$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/3fa4ab0e-1b26-304b-acec-041abcbc93a3.roa File: 3fa4ab0e-1b26-304b-acec-041abcbc93a3.roa (raw, json) Hash identifier: 9fTc6I/OlvDnyEbZnk0mg66GSWc4AlcW9a2T9/SN2mM= Subject key identifier: 4B:03:C4:D7:C4:FC:8D:7F:25:95:0A:91:61:B6:7C:A0:68:12:8C:05 Certificate issuer: /CN=0605680b-ca76-43b6-81d9-2ac50993c59e Certificate serial: 010D0C9F4328584CFDE7A20897A0204E1DD02C00 Authority key identifier: 49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/3fa4ab0e-1b26-304b-acec-041abcbc93a3.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 18934 IP address blocks: 204.29.13.240/28 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e7:a2:08:97:a0:20:4e:1d:d0:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0605680b-ca76-43b6-81d9-2ac50993c59e Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=ac299f5d-ea61-4a2a-bb7e-ded910f2cf27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ca:fc:2e:13:d1:d0:a6:e0:16:80:5f:62:2b: a9:a2:2a:17:ef:7e:af:2c:ad:b5:05:4a:27:7d:27: 59:d0:43:76:4f:47:33:f8:a9:be:d4:48:99:fa:61: cd:75:c9:d8:06:70:e3:80:8d:88:b1:0b:14:ce:53: d0:39:d5:74:a2:b0:88:97:ee:9b:07:05:7f:29:65: 85:b5:0c:02:c8:38:c6:73:f0:68:40:f1:5f:2d:c6: 09:44:42:67:aa:5d:77:87:26:10:e6:2e:66:e6:bb: f9:63:ce:69:3c:1d:64:4d:56:99:7c:d2:ac:59:3e: c6:95:ae:0c:57:3f:a9:70:22:66:b3:86:9e:35:4c: 08:fc:24:cd:8c:72:23:6d:86:73:32:41:e9:2f:66: 5c:4c:30:55:a2:e1:ef:f2:65:11:3e:aa:ce:17:17: 90:fa:4b:a3:b8:ec:1e:ca:cf:25:75:7e:52:88:05: 3c:01:83:43:be:33:69:23:d4:45:62:aa:48:43:bd: 5f:fe:19:ba:f1:ef:5a:49:0a:1c:a0:ef:a5:1d:0e: 9b:99:10:9f:65:30:56:b7:8c:e0:6d:7d:05:72:51: a4:f8:b9:4e:e8:ad:e7:4f:47:49:ea:8f:fb:71:1a: 8a:06:6f:df:e5:79:40:14:6c:ca:23:7c:df:4a:2a: c8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:03:C4:D7:C4:FC:8D:7F:25:95:0A:91:61:B6:7C:A0:68:12:8C:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/3fa4ab0e-1b26-304b-acec-041abcbc93a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl X509v3 Authority Key Identifier: keyid:49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer sbgp-ipAddrBlock: critical IPv4: 204.29.13.240/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:95:51:f5:52:6b:f4:14:80:9c:e7:8b:c5:bb:56:d3:15:f4: 22:da:a1:00:e6:58:50:cc:be:c6:b5:47:e7:ca:a6:dd:28:7a: dd:1e:a3:57:f1:82:48:f7:25:64:5e:a1:96:df:8d:6f:5d:f4: 76:68:a9:03:75:61:53:65:d6:28:87:c1:38:f7:94:66:51:d3: 54:71:a5:ed:b4:cf:bd:c1:f7:33:43:1e:c9:33:e0:a0:88:6e: 4c:b6:40:1b:5f:2d:16:d8:5b:69:c3:fc:da:17:e3:42:72:99: e4:f0:63:c9:3f:ab:0c:62:13:4e:97:fe:54:0e:c8:9b:e9:c8: 9b:44:75:80:8c:83:9b:a1:91:36:59:9d:d7:c9:c2:90:4d:bc: 95:d8:9a:d2:7e:2b:28:96:5c:c6:84:dd:c5:f1:07:a9:30:a6: 8e:d0:03:70:56:97:2a:15:bb:2c:a1:13:17:cf:21:4f:39:2e: a0:a0:e4:7c:93:11:4c:b9:d7:89:70:84:6a:5c:0e:71:2e:ed: 17:52:5a:34:7d:8d:b0:df:d2:02:60:b3:1f:7d:78:f3:04:c2: e5:d8:cb:40:1d:4d:9c:ad:e1:8f:31:3d:03:0f:3b:7c:35:92: 83:bf:49:56:5f:46:fe:e9:b2:ed:a5:fd:92:5c:f3:0b:46:1e: ed:e7:11:d7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEz956IIl6AgTh3QLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYwNTY4MGItY2E3Ni00M2I2LTgxZDktMmFjNTA5OTNj NTllMB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk YWMyOTlmNWQtZWE2MS00YTJhLWJiN2UtZGVkOTEwZjJjZjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsr8LhPR0KbgFoBfYiupoioX736vLK21BUon fSdZ0EN2T0cz+Km+1EiZ+mHNdcnYBnDjgI2IsQsUzlPQOdV0orCIl+6bBwV/KWWF tQwCyDjGc/BoQPFfLcYJREJnql13hyYQ5i5m5rv5Y85pPB1kTVaZfNKsWT7Gla4M Vz+pcCJms4aeNUwI/CTNjHIjbYZzMkHpL2ZcTDBVouHv8mURPqrOFxeQ+kujuOwe ys8ldX5SiAU8AYNDvjNpI9RFYqpIQ71f/hm68e9aSQocoO+lHQ6bmRCfZTBWt4zg bX0FclGk+LlO6K3nT0dJ6o/7cRqKBm/f5XlAFGzKI3zfSirIiwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEsDxNfE/I1/JZUKkWG2fKBoEowFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1 NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1MDk5M2M1OWUvM2ZhNGFiMGUtMWIyNi0z MDRiLWFjZWMtMDQxYWJjYmM5M2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDYwNTY4MGItY2E3Ni00M2I2LTgx ZDktMmFjNTA5OTNjNTllLzA2MDU2ODBiLWNhNzYtNDNiNi04MWQ5LTJhYzUwOTkz YzU5ZS5jcmwwHwYDVR0jBBgwFoAUSUhmydhN2RQ18NBnqAdbMJX69FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1 MDk5M2M1OWUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEzB0N8DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAklVH1Umv0FICc54vFu1bTFfQi2qEA5lhQzL7GtUfnyqbdKHrdHqNX 8YJI9yVkXqGW341vXfR2aKkDdWFTZdYoh8E495RmUdNUcaXttM+9wfczQx7JM+Cg iG5MtkAbXy0W2Ftpw/zaF+NCcpnk8GPJP6sMYhNOl/5UDsib6cibRHWAjIOboZE2 WZ3XycKQTbyV2JrSfisollzGhN3F8QepMKaO0ANwVpcqFbssoRMXzyFPOS6goOR8 kxFMudeJcIRqXA5xLu0XUlo0fY2w39ICYLMffXjzBMLl2MtAHU2creGPMT0DDzt8 NZKDv0lWX0b+6bLtpf2SXPMLRh7t5xHX -----END CERTIFICATE-----Generated at Mon Mar 2 16:12:30 2026 by rpki-client