$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/3ebacfb9-982d-3cbf-855c-4019a5aae1d8.roa File: 3ebacfb9-982d-3cbf-855c-4019a5aae1d8.roa (raw, json) Hash identifier: A+33wCqbacE21gp2AYnNwnHlFc7ld1aPT4cDj/xQvPk= Subject key identifier: D3:AB:04:AD:70:D2:44:7C:E7:32:93:7E:75:99:D1:FF:D9:FB:4F:75 Certificate issuer: /CN=09440a93-986f-41da-8723-7b67f81bdbce Certificate serial: 010D0C9F4328584CAD997702BB264ADC578AA280 Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/3ebacfb9-982d-3cbf-855c-4019a5aae1d8.roa Signing time: Wed 28 Jan 2026 19:38:42 +0000 ROA not before: Wed 28 Jan 2026 19:38:42 +0000 ROA not after: Tue 28 Apr 2026 18:38:42 +0000 asID: 19901 IP address blocks: 67.147.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ad:99:77:02:bb:26:4a:dc:57:8a:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce Validity Not Before: Jan 28 19:38:42 2026 GMT Not After : Apr 28 18:38:42 2026 GMT Subject: CN=f444746c-1058-44b3-af73-20e730d72969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a6:2b:8a:d8:ae:cc:3d:47:01:14:4a:ef:6f: 25:a8:f3:f8:42:42:71:b9:a3:3e:db:77:8f:7a:b5: a7:c7:29:95:f2:28:b7:b8:91:eb:91:60:4c:0f:91: 8f:39:4b:17:e8:32:d2:63:4d:14:f4:9e:d7:0d:da: 51:ce:3b:b8:ac:a9:60:f4:eb:12:96:fc:aa:9f:e9: 8c:48:40:fe:71:7d:a8:51:ec:7b:cd:50:d8:3e:36: 2e:d5:e3:37:16:3d:42:02:5e:ae:4d:0c:70:80:71: de:70:94:a8:3e:bc:25:59:6a:16:c3:01:6e:04:cc: 1d:cf:1f:09:a2:9c:5c:ec:2b:bf:1a:f4:49:fc:11: 81:0f:f9:ff:97:ea:3d:1c:1a:fc:d0:d3:1c:66:39: 28:9e:82:32:d1:a5:69:50:ae:31:db:a7:83:61:7a: 18:f8:54:8f:9c:77:eb:51:0a:c8:1e:50:ba:dc:25: 06:9d:77:48:28:59:2b:c5:41:01:78:98:4f:f8:10: a6:bf:20:0d:aa:65:76:96:ac:31:80:a8:3b:f6:75: 63:c0:c0:34:ea:5d:05:94:71:3e:12:7c:2f:f9:51: 93:6c:d2:f4:51:e0:34:c6:06:93:f2:67:47:6c:ef: 38:06:f7:16:92:bc:36:fa:76:1d:a2:50:d3:6b:d1: 08:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AB:04:AD:70:D2:44:7C:E7:32:93:7E:75:99:D1:FF:D9:FB:4F:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/3ebacfb9-982d-3cbf-855c-4019a5aae1d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl X509v3 Authority Key Identifier: keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer sbgp-ipAddrBlock: critical IPv4: 67.147.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e0:f7:3e:0f:c1:30:65:df:fd:e4:82:f0:44:da:68:8d:a6: 3b:04:3f:9f:d5:bf:7c:2e:a0:4d:06:67:22:a7:8a:2e:8c:12: b5:9f:73:29:30:18:9e:1f:1c:93:c4:d0:c4:57:d3:37:7c:ad: de:03:4b:6b:14:fc:df:1c:07:3c:a3:46:fb:2b:10:b9:50:97: dc:2b:a3:34:2f:14:57:30:23:33:6f:c1:d9:f5:5f:97:da:2a: 65:ae:c3:15:84:32:dc:cd:88:e7:0c:d2:97:81:b4:b2:68:1e: d2:80:1c:59:5f:21:33:31:b3:89:c9:b4:d4:7e:b0:57:bf:26: ad:d9:25:b8:28:13:49:0f:fa:f7:81:24:cc:7c:4c:00:5e:39: c8:7c:48:d9:4d:d5:a8:24:33:f6:01:eb:75:57:2a:77:2d:9d: 3d:58:44:3f:4d:bb:01:51:3a:5a:b0:ef:83:d2:9c:14:ee:08: a9:2a:ec:7a:d2:7a:0d:2e:c0:66:4a:41:7b:9b:90:e9:86:6f: 9c:68:24:62:70:3b:7f:b2:0e:d3:63:37:79:f2:1a:e9:a9:43: b5:59:77:12:84:fb:7e:e2:ac:62:27:99:3b:59:c5:81:e2:aa: 65:c2:72:ed:cd:b3:c2:11:5c:f2:d4:74:d6:fd:61:a8:45:22: fb:e3:45:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEytmXcCuyZK3FeKooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk YmNlMB4XDTI2MDEyODE5Mzg0MloXDTI2MDQyODE4Mzg0MlowLzEtMCsGA1UEAxMk ZjQ0NDc0NmMtMTA1OC00NGIzLWFmNzMtMjBlNzMwZDcyOTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6YritiuzD1HARRK728lqPP4QkJxuaM+23eP erWnxymV8ii3uJHrkWBMD5GPOUsX6DLSY00U9J7XDdpRzju4rKlg9OsSlvyqn+mM SED+cX2oUex7zVDYPjYu1eM3Fj1CAl6uTQxwgHHecJSoPrwlWWoWwwFuBMwdzx8J opxc7Cu/GvRJ/BGBD/n/l+o9HBr80NMcZjkonoIy0aVpUK4x26eDYXoY+FSPnHfr UQrIHlC63CUGnXdIKFkrxUEBeJhP+BCmvyANqmV2lqwxgKg79nVjwMA06l0FlHE+ Enwv+VGTbNL0UeA0xgaT8mdHbO84BvcWkrw2+nYdolDTa9EIKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOrBK1w0kR85zKTfnWZ0f/Z+091MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0 MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvM2ViYWNmYjktOTgyZC0z Y2JmLTg1NWMtNDAxOWE1YWFlMWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3 MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3 ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ5PGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLg9z4PwTBl3/3kgvBE2miNpjsEP5/Vv3wuoE0GZyKnii6MErWfcykw GJ4fHJPE0MRX0zd8rd4DS2sU/N8cBzyjRvsrELlQl9wrozQvFFcwIzNvwdn1X5fa KmWuwxWEMtzNiOcM0peBtLJoHtKAHFlfITMxs4nJtNR+sFe/Jq3ZJbgoE0kP+veB JMx8TABeOch8SNlN1agkM/YB63VXKnctnT1YRD9NuwFROlqw74PSnBTuCKkq7HrS eg0uwGZKQXubkOmGb5xoJGJwO3+yDtNjN3nyGumpQ7VZdxKE+37irGInmTtZxYHi qmXCcu3Ns8IRXPLUdNb9YahFIvvjRdY= -----END CERTIFICATE-----Generated at Mon Mar 2 10:34:27 2026 by rpki-client