$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fac76b0a-06fd-3be5-92fc-a354844aff35.roa File: fac76b0a-06fd-3be5-92fc-a354844aff35.roa (raw, json) Hash identifier: Yz9o310n04Tf/jSWsfUKCdThZwBxqxRMcvLlIlPkGM8= Subject key identifier: D5:8B:82:2B:DD:75:96:5E:5B:8D:A7:CC:1B:03:0E:91:DD:57:00:32 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CAE5E883BC85171C0267BFAD0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fac76b0a-06fd-3be5-92fc-a354844aff35.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 4766 IP address blocks: 64.81.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:88:3b:c8:51:71:c0:26:7b:fa:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=23f0fc65-7ec8-4e31-bb44-3c390fd6c56a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:08:69:05:36:16:99:16:2d:02:e1:f9:ad:14: 34:78:57:df:12:58:dd:cf:12:7b:e1:46:f6:a9:df: 16:10:5e:1b:f9:74:c5:ba:b1:5e:89:b0:69:f9:8e: ff:a4:a2:41:e2:f1:8a:a3:52:a7:22:e1:33:c8:39: 0b:57:7a:b4:e9:29:cb:15:04:b9:0b:48:49:d4:14: 06:40:1b:48:cd:54:37:ed:08:00:c1:30:20:8d:7b: 88:54:0e:1b:ff:58:07:bf:d6:d0:bc:fd:4b:e2:89: 50:57:fd:ae:49:5c:9b:36:d2:6c:34:03:45:8f:5c: b7:11:d7:33:7c:e9:bb:ff:15:1b:b8:6e:05:3c:00: 5d:b0:98:ab:a5:c9:bd:54:9d:d8:50:fd:47:87:4a: a7:df:3b:4f:13:bc:48:db:da:93:b5:5d:45:0e:18: e4:0e:cc:96:f7:99:86:dd:04:c7:4c:54:20:eb:25: 42:d6:5a:02:6c:73:82:59:5c:95:f8:4d:c2:c0:10: f8:db:40:73:c1:48:8e:30:da:f4:d8:94:1c:3f:5d: 5b:d6:eb:9f:ac:e8:f8:ec:ab:33:18:3a:ee:7c:0a: 6f:27:e1:25:26:b9:ec:55:af:56:63:bb:f2:c7:92: 50:77:bb:65:96:e4:ef:a6:94:64:37:15:60:08:36: cb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8B:82:2B:DD:75:96:5E:5B:8D:A7:CC:1B:03:0E:91:DD:57:00:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fac76b0a-06fd-3be5-92fc-a354844aff35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.81.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:56:58:2f:6e:f3:75:36:ea:ee:90:bf:39:b4:52:47:18:5a: 44:c9:1b:97:02:7d:70:02:f3:cd:6f:28:cd:d9:9b:6f:5a:fd: 45:00:f1:e3:c8:07:91:1b:b1:de:8e:55:36:c0:28:10:8b:82: 4d:b9:13:63:ca:7b:82:66:85:e5:8d:8b:c1:f5:92:52:68:e4: a0:0a:f3:1f:88:07:f5:1b:ea:f4:1d:b1:77:47:3c:b7:3d:d2: 58:f7:f1:a9:64:9c:8c:45:ec:50:03:15:9e:f7:f9:f6:50:93: b2:3a:13:a1:fc:a5:1c:56:03:80:6b:8e:ea:f3:e3:dc:6a:e0: f3:e9:61:26:25:21:09:a7:1d:50:dd:5c:84:eb:09:dd:c8:bb: 57:fc:03:0c:df:54:92:57:93:df:5b:88:83:69:26:26:71:74: 06:13:d8:c2:7c:89:8a:ce:42:0d:96:5d:03:28:2e:b2:d7:31: 23:29:0a:59:5a:07:43:f1:e0:6a:a5:5d:5e:92:8b:09:e2:80: 13:3d:65:c8:68:96:cf:c5:3b:2e:3f:bf:d1:55:7b:f4:d6:a3: 26:cb:00:91:55:61:b9:02:7b:e8:02:73:cb:c6:e1:35:e1:2f: b7:4e:61:36:fa:27:cc:2a:3c:ac:6b:16:cd:d8:a4:ab:11:a5: 2a:7d:4f:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXog7yFFxwCZ7+tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MjNmMGZjNjUtN2VjOC00ZTMxLWJiNDQtM2MzOTBmZDZjNTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5whpBTYWmRYtAuH5rRQ0eFffEljdzxJ74Ub2 qd8WEF4b+XTFurFeibBp+Y7/pKJB4vGKo1KnIuEzyDkLV3q06SnLFQS5C0hJ1BQG QBtIzVQ37QgAwTAgjXuIVA4b/1gHv9bQvP1L4olQV/2uSVybNtJsNANFj1y3Edcz fOm7/xUbuG4FPABdsJirpcm9VJ3YUP1Hh0qn3ztPE7xI29qTtV1FDhjkDsyW95mG 3QTHTFQg6yVC1loCbHOCWVyV+E3CwBD420BzwUiOMNr02JQcP11b1uufrOj47Ksz GDrufApvJ+ElJrnsVa9WY7vyx5JQd7tlluTvppRkNxVgCDbLuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWLgivddZZeW42nzBsDDpHdVwAyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmFjNzZiMGEtMDZmZC0z YmU1LTkyZmMtYTM1NDg0NGFmZjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQFGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpWWC9u83U26u6Qvzm0UkcYWkTJG5cCfXAC881vKM3Zm29a/UUA8ePI B5Ebsd6OVTbAKBCLgk25E2PKe4JmheWNi8H1klJo5KAK8x+IB/Ub6vQdsXdHPLc9 0lj38alknIxF7FADFZ73+fZQk7I6E6H8pRxWA4Brjurz49xq4PPpYSYlIQmnHVDd XITrCd3Iu1f8AwzfVJJXk99biINpJiZxdAYT2MJ8iYrOQg2WXQMoLrLXMSMpClla B0Px4GqlXV6SiwnigBM9Zchols/FOy4/v9FVe/TWoybLAJFVYbkCe+gCc8vG4TXh L7dOYTb6J8wqPKxrFs3YpKsRpSp9T6A= -----END CERTIFICATE-----Generated at Sun Mar 1 21:00:21 2026 by rpki-client