$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b804937a-f843-3745-b3d8-d70631744a5f.roa File: b804937a-f843-3745-b3d8-d70631744a5f.roa (raw, json) Hash identifier: uFh9qB6h6DETb8bjJMqIuXFChCb5fsF1TSxaphjbrQo= Subject key identifier: 49:A4:05:1D:4E:80:F0:2A:D2:69:72:7C:25:41:33:7A:84:4C:84:F6 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D09125AA4D5DFC866D335B640 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b804937a-f843-3745-b3d8-d70631744a5f.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 25668 IP address blocks: 64.114.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:5a:a4:d5:df:c8:66:d3:35:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=11ec8ad0-f80a-4e51-8735-4cb1fd2b73dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4a:90:f1:27:9c:1a:83:ec:74:4e:e9:0b:94: 88:26:67:2b:6d:c1:56:ee:f3:02:d2:66:61:fb:c2: 4c:05:d8:88:02:51:b5:7f:a9:08:95:11:97:27:4b: 6d:35:cc:b5:62:6d:a3:d3:ee:41:b0:08:cb:de:29: 65:91:d9:39:37:b6:d9:f1:64:4c:98:20:0b:d1:43: e8:79:12:26:9d:7d:f9:e0:3c:7a:df:2a:fe:d1:d7: 98:4a:98:ad:13:0e:d9:9d:d4:a9:b1:f5:91:be:0e: be:27:f4:e4:5d:7d:23:eb:cb:20:44:e7:e3:76:92: a9:db:7b:5d:ef:cd:c4:cb:d6:06:8b:97:00:b4:0c: 2f:e7:d1:0e:f3:18:11:3d:5a:20:2d:b0:90:95:a4: c7:eb:e1:46:42:cf:cb:39:35:42:d2:e8:3b:4e:b7: b4:c0:0e:6b:4a:93:7d:c1:0e:4c:cf:73:16:15:64: b1:a8:2f:14:b3:58:2e:d3:5a:8c:16:e6:f1:ca:77: 12:d5:5e:4f:da:85:9d:04:05:56:d8:4d:b9:82:ed: 36:9f:b1:81:8c:61:36:35:5d:e8:84:aa:9a:be:7d: be:ca:6f:2e:f5:fd:f7:c4:f0:42:76:8c:22:7a:10: 3b:fc:4d:2c:f1:ab:47:59:cd:6c:e2:5c:53:e1:2d: eb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A4:05:1D:4E:80:F0:2A:D2:69:72:7C:25:41:33:7A:84:4C:84:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b804937a-f843-3745-b3d8-d70631744a5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 64.114.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:4e:54:c8:1f:2d:b1:4c:8c:6b:f9:c4:48:da:af:14:b2:ed: 44:6b:86:ea:9f:0b:89:7e:a5:b7:82:3f:b2:c9:4a:e4:7d:99: fb:34:d7:44:80:89:03:e8:51:45:80:28:2c:9e:f3:f3:07:2b: 55:64:99:fd:88:2a:b2:7f:9b:6b:08:78:2e:0e:de:c5:ee:6d: a1:47:a8:58:e0:84:57:16:87:fc:d2:cf:a6:55:9b:0b:bc:c9: ac:1f:36:eb:9f:3f:d0:49:13:57:95:8c:22:11:9e:58:53:39: ba:81:73:21:9f:f9:18:0a:68:ae:c6:5f:e3:78:d6:b8:8c:e5: 17:d2:73:77:aa:c4:d8:3c:59:14:94:cc:70:a1:56:44:2c:7f: 8b:e8:67:12:d5:72:ef:fa:81:d2:7c:c3:63:fa:fb:a7:11:9c: 81:68:86:6c:90:2b:9b:3a:d0:d4:84:16:3a:2f:b6:08:87:2c: 66:d9:e9:df:2d:a4:be:af:1a:88:8c:a7:44:d9:98:64:89:25: 23:e2:ec:b6:58:d6:f8:0e:4e:b8:4c:ba:cc:31:5e:6f:6d:44: 9d:7f:61:6d:d4:53:18:7e:97:65:47:a0:c5:dc:d1:d0:42:c2: e4:e2:54:c0:70:ba:f2:df:ef:50:67:f9:85:f6:41:40:d3:5e: 0c:3e:72:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JElqk1d/IZtM1tkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MTFlYzhhZDAtZjgwYS00ZTUxLTg3MzUtNGNiMWZkMmI3M2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkqQ8SecGoPsdE7pC5SIJmcrbcFW7vMC0mZh +8JMBdiIAlG1f6kIlRGXJ0ttNcy1Ym2j0+5BsAjL3illkdk5N7bZ8WRMmCAL0UPo eRImnX354Dx63yr+0deYSpitEw7ZndSpsfWRvg6+J/TkXX0j68sgROfjdpKp23td 783Ey9YGi5cAtAwv59EO8xgRPVogLbCQlaTH6+FGQs/LOTVC0ug7Tre0wA5rSpN9 wQ5Mz3MWFWSxqC8Us1gu01qMFubxyncS1V5P2oWdBAVW2E25gu02n7GBjGE2NV3o hKqavn2+ym8u9f33xPBCdowiehA7/E0s8atHWc1s4lxT4S3rDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmkBR1OgPAq0mlyfCVBM3qETIT2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYjgwNDkzN2EtZjg0My0z NzQ1LWIzZDgtZDcwNjMxNzQ0YTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQHKUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL5OVMgfLbFMjGv5xEjarxSy7URrhuqfC4l+pbeCP7LJSuR9mfs010SA iQPoUUWAKCye8/MHK1Vkmf2IKrJ/m2sIeC4O3sXubaFHqFjghFcWh/zSz6ZVmwu8 yawfNuufP9BJE1eVjCIRnlhTObqBcyGf+RgKaK7GX+N41riM5RfSc3eqxNg8WRSU zHChVkQsf4voZxLVcu/6gdJ8w2P6+6cRnIFohmyQK5s60NSEFjovtgiHLGbZ6d8t pL6vGoiMp0TZmGSJJSPi7LZY1vgOTrhMuswxXm9tRJ1/YW3UUxh+l2VHoMXc0dBC wuTiVMBwuvLf71Bn+YX2QUDTXgw+ck4= -----END CERTIFICATE-----Generated at Mon Mar 2 17:15:13 2026 by rpki-client