$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/cb300695-e99f-3ffa-81ab-39f84ba3b394.roa File: cb300695-e99f-3ffa-81ab-39f84ba3b394.roa (raw, json) Hash identifier: YyduckdpOIvlvEEgYef8Ye9/hgAcvS9j2u6esN03pYg= Subject key identifier: C4:59:7D:39:5A:81:C6:20:67:80:C1:46:56:6E:65:D0:88:0C:C3:3E Certificate issuer: /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf Certificate serial: 010D0C9F4328584CB121B0FAB1B5BF18CB41E700 Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/cb300695-e99f-3ffa-81ab-39f84ba3b394.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 6079 IP address blocks: 64.84.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:b0:fa:b1:b5:bf:18:cb:41:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=75ab71a5-6982-4a41-8e4e-5188c667b1ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:71:fa:21:37:03:05:39:70:ba:b7:f1:39:ef: e9:5c:cd:76:c6:46:df:7b:49:6c:67:19:a0:23:6b: 27:66:29:20:48:3a:c2:5b:a5:ed:ff:6b:f0:c6:7e: 28:21:b7:d3:38:51:3e:ba:7f:66:bf:a5:e4:27:57: c0:67:02:47:84:f0:7d:e5:ef:b5:85:1a:f7:fc:02: ad:cf:47:b9:49:62:b0:24:a2:04:62:a5:93:91:4c: ba:1b:2d:a0:06:4d:d3:6a:b9:4b:74:95:c4:b6:05: 74:f5:bd:56:71:f5:b1:48:c9:91:9a:6d:cb:c4:34: e3:f1:49:98:9a:ce:01:21:4d:b9:b5:ae:6b:e1:2e: 2b:da:6a:3e:16:4a:96:b3:e8:63:5c:79:d8:8f:ff: 70:1b:4c:15:db:a1:98:eb:8c:b5:2f:1c:a3:6d:3f: 0e:fb:27:06:75:7b:5b:ac:a4:53:39:8d:96:57:42: fa:ce:8b:25:e9:95:f6:ae:6e:69:0e:b4:04:d2:cb: 7d:66:71:9d:1e:00:33:a6:be:9b:a3:60:59:13:02: c8:8b:bc:8c:39:1f:86:1d:4a:e2:88:64:46:63:c0: 78:39:c7:df:0f:55:78:02:48:8a:ec:26:b3:8b:04: 95:eb:e7:44:00:ee:50:98:4f:96:1c:83:aa:dd:94: 2b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:59:7D:39:5A:81:C6:20:67:80:C1:46:56:6E:65:D0:88:0C:C3:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/cb300695-e99f-3ffa-81ab-39f84ba3b394.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl X509v3 Authority Key Identifier: keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer sbgp-ipAddrBlock: critical IPv4: 64.84.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:96:5d:72:5c:4f:db:82:db:fe:5b:ea:32:0f:a3:47:1c:9a: e4:47:b1:f0:be:08:b3:40:df:0e:1b:18:35:17:cb:89:2e:7a: 42:0f:00:c1:2d:55:4f:64:14:2d:0c:0b:9f:af:c9:d0:c4:2d: f9:48:3e:82:dd:0d:e3:3a:4c:85:77:12:e3:9b:22:47:e7:34: 64:dd:fa:52:c0:19:6e:3e:0a:77:5b:53:b6:4a:2f:93:be:b7: 95:34:8e:aa:67:a3:e8:e9:3e:6c:25:bd:94:dd:10:26:e5:c9: ea:e2:02:09:fb:de:08:e4:77:6e:08:82:e8:d4:0b:3c:b5:5a: 7e:ae:e2:b8:77:b6:50:4e:1c:85:39:1f:1f:6a:9a:05:48:6b: 1b:99:d7:a2:b5:8f:57:c5:52:80:40:50:39:de:a1:c8:91:6e: 46:91:63:8e:ba:13:07:5a:f4:4e:69:84:7a:36:6e:54:20:58: d2:a3:9a:bb:da:76:35:e5:c9:1d:af:e1:40:18:2e:36:c1:d3: d0:5c:87:65:89:33:c0:7a:fa:83:15:71:82:e5:7a:d2:04:41: d5:52:96:86:f0:0f:f1:04:f4:6d:cb:51:f7:fd:02:16:6b:5e: 48:28:13:9c:66:84:a9:39:e3:c1:28:c4:34:84:05:1d:94:bd: ae:8a:14:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIbD6sbW/GMtB5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYwZjQ2ZGItYzllNi00ZDQ3LTkxMzQtMjA5NjNlYjFk YmJmMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk NzVhYjcxYTUtNjk4Mi00YTQxLThlNGUtNTE4OGM2NjdiMWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHH6ITcDBTlwurfxOe/pXM12xkbfe0lsZxmg I2snZikgSDrCW6Xt/2vwxn4oIbfTOFE+un9mv6XkJ1fAZwJHhPB95e+1hRr3/AKt z0e5SWKwJKIEYqWTkUy6Gy2gBk3TarlLdJXEtgV09b1WcfWxSMmRmm3LxDTj8UmY ms4BIU25ta5r4S4r2mo+FkqWs+hjXHnYj/9wG0wV26GY64y1LxyjbT8O+ycGdXtb rKRTOY2WV0L6zosl6ZX2rm5pDrQE0st9ZnGdHgAzpr6bo2BZEwLIi7yMOR+GHUri iGRGY8B4OcffD1V4AkiK7CaziwSV6+dEAO5QmE+WHIOq3ZQr+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRZfTlagcYgZ4DBRlZuZdCIDMM+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZjBm NDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2M2ViMWRiYmYvY2IzMDA2OTUtZTk5Zi0z ZmZhLTgxYWItMzlmODRiYTNiMzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGYwZjQ2ZGItYzllNi00ZDQ3LTkx MzQtMjA5NjNlYjFkYmJmLzRmMGY0NmRiLWM5ZTYtNGQ0Ny05MTM0LTIwOTYzZWIx ZGJiZi5jcmwwHwYDVR0jBBgwFoAUcvOoLgEYY/Isv9tY40D3O4Z6l6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZjBmNDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2 M2ViMWRiYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQFRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKWXXJcT9uC2/5b6jIPo0ccmuRHsfC+CLNA3w4bGDUXy4kuekIPAMEt VU9kFC0MC5+vydDELflIPoLdDeM6TIV3EuObIkfnNGTd+lLAGW4+CndbU7ZKL5O+ t5U0jqpno+jpPmwlvZTdECblyeriAgn73gjkd24IgujUCzy1Wn6u4rh3tlBOHIU5 Hx9qmgVIaxuZ16K1j1fFUoBAUDneociRbkaRY466Ewda9E5phHo2blQgWNKjmrva djXlyR2v4UAYLjbB09Bch2WJM8B6+oMVcYLletIEQdVSlobwD/EE9G3LUff9AhZr XkgoE5xmhKk548EoxDSEBR2Uva6KFJk= -----END CERTIFICATE-----Generated at Mon Mar 2 15:16:15 2026 by rpki-client