$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/9c46e998-1908-3d4b-a119-3d998db7b89b.roa File: 9c46e998-1908-3d4b-a119-3d998db7b89b.roa (raw, json) Hash identifier: 8YEu6BTuEsbfzfGYWpGw5s5AT6Mx4g/sWPYs01xUWUI= Subject key identifier: 4D:67:7A:FE:41:8D:BC:85:55:AD:8A:CD:75:FA:E2:8A:0E:84:8E:49 Certificate issuer: /CN=25393f82-9e95-47aa-9897-0027f6c5e3d4 Certificate serial: 010D0C9F4328584D04E23C340FE11F7F548CFF80 Authority key identifier: 38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/9c46e998-1908-3d4b-a119-3d998db7b89b.roa Signing time: Sun 01 Mar 2026 02:00:31 +0000 ROA not before: Sun 01 Mar 2026 02:00:31 +0000 ROA not after: Sat 30 May 2026 01:00:31 +0000 asID: 399673 IP address blocks: 216.25.96.0/20 maxlen: 24 216.147.64.0/19 maxlen: 24 2606:5640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:e2:3c:34:0f:e1:1f:7f:54:8c:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25393f82-9e95-47aa-9897-0027f6c5e3d4 Validity Not Before: Mar 1 02:00:31 2026 GMT Not After : May 30 01:00:31 2026 GMT Subject: CN=b7d3c385-f626-4a75-9b43-3be6d16647d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d4:54:8b:45:79:75:e6:ac:e7:aa:b6:0e:01: 36:e3:79:05:c4:94:5a:78:21:2c:13:9f:31:cb:50: 23:9c:39:e2:d7:bb:6f:97:39:62:8a:07:c0:3a:27: 52:ca:e8:eb:2e:ed:a7:de:bb:b5:a6:19:6d:30:46: 8e:44:e3:84:57:21:fd:e2:26:d7:3b:71:45:33:b7: cc:96:ae:b2:09:7b:3d:64:12:6b:22:13:6d:bb:cb: 87:9c:cc:f5:39:5b:b9:57:d6:0a:5d:56:cc:c2:ef: 61:72:6b:f9:7c:87:04:d1:29:53:0f:c8:b8:3b:ad: 02:f2:6d:49:14:b6:08:92:40:7b:f7:d7:c0:07:03: 50:a4:65:66:39:da:e9:76:36:67:66:5b:0f:f8:a2: 06:3a:c5:5c:d1:3d:2d:56:80:2e:6c:d7:97:25:2b: 43:e9:03:0e:06:2b:0d:5f:fb:0e:f0:e6:9d:e3:28: 8b:ef:fa:0f:d6:c1:56:43:ce:ec:29:62:42:63:f3: e4:8a:d2:31:1b:37:bd:0a:ab:72:10:ea:bf:3e:9b: ff:02:1c:ff:86:17:32:e0:4c:fd:59:78:02:49:1b: fb:e5:f6:69:f4:83:03:bd:b0:38:46:a5:69:14:ac: 72:74:75:b9:9e:40:93:81:73:0b:bc:e5:4f:c9:9f: 09:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:67:7A:FE:41:8D:BC:85:55:AD:8A:CD:75:FA:E2:8A:0E:84:8E:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/9c46e998-1908-3d4b-a119-3d998db7b89b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.crl X509v3 Authority Key Identifier: keyid:38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer sbgp-ipAddrBlock: critical IPv4: 216.25.96.0/20 216.147.64.0/19 IPv6: 2606:5640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:95:a8:62:a9:31:80:63:63:2f:70:b6:a9:81:63:47:7b:30: 49:26:36:c5:db:b2:bc:b4:34:5e:ca:80:39:06:57:83:ef:f6: 6e:91:cb:23:95:65:2c:04:ca:88:f9:80:08:f2:70:50:be:7a: de:9e:ec:9b:ab:88:24:ba:00:60:23:65:77:0a:f4:15:4c:ee: 75:d8:f3:16:9f:63:5d:2d:8c:65:1c:03:79:b9:f2:f2:dc:cd: d4:0f:1a:a4:e6:df:90:db:7f:0c:9c:b2:52:7e:0c:fc:cd:60: 0c:13:01:d4:d6:21:66:c1:a2:ff:8c:6c:bc:21:50:09:d6:94: 70:1a:13:cf:09:c6:7c:42:cb:cc:fd:d6:35:d5:1c:69:f7:22: a0:dc:b0:61:36:10:65:b1:b4:f7:02:2b:8f:a0:73:60:48:21: 67:53:d2:c9:de:3e:68:c7:26:fc:3e:d8:f0:6a:7b:0c:13:de: 89:f2:11:6b:cc:db:a2:e9:7a:8b:8a:91:de:4a:d6:e1:5a:f3: 41:ac:90:ec:13:d3:4c:e3:05:a4:3d:5d:53:58:55:2f:20:95: 8e:3a:7e:61:04:88:c7:7e:bd:46:b8:b5:41:da:9f:b0:e1:47: e0:b4:5a:b7:7b:c9:78:88:c3:5e:60:a3:9f:c3:95:46:23:89: 3b:40:ac:f1 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE0E4jw0D+Eff1SM/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTNmODItOWU5NS00N2FhLTk4OTctMDAyN2Y2YzVl M2Q0MB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk YjdkM2MzODUtZjYyNi00YTc1LTliNDMtM2JlNmQxNjY0N2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9RUi0V5deas56q2DgE243kFxJRaeCEsE58x y1AjnDni17tvlzliigfAOidSyujrLu2n3ru1phltMEaOROOEVyH94ibXO3FFM7fM lq6yCXs9ZBJrIhNtu8uHnMz1OVu5V9YKXVbMwu9hcmv5fIcE0SlTD8i4O60C8m1J FLYIkkB799fABwNQpGVmOdrpdjZnZlsP+KIGOsVc0T0tVoAubNeXJStD6QMOBisN X/sO8Oad4yiL7/oP1sFWQ87sKWJCY/PkitIxGze9CqtyEOq/Ppv/Ahz/hhcy4Ez9 WXgCSRv75fZp9IMDvbA4RqVpFKxydHW5nkCTgXMLvOVPyZ8JOwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFE1nev5BjbyFVa2KzXX64ooOhI5JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNTM5 M2Y4Mi05ZTk1LTQ3YWEtOTg5Ny0wMDI3ZjZjNWUzZDQvOWM0NmU5OTgtMTkwOC0z ZDRiLWExMTktM2Q5OThkYjdiODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjUzOTNmODItOWU5NS00N2FhLTk4 OTctMDAyN2Y2YzVlM2Q0LzI1MzkzZjgyLTllOTUtNDdhYS05ODk3LTAwMjdmNmM1 ZTNkNC5jcmwwHwYDVR0jBBgwFoAUOAgtINaveaoYgr9lJFwNdefJhm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNTM5M2Y4Mi05ZTk1LTQ3YWEtOTg5Ny0wMDI3 ZjZjNWUzZDQuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQE2BlgAwQF 2JNAMA0EAgACMAcDBQAmBlZAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMKVqGKpMYBjYy9wtqmBY0d7MEkm NsXbsry0NF7KgDkGV4Pv9m6RyyOVZSwEyoj5gAjycFC+et6e7JuriCS6AGAjZXcK 9BVM7nXY8xafY10tjGUcA3m58vLczdQPGqTm35DbfwycslJ+DPzNYAwTAdTWIWbB ov+MbLwhUAnWlHAaE88JxnxCy8z91jXVHGn3IqDcsGE2EGWxtPcCK4+gc2BIIWdT 0snePmjHJvw+2PBqewwT3onyEWvM26LpeouKkd5K1uFa80GskOwT00zjBaQ9XVNY VS8glY46fmEEiMd+vUa4tUHan7DhR+C0Wrd7yXiIw15go5/DlUYjiTtArPE= -----END CERTIFICATE-----Generated at Mon Mar 2 18:50:19 2026 by rpki-client