$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/041fad63-307b-3a43-886f-754dbffe700b.roa File: 041fad63-307b-3a43-886f-754dbffe700b.roa (raw, json) Hash identifier: Vxb0l+Sgev9qzrc43vynYVTbkJYk96/KAKZ+DagMxXk= Subject key identifier: 95:1C:B8:23:0C:59:0D:3E:47:2F:B2:F3:47:EB:40:27:3A:50:20:0C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CB287182B5EBB66A4BDA43CA0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/041fad63-307b-3a43-886f-754dbffe700b.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 147034 IP address blocks: 64.205.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:18:2b:5e:bb:66:a4:bd:a4:3c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=806efac0-1058-41ac-88a6-2c33cc1d7473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3e:3f:f3:8a:b5:66:03:5d:cc:24:37:5e:19: 9c:c5:87:f0:e0:3f:2c:c1:51:19:49:3c:88:8f:e1: 72:6c:1d:49:66:d1:74:fe:94:06:9b:ce:71:5a:6b: 2f:19:57:a5:9a:dc:18:07:8e:35:98:59:06:3b:10: 0b:31:9f:1e:56:72:25:3e:9a:e9:e8:6c:93:c5:d5: 1c:4e:2a:41:5f:99:cf:ab:fd:06:36:d1:47:4d:62: ae:f0:de:8c:dc:ab:74:60:2e:9d:49:73:ab:c1:d2: 42:00:a0:af:1b:8b:4d:58:ce:1c:9a:11:92:55:03: 95:68:86:fe:1a:1f:0c:06:ab:45:08:ed:3d:73:62: 14:9f:5f:6d:ea:c8:a4:82:f0:63:99:eb:ee:a6:43: 88:ec:03:2a:22:de:c0:56:5b:39:13:f2:20:f6:c5: de:ab:14:c9:5b:7d:1b:0c:75:ef:c8:50:17:ba:8e: 17:b0:d8:71:59:b2:73:bc:b0:11:52:43:51:fe:f0: 0c:cf:9f:91:73:12:b5:cd:6b:03:5e:c8:8d:dd:65: 17:6d:ac:29:4b:bb:de:2b:08:b5:30:8c:fc:01:f6: 6f:df:c0:71:8c:27:ed:99:b1:dc:f9:5a:23:0b:21: 26:3f:49:a7:4d:ad:fb:e7:93:ed:67:57:6e:79:b1: 48:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1C:B8:23:0C:59:0D:3E:47:2F:B2:F3:47:EB:40:27:3A:50:20:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/041fad63-307b-3a43-886f-754dbffe700b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.205.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:cc:96:5d:c6:05:7e:c0:77:f1:3b:ff:5f:b4:20:ce:10:2a: 49:d9:00:f1:ac:98:f7:df:ba:aa:75:8f:19:e0:f3:f5:05:ee: 90:36:89:82:e8:0c:24:11:e9:d0:b8:b5:25:f3:53:56:73:29: 3b:ed:20:ad:95:86:4e:0f:99:6c:53:6a:29:b1:ec:3a:1b:ae: f4:2d:f1:79:0f:be:2f:95:b9:4c:fd:19:76:3e:1f:58:f5:1d: 31:70:2a:82:01:fe:70:1c:30:a1:8d:dd:72:f6:67:f2:54:c8: 04:f7:46:34:8f:a1:c5:b7:25:cb:d1:86:5b:e0:85:cf:68:42: 64:98:17:f1:8a:ba:20:9b:f7:df:92:47:99:20:e8:70:13:e1: 7c:6b:02:a4:f5:97:73:35:9a:5d:4f:2e:4a:24:87:c2:9b:31: 98:0b:bb:fa:c7:d9:09:fb:f3:68:c4:eb:89:62:c0:2b:09:98: 0e:87:ba:7a:ff:9b:d2:80:c3:02:ff:6f:1c:cd:c4:64:ad:ac: 72:f4:3c:ef:cf:5d:04:5d:f9:1a:b9:96:84:77:f7:1c:ea:b4: 65:35:a4:b1:bb:0e:97:c9:a0:c1:68:0b:db:c3:da:82:35:cc: f5:d6:c7:60:f3:30:e6:4a:2c:dd:1e:08:fa:ba:cf:00:f8:46: bd:8d:ff:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhxgrXrtmpL2kPKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk ODA2ZWZhYzAtMTA1OC00MWFjLTg4YTYtMmMzM2NjMWQ3NDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz4/84q1ZgNdzCQ3XhmcxYfw4D8swVEZSTyI j+FybB1JZtF0/pQGm85xWmsvGVelmtwYB441mFkGOxALMZ8eVnIlPprp6GyTxdUc TipBX5nPq/0GNtFHTWKu8N6M3Kt0YC6dSXOrwdJCAKCvG4tNWM4cmhGSVQOVaIb+ Gh8MBqtFCO09c2IUn19t6sikgvBjmevupkOI7AMqIt7AVls5E/Ig9sXeqxTJW30b DHXvyFAXuo4XsNhxWbJzvLARUkNR/vAMz5+RcxK1zWsDXsiN3WUXbawpS7veKwi1 MIz8AfZv38BxjCftmbHc+VojCyEmP0mnTa3755PtZ1duebFIGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUcuCMMWQ0+Ry+y80frQCc6UCAMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDQxZmFkNjMtMzA3Yi0z YTQzLTg4NmYtNzU0ZGJmZmU3MDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQM2sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDMll3GBX7Ad/E7/1+0IM4QKknZAPGsmPffuqp1jxng8/UF7pA2iYLo DCQR6dC4tSXzU1ZzKTvtIK2Vhk4PmWxTaimx7DobrvQt8XkPvi+VuUz9GXY+H1j1 HTFwKoIB/nAcMKGN3XL2Z/JUyAT3RjSPocW3JcvRhlvghc9oQmSYF/GKuiCb99+S R5kg6HAT4XxrAqT1l3M1ml1PLkokh8KbMZgLu/rH2Qn782jE64liwCsJmA6Hunr/ m9KAwwL/bxzNxGStrHL0PO/PXQRd+Rq5loR39xzqtGU1pLG7DpfJoMFoC9vD2oI1 zPXWx2DzMOZKLN0eCPq6zwD4Rr2N/2k= -----END CERTIFICATE-----Generated at Mon Mar 2 14:47:40 2026 by rpki-client