$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d21bfc97-d377-38ec-9082-9b156ca343e6.roa File: d21bfc97-d377-38ec-9082-9b156ca343e6.roa (raw, json) Hash identifier: 4la5KMljCFtznR9uOcHIGW3dHycQgZnTBFLqJUJe0pw= Subject key identifier: 6A:2B:95:4D:4C:93:E5:DD:B6:66:6B:3E:8E:78:53:4B:F6:CF:CB:2E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CD22694BD0FBB273E1C8E7C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d21bfc97-d377-38ec-9082-9b156ca343e6.roa Signing time: Tue 10 Feb 2026 21:52:08 +0000 ROA not before: Tue 10 Feb 2026 21:52:08 +0000 ROA not after: Mon 11 May 2026 20:52:08 +0000 asID: 19905 IP address blocks: 150.195.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d2:26:94:bd:0f:bb:27:3e:1c:8e:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 10 21:52:08 2026 GMT Not After : May 11 20:52:08 2026 GMT Subject: CN=f9e204f2-a63f-4f31-82ef-6901242e10e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:93:3f:94:af:be:db:bd:35:b0:51:0b:e9:95: fb:49:77:a8:17:45:b4:12:95:4e:b5:af:55:2b:b0: 84:1b:50:97:49:22:88:00:68:d3:18:67:82:8c:38: 8e:f9:7e:c9:a2:8b:e9:d9:ea:2d:40:b0:fd:19:3f: 00:64:9e:12:07:81:6a:dd:1c:3e:05:58:b3:d0:0d: af:77:87:4f:78:c4:14:1e:0b:25:61:30:68:a4:04: 97:8c:67:ca:e0:61:d4:d4:0f:ba:29:64:61:86:5c: 6b:f0:79:41:0b:aa:d5:8e:0b:53:42:29:4b:24:dd: 18:7c:be:c4:cf:e0:93:ae:b6:6a:11:2e:a5:8d:51: 62:97:a6:58:8e:0e:73:bb:b7:c5:3b:74:15:0f:c5: 36:c8:3d:ba:8b:e6:ca:69:20:b7:2e:36:a0:0d:31: 5b:58:c0:4f:79:8e:cd:31:93:27:e0:50:4a:53:e1: 9f:b7:23:29:6e:83:bf:8f:75:fc:c5:c9:c4:a2:2f: 80:4d:0a:f6:04:21:b0:2c:2d:20:d1:2a:24:ac:fa: 22:4f:b0:b9:24:dd:99:3f:7c:36:22:49:14:2d:87: 62:41:bd:dc:71:85:96:ac:bb:cb:b0:59:5f:7a:5c: f7:e1:98:cf:94:17:fb:62:94:a2:82:c6:c2:ea:ee: 6b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2B:95:4D:4C:93:E5:DD:B6:66:6B:3E:8E:78:53:4B:F6:CF:CB:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d21bfc97-d377-38ec-9082-9b156ca343e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:24:d9:da:3c:dd:fc:69:95:c2:97:f7:75:ba:b0:5f:9f:43: e9:a3:ca:30:a8:29:9e:66:78:8a:b2:89:60:20:5f:d8:03:e0: 7a:06:d2:53:a1:63:78:92:7e:30:51:5c:84:be:20:00:98:c2: bb:93:34:c0:19:31:ab:41:ea:82:42:21:fc:99:4b:16:66:de: 69:61:1c:21:c3:85:5f:8a:b0:b2:fc:b9:d7:e7:ae:a6:6b:a3: 15:9b:3a:cb:e2:5b:30:af:f3:8d:33:ee:46:f1:39:d2:c7:e5: 45:c9:25:7a:e5:88:a3:26:1a:88:4c:f7:09:75:12:8a:bb:d6: f4:82:87:55:d6:b0:a5:6c:c8:1f:0e:73:a9:34:65:40:ff:29: 31:e0:2c:0a:96:8e:67:57:14:a5:38:23:e3:5c:6c:32:a9:c1: 3a:8b:bf:0f:78:b8:55:fe:42:f1:76:67:01:da:3d:6d:6f:87: 93:ca:c9:92:97:54:62:89:13:be:e9:0b:67:a3:f9:5d:a0:3b: c6:df:7f:85:8e:09:d3:07:e3:69:53:61:fb:f2:33:bc:ba:61: 93:65:ca:a9:bb:12:c6:50:25:53:31:27:c5:ee:b4:27:d8:de: f0:2a:33:ab:57:91:44:25:14:95:6b:45:01:a8:a4:bb:79:0c: a0:bc:23:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzSJpS9D7snPhyOfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIxMDIxNTIwOFoXDTI2MDUxMTIwNTIwOFowLzEtMCsGA1UEAxMk ZjllMjA0ZjItYTYzZi00ZjMxLTgyZWYtNjkwMTI0MmUxMGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpM/lK++2701sFEL6ZX7SXeoF0W0EpVOta9V K7CEG1CXSSKIAGjTGGeCjDiO+X7Joovp2eotQLD9GT8AZJ4SB4Fq3Rw+BViz0A2v d4dPeMQUHgslYTBopASXjGfK4GHU1A+6KWRhhlxr8HlBC6rVjgtTQilLJN0YfL7E z+CTrrZqES6ljVFil6ZYjg5zu7fFO3QVD8U2yD26i+bKaSC3LjagDTFbWMBPeY7N MZMn4FBKU+GftyMpboO/j3X8xcnEoi+ATQr2BCGwLC0g0SokrPoiT7C5JN2ZP3w2 IkkULYdiQb3ccYWWrLvLsFlfelz34ZjPlBf7YpSigsbC6u5rGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGorlU1Mk+XdtmZrPo54U0v2z8suMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDIxYmZjOTctZDM3Ny0z OGVjLTkwODItOWIxNTZjYTM0M2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsNKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0k2do83fxplcKX93W6sF+fQ+mjyjCoKZ5meIqyiWAgX9gD4HoG0lOh Y3iSfjBRXIS+IACYwruTNMAZMatB6oJCIfyZSxZm3mlhHCHDhV+KsLL8udfnrqZr oxWbOsviWzCv840z7kbxOdLH5UXJJXrliKMmGohM9wl1Eoq71vSCh1XWsKVsyB8O c6k0ZUD/KTHgLAqWjmdXFKU4I+NcbDKpwTqLvw94uFX+QvF2ZwHaPW1vh5PKyZKX VGKJE77pC2ej+V2gO8bff4WOCdMH42lTYfvyM7y6YZNlyqm7EsZQJVMxJ8XutCfY 3vAqM6tXkUQlFJVrRQGopLt5DKC8I1A= -----END CERTIFICATE-----Generated at Sun Mar 1 22:44:55 2026 by rpki-client