$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/67c2dad8-f63f-3fcb-a30e-33c1b8985214.roa File: 67c2dad8-f63f-3fcb-a30e-33c1b8985214.roa (raw, json) Hash identifier: aaO0GNngKElHw0jGsveAxKQAgqJRJu2G5tE6Z5iAv68= Subject key identifier: B9:B2:9C:71:B7:2D:64:97:3B:34:82:E8:3F:17:89:55:90:69:7D:E6 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584D00B278D5FCC988988F396280 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/67c2dad8-f63f-3fcb-a30e-33c1b8985214.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 5738 IP address blocks: 64.17.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:78:d5:fc:c9:88:98:8f:39:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=0008b609-0cbf-453e-b892-5fa589bb0ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fa:4f:e7:85:71:9b:ea:4a:64:89:28:87:1a: 3e:0f:ac:cd:6b:80:78:39:29:af:96:e4:25:9c:2b: ee:1a:1e:73:34:99:90:b9:66:52:9f:47:87:61:ba: ee:80:f8:48:27:08:56:96:68:09:25:7a:c5:b1:3b: d9:e2:e6:05:17:c3:77:46:b9:26:f7:d3:36:48:45: fa:e1:37:cf:d1:f0:a6:4b:47:64:4f:53:f3:60:41: b7:7d:c8:92:d7:b6:9f:af:50:58:37:6c:e9:b3:3e: c9:5b:8f:ec:38:d7:b9:b2:39:27:7f:8b:40:3c:c0: 9b:90:1a:e3:02:ed:d4:17:d0:d4:f8:0b:8d:5c:a9: 31:60:c6:55:7b:f8:f4:e4:43:0e:1a:32:20:7c:29: e3:ef:75:cb:cb:95:67:d1:b8:7d:91:69:bd:53:fc: d7:41:cd:49:2c:8a:74:bd:29:48:76:0d:d0:f4:f5: 67:5f:5f:bb:20:d5:53:df:32:12:53:df:16:e4:5e: c3:e5:1a:54:0a:f0:ad:ad:43:56:c0:75:02:d3:a9: f2:b3:ee:07:90:13:d7:2a:64:a0:de:f5:6e:af:71: 8e:3c:49:20:f1:62:8a:7c:9a:38:88:c4:8e:aa:cd: 5d:33:58:45:57:d3:51:ad:8e:a8:d7:04:6c:f6:4e: d7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B2:9C:71:B7:2D:64:97:3B:34:82:E8:3F:17:89:55:90:69:7D:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/67c2dad8-f63f-3fcb-a30e-33c1b8985214.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 64.17.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:aa:d0:c5:1b:e2:d5:56:fb:2c:96:87:c6:ba:1b:0e:8a:25: 70:a8:3b:8d:b3:29:2f:f3:78:62:00:8c:ae:5d:b7:f5:64:a1: cf:d7:3e:c5:a8:0b:5f:b6:36:d1:11:ae:e2:fe:d7:c9:88:bf: 5a:64:1e:57:f0:d2:f2:8c:a7:28:eb:f1:a7:d1:8f:5a:c0:64: a4:2e:07:98:2f:4a:9d:25:f1:94:2c:a4:81:1c:be:25:e0:73: 95:4e:0a:c8:b8:55:f4:ac:2a:20:45:08:19:15:62:18:01:0b: 4a:8f:86:ac:b2:e9:73:77:da:3c:f4:15:81:b3:90:64:cb:f0: 96:23:92:14:ac:32:12:f4:2d:49:62:e6:98:59:d0:49:90:67: 75:32:5c:c2:4f:e6:e3:56:42:dd:fe:54:fe:77:18:c2:45:f4: 96:c8:07:ea:44:bb:36:21:1c:ec:13:81:f5:3a:2c:cc:03:6a: 09:2b:78:70:e3:54:df:24:37:a1:ae:5b:92:a0:8c:41:97:a4: 81:48:25:8a:17:47:7f:2e:2f:43:f4:23:5b:4d:d2:30:1e:be: 43:06:0d:6d:75:83:39:e9:18:9c:a3:0c:ab:ac:b6:75:27:3d: 26:99:df:a7:f3:8f:fa:a3:c5:89:02:63:57:fb:43:da:fb:8e: 2b:03:b5:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AsnjV/MmImI85YoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk MDAwOGI2MDktMGNiZi00NTNlLWI4OTItNWZhNTg5YmIwY2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/pP54Vxm+pKZIkohxo+D6zNa4B4OSmvluQl nCvuGh5zNJmQuWZSn0eHYbrugPhIJwhWlmgJJXrFsTvZ4uYFF8N3Rrkm99M2SEX6 4TfP0fCmS0dkT1PzYEG3fciS17afr1BYN2zpsz7JW4/sONe5sjknf4tAPMCbkBrj Au3UF9DU+AuNXKkxYMZVe/j05EMOGjIgfCnj73XLy5Vn0bh9kWm9U/zXQc1JLIp0 vSlIdg3Q9PVnX1+7INVT3zISU98W5F7D5RpUCvCtrUNWwHUC06nys+4HkBPXKmSg 3vVur3GOPEkg8WKKfJo4iMSOqs1dM1hFV9NRrY6o1wRs9k7X8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmynHG3LWSXOzSC6D8XiVWQaX3mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNjdjMmRhZDgtZjYzZi0z ZmNiLWEzMGUtMzNjMWI4OTg1MjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQBFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOq0MUb4tVW+yyWh8a6Gw6KJXCoO42zKS/zeGIAjK5dt/Vkoc/XPsWo C1+2NtERruL+18mIv1pkHlfw0vKMpyjr8afRj1rAZKQuB5gvSp0l8ZQspIEcviXg c5VOCsi4VfSsKiBFCBkVYhgBC0qPhqyy6XN32jz0FYGzkGTL8JYjkhSsMhL0LUli 5phZ0EmQZ3UyXMJP5uNWQt3+VP53GMJF9JbIB+pEuzYhHOwTgfU6LMwDagkreHDj VN8kN6GuW5KgjEGXpIFIJYoXR38uL0P0I1tN0jAevkMGDW11gznpGJyjDKustnUn PSaZ36fzj/qjxYkCY1f7Q9r7jisDtZk= -----END CERTIFICATE-----Generated at Mon Mar 2 17:42:29 2026 by rpki-client