$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/d905242f-529d-317e-b5df-4ceefbc4b4fd.roa File: d905242f-529d-317e-b5df-4ceefbc4b4fd.roa (raw, json) Hash identifier: aqcGYsfYYZol7GkmfU9QZMHmLUZw2j9BZtXG3urbeoE= Subject key identifier: D3:DE:8D:62:42:8B:8D:E1:0C:4B:7B:AF:C0:2A:A3:BF:D1:33:8C:9D Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584CC77742AA2049AE85B4751900 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/d905242f-529d-317e-b5df-4ceefbc4b4fd.roa Signing time: Sat 07 Feb 2026 02:00:31 +0000 ROA not before: Sat 07 Feb 2026 02:00:31 +0000 ROA not after: Fri 08 May 2026 01:00:31 +0000 asID: 393878 IP address blocks: 68.65.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c7:77:42:aa:20:49:ae:85:b4:75:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Feb 7 02:00:31 2026 GMT Not After : May 8 01:00:31 2026 GMT Subject: CN=1d4c1a79-637e-46cd-881c-8c82d052986a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:60:11:4b:5c:df:3c:19:c8:7b:8f:48:00:9f: f2:01:bf:ae:b0:c5:39:75:5d:d2:b3:e0:65:cc:f5: ed:ff:b6:49:f2:f8:4c:b7:8a:7a:58:fa:d1:16:69: dd:a6:dc:75:d5:d5:a2:f9:2b:71:ce:98:d7:fc:d2: 92:84:6a:c5:3a:6e:27:97:ba:80:5e:61:62:d3:d1: ef:9f:85:83:5d:45:f3:e5:53:6a:c1:f4:3f:dc:ab: 29:96:a2:d6:eb:5c:1f:11:42:ee:c1:34:4a:67:06: 70:2f:ec:c7:e4:07:0a:ed:42:49:2a:fc:25:60:16: 4e:8e:31:d5:ab:06:56:7e:fd:50:11:49:5a:73:11: 10:31:0a:57:b9:c2:a2:c0:d8:c7:88:92:67:42:03: 1d:29:e7:5d:0c:49:d5:0a:d4:93:5f:74:9b:44:d5: cf:e6:9f:df:03:67:c0:d9:d8:2e:89:2a:c3:8e:b9: 97:a4:7a:14:31:1e:05:04:92:94:80:0d:2e:04:0e: 98:cd:c8:c1:3d:2f:f0:7a:dd:92:4d:9b:67:ee:97: e5:27:6a:f7:10:c8:72:71:59:f1:6f:d4:36:a1:1a: 72:1e:44:1d:b3:76:d9:29:c8:08:40:a4:c3:0e:80: 8d:03:ff:12:71:b0:fc:f1:3b:a3:07:4e:6a:c8:c8: 44:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DE:8D:62:42:8B:8D:E1:0C:4B:7B:AF:C0:2A:A3:BF:D1:33:8C:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/d905242f-529d-317e-b5df-4ceefbc4b4fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 68.65.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:77:19:e0:a9:b6:95:96:c9:18:66:1d:10:71:2c:64:15:85: 85:46:f1:01:99:6c:f5:23:ef:c3:e2:46:b0:d6:df:b4:6e:cc: 6e:77:a5:ad:cb:d1:21:a1:11:bd:1f:6d:6a:6a:47:b6:78:26: 43:79:30:5c:9a:e1:4e:20:46:af:a3:01:d8:cf:3f:10:11:7f: 51:8e:ae:3f:36:23:f1:71:98:fe:4a:65:d1:f9:f7:2e:78:d9: 97:a3:41:e4:38:e4:0c:a3:78:fb:16:9b:af:89:57:5d:d6:49: 09:97:fb:02:63:2b:e5:68:ce:de:5c:05:7d:60:e8:1e:cc:a6: 47:8b:6f:43:01:f4:9a:5e:1f:bd:0a:21:a0:fe:71:86:27:fb: fb:71:00:58:4f:c5:4f:b7:f0:27:0b:f0:32:fa:18:ff:c2:da: ad:b5:82:ef:cb:fb:e7:6f:3d:5f:bf:93:72:2b:f7:b4:d1:8f: 2a:af:ca:41:c3:db:96:d2:dd:02:53:61:bf:fd:fe:25:aa:2e: 66:66:dc:1a:2e:44:8c:fa:34:b1:e7:99:0d:1c:f7:d0:0d:18: 09:a3:72:f6:35:86:ca:10:aa:07:c9:fe:54:3a:23:c5:cd:4d: fa:b3:39:df:92:e1:1f:a2:0a:60:34:a4:30:7f:92:dd:4a:d5: 95:43:74:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzHd0KqIEmuhbR1GQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk MWQ0YzFhNzktNjM3ZS00NmNkLTg4MWMtOGM4MmQwNTI5ODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmARS1zfPBnIe49IAJ/yAb+usMU5dV3Ss+Bl zPXt/7ZJ8vhMt4p6WPrRFmndptx11dWi+StxzpjX/NKShGrFOm4nl7qAXmFi09Hv n4WDXUXz5VNqwfQ/3KsplqLW61wfEULuwTRKZwZwL+zH5AcK7UJJKvwlYBZOjjHV qwZWfv1QEUlacxEQMQpXucKiwNjHiJJnQgMdKeddDEnVCtSTX3SbRNXP5p/fA2fA 2dguiSrDjrmXpHoUMR4FBJKUgA0uBA6YzcjBPS/wet2STZtn7pflJ2r3EMhycVnx b9Q2oRpyHkQds3bZKcgIQKTDDoCNA/8ScbD88TujB05qyMhEuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPejWJCi43hDEt7r8Aqo7/RM4ydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvZDkwNTI0MmYtNTI5ZC0z MTdlLWI1ZGYtNGNlZWZiYzRiNGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDREH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAV3GeCptpWWyRhmHRBxLGQVhYVG8QGZbPUj78PiRrDW37RuzG53pa3L 0SGhEb0fbWpqR7Z4JkN5MFya4U4gRq+jAdjPPxARf1GOrj82I/FxmP5KZdH59y54 2ZejQeQ45AyjePsWm6+JV13WSQmX+wJjK+Vozt5cBX1g6B7MpkeLb0MB9JpeH70K IaD+cYYn+/txAFhPxU+38CcL8DL6GP/C2q21gu/L++dvPV+/k3Ir97TRjyqvykHD 25bS3QJTYb/9/iWqLmZm3BouRIz6NLHnmQ0c99ANGAmjcvY1hsoQqgfJ/lQ6I8XN TfqzOd+S4R+iCmA0pDB/kt1K1ZVDdA4= -----END CERTIFICATE-----Generated at Mon Mar 2 17:41:23 2026 by rpki-client