$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/b9d0d5e4-0862-3c5f-8564-e6319ab4e0e0.roa File: b9d0d5e4-0862-3c5f-8564-e6319ab4e0e0.roa (raw, json) Hash identifier: 5WkPUg0iHT5dmH7akG2llb1GJS9FWPxYxTUGrbR0W/k= Subject key identifier: BF:09:18:54:D9:CE:F2:3D:A7:B0:16:EE:FC:13:2A:9C:45:4D:0C:74 Certificate issuer: /CN=4c45cb1c-e77b-45f7-82cb-f77570cda8d0 Certificate serial: 010D0C9F4328584CAA2734E9BBF75342D4078280 Authority key identifier: 2C:0F:BA:E1:41:15:7F:2B:DA:83:D8:AB:E9:28:0C:CB:5A:D6:E5:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/b9d0d5e4-0862-3c5f-8564-e6319ab4e0e0.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 63023 IP address blocks: 216.39.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:34:e9:bb:f7:53:42:d4:07:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c45cb1c-e77b-45f7-82cb-f77570cda8d0 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=146476a0-8a4b-4c5a-bef9-52bfc9f3844b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a6:f4:2a:1c:86:89:75:d7:91:f7:a3:9e:da: 68:ce:93:53:a2:3d:a2:c0:06:b5:50:3f:b7:7d:53: b6:41:02:26:1f:89:7a:4a:8c:6f:53:67:19:87:ff: 3f:ed:d4:5f:97:ce:d5:c5:c0:5a:91:3c:3d:26:7d: c9:59:f4:b4:33:10:7c:31:40:6a:f5:13:84:85:45: f5:e1:77:67:ea:54:e6:37:8c:40:bf:4b:44:47:f3: b4:6b:28:a5:ca:f0:cd:41:dc:5b:76:26:81:76:90: 5f:81:9d:95:31:3a:bc:fe:70:95:f7:b1:0b:6c:95: 4e:3e:22:cd:2d:e8:4c:06:1c:57:8a:8e:60:53:09: 70:21:74:17:4a:43:36:a3:e4:75:36:f2:88:d3:d5: 8b:b1:55:98:80:80:8a:0f:56:f4:6b:1f:a5:7d:1d: 4c:6c:13:32:4f:ec:8c:ba:4d:07:83:28:e7:c3:81: 7f:ff:c4:87:14:ad:1c:4a:7b:6e:60:73:cd:2a:11: 4b:0e:9f:4b:7f:fe:1d:e2:07:e4:96:cc:13:c6:bb: ed:6a:ae:15:b3:83:f4:90:7c:71:d7:36:5a:0e:47: bb:dc:ec:a7:fe:36:e2:6c:18:c3:c3:59:35:0d:30: b0:9c:3b:78:65:fa:16:5f:c5:e9:77:ac:d3:b8:f0: 4c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:09:18:54:D9:CE:F2:3D:A7:B0:16:EE:FC:13:2A:9C:45:4D:0C:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/b9d0d5e4-0862-3c5f-8564-e6319ab4e0e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.crl X509v3 Authority Key Identifier: keyid:2C:0F:BA:E1:41:15:7F:2B:DA:83:D8:AB:E9:28:0C:CB:5A:D6:E5:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.cer sbgp-ipAddrBlock: critical IPv4: 216.39.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:6c:46:7f:f8:00:d0:6d:1a:b0:e4:44:40:17:a5:6f:f4:db: c5:1f:4e:66:3b:93:29:3b:ba:99:5e:bc:16:df:c8:44:42:5f: c4:4e:1b:7f:76:e8:e9:88:5f:c0:f1:82:41:e0:29:a3:4d:33: c9:be:ef:cf:f2:39:0b:87:a6:9d:f7:55:36:4f:a6:de:c6:25: 92:b7:8f:fe:b7:e7:c8:f2:09:5b:3d:10:93:ac:ac:1a:e0:ef: 19:9b:09:7d:de:6b:df:e1:6e:4b:2e:ac:94:5d:36:03:c1:72: 41:6e:6f:6f:43:89:51:1a:b6:18:b8:e0:d1:a0:11:b2:ad:a8: cf:2d:82:78:45:ab:9d:d6:42:33:e6:ba:14:9b:8f:8a:d9:ed: 41:67:69:5d:2c:44:b2:10:3b:bb:78:50:76:d5:3e:44:3e:cf: 9c:48:cd:41:5d:d6:b4:68:d9:dc:7d:51:5c:9e:53:d4:bf:5a: eb:2a:37:1b:74:e7:06:20:74:a5:4a:a4:ee:b7:6a:ba:98:4a: dd:46:39:91:ec:a0:80:dd:20:d7:b2:fa:b0:16:54:f3:ca:a9: 10:a3:26:30:4a:ec:b2:29:b9:8e:2f:ac:47:fa:07:27:d5:76: bb:a7:a8:21:cc:67:c6:33:13:74:01:ff:be:aa:a4:e3:41:7b: f2:d8:e3:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJzTpu/dTQtQHgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM0NWNiMWMtZTc3Yi00NWY3LTgyY2ItZjc3NTcwY2Rh OGQwMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk MTQ2NDc2YTAtOGE0Yi00YzVhLWJlZjktNTJiZmM5ZjM4NDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqb0KhyGiXXXkfejntpozpNToj2iwAa1UD+3 fVO2QQImH4l6SoxvU2cZh/8/7dRfl87VxcBakTw9Jn3JWfS0MxB8MUBq9ROEhUX1 4Xdn6lTmN4xAv0tER/O0ayilyvDNQdxbdiaBdpBfgZ2VMTq8/nCV97ELbJVOPiLN LehMBhxXio5gUwlwIXQXSkM2o+R1NvKI09WLsVWYgICKD1b0ax+lfR1MbBMyT+yM uk0Hgyjnw4F//8SHFK0cSntuYHPNKhFLDp9Lf/4d4gfklswTxrvtaq4Vs4P0kHxx 1zZaDke73Oyn/jbibBjDw1k1DTCwnDt4ZfoWX8Xpd6zTuPBMSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8JGFTZzvI9p7AW7vwTKpxFTQx0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80YzQ1 Y2IxYy1lNzdiLTQ1ZjctODJjYi1mNzc1NzBjZGE4ZDAvYjlkMGQ1ZTQtMDg2Mi0z YzVmLTg1NjQtZTYzMTlhYjRlMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGM0NWNiMWMtZTc3Yi00NWY3LTgy Y2ItZjc3NTcwY2RhOGQwLzRjNDVjYjFjLWU3N2ItNDVmNy04MmNiLWY3NzU3MGNk YThkMC5jcmwwHwYDVR0jBBgwFoAULA+64UEVfyvag9ir6SgMy1rW5UMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80YzQ1Y2IxYy1lNzdiLTQ1ZjctODJjYi1mNzc1 NzBjZGE4ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Cf5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFsRn/4ANBtGrDkREAXpW/028UfTmY7kyk7uplevBbfyERCX8ROG392 6OmIX8DxgkHgKaNNM8m+78/yOQuHpp33VTZPpt7GJZK3j/6358jyCVs9EJOsrBrg 7xmbCX3ea9/hbksurJRdNgPBckFub29DiVEathi44NGgEbKtqM8tgnhFq53WQjPm uhSbj4rZ7UFnaV0sRLIQO7t4UHbVPkQ+z5xIzUFd1rRo2dx9UVyeU9S/WusqNxt0 5wYgdKVKpO63arqYSt1GOZHsoIDdINey+rAWVPPKqRCjJjBK7LIpuY4vrEf6ByfV drunqCHMZ8YzE3QB/76qpONBe/LY45E= -----END CERTIFICATE-----Generated at Mon Mar 2 03:52:04 2026 by rpki-client