$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/7c20deec-1152-3c56-8ea4-d899a929dad8.roa File: 7c20deec-1152-3c56-8ea4-d899a929dad8.roa (raw, json) Hash identifier: 2/r3FcvKZJqjqqkc9ojjSyKjkB2dLh/pWDzQul0X9xo= Subject key identifier: CF:77:1A:28:1C:B0:B0:F1:56:69:F4:76:4B:2C:5A:6A:75:4A:63:72 Certificate issuer: /CN=dafb7b4c-08cc-4d76-ada2-b572a2d233a9 Certificate serial: 010D0C9F4328584C93D1966D507827DD50BA6600 Authority key identifier: 35:7F:E0:80:07:13:C0:91:F4:F7:40:D0:BA:63:B9:0A:E8:F5:B3:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/7c20deec-1152-3c56-8ea4-d899a929dad8.roa Signing time: Mon 19 Jan 2026 14:00:38 +0000 ROA not before: Mon 19 Jan 2026 14:00:38 +0000 ROA not after: Sun 19 Apr 2026 13:00:38 +0000 asID: 398193 IP address blocks: 23.165.112.0/24 maxlen: 24 148.59.95.0/24 maxlen: 24 2602:fd18::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:93:d1:96:6d:50:78:27:dd:50:ba:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafb7b4c-08cc-4d76-ada2-b572a2d233a9 Validity Not Before: Jan 19 14:00:38 2026 GMT Not After : Apr 19 13:00:38 2026 GMT Subject: CN=4967f19d-6bea-4799-b036-9f6fe2449ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:47:bb:e1:7b:aa:aa:cd:6f:d2:57:b5:1b:b3: ef:f2:9d:25:c9:88:95:56:65:9d:d8:04:ef:cd:0c: 0e:e1:ba:ee:bc:bf:77:8e:ac:35:4c:bc:cf:f0:4f: dd:69:02:66:36:a3:23:8f:93:14:99:91:77:7e:ec: 53:b3:f9:ea:5b:4d:8f:e8:8d:ec:ec:df:e3:a4:cf: ec:cd:3c:cb:40:91:19:9b:8b:4a:63:68:af:7b:ba: 78:02:c6:57:bd:40:ec:1d:a1:db:9a:5d:4b:b5:b7: 34:46:72:cc:00:82:df:31:65:18:2f:1e:f9:2c:6e: 05:f0:ce:a6:47:4b:a7:e0:d9:37:08:46:15:85:06: 0e:92:ff:95:3d:75:f6:28:8f:94:aa:69:cd:a6:d8: 76:4c:d7:0a:c9:e7:cf:b7:c9:8c:89:13:00:12:c0: f4:6b:45:88:8b:1a:39:2a:2b:48:aa:fa:73:b9:8d: 8d:d0:d9:74:07:3b:7d:12:ed:5f:71:2e:7e:15:8e: 7e:f6:d5:b0:f0:b7:c4:4a:05:0a:74:0e:39:24:63: 7d:06:ad:d5:7d:76:38:df:fd:d2:0e:5c:c5:0f:a9: f9:34:85:0a:75:9b:3a:7c:ee:32:af:f9:46:1f:73: 4d:b1:af:7a:f2:3e:77:29:8d:0e:a7:0d:09:96:1a: 2e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:77:1A:28:1C:B0:B0:F1:56:69:F4:76:4B:2C:5A:6A:75:4A:63:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/7c20deec-1152-3c56-8ea4-d899a929dad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.crl X509v3 Authority Key Identifier: keyid:35:7F:E0:80:07:13:C0:91:F4:F7:40:D0:BA:63:B9:0A:E8:F5:B3:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer sbgp-ipAddrBlock: critical IPv4: 23.165.112.0/24 148.59.95.0/24 IPv6: 2602:fd18::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:6e:21:d6:fa:9a:f2:56:7d:ff:45:6e:01:ae:5b:88:3d:92: fb:19:1f:33:d7:ad:5b:2e:52:58:b1:6a:67:1a:ef:61:8f:6c: ce:ea:c3:33:e7:2c:0f:c2:42:a2:d5:1d:93:01:48:ae:b5:34: 63:ee:5b:19:d0:70:50:ba:79:b0:17:91:09:31:62:6e:fb:0d: 42:0b:79:35:a1:b0:35:43:f3:84:bf:13:1b:a6:f6:15:9f:b0: 58:25:d3:80:82:7c:5f:cf:ff:d5:73:0c:52:40:5e:99:ac:05: 0d:63:df:cb:a5:f2:9d:9f:74:0e:97:02:d6:33:23:7e:3e:50: 6e:06:c5:dd:e4:4c:1d:30:4a:29:09:69:1f:a4:16:62:56:e5: 89:fa:01:bc:7e:7e:92:c5:cd:df:4a:ea:0c:4d:37:d9:3f:38: 09:f2:c4:d0:54:d2:2d:c3:27:0a:39:06:55:07:48:ea:a4:83: a0:96:44:4b:f4:6d:b1:f4:b6:55:94:32:38:f7:56:d6:0c:8a: 7e:a8:cf:d7:0c:b3:09:fc:5b:e0:33:b2:60:3f:04:21:0e:a1: f4:d1:0b:76:d2:2a:7d:32:dd:86:4a:d9:8c:2e:22:b6:0c:c9: 2a:0c:1d:21:36:01:91:b5:b7:b3:cb:57:32:47:29:d9:5b:6d: b8:72:c8:6d -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEyT0ZZtUHgn3VC6ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFmYjdiNGMtMDhjYy00ZDc2LWFkYTItYjU3MmEyZDIz M2E5MB4XDTI2MDExOTE0MDAzOFoXDTI2MDQxOTEzMDAzOFowLzEtMCsGA1UEAxMk NDk2N2YxOWQtNmJlYS00Nzk5LWIwMzYtOWY2ZmUyNDQ5YmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUe74Xuqqs1v0le1G7Pv8p0lyYiVVmWd2ATv zQwO4bruvL93jqw1TLzP8E/daQJmNqMjj5MUmZF3fuxTs/nqW02P6I3s7N/jpM/s zTzLQJEZm4tKY2ive7p4AsZXvUDsHaHbml1Ltbc0RnLMAILfMWUYLx75LG4F8M6m R0un4Nk3CEYVhQYOkv+VPXX2KI+UqmnNpth2TNcKyefPt8mMiRMAEsD0a0WIixo5 KitIqvpzuY2N0Nl0Bzt9Eu1fcS5+FY5+9tWw8LfESgUKdA45JGN9Bq3VfXY43/3S DlzFD6n5NIUKdZs6fO4yr/lGH3NNsa968j53KY0Opw0Jlhou7wIDAQABo4IDazCC A2cwHQYDVR0OBBYEFM93GigcsLDxVmn0dkssWmp1SmNyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWZi N2I0Yy0wOGNjLTRkNzYtYWRhMi1iNTcyYTJkMjMzYTkvN2MyMGRlZWMtMTE1Mi0z YzU2LThlYTQtZDg5OWE5MjlkYWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFmYjdiNGMtMDhjYy00ZDc2LWFk YTItYjU3MmEyZDIzM2E5L2RhZmI3YjRjLTA4Y2MtNGQ3Ni1hZGEyLWI1NzJhMmQy MzNhOS5jcmwwHwYDVR0jBBgwFoAUNX/ggAcTwJH090DQumO5Cuj1sxEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWZiN2I0Yy0wOGNjLTRkNzYtYWRhMi1iNTcy YTJkMjMzYTkuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6VwAwQA lDtfMA4EAgACMAgDBgQmAv0YADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCMbiHW+pryVn3/RW4BrluIPZL7 GR8z161bLlJYsWpnGu9hj2zO6sMz5ywPwkKi1R2TAUiutTRj7lsZ0HBQunmwF5EJ MWJu+w1CC3k1obA1Q/OEvxMbpvYVn7BYJdOAgnxfz//VcwxSQF6ZrAUNY9/LpfKd n3QOlwLWMyN+PlBuBsXd5EwdMEopCWkfpBZiVuWJ+gG8fn6Sxc3fSuoMTTfZPzgJ 8sTQVNItwycKOQZVB0jqpIOglkRL9G2x9LZVlDI491bWDIp+qM/XDLMJ/FvgM7Jg PwQhDqH00Qt20ip9Mt2GStmMLiK2DMkqDB0hNgGRtbezy1cyRynZW224csht -----END CERTIFICATE-----Generated at Mon Mar 2 12:41:33 2026 by rpki-client