$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d9f3bf20-4c0b-30a3-9d98-83fda0346614.roa File: d9f3bf20-4c0b-30a3-9d98-83fda0346614.roa (raw, json) Hash identifier: wUsnMHTfPBzCpWHli1PQxwhiXAwRmvYc2YOuzrLZ6LY= Subject key identifier: EE:A5:3C:2F:39:A8:BB:A5:9B:76:19:A9:38:A6:6B:50:10:4B:78:0E Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Certificate serial: 010D0C9F4328584D0217A6FCA7041967030E3D80 Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d9f3bf20-4c0b-30a3-9d98-83fda0346614.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396998 IP address blocks: 64.68.192.0/24 maxlen: 24 2620:49:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:a6:fc:a7:04:19:67:03:0e:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=0532d223-93af-4fc6-9e5b-325da841f1cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7f:18:dd:c2:00:08:93:a9:82:6e:e8:4d:2b: af:c7:db:51:76:15:97:49:c9:7b:0e:4b:af:2e:c8: bd:90:a1:38:b8:a2:03:d2:87:f8:d9:6d:bf:a1:b1: e5:3c:22:37:3a:27:18:9f:48:99:3e:af:48:6a:8d: 0d:21:6d:bc:ab:4d:bf:e5:fd:31:9e:e2:db:f3:30: a0:b3:12:62:ab:dc:ee:54:26:74:52:18:20:2d:a0: 9f:5d:d7:6f:90:b0:24:8a:bc:0b:4b:1c:f4:14:e3: d9:e2:1d:26:72:fd:9f:af:53:8a:71:7d:2c:2a:ed: 9e:93:fd:2d:cc:f5:81:aa:68:84:bd:99:70:8d:15: 03:65:54:a5:e5:f3:4d:5f:51:2d:c4:e9:e7:ef:ee: 3a:38:1c:81:4d:47:86:8b:8a:69:ea:f6:af:37:d5: 91:be:bb:fe:56:46:57:c9:a6:33:4d:74:06:48:0d: b7:50:5f:7e:d6:b6:59:87:d5:e3:82:24:f2:a4:f0: e3:39:ba:11:c3:3c:9d:79:26:85:2f:52:05:d0:b1: 53:0a:bc:27:53:35:53:83:51:2e:ae:28:34:b2:5e: 36:a3:b0:aa:86:87:21:b7:f8:eb:f9:a5:16:db:9c: 49:5c:e1:87:07:69:75:38:e0:4d:1a:96:43:8f:ae: d2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A5:3C:2F:39:A8:BB:A5:9B:76:19:A9:38:A6:6B:50:10:4B:78:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d9f3bf20-4c0b-30a3-9d98-83fda0346614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl X509v3 Authority Key Identifier: keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer sbgp-ipAddrBlock: critical IPv4: 64.68.192.0/24 IPv6: 2620:49:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:fb:f9:6e:a4:38:8f:93:0a:37:11:a6:73:1c:9e:b8:11:66: 66:33:8a:18:02:64:c4:81:83:ae:55:6b:0b:04:05:3e:22:79: ac:35:af:97:10:e3:a4:a3:1f:9e:c3:28:b3:83:9a:b2:99:da: ec:cd:2a:f5:70:a8:f4:21:fa:fd:f8:4f:77:ca:02:2e:f2:e6: cf:99:1e:3b:81:f0:11:c5:5a:53:c6:68:55:d1:cf:53:eb:35: a5:56:78:d0:be:4b:5d:66:ac:08:7d:95:61:e3:2f:87:1b:53: 04:b1:1d:e3:c3:54:5e:2f:26:14:a6:b9:86:d7:b9:18:49:6d: fc:82:94:c2:71:3a:bd:62:c0:e5:d1:c8:94:ec:a8:ba:f5:c7: 1e:6e:09:95:87:67:4f:dd:4a:36:92:5f:d6:a0:e9:63:62:26: 2b:f2:1b:c4:2b:ca:a9:90:de:2b:6f:ac:af:fc:a2:a9:d6:6c: 70:fc:84:b9:3d:84:23:51:2f:5c:a8:de:12:b3:ad:60:72:a3: 4a:19:d7:d8:95:22:6a:05:79:d7:ce:9e:62:6f:6a:52:b1:29: d7:13:61:3a:bf:d2:29:1f:61:7e:7d:99:5f:9b:ee:18:60:21: 56:3d:05:83:0d:c7:ee:d2:eb:27:84:1f:39:33:b6:dc:38:81: 33:3a:c5:56 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE0CF6b8pwQZZwMOPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdm MzEyMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk MDUzMmQyMjMtOTNhZi00ZmM2LTllNWItMzI1ZGE4NDFmMWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon8Y3cIACJOpgm7oTSuvx9tRdhWXScl7Dkuv Lsi9kKE4uKID0of42W2/obHlPCI3OicYn0iZPq9Iao0NIW28q02/5f0xnuLb8zCg sxJiq9zuVCZ0UhggLaCfXddvkLAkirwLSxz0FOPZ4h0mcv2fr1OKcX0sKu2ek/0t zPWBqmiEvZlwjRUDZVSl5fNNX1EtxOnn7+46OByBTUeGi4pp6vavN9WRvrv+VkZX yaYzTXQGSA23UF9+1rZZh9XjgiTypPDjOboRwzydeSaFL1IF0LFTCrwnUzVTg1Eu rig0sl42o7Cqhocht/jr+aUW25xJXOGHB2l1OOBNGpZDj67S0wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFO6lPC85qLulm3YZqTima1AQS3gOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3 NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvZDlmM2JmMjAtNGMwYi0z MGEzLTlkOTgtODNmZGEwMzQ2NjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDAwNzQ5ZWQtNzBlZi00NDdjLWIx N2MtZGE2YmU4ZDdmMzEyL2QwMDc0OWVkLTcwZWYtNDQ3Yy1iMTdjLWRhNmJlOGQ3 ZjMxMi5jcmwwHwYDVR0jBBgwFoAU9SAVhzNYxRJ4ZGbzsONdivR4eXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZi ZThkN2YzMTIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQETAMA8E AgACMAkDBwAmIABJAAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPfv5bqQ4j5MKNxGmcxyeuBFmZjOKGAJk xIGDrlVrCwQFPiJ5rDWvlxDjpKMfnsMos4Oaspna7M0q9XCo9CH6/fhPd8oCLvLm z5keO4HwEcVaU8ZoVdHPU+s1pVZ40L5LXWasCH2VYeMvhxtTBLEd48NUXi8mFKa5 hte5GElt/IKUwnE6vWLA5dHIlOyouvXHHm4JlYdnT91KNpJf1qDpY2ImK/IbxCvK qZDeK2+sr/yiqdZscPyEuT2EI1EvXKjeErOtYHKjShnX2JUiagV5186eYm9qUrEp 1xNhOr/SKR9hfn2ZX5vuGGAhVj0Fgw3H7tLrJ4QfOTO23DiBMzrFVg== -----END CERTIFICATE-----Generated at Mon Mar 2 00:38:27 2026 by rpki-client