$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bef06e49-a62b-35b4-b63d-855e5a9e3052.roa File: bef06e49-a62b-35b4-b63d-855e5a9e3052.roa (raw, json) Hash identifier: HY4t7ToiP2J8tVAp0JGbqti8beg+xeYVr4ALTyu4ghE= Subject key identifier: 64:54:15:31:5C:B1:05:D9:C3:FB:2F:09:34:B4:A7:26:CB:C5:C4:37 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584CD40753A9C903AD4C44403B80 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bef06e49-a62b-35b4-b63d-855e5a9e3052.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 7029 IP address blocks: 64.86.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:53:a9:c9:03:ad:4c:44:40:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=db10a022-6a3c-43ec-b1fe-a82d5e548091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:20:5b:4a:af:4a:f6:5e:b9:8d:c2:dd:58:dc: ab:a6:61:73:ed:de:5b:93:6b:c4:cb:65:04:35:32: 19:58:36:71:33:46:7d:51:62:a1:af:59:13:54:50: f8:ec:47:74:91:37:5b:0f:7d:32:09:31:d8:13:10: 61:d2:70:7c:52:ba:46:cc:bc:ac:43:be:65:13:cc: 6f:32:12:d8:81:71:1c:a2:13:fa:e0:7e:0b:84:a9: 07:13:a9:ef:0b:c8:a6:a1:6d:ec:de:45:25:1f:d4: 2e:e1:35:8c:0e:02:46:12:91:d7:ef:fc:25:c6:ae: b9:c7:56:ac:3c:c6:1a:92:c5:49:32:3c:d9:b3:b3: 49:42:c0:e2:b9:71:a0:8f:1d:1f:a5:6c:76:9e:11: 50:76:0e:a7:37:5a:01:c3:53:61:dd:26:dd:3d:8d: 6e:c0:da:3e:a5:2c:ae:b3:33:5f:72:f5:3e:43:d0: 92:86:ec:5c:ba:9a:de:ba:79:3b:63:61:b2:54:06: be:d1:67:b6:32:6b:d9:7c:62:fb:6b:42:4d:65:2d: 77:57:ac:04:c0:78:e2:f1:2b:3a:06:21:3d:73:8c: 57:a7:da:6d:e1:27:b3:42:79:20:90:4a:31:aa:40: 90:cf:56:b0:d7:e7:df:3a:75:50:dc:b5:de:19:97: f3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:54:15:31:5C:B1:05:D9:C3:FB:2F:09:34:B4:A7:26:CB:C5:C4:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bef06e49-a62b-35b4-b63d-855e5a9e3052.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 64.86.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:79:47:cc:20:df:c4:c6:31:a7:05:60:36:fa:f0:7b:1e:69: ad:c7:4e:9a:ca:75:d7:d9:0e:87:a4:63:22:3c:76:59:14:4b: 76:53:8a:f2:fc:7c:c3:30:f0:9b:5e:9e:b8:f7:cb:8c:3c:2a: d0:3c:20:0f:54:e3:1b:05:48:f1:c7:4c:62:7a:c6:cf:d1:83: 40:1e:5f:e3:bc:44:7f:45:68:ae:54:2d:d7:1e:73:f2:1d:2d: bd:8c:80:6d:7b:e1:c4:bd:82:90:8f:5e:14:03:4b:23:e8:57: 1d:00:a6:56:74:b6:1a:ad:ab:a9:9d:90:08:67:db:11:1e:d6: 32:2b:fe:1a:01:44:75:b6:c5:a6:d8:b4:f9:91:80:9d:8b:5f: ea:98:94:d0:48:43:52:d3:48:59:49:60:bf:f7:51:9f:87:e9: c8:29:d2:9c:1f:06:a9:28:53:e7:1c:4c:aa:36:1b:c5:33:33: b7:ec:d7:a4:5a:6b:c5:55:2c:16:84:03:a7:eb:8c:03:3a:de: 9a:d9:47:71:e4:8c:2c:ec:99:e5:ad:78:3d:03:30:db:f5:55: 88:e5:43:35:3e:0a:74:f0:b4:fd:37:1a:ca:fc:96:dd:ef:e8: 86:7c:cd:e4:9b:26:fd:e9:b1:d7:0a:1f:2f:6a:74:21:3d:b4: 05:22:4f:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB1OpyQOtTERAO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk ZGIxMGEwMjItNmEzYy00M2VjLWIxZmUtYTgyZDVlNTQ4MDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSBbSq9K9l65jcLdWNyrpmFz7d5bk2vEy2UE NTIZWDZxM0Z9UWKhr1kTVFD47Ed0kTdbD30yCTHYExBh0nB8UrpGzLysQ75lE8xv MhLYgXEcohP64H4LhKkHE6nvC8imoW3s3kUlH9Qu4TWMDgJGEpHX7/wlxq65x1as PMYaksVJMjzZs7NJQsDiuXGgjx0fpWx2nhFQdg6nN1oBw1Nh3SbdPY1uwNo+pSyu szNfcvU+Q9CShuxcupreunk7Y2GyVAa+0We2MmvZfGL7a0JNZS13V6wEwHji8Ss6 BiE9c4xXp9pt4SezQnkgkEoxqkCQz1aw1+ffOnVQ3LXeGZfzCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRUFTFcsQXZw/svCTS0pybLxcQ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvYmVmMDZlNDktYTYyYi0z NWI0LWI2M2QtODU1ZTVhOWUzMDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZ5R8wg38TGMacFYDb68Hseaa3HTprKddfZDoekYyI8dlkUS3ZTivL8 fMMw8Jtenrj3y4w8KtA8IA9U4xsFSPHHTGJ6xs/Rg0AeX+O8RH9FaK5ULdcec/Id Lb2MgG174cS9gpCPXhQDSyPoVx0AplZ0thqtq6mdkAhn2xEe1jIr/hoBRHW2xabY tPmRgJ2LX+qYlNBIQ1LTSFlJYL/3UZ+H6cgp0pwfBqkoU+ccTKo2G8UzM7fs16Ra a8VVLBaEA6frjAM63prZR3HkjCzsmeWteD0DMNv1VYjlQzU+CnTwtP03Gsr8lt3v 6IZ8zeSbJv3psdcKHy9qdCE9tAUiT+M= -----END CERTIFICATE-----Generated at Mon Mar 2 11:47:41 2026 by rpki-client