$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa File: c289adc8-f56d-36ed-9305-ee284f075f34.roa (raw, json) Hash identifier: vgmVdJqGSs6OuxXwaQliiKY9o3NHZredO66Xi9jKivo= Subject key identifier: 73:A9:62:01:65:2C:3A:AE:CE:A0:56:61:40:B2:01:72:D7:E9:9B:DE Certificate issuer: /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Certificate serial: 010D0C9F4328584D4D5A9520BFCC2C764561AE40 Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 3527 IP address blocks: 128.231.0.0/16 maxlen: 25 137.187.0.0/16 maxlen: 25 156.40.0.0/18 maxlen: 25 156.40.64.0/20 maxlen: 25 156.40.80.0/21 maxlen: 25 156.40.88.0/22 maxlen: 25 156.40.92.0/24 maxlen: 25 156.40.96.0/19 maxlen: 25 156.40.128.0/18 maxlen: 25 156.40.192.0/22 maxlen: 25 156.40.196.0/24 maxlen: 25 156.40.198.0/23 maxlen: 25 156.40.200.0/21 maxlen: 25 156.40.208.0/20 maxlen: 25 156.40.224.0/19 maxlen: 25 165.112.0.0/16 maxlen: 25 192.231.145.0/24 maxlen: 29 192.231.146.0/23 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:95:20:bf:cc:2c:76:45:61:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=ac94a1c2-1b37-4aac-b5d1-841022eaefe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d3:36:0c:be:db:da:60:4f:c5:dc:51:6a:2a: 37:2d:cc:d8:45:3b:0a:87:7e:a2:91:89:c6:1b:5d: 44:4d:fa:03:fa:52:7b:fb:92:8d:e9:1b:6d:3b:1d: ed:77:08:1b:6a:aa:ad:58:08:14:02:a5:25:42:fc: 16:d3:27:cb:80:33:d9:66:3a:6b:cb:f0:d2:eb:90: 58:50:e6:c4:40:11:cd:71:f9:87:7b:6b:80:2a:5d: a3:81:cb:f4:49:24:4c:ae:51:00:69:e9:1d:f2:12: 52:d0:20:87:32:25:fe:2d:a6:16:11:52:b5:5b:64: d1:2f:c2:f1:1f:b8:93:55:46:9a:c1:88:f1:03:8c: 8a:29:83:b7:cf:f9:74:05:c3:b6:53:42:cc:83:08: 3c:f2:33:db:99:dc:f4:01:8c:d8:66:94:1f:f7:06: 31:54:d4:2d:50:a9:80:3d:ff:d1:9c:75:f7:d5:a5: 9e:7e:1b:ec:71:10:a4:d6:31:29:3c:df:27:4c:77: d5:8b:8e:7f:37:30:d5:7e:4d:12:49:e6:3e:09:0d: 00:bd:7c:45:13:06:cf:67:ed:7d:42:ce:65:f1:51: cb:71:f9:54:f2:3a:4a:11:0a:5f:07:1c:dd:b1:e3: 44:8f:78:29:07:2e:80:11:f3:6e:ac:93:69:70:7b: 50:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A9:62:01:65:2C:3A:AE:CE:A0:56:61:40:B2:01:72:D7:E9:9B:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl X509v3 Authority Key Identifier: keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer sbgp-ipAddrBlock: critical IPv4: 128.231.0.0/16 137.187.0.0/16 156.40.0.0-156.40.92.255 156.40.96.0-156.40.196.255 156.40.198.0-156.40.255.255 165.112.0.0/16 192.231.145.0-192.231.147.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:25:b9:1c:c8:1b:8e:4e:a8:88:9e:cd:7e:a0:2b:e6:56:d9: 63:de:07:27:ba:27:fb:a3:b2:8d:df:87:2a:23:5b:81:fd:f6: 58:fe:17:9f:87:13:47:ef:b5:5d:44:09:a6:fd:c3:53:e0:62: 46:0c:6e:45:1b:24:c3:90:3c:25:54:74:d0:2a:38:4b:75:1a: 79:e2:4f:7e:60:d3:84:a5:b3:5c:d4:78:34:bb:76:05:39:6a: c5:71:fb:08:58:29:42:70:b5:6f:7d:de:a6:70:51:bd:66:62: 5b:4e:a3:4e:af:f3:0d:64:e3:e4:6a:53:be:5f:53:eb:7e:1b: 88:eb:60:6b:fa:e1:46:c1:64:fe:7f:38:c5:9c:cd:84:e6:53: bd:a6:cc:1c:9f:8d:59:b3:25:b4:74:ef:92:09:ae:e0:08:bc: 8c:09:c7:57:2e:81:ea:f6:d4:67:62:00:bc:17:54:d5:1a:f7: 4c:27:f4:af:c1:d9:08:73:da:b9:a3:7c:85:89:9f:72:48:bb: 1e:84:6c:98:39:68:4c:22:c0:0a:87:2f:00:a8:a0:cb:13:66: 69:9c:4f:ae:72:c7:9a:24:fa:7f:8e:b5:0d:da:21:55:18:2d: 39:c7:b6:d5:3b:71:34:5f:19:fe:2f:f9:26:ec:fe:f6:0a:16: db:72:9f:4d -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWE1NWpUgv8wsdkVhrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2ZjE0YjgtM2M3ZS00ZDY4LWFjMzYtZDU5OTliM2M0 ZWE3MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk YWM5NGExYzItMWIzNy00YWFjLWI1ZDEtODQxMDIyZWFlZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NM2DL7b2mBPxdxRaio3LczYRTsKh36ikYnG G11ETfoD+lJ7+5KN6RttOx3tdwgbaqqtWAgUAqUlQvwW0yfLgDPZZjpry/DS65BY UObEQBHNcfmHe2uAKl2jgcv0SSRMrlEAaekd8hJS0CCHMiX+LaYWEVK1W2TRL8Lx H7iTVUaawYjxA4yKKYO3z/l0BcO2U0LMgwg88jPbmdz0AYzYZpQf9wYxVNQtUKmA Pf/RnHX31aWefhvscRCk1jEpPN8nTHfVi45/NzDVfk0SSeY+CQ0AvXxFEwbPZ+19 Qs5l8VHLcflU8jpKEQpfBxzdseNEj3gpBy6AEfNurJNpcHtQjwIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFHOpYgFlLDquzqBWYUCyAXLX6ZveMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZm MTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5OWIzYzRlYTcvYzI4OWFkYzgtZjU2ZC0z NmVkLTkzMDUtZWUyODRmMDc1ZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGY2ZjE0YjgtM2M3ZS00ZDY4LWFj MzYtZDU5OTliM2M0ZWE3L2RmNmYxNGI4LTNjN2UtNGQ2OC1hYzM2LWQ1OTk5YjNj NGVhNy5jcmwwHwYDVR0jBBgwFoAU6a+JChar8bDdsnh1bDqS4990CL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZmMTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5 OWIzYzRlYTcuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTBLBAIAATBFAwMAgOcDAwCJ uzALAwMDnCgDBACcKFwwDAMEBZwoYAMEAJwoxDALAwQBnCjGAwMAnCgDAwClcDAM AwQAwOeRAwQCwOeQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAG8luRzIG45OqIiezX6gK+ZW2WPeBye6J/uj so3fhyojW4H99lj+F5+HE0fvtV1ECab9w1PgYkYMbkUbJMOQPCVUdNAqOEt1Gnni T35g04Sls1zUeDS7dgU5asVx+whYKUJwtW993qZwUb1mYltOo06v8w1k4+RqU75f U+t+G4jrYGv64UbBZP5/OMWczYTmU72mzByfjVmzJbR075IJruAIvIwJx1cuger2 1GdiALwXVNUa90wn9K/B2Qhz2rmjfIWJn3JIux6EbJg5aEwiwAqHLwCooMsTZmmc T65yx5ok+n+OtQ3aIVUYLTnHttU7cTRfGf4v+Sbs/vYKFttyn00= -----END CERTIFICATE-----Generated at Sat Apr 18 00:08:08 2026 by rpki-client