$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/49d8c248-3e47-313c-9e44-7d968df76125.roa File: 49d8c248-3e47-313c-9e44-7d968df76125.roa (raw, json) Hash identifier: IaggLkfdJ/TtbsaNQu0o1YjUTvYnxEumS3VpfM1prFU= Subject key identifier: E4:43:EA:20:90:F3:53:B8:CF:20:A5:C9:61:78:17:B2:4F:CD:2B:CA Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F4328584CC4148CEAA4B3690E0F16DF40 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/49d8c248-3e47-313c-9e44-7d968df76125.roa Signing time: Tue 16 Dec 2025 14:00:38 +0000 ROA not before: Tue 16 Dec 2025 14:00:38 +0000 ROA not after: Mon 16 Mar 2026 13:00:38 +0000 asID: 0 IP address blocks: 66.1.0.0/16 maxlen: 24 66.87.0.0/16 maxlen: 24 66.233.0.0/16 maxlen: 24 67.215.108.0/22 maxlen: 24 72.6.0.0/15 maxlen: 24 72.57.32.0/19 maxlen: 24 96.26.0.0/16 maxlen: 24 142.255.128.0/18 maxlen: 24 144.227.0.0/16 maxlen: 24 144.231.0.0/16 maxlen: 24 148.52.128.0/19 maxlen: 24 198.57.16.0/21 maxlen: 24 198.57.24.0/23 maxlen: 24 207.52.0.0/16 maxlen: 24 207.167.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c4:14:8c:ea:a4:b3:69:0e:0f:16:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Dec 16 14:00:38 2025 GMT Not After : Mar 16 13:00:38 2026 GMT Subject: CN=c084f93b-6022-4bee-8051-6f8ec70e272c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:dd:36:87:ad:19:79:5e:0a:48:d2:42:25:42: 64:6b:10:51:6c:12:6d:b9:ae:78:2a:3d:0b:19:b7: 84:e6:35:e0:c7:21:e4:e7:2d:93:3f:0a:6b:ab:75: e7:4f:90:09:15:3c:c0:7c:86:0c:cf:06:72:d0:9d: d0:33:3b:65:23:cd:1b:57:83:82:d4:d9:15:32:3e: 27:33:ea:8c:04:e1:c5:8f:e3:71:9f:b9:c4:f8:d9: 0d:70:1e:23:fb:05:45:9c:2c:75:28:39:72:f9:ae: 69:02:58:1c:0b:5d:cc:af:37:e5:be:b9:13:ff:42: 7c:57:02:44:21:d8:ab:2f:76:8a:a3:09:73:62:aa: 45:f3:f6:5f:9c:8e:00:bc:8c:4c:dc:94:a2:60:51: a5:e9:62:ff:ea:31:3d:19:6c:f3:54:b7:c4:ff:4b: 35:0d:0d:19:c5:16:dd:cd:15:7a:a9:29:d1:b8:f5: c3:08:60:43:ad:22:73:08:0a:bf:4e:15:f7:bd:31: 0f:62:c1:2f:25:fa:78:ba:e6:f9:33:67:42:c2:54: 09:95:ca:58:b1:82:b4:ca:5d:8f:53:f5:ab:6d:7c: d6:73:cd:80:67:5f:88:f9:68:43:1c:47:b8:a4:75: ed:fc:57:4f:9b:60:f8:4b:37:7f:6b:e4:da:62:b7: a2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:43:EA:20:90:F3:53:B8:CF:20:A5:C9:61:78:17:B2:4F:CD:2B:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/49d8c248-3e47-313c-9e44-7d968df76125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 66.1.0.0/16 66.87.0.0/16 66.233.0.0/16 67.215.108.0/22 72.6.0.0/15 72.57.32.0/19 96.26.0.0/16 142.255.128.0/18 144.227.0.0/16 144.231.0.0/16 148.52.128.0/19 198.57.16.0-198.57.25.255 207.52.0.0/16 207.167.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:83:32:fb:3a:35:34:42:e9:16:d5:ff:2c:9f:ec:1d:05:f5: ee:bd:af:e1:46:8a:24:12:ea:c5:ef:c1:27:f1:17:71:7b:70: d9:98:60:be:fa:da:4e:c0:ec:76:28:e4:23:32:1e:4b:f1:1f: 87:5f:ab:69:2a:89:8c:0e:fc:0d:a7:89:58:08:7c:d8:69:ad: a1:b9:0e:75:d6:c2:64:54:42:3e:f2:78:2e:82:77:7d:01:e8: da:f7:20:a8:55:bf:0a:30:9f:51:16:da:5f:88:b6:3a:7f:d7: 88:60:58:78:c6:56:e1:be:ed:1d:88:8c:dc:ca:6e:00:f3:35: 7f:8c:33:25:47:fa:8b:38:cf:9d:95:34:30:a2:18:69:46:60: aa:79:40:04:83:0a:99:af:70:20:fa:16:8e:2c:65:fe:3f:72: ad:8d:8a:c5:e0:0d:b0:a6:64:85:cb:6b:10:8f:99:04:bd:45: 68:4a:f4:27:2e:bd:75:20:67:b1:30:39:e9:64:09:10:84:bd: 02:90:4c:fa:cf:ec:dd:8f:aa:5b:37:aa:88:fc:65:9f:51:3b: 3c:30:6c:74:a9:49:d4:d0:65:1e:ab:65:c3:f2:fa:17:1c:92: f9:d6:ea:b1:fa:1c:29:eb:e5:23:93:f0:3b:74:6b:73:77:a2: 09:63:a3:45 -----BEGIN CERTIFICATE----- MIIGkTCCBXmgAwIBAgIUAQ0Mn0MoWEzEFIzqpLNpDg8W30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI1MTIxNjE0MDAzOFoXDTI2MDMxNjEzMDAzOFowLzEtMCsGA1UEAxMk YzA4NGY5M2ItNjAyMi00YmVlLTgwNTEtNmY4ZWM3MGUyNzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN02h60ZeV4KSNJCJUJkaxBRbBJtua54Kj0L GbeE5jXgxyHk5y2TPwprq3XnT5AJFTzAfIYMzwZy0J3QMztlI80bV4OC1NkVMj4n M+qMBOHFj+Nxn7nE+NkNcB4j+wVFnCx1KDly+a5pAlgcC13MrzflvrkT/0J8VwJE IdirL3aKowlzYqpF8/ZfnI4AvIxM3JSiYFGl6WL/6jE9GWzzVLfE/0s1DQ0ZxRbd zRV6qSnRuPXDCGBDrSJzCAq/ThX3vTEPYsEvJfp4uub5M2dCwlQJlcpYsYK0yl2P U/WrbXzWc82AZ1+I+WhDHEe4pHXt/FdPm2D4Szd/a+TaYreimwIDAQABo4IDozCC A58wHQYDVR0OBBYEFORD6iCQ81O4zyClyWF4F7JPzSvKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvNDlkOGMyNDgtM2U0Ny0z MTNjLTllNDQtN2Q5NjhkZjc2MTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwMAQgEDAwBC VwMDAELpAwQCQ9dsAwMBSAYDBAVIOSADAwBgGgMEBo7/gAMDAJDjAwMAkOcDBAWU NIAwDAMEBMY5EAMEAcY5GAMDAM80AwQFz6egMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFyDMvs6NTRC6RbV /yyf7B0F9e69r+FGiiQS6sXvwSfxF3F7cNmYYL762k7A7HYo5CMyHkvxH4dfq2kq iYwO/A2niVgIfNhpraG5DnXWwmRUQj7yeC6Cd30B6Nr3IKhVvwown1EW2l+Itjp/ 14hgWHjGVuG+7R2IjNzKbgDzNX+MMyVH+os4z52VNDCiGGlGYKp5QASDCpmvcCD6 Fo4sZf4/cq2NisXgDbCmZIXLaxCPmQS9RWhK9CcuvXUgZ7EwOelkCRCEvQKQTPrP 7N2Pqls3qoj8ZZ9ROzwwbHSpSdTQZR6rZcPy+hcckvnW6rH6HCnr5SOT8Dt0a3N3 ogljo0U= -----END CERTIFICATE-----Generated at Mon Mar 2 11:11:47 2026 by rpki-client