$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/8f2b3ac5-1b68-34be-8371-29af1cf4e2c1.roa File: 8f2b3ac5-1b68-34be-8371-29af1cf4e2c1.roa (raw, json) Hash identifier: WSwWrCbY8Db2udkPiU1iuy0UL1M2brJz5Qrk846j0pY= Subject key identifier: CD:08:71:9A:C3:4E:64:7C:61:A0:6C:A8:CF:02:32:F7:1B:15:46:D8 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584D07ACDDEE304C2978FE19EE80 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/8f2b3ac5-1b68-34be-8371-29af1cf4e2c1.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 32035 IP address blocks: 64.136.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:dd:ee:30:4c:29:78:fe:19:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=40e33cda-1f80-4f68-9307-ed896b77440f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:de:71:6b:ae:e6:c6:63:cd:a8:c2:7e:45:bc: 2b:19:fd:d8:67:8f:e4:cd:c7:9b:f1:14:05:4d:18: b2:75:63:96:f7:9e:9b:7b:4b:06:ad:4f:2b:89:43: 17:80:32:71:42:14:4d:4a:dd:86:8d:5b:05:d3:52: 41:8c:56:17:e4:ec:75:8e:86:c5:93:6a:23:53:6c: cc:46:80:48:89:22:b2:89:b2:fb:9b:3b:ec:bd:9d: 2c:fd:09:14:5c:40:5e:02:38:11:2f:2e:1c:05:58: 6f:f1:b8:14:e4:68:ff:56:53:ed:be:86:1b:80:9e: 80:64:fb:db:80:9b:81:37:76:90:a5:51:6e:16:a4: 22:ac:65:ed:0b:80:5e:bf:19:ca:71:1f:1e:24:c4: 41:f6:18:a0:62:d8:82:71:ba:0e:20:57:6c:67:9f: de:a2:f2:a4:d0:79:bd:c4:08:5f:09:20:86:48:6b: 41:aa:33:78:19:6b:72:cb:b1:c8:20:57:81:35:60: 9a:f1:8d:5e:ab:f2:df:d7:c9:7e:9e:67:08:98:30: bd:3a:35:5c:7b:45:5c:53:6f:a0:6d:11:20:3d:8f: 7d:cb:ff:6a:31:6b:c8:5e:5f:3f:06:79:11:43:3e: 58:7f:03:31:87:0a:c5:5a:1a:52:df:39:1f:ba:af: 24:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:08:71:9A:C3:4E:64:7C:61:A0:6C:A8:CF:02:32:F7:1B:15:46:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/8f2b3ac5-1b68-34be-8371-29af1cf4e2c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 64.136.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:3a:46:74:42:fd:47:fc:a5:f6:bf:7e:cb:65:c0:ff:3f:52: d3:0d:c0:46:49:96:ad:fd:c0:7f:09:ca:e3:04:7a:38:35:f2: 5d:fe:94:22:45:ed:75:f9:c4:bb:2e:c5:ca:63:f4:31:14:12: 24:f1:6e:d2:63:0e:8f:ff:6b:5d:cc:cd:2f:36:e1:22:0a:97: 41:eb:b6:a4:de:03:b3:dc:b0:d9:df:3f:d6:48:b1:17:47:b2: c4:ff:30:8e:f6:e0:d7:db:1c:9e:bc:e5:35:11:81:ad:3e:31: c8:77:85:8c:15:4a:3b:53:e3:d6:5c:77:90:45:24:05:69:5e: 5c:4f:86:d9:60:51:d7:a3:3a:c3:fb:04:e8:e3:bd:f7:b6:cf: fb:24:70:fb:24:5f:4f:10:47:01:d3:83:af:ca:e8:42:1a:9c: 2b:72:66:9f:5f:da:8d:f1:4e:0b:89:28:b1:29:97:57:2c:30: 51:78:54:96:fa:08:54:25:d9:46:f9:38:bf:21:4b:bc:ee:2f: a6:3e:e9:07:84:1f:c4:38:4e:5f:67:ed:18:84:7b:d6:cd:83: 64:29:9a:9b:24:28:2c:e8:9e:09:b6:21:da:cb:19:7e:59:f7: 81:41:f4:de:b4:ae:6d:14:06:19:24:bd:2b:2e:0e:7c:0f:57: 3b:ff:6f:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrN3uMEwpeP4Z7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk NDBlMzNjZGEtMWY4MC00ZjY4LTkzMDctZWQ4OTZiNzc0NDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN5xa67mxmPNqMJ+RbwrGf3YZ4/kzceb8RQF TRiydWOW956be0sGrU8riUMXgDJxQhRNSt2GjVsF01JBjFYX5Ox1jobFk2ojU2zM RoBIiSKyibL7mzvsvZ0s/QkUXEBeAjgRLy4cBVhv8bgU5Gj/VlPtvoYbgJ6AZPvb gJuBN3aQpVFuFqQirGXtC4BevxnKcR8eJMRB9higYtiCcboOIFdsZ5/eovKk0Hm9 xAhfCSCGSGtBqjN4GWtyy7HIIFeBNWCa8Y1eq/Lf18l+nmcImDC9OjVce0VcU2+g bREgPY99y/9qMWvIXl8/BnkRQz5YfwMxhwrFWhpS3zkfuq8kIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0IcZrDTmR8YaBsqM8CMvcbFUbYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvOGYyYjNhYzUtMWI2OC0z NGJlLTgzNzEtMjlhZjFjZjRlMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQIigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHw6RnRC/Uf8pfa/fstlwP8/UtMNwEZJlq39wH8JyuMEejg18l3+lCJF 7XX5xLsuxcpj9DEUEiTxbtJjDo//a13MzS824SIKl0HrtqTeA7PcsNnfP9ZIsRdH ssT/MI724NfbHJ685TURga0+Mch3hYwVSjtT49Zcd5BFJAVpXlxPhtlgUdejOsP7 BOjjvfe2z/skcPskX08QRwHTg6/K6EIanCtyZp9f2o3xTguJKLEpl1csMFF4VJb6 CFQl2Ub5OL8hS7zuL6Y+6QeEH8Q4Tl9n7RiEe9bNg2QpmpskKCzongm2IdrLGX5Z 94FB9N60rm0UBhkkvSsuDnwPVzv/b7Y= -----END CERTIFICATE-----Generated at Mon Mar 2 17:25:57 2026 by rpki-client