:a3:3f:c4:0c:77:77: 84:f8:47:cd:9c:e8:bc:07:52:ee:dc:9e:15:82:c4:04:77:b9: 67:18:94:12:2e:06:7d:98:c7:9f:41:48:44:9d:fe:ff:d1:ea: ce:7c:7a:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6p5H8ARtSJfAsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk OTVhMDRhMTctNzhjNy00MzY0LTllMmUtZTMzY2JkMDk2Yjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolnVUsbO7tOGhQ8Vs9xvg3a0lYCA4oa5qhib xE7AXHF/8cYAHV8DDD0Lyw92V7RMs9xfxN89biGOe9U89BSZtvpLEfpzFDx25tQi vd4+xc5RTo9AfNEATKxvujZUyOe+OOEWE2yq+b8KS4vXz4iF6Ev9rH5WsZMlHvww sFrItyG/4daPegB3Gr22d2SZe+AoA+FLQycHDj6l60qB0eTCbhRrB+bPae8TbMra f6lFO2k0mlq+NRvlv1+FAPjpJEad8EpqbuPduNiDCkPvGFvajZ2ezO2VxC1UIWEi eheSZXw3RIh5lQFcoApPUS/05xohk0AJuQCA3nAN1KYHKN82pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIjJSGKXUirnX0op2dvVGkYVQCbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjVjYjNiZGQtYzk1OC0z MWZjLTgwMmYtMjFmNGYxMjVmZGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD6VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfG8q09PtthbhXWlVO77KEij6YAidKDimRSjU8VK6yhquqV7xGSMM4y 9K9DXlIknyrmO0emn4KLrRKHJAvKI+6HoaDT1E1XXa4g92Wz4cktkFrUovIcMWmD FHJPh/jQR/5yCond5rKT0c8TENpCqsIaNukSh5QAephiNNebXsk/KDYbnA7V72U8 CBATpZSHqRJcdAya8wlnLZRvX+XgIuT2T9FE75SGwm+qxAGlKSWHZri3JfKUf7mF NCem7F6B/B9YPq4UJIoOZqeoezFNdDoS8aM/xAx3d4T4R82c6LwHUu7cnhWCxAR3 uWcYlBIuBn2Yx59BSESd/v/R6s58eqs= -----END CERTIFICATE-----Generated at Fri Apr 17 20:15:19 2026 by rpki-client