$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/08c20f4c-4615-39ac-aa7d-5c7f68b9550e.roa File: 08c20f4c-4615-39ac-aa7d-5c7f68b9550e.roa (raw, json) Hash identifier: WksKPy/ttF3z21vjNjioq378Kf0PZdVhb82UsRp7f7w= Subject key identifier: 22:30:1E:B9:A1:39:0F:73:82:1B:99:43:FB:37:B1:A2:0B:E4:3E:CC Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584CAE572B78086C97635BE29900 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/08c20f4c-4615-39ac-aa7d-5c7f68b9550e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33549 IP address blocks: 204.191.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:2b:78:08:6c:97:63:5b:e2:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=bd4e1141-773c-4834-960a-d7c64f9c4b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9b:fb:51:ca:b3:d9:28:fa:b3:37:72:bf:d4: ed:cc:15:9f:c6:d7:e6:78:b5:b8:f7:14:95:d1:dd: 0f:9a:0c:50:2d:a6:ff:b0:80:b7:d3:b0:bb:ce:94: 43:55:d8:5d:8d:de:7f:3f:83:99:02:3f:a2:00:4b: 48:6c:48:ee:c8:cc:4e:8c:b7:4f:0e:9d:0b:df:59: 1c:af:42:97:94:f3:6b:1f:40:b3:a9:d9:14:06:6b: 05:c9:86:2b:4c:53:8e:33:18:70:7b:be:96:28:15: cd:7f:ca:79:90:e2:2f:ef:c3:3d:3e:2b:f1:5e:00: a6:4d:61:dd:24:ea:86:34:58:0d:32:4a:46:c4:e9: cb:0b:83:27:45:af:54:df:bc:42:5c:1c:04:1a:65: 4a:bf:6b:4c:5f:ec:d0:7b:74:d4:da:22:fc:56:91: d4:32:b5:68:83:6f:8f:df:92:b9:25:37:fd:9a:74: d6:a7:e5:d3:35:c7:72:4d:7b:72:ce:6a:d7:65:16: 5f:2a:6f:a3:11:ec:5e:b1:81:0e:28:6c:d7:a3:f1: 39:c3:80:72:e4:9c:de:eb:24:a8:42:19:5f:f7:15: bd:b2:f0:88:08:42:3f:3b:21:66:76:30:0c:73:c0: ab:77:ef:81:de:c8:eb:4b:e3:3e:c0:67:e3:ec:e4: 3f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:30:1E:B9:A1:39:0F:73:82:1B:99:43:FB:37:B1:A2:0B:E4:3E:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/08c20f4c-4615-39ac-aa7d-5c7f68b9550e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 204.191.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:74:a1:2d:19:8d:e8:c7:9b:61:5e:89:9e:04:1d:04:f6:60: 14:4a:0c:6c:a0:7f:4d:b6:f3:bd:4f:2c:b3:be:b0:bb:6b:7e: e3:34:65:45:71:c6:fa:a3:6c:27:75:d1:a6:7b:cc:4a:df:4b: 74:5a:cb:b2:da:b7:0a:dd:16:5e:7f:d6:c8:89:85:62:27:82: 49:f1:4e:37:a1:03:97:fc:aa:72:cf:4c:f3:9c:5e:97:17:b3: dc:f7:f8:11:89:75:11:5c:e7:58:7c:d9:5e:4b:34:9c:55:ca: 13:7b:7a:7e:a8:9f:f7:23:3f:9f:fa:60:bb:55:03:74:3c:e3: 50:a8:6c:73:cc:98:d1:dd:62:42:50:a4:ef:69:34:dd:ae:7c: ad:9a:54:fe:69:2a:99:f5:27:b1:af:57:a7:d9:71:04:a3:c7: 04:22:49:19:65:2c:bf:45:07:69:71:3e:55:d5:31:61:9c:21: 8b:65:ed:23:4a:48:bd:4f:dd:d3:bb:11:5b:3c:0f:0b:b6:3a: 72:a5:48:85:65:98:9b:31:52:a1:42:ff:4c:cf:f8:87:9f:eb: 2c:df:52:19:be:70:d0:38:e6:d3:a7:9f:4f:22:4e:ee:b1:03: b4:2b:af:8c:37:a5:68:b5:8e:07:a7:47:47:4b:05:29:e5:97: 4c:54:83:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVyt4CGyXY1vimQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YmQ0ZTExNDEtNzczYy00ODM0LTk2MGEtZDdjNjRmOWM0YjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Jv7Ucqz2Sj6szdyv9TtzBWfxtfmeLW49xSV 0d0PmgxQLab/sIC307C7zpRDVdhdjd5/P4OZAj+iAEtIbEjuyMxOjLdPDp0L31kc r0KXlPNrH0CzqdkUBmsFyYYrTFOOMxhwe76WKBXNf8p5kOIv78M9PivxXgCmTWHd JOqGNFgNMkpGxOnLC4MnRa9U37xCXBwEGmVKv2tMX+zQe3TU2iL8VpHUMrVog2+P 35K5JTf9mnTWp+XTNcdyTXtyzmrXZRZfKm+jEexesYEOKGzXo/E5w4By5Jze6ySo Qhlf9xW9svCICEI/OyFmdjAMc8Crd++B3sjrS+M+wGfj7OQ/RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIwHrmhOQ9zghuZQ/s3saIL5D7MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDhjMjBmNGMtNDYxNS0z OWFjLWFhN2QtNWM3ZjY4Yjk1NTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzL/bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJ0oS0ZjejHm2FeiZ4EHQT2YBRKDGygf022871PLLO+sLtrfuM0ZUVx xvqjbCd10aZ7zErfS3Ray7LatwrdFl5/1siJhWIngknxTjehA5f8qnLPTPOcXpcX s9z3+BGJdRFc51h82V5LNJxVyhN7en6on/cjP5/6YLtVA3Q841CobHPMmNHdYkJQ pO9pNN2ufK2aVP5pKpn1J7GvV6fZcQSjxwQiSRllLL9FB2lxPlXVMWGcIYtl7SNK SL1P3dO7EVs8Dwu2OnKlSIVlmJsxUqFC/0zP+Ief6yzfUhm+cNA45tOnn08iTu6x A7Qrr4w3pWi1jgenR0dLBSnll0xUgzA= -----END CERTIFICATE-----Generated at Sun Mar 1 21:02:24 2026 by rpki-client