$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/eb870b14-ac83-3f4c-816f-22bbf5fedd50.roa File: eb870b14-ac83-3f4c-816f-22bbf5fedd50.roa (raw, json) Hash identifier: 8uUFFl/lSmJfuVcoH2aQ3Aji3xyy0hwkxr7nl4vdJnc= Subject key identifier: 4F:D2:F7:85:A8:35:BE:F2:5D:44:E2:94:66:EA:4F:C1:0B:D1:C7:9A Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584D07ACF89859854AFC5C313B00 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/eb870b14-ac83-3f4c-816f-22bbf5fedd50.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 8075 IP address blocks: 64.18.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:f8:98:59:85:4a:fc:5c:31:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=1f08c723-c9d9-4058-9cc3-21d7937f4fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:32:84:3b:1c:cc:82:c8:cd:cb:0e:43:de:52: e7:a4:bf:3f:9a:29:1e:17:2e:ab:5c:78:89:e8:94: e3:45:65:f5:c8:27:df:d1:91:e2:88:8f:47:60:f1: ab:44:06:5a:e9:2c:1c:52:c0:74:b2:bd:03:84:98: 9c:61:d2:a8:bb:5c:f7:a3:4d:85:0e:4a:83:31:a4: f0:af:00:5a:c7:fd:37:6e:f2:a5:d2:da:d3:9c:4e: 2e:b4:fc:9a:eb:7b:75:b9:10:82:f0:83:2d:e2:09: f2:e0:7b:8e:a2:f2:53:a1:fa:6d:3d:41:0c:b4:de: d6:40:04:45:f1:07:08:e0:07:cd:19:fe:1f:78:b9: 6e:0e:18:77:ed:d2:e5:ba:9c:7f:1c:c2:85:c9:dc: 70:15:1a:a9:53:4a:83:6c:f8:a3:7a:dc:28:68:75: 43:9f:35:ca:44:95:06:61:24:92:e7:24:f4:59:4f: bc:30:b0:f2:bc:5d:74:96:08:6c:c9:68:74:04:39: 4b:a2:2c:64:2f:b9:49:57:81:e3:c1:a3:f3:03:70: 77:75:c0:d8:a2:da:f4:df:03:6e:24:5b:38:89:10: 10:c0:10:09:b4:2b:49:7f:bf:81:b1:03:79:e7:2e: f8:8d:2f:95:7b:b6:e5:40:28:ba:68:ca:af:f1:a7: 27:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D2:F7:85:A8:35:BE:F2:5D:44:E2:94:66:EA:4F:C1:0B:D1:C7:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/eb870b14-ac83-3f4c-816f-22bbf5fedd50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 64.18.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:99:de:9b:81:31:e5:cd:ab:52:17:99:7b:e7:fc:61:85:42: 22:78:55:cc:ab:9d:52:5c:75:13:66:a1:7d:71:41:ea:bf:1b: 54:da:79:2f:14:72:0e:94:63:30:42:78:ac:e5:46:da:97:1b: 9a:d4:4a:f8:7c:1e:68:d6:84:3c:54:7d:c9:dc:e7:e7:ff:ce: b7:03:fd:3c:b2:20:17:80:b7:4d:dd:41:6f:7d:5b:89:69:f3: 17:5b:c5:eb:35:96:36:24:e8:32:6e:b7:52:8d:22:28:83:37: ec:cb:bb:a1:c8:ef:16:d7:1d:0f:7a:e1:59:b4:34:fe:a1:0e: 07:94:60:96:3b:fb:e5:10:be:5e:5d:11:a5:fd:31:5c:0f:ae: f1:2d:87:e6:f0:06:23:29:58:0f:d0:70:ca:5d:f8:bf:70:06: e2:d3:0a:5f:00:ca:80:d9:d7:4b:aa:b8:0a:6c:d2:0c:86:07: 3c:d6:25:0b:86:d1:d1:ee:a5:06:e2:28:91:cf:ec:10:d9:49: 8d:b6:8b:17:91:5a:c4:73:e0:8d:ea:88:a7:be:2b:ff:80:7e: 31:71:93:83:b9:1b:56:a5:80:3e:58:14:d1:a5:0c:7e:71:16: 05:f4:66:0b:9d:fa:73:91:09:9d:5a:f6:cf:6c:b1:9b:f1:30: f3:91:75:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrPiYWYVK/FwxOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk MWYwOGM3MjMtYzlkOS00MDU4LTljYzMtMjFkNzkzN2Y0ZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTKEOxzMgsjNyw5D3lLnpL8/mikeFy6rXHiJ 6JTjRWX1yCff0ZHiiI9HYPGrRAZa6SwcUsB0sr0DhJicYdKou1z3o02FDkqDMaTw rwBax/03bvKl0trTnE4utPya63t1uRCC8IMt4gny4HuOovJTofptPUEMtN7WQARF 8QcI4AfNGf4feLluDhh37dLlupx/HMKFydxwFRqpU0qDbPijetwoaHVDnzXKRJUG YSSS5yT0WU+8MLDyvF10lghsyWh0BDlLoixkL7lJV4HjwaPzA3B3dcDYotr03wNu JFs4iRAQwBAJtCtJf7+BsQN55y74jS+Ve7blQCi6aMqv8acnyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/S94WoNb7yXUTilGbqT8EL0ceaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvZWI4NzBiMTQtYWM4My0z ZjRjLTgxNmYtMjJiYmY1ZmVkZDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBKfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWZ3puBMeXNq1IXmXvn/GGFQiJ4VcyrnVJcdRNmoX1xQeq/G1TaeS8U cg6UYzBCeKzlRtqXG5rUSvh8HmjWhDxUfcnc5+f/zrcD/TyyIBeAt03dQW99W4lp 8xdbxes1ljYk6DJut1KNIiiDN+zLu6HI7xbXHQ964Vm0NP6hDgeUYJY7++UQvl5d EaX9MVwPrvEth+bwBiMpWA/QcMpd+L9wBuLTCl8AyoDZ10uquAps0gyGBzzWJQuG 0dHupQbiKJHP7BDZSY22ixeRWsRz4I3qiKe+K/+AfjFxk4O5G1algD5YFNGlDH5x FgX0Zgud+nORCZ1a9s9ssZvxMPORdVo= -----END CERTIFICATE-----Generated at Mon Mar 2 14:09:25 2026 by rpki-client