$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/64e4d846-75b1-30b9-b857-3d9110ff6340.roa File: 64e4d846-75b1-30b9-b857-3d9110ff6340.roa (raw, json) Hash identifier: HhkH9e67cwp0PJd6JOAJIDH5s8aam9gOrrfXND+w+nI= Subject key identifier: C0:B2:8D:17:95:2B:E0:0A:86:4D:4E:0E:F9:66:B5:2B:9A:A9:46:24 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D71A50E5E839278E4A8C70E00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/64e4d846-75b1-30b9-b857-3d9110ff6340.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 7155 IP address blocks: 198.45.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:0e:5e:83:92:78:e4:a8:c7:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=5e5d9afa-6a30-4b9b-a3d7-ecc1f65c0e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d4:f5:08:8e:0e:c6:cf:ee:ad:2d:70:2e:dc: 6f:82:f8:b0:2e:c3:db:4c:96:e3:c3:54:b0:71:2b: 30:67:0d:96:7f:f7:a2:51:d0:e9:bd:3c:da:1c:8b: 76:51:e6:49:9b:8e:bf:3b:23:64:7e:96:64:ac:28: af:cb:b0:bb:e8:2f:ae:3e:93:ab:f9:e4:1f:93:a4: 40:1a:64:55:4b:4e:91:f5:8e:6f:b4:89:0d:e0:8f: e1:2d:52:8c:d4:66:e0:54:30:68:56:ad:2a:a5:1b: e0:d8:90:0b:a7:16:fd:2b:5e:4a:74:a1:64:59:b0: 93:1d:6d:12:0c:55:51:58:a2:81:54:3c:ba:9f:fa: ba:ef:4a:5e:a3:b6:21:fa:95:7f:af:fc:06:9d:58: eb:49:1a:27:8d:e2:fe:0d:00:b3:69:c9:45:d5:48: 9a:04:5c:4e:01:04:5a:33:d6:6e:1d:d4:82:74:54: b6:9a:87:67:33:f5:dd:66:a0:e3:f7:a8:b5:dc:33: a0:b7:7a:37:39:b9:e0:46:b1:41:f0:5f:cd:56:5f: fe:4f:b2:ef:0b:a5:71:0d:65:7b:42:07:09:a8:21: 01:0d:74:c9:b1:2e:99:e4:01:68:86:9b:6d:18:0c: fc:cc:85:c7:87:eb:40:cb:06:83:34:b3:6d:42:47: fb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B2:8D:17:95:2B:E0:0A:86:4D:4E:0E:F9:66:B5:2B:9A:A9:46:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/64e4d846-75b1-30b9-b857-3d9110ff6340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:73:47:3c:95:6f:6c:1e:43:4d:cc:b0:e4:37:2b:82:b5:83: 85:c4:59:58:f0:fd:06:e6:24:3b:cb:d1:5d:fb:11:60:25:d9: 5b:bd:d1:8d:25:5c:f8:a3:d1:59:af:d9:3d:8a:64:3e:39:77: 72:da:25:f8:21:8d:bf:52:c3:c3:08:2d:bb:ec:86:96:59:96: cd:e3:18:fe:f7:bc:84:c4:bd:9a:bc:05:e7:22:00:9c:36:a7: 06:b1:e3:20:bf:b3:65:df:eb:a7:8f:d1:1e:88:72:dc:3c:41: 2d:1a:45:1e:01:0d:04:48:92:1b:a7:d0:ad:bb:51:b8:e8:20: 1d:68:8f:3a:5b:07:9c:11:aa:ed:4a:c0:12:ba:8a:13:1d:5c: 61:a3:c4:3c:82:76:b3:45:ea:4c:36:88:2f:50:b5:2e:f5:78: 26:63:02:d4:a6:75:3f:75:3c:1a:4d:5a:a2:9f:26:d2:fa:c8: 64:64:cc:c5:cd:77:72:02:a2:53:e9:ce:b2:93:7d:58:99:4b: b8:2f:ad:47:82:ed:c3:65:b8:e2:fc:f2:94:0e:da:2a:b5:12: 10:b2:b0:04:0c:3e:51:5e:2a:0b:46:1a:fd:45:aa:f2:55:37: 53:b8:c1:c8:a2:a3:a8:ba:06:4f:e1:d6:08:3f:4d:b4:f5:2f: 21:06:07:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpQ5eg5J45KjHDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk NWU1ZDlhZmEtNmEzMC00YjliLWEzZDctZWNjMWY2NWMwZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdT1CI4Oxs/urS1wLtxvgviwLsPbTJbjw1Sw cSswZw2Wf/eiUdDpvTzaHIt2UeZJm46/OyNkfpZkrCivy7C76C+uPpOr+eQfk6RA GmRVS06R9Y5vtIkN4I/hLVKM1GbgVDBoVq0qpRvg2JALpxb9K15KdKFkWbCTHW0S DFVRWKKBVDy6n/q670peo7Yh+pV/r/wGnVjrSRonjeL+DQCzaclF1UiaBFxOAQRa M9ZuHdSCdFS2modnM/XdZqDj96i13DOgt3o3ObngRrFB8F/NVl/+T7LvC6VxDWV7 QgcJqCEBDXTJsS6Z5AFohpttGAz8zIXHh+tAywaDNLNtQkf7PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCyjReVK+AKhk1ODvlmtSuaqUYkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjRlNGQ4NDYtNzViMS0z MGI5LWI4NTctM2Q5MTEwZmY2MzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxi30MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxzRzyVb2weQ03MsOQ3K4K1g4XEWVjw/QbmJDvL0V37EWAl2Vu90Y0l XPij0Vmv2T2KZD45d3LaJfghjb9Sw8MILbvshpZZls3jGP73vITEvZq8BeciAJw2 pwax4yC/s2Xf66eP0R6Ictw8QS0aRR4BDQRIkhun0K27UbjoIB1ojzpbB5wRqu1K wBK6ihMdXGGjxDyCdrNF6kw2iC9QtS71eCZjAtSmdT91PBpNWqKfJtL6yGRkzMXN d3IColPpzrKTfViZS7gvrUeC7cNluOL88pQO2iq1EhCysAQMPlFeKgtGGv1FqvJV N1O4wciio6i6Bk/h1gg/TbT1LyEGB9M= -----END CERTIFICATE-----Generated at Fri Apr 17 17:25:39 2026 by rpki-client