$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa File: d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa (raw, json) Hash identifier: s8AOBbkyXcB40p13zAlIxU+Abj5Gq4jI2MltAXwWqYw= Subject key identifier: 72:8E:9D:C1:83:CD:E7:EE:E3:22:B0:25:C4:E0:C7:28:78:42:27:1A Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584CD99CE9A32CC378CC824ADF2C Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa Signing time: Fri 13 Feb 2026 14:00:41 +0000 ROA not before: Fri 13 Feb 2026 14:00:41 +0000 ROA not after: Thu 14 May 2026 13:00:41 +0000 asID: 11232 IP address blocks: 67.217.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d9:9c:e9:a3:2c:c3:78:cc:82:4a:df:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Feb 13 14:00:41 2026 GMT Not After : May 14 13:00:41 2026 GMT Subject: CN=e4053bf9-0a16-4eb8-8a1e-4957b2c351a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:95:a1:57:e6:c0:0c:5c:3f:41:25:22:5c:b9: 1a:2f:b7:f1:f2:0e:ab:0f:f8:38:29:25:68:0d:53: 99:56:78:45:b5:b1:e3:05:29:a7:24:fe:33:1b:a6: a1:ff:41:47:39:d6:3c:77:45:3e:7c:0a:55:77:16: 86:e6:31:10:01:29:2c:cb:31:24:41:8a:3c:a8:e6: 97:b4:a6:c1:fe:22:23:e4:0d:66:59:0f:a5:9b:48: 10:9e:68:8d:99:53:39:ec:41:59:27:92:a3:31:f7: d6:82:fe:67:9e:9a:cf:3e:2b:bd:d2:4e:43:ea:96: 4a:72:f1:a4:33:8a:a2:b5:d9:3e:5a:55:7a:98:c2: 77:eb:8c:d7:c4:44:bb:75:d4:ed:60:d3:9e:4e:b8: ad:f0:ac:74:10:53:b9:0f:11:d0:c0:c1:7e:f5:c8: 73:58:48:8a:a1:ab:f6:2e:f0:9f:ac:3e:9d:e7:93: 30:39:7e:c1:cb:c4:10:23:7e:19:3b:f0:9a:2d:af: cf:85:fe:4e:6b:82:49:4d:dc:b7:da:6f:ae:cc:23: cc:c9:5c:17:ee:0f:9a:c7:fe:13:c2:6f:d4:0c:50: 04:5b:49:25:92:1a:ef:ca:1f:a3:6b:83:4f:49:14: 68:d5:c0:e2:ee:34:02:d7:eb:09:7e:ea:e7:a4:0b: b1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8E:9D:C1:83:CD:E7:EE:E3:22:B0:25:C4:E0:C7:28:78:42:27:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 67.217.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:66:4a:a9:eb:1d:b7:f9:7e:2a:d8:e4:15:77:8b:f2:0a:32: e2:48:20:dc:c1:11:3e:0e:9d:af:5c:bd:ee:12:0a:40:ed:5e: a6:32:3a:86:4d:f1:05:c3:f8:74:47:da:14:a1:0c:0e:0c:8d: 0d:cd:27:e5:a5:ba:91:d4:b8:92:c0:1d:3c:93:ff:65:6d:60: 8e:bf:cf:a4:1d:33:99:f1:50:f2:66:6f:ed:6d:eb:39:1d:58: e7:c8:3d:fd:dd:39:bc:c5:11:fb:48:c3:e5:b4:f0:b8:d5:0e: 0c:69:09:35:d6:01:ce:bf:81:12:59:d5:47:e3:bc:71:a7:cf: 2e:4a:8e:66:de:d0:95:a2:41:13:f5:e2:49:bd:22:c9:cd:d9: f6:7f:20:2a:e9:96:36:a5:a1:25:f9:24:c0:9d:91:84:fe:16: 50:19:40:6b:a9:f3:77:e8:3d:fb:a5:be:95:8b:bb:eb:f9:19: e8:7c:86:90:0c:0f:8f:8a:6b:21:5d:ff:cd:1c:49:de:ec:b9: 58:4a:8c:cd:a6:a0:40:d9:c9:f7:96:39:bc:39:3c:89:9b:b3: a5:d0:b0:06:a8:05:66:0d:43:a0:b4:28:a5:73:f9:76:5b:30: 35:8c:65:60:bf:df:c7:b2:44:b1:18:96:eb:75:8c:48:ea:49: 2d:fe:0b:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzZnOmjLMN4zIJK3ywwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI2MDIxMzE0MDA0MVoXDTI2MDUxNDEzMDA0MVowLzEtMCsGA1UEAxMk ZTQwNTNiZjktMGExNi00ZWI4LThhMWUtNDk1N2IyYzM1MWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZWhV+bADFw/QSUiXLkaL7fx8g6rD/g4KSVo DVOZVnhFtbHjBSmnJP4zG6ah/0FHOdY8d0U+fApVdxaG5jEQASksyzEkQYo8qOaX tKbB/iIj5A1mWQ+lm0gQnmiNmVM57EFZJ5KjMffWgv5nnprPPiu90k5D6pZKcvGk M4qitdk+WlV6mMJ364zXxES7ddTtYNOeTrit8Kx0EFO5DxHQwMF+9chzWEiKoav2 LvCfrD6d55MwOX7By8QQI34ZO/CaLa/Phf5Oa4JJTdy32m+uzCPMyVwX7g+ax/4T wm/UDFAEW0klkhrvyh+ja4NPSRRo1cDi7jQC1+sJfurnpAux9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKOncGDzefu4yKwJcTgxyh4QicaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZDQxMjdmNDMtYWRiYy0z MzU4LTg4YWYtYTlhZTliMGE2M2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ9kUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRmSqnrHbf5firY5BV3i/IKMuJIINzBET4Ona9cve4SCkDtXqYyOoZN 8QXD+HRH2hShDA4MjQ3NJ+WlupHUuJLAHTyT/2VtYI6/z6QdM5nxUPJmb+1t6zkd WOfIPf3dObzFEftIw+W08LjVDgxpCTXWAc6/gRJZ1UfjvHGnzy5Kjmbe0JWiQRP1 4km9IsnN2fZ/ICrpljaloSX5JMCdkYT+FlAZQGup83foPfulvpWLu+v5Geh8hpAM D4+KayFd/80cSd7suVhKjM2moEDZyfeWObw5PImbs6XQsAaoBWYNQ6C0KKVz+XZb MDWMZWC/38eyRLEYlut1jEjqSS3+C0o= -----END CERTIFICATE-----Generated at Mon Mar 2 08:33:55 2026 by rpki-client