$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b48d68b5-272e-3cf5-8294-9060f0d20413.roa File: b48d68b5-272e-3cf5-8294-9060f0d20413.roa (raw, json) Hash identifier: BGxv9f8Dzkb3WMMmJkIvsnzJqD0g5SQyl8CoYzne5tY= Subject key identifier: BC:92:EC:D5:C8:29:53:3C:51:4F:12:9D:C1:1D:22:8C:98:40:27:41 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CB2871891D6972A2BF7BA9400 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b48d68b5-272e-3cf5-8294-9060f0d20413.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 147034 IP address blocks: 64.205.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:18:91:d6:97:2a:2b:f7:ba:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=da2e4278-8857-45f1-8c42-ca3c920a9889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:33:f0:94:22:f2:b9:aa:90:c7:cb:a9:e5:32: a8:32:28:3f:66:00:a0:aa:76:55:82:c9:50:5c:12: 19:ed:cf:b9:05:99:61:71:4b:7b:c4:26:61:8e:04: ba:66:87:b0:1f:78:2e:08:bf:36:7b:f9:f4:57:8e: 11:5e:de:e4:15:b3:5b:af:24:87:39:20:8c:0f:27: 8c:4e:32:cf:fc:69:65:31:e5:66:b1:9c:f4:06:31: 43:5d:5c:39:a4:41:63:96:03:89:58:89:1f:5a:00: 19:63:28:69:d6:e9:4c:5a:ad:70:db:56:76:b4:f0: eb:1c:0d:c0:33:31:a6:a7:bf:4d:d2:73:5e:78:78: 46:16:38:4d:00:25:5b:9d:de:b3:02:0b:97:35:ee: 9b:49:14:16:7a:51:f5:e5:43:c1:2a:e1:ad:f6:d6: 22:53:be:b0:f5:39:fe:74:54:8b:98:d3:25:34:4b: fb:26:19:e0:62:1a:50:ec:12:92:d8:4d:a8:22:56: f3:97:df:17:5f:88:0a:c6:6d:c9:88:38:70:3d:ce: 23:c7:5e:f6:79:6b:a2:98:73:a2:bf:25:e4:f1:b2: cb:5b:55:70:18:2a:bf:8b:5d:3e:5d:0e:46:07:c8: 78:b3:03:c9:10:16:03:97:73:2e:8b:af:c7:e6:96: 9f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:92:EC:D5:C8:29:53:3C:51:4F:12:9D:C1:1D:22:8C:98:40:27:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b48d68b5-272e-3cf5-8294-9060f0d20413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.205.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:82:55:a7:57:c3:cf:de:dc:ef:bd:5c:7b:17:0c:a1:71:34: ad:65:cb:37:0c:07:6c:03:14:de:31:dd:94:28:a2:d1:5e:b8: 12:3a:6a:89:db:14:df:1f:ba:28:4f:e2:26:ab:a5:16:45:4a: f6:a6:9d:3d:40:c3:19:3b:1d:39:59:fb:2c:4a:f1:61:46:8e: 1a:47:d1:1c:ca:9b:bd:a1:15:8f:7e:7a:7b:56:02:68:a2:56: 32:9a:48:14:10:88:eb:aa:26:18:f7:41:9c:72:23:66:53:57: 4f:c4:d4:4f:f6:ce:11:cb:9b:0a:33:0d:38:3b:32:42:58:20: f6:71:fc:13:3d:d2:c9:51:e1:fb:04:d8:1b:25:06:46:9f:27: 70:30:47:55:84:06:75:a8:2b:07:e7:f4:5e:57:ac:1a:4e:c3: 82:86:a4:17:86:e6:96:bf:f4:0e:47:3c:e4:0a:c9:5e:8b:88: 34:26:31:28:c1:2c:13:2c:cc:e0:b6:14:12:62:62:d8:2b:f9: 06:41:f9:b1:e8:29:75:ab:d3:26:10:66:69:50:23:96:62:ec: 63:e5:b9:ad:ee:23:5e:c2:20:9e:6c:a3:a4:63:6a:b5:95:52: 54:77:a9:84:bc:3f:ec:c8:be:19:ff:ff:2e:8b:ea:81:61:2c: ae:d3:d0:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhxiR1pcqK/e6lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk ZGEyZTQyNzgtODg1Ny00NWYxLThjNDItY2EzYzkyMGE5ODg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzPwlCLyuaqQx8up5TKoMig/ZgCgqnZVgslQ XBIZ7c+5BZlhcUt7xCZhjgS6ZoewH3guCL82e/n0V44RXt7kFbNbrySHOSCMDyeM TjLP/GllMeVmsZz0BjFDXVw5pEFjlgOJWIkfWgAZYyhp1ulMWq1w21Z2tPDrHA3A MzGmp79N0nNeeHhGFjhNACVbnd6zAguXNe6bSRQWelH15UPBKuGt9tYiU76w9Tn+ dFSLmNMlNEv7JhngYhpQ7BKS2E2oIlbzl98XX4gKxm3JiDhwPc4jx172eWuimHOi vyXk8bLLW1VwGCq/i10+XQ5GB8h4swPJEBYDl3Mui6/H5paf2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyS7NXIKVM8UU8SncEdIoyYQCdBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjQ4ZDY4YjUtMjcyZS0z Y2Y1LTgyOTQtOTA2MGYwZDIwNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQM2UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqCVadXw8/e3O+9XHsXDKFxNK1lyzcMB2wDFN4x3ZQootFeuBI6aonb FN8fuihP4iarpRZFSvamnT1Awxk7HTlZ+yxK8WFGjhpH0RzKm72hFY9+entWAmii VjKaSBQQiOuqJhj3QZxyI2ZTV0/E1E/2zhHLmwozDTg7MkJYIPZx/BM90slR4fsE 2BslBkafJ3AwR1WEBnWoKwfn9F5XrBpOw4KGpBeG5pa/9A5HPOQKyV6LiDQmMSjB LBMszOC2FBJiYtgr+QZB+bHoKXWr0yYQZmlQI5Zi7GPlua3uI17CIJ5so6RjarWV UlR3qYS8P+zIvhn//y6L6oFhLK7T0Hw= -----END CERTIFICATE-----Generated at Mon Mar 2 13:06:48 2026 by rpki-client