$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa File: f3af561f-6e70-31c4-86f8-a11b4790170b.roa (raw, json) Hash identifier: dZTBJnWzuwJeC2jge7bniW/7fUqLiYDyygMv1SrtE34= Subject key identifier: A9:86:E3:B0:7B:F6:8F:90:65:76:53:B1:F5:2B:BB:FE:FA:D6:D2:28 Certificate issuer: /CN=a66a1dc9-26a8-4e01-9916-0d16dd191690 Certificate serial: 010D0C9F4328584D091258E14714EB9F96056F00 Authority key identifier: 05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 46307 IP address blocks: 23.144.248.0/24 maxlen: 24 2602:fb3c::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:58:e1:47:14:eb:9f:96:05:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a66a1dc9-26a8-4e01-9916-0d16dd191690 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=3ed9d574-f8b5-4b25-ba65-c236ea75eb18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b6:99:0e:49:e3:ac:db:7a:91:40:71:ce:4c: 71:02:ef:66:55:35:e8:a2:01:30:9e:23:ca:32:a0: e7:00:ce:da:d8:4c:a6:da:41:54:25:7e:47:71:d3: c7:e3:69:c9:81:9a:60:30:06:21:4c:43:1c:81:81: 84:d0:2b:dc:fc:bc:5f:51:4c:bc:2a:47:72:87:85: e4:4b:71:8a:62:83:be:47:23:c3:b3:d4:b3:f7:b5: 9f:60:9d:d3:f2:37:c9:ba:8b:8c:45:66:fd:53:6e: d8:c4:a5:a2:e9:1e:78:4d:43:d6:88:7d:ba:f1:a7: 52:3a:b0:3e:b9:e5:b2:f9:86:6b:1d:58:2d:f2:cb: fc:8c:07:65:7d:f5:04:0b:f6:0f:3b:c0:c7:af:4a: 5a:c0:83:38:ca:51:ac:cd:ac:9a:e9:7e:22:b5:e6: db:f2:4d:e2:e8:69:35:2d:01:42:3a:7c:95:3e:76: b1:3b:1a:ff:3c:01:9d:06:37:95:53:fe:48:d9:26: e8:18:ab:f5:62:11:ca:08:2c:ed:93:f9:20:a6:cc: 6a:c8:db:99:b6:9d:d9:36:b5:b8:73:95:fd:bb:62: ea:7a:46:84:55:a0:67:0e:b4:5a:ed:af:27:3b:e4: 10:dd:60:53:3c:1f:4d:43:6a:16:af:2c:77:a1:17: 56:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:86:E3:B0:7B:F6:8F:90:65:76:53:B1:F5:2B:BB:FE:FA:D6:D2:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl X509v3 Authority Key Identifier: keyid:05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer sbgp-ipAddrBlock: critical IPv4: 23.144.248.0/24 IPv6: 2602:fb3c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:bc:38:92:3f:8a:4d:d2:95:b6:93:22:c8:d9:8e:b1:f0:20: ef:45:63:20:0b:1a:ad:fe:68:57:56:b4:60:e3:c7:91:9a:12: 62:15:d8:99:76:da:90:db:f9:26:9b:07:c1:00:bb:78:6a:7c: 91:02:1e:c1:3c:54:5e:50:5a:1b:f6:cf:5f:0f:41:f4:bb:e7: 6c:bb:35:1b:87:fd:6a:79:5d:d5:a3:98:2d:38:9b:63:18:ee: c3:08:0a:5f:0a:1c:9a:74:78:c8:61:71:58:c7:79:a8:66:e2: c0:04:5d:17:01:5e:39:80:a9:d7:73:c3:8e:eb:4a:ed:68:b6: 30:a9:c7:e7:6e:cc:b5:51:5d:39:3c:90:7f:f9:18:48:17:19: e6:0a:d8:f3:0b:76:e1:8f:60:74:0d:9e:65:b8:e6:66:fa:c9: 8a:80:3b:24:bd:86:ea:e1:76:e8:c5:5e:b9:af:b0:1c:0e:47: 24:93:cd:6c:8f:03:af:af:b8:50:c6:23:81:ed:2c:d6:f9:09: b1:ce:e7:23:7c:f3:38:75:d1:fb:3f:b3:c2:a7:27:91:ff:dd: 10:36:07:c5:f5:8f:db:9a:14:b3:2f:fc:e6:7f:28:37:a1:11: 41:95:c8:9e:26:45:d9:ee:1c:61:3e:aa:3f:01:96:9a:7c:c6: f1:1a:3f:a1 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE0JEljhRxTrn5YFbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY2YTFkYzktMjZhOC00ZTAxLTk5MTYtMGQxNmRkMTkx NjkwMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk M2VkOWQ1NzQtZjhiNS00YjI1LWJhNjUtYzIzNmVhNzVlYjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhraZDknjrNt6kUBxzkxxAu9mVTXoogEwniPK MqDnAM7a2Eym2kFUJX5HcdPH42nJgZpgMAYhTEMcgYGE0Cvc/LxfUUy8Kkdyh4Xk S3GKYoO+RyPDs9Sz97WfYJ3T8jfJuouMRWb9U27YxKWi6R54TUPWiH268adSOrA+ ueWy+YZrHVgt8sv8jAdlffUEC/YPO8DHr0pawIM4ylGszaya6X4itebb8k3i6Gk1 LQFCOnyVPnaxOxr/PAGdBjeVU/5I2SboGKv1YhHKCCztk/kgpsxqyNuZtp3ZNrW4 c5X9u2LqekaEVaBnDrRa7a8nO+QQ3WBTPB9NQ2oWryx3oRdWmwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKmG47B79o+QZXZTsfUru/761tIoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNjZh MWRjOS0yNmE4LTRlMDEtOTkxNi0wZDE2ZGQxOTE2OTAvZjNhZjU2MWYtNmU3MC0z MWM0LTg2ZjgtYTExYjQ3OTAxNzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTY2YTFkYzktMjZhOC00ZTAxLTk5 MTYtMGQxNmRkMTkxNjkwL2E2NmExZGM5LTI2YTgtNGUwMS05OTE2LTBkMTZkZDE5 MTY5MC5jcmwwHwYDVR0jBBgwFoAUBSoarMYDzX68/IwHytY4A2TY5KEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNjZhMWRjOS0yNmE4LTRlMDEtOTkxNi0wZDE2 ZGQxOTE2OTAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5D4MA4E AgACMAgDBgQmAvs8ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYvDiSP4pN0pW2kyLI2Y6x8CDvRWMgCxqt /mhXVrRg48eRmhJiFdiZdtqQ2/kmmwfBALt4anyRAh7BPFReUFob9s9fD0H0u+ds uzUbh/1qeV3Vo5gtOJtjGO7DCApfChyadHjIYXFYx3moZuLABF0XAV45gKnXc8OO 60rtaLYwqcfnbsy1UV05PJB/+RhIFxnmCtjzC3bhj2B0DZ5luOZm+smKgDskvYbq 4XboxV65r7AcDkckk81sjwOvr7hQxiOB7SzW+QmxzucjfPM4ddH7P7PCpyeR/90Q NgfF9Y/bmhSzL/zmfyg3oRFBlcieJkXZ7hxhPqo/AZaafMbxGj+h -----END CERTIFICATE-----Generated at Mon Mar 2 23:56:22 2026 by rpki-client