$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b930876-7fd4-4879-9e0c-4dd44b4cc7f7/f4ea5459-55bb-3265-8853-098299ea3d19.roa File: f4ea5459-55bb-3265-8853-098299ea3d19.roa (raw, json) Hash identifier: Ne1t+6+LYH0xtNeuKoL2v9l85kObvZx7Nnz3uIwTCsc= Subject key identifier: C5:33:F7:D6:A5:26:20:7B:88:62:5B:EA:1A:DB:08:DB:50:39:95:E1 Certificate issuer: /CN=6b930876-7fd4-4879-9e0c-4dd44b4cc7f7 Certificate serial: 010D0C9F4328584CAE5EA3A43BCBA1BDC278F900 Authority key identifier: 68:54:80:31:69:F3:83:7F:13:F3:75:11:6F:11:FA:3A:F6:DB:C8:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b930876-7fd4-4879-9e0c-4dd44b4cc7f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b930876-7fd4-4879-9e0c-4dd44b4cc7f7/f4ea5459-55bb-3265-8853-098299ea3d19.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 15221 IP address blocks: 66.113.0.0/19 maxlen: 24 209.248.64.0/18 maxlen: 24 2605:90c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b930876-7fd4-4879-9e0c-4dd44b4cc7f7/6b930876-7fd4-4879-9e0c-4dd44b4cc7f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b930876-7fd4-4879-9e0c-4dd44b4cc7f7/6b930876-7fd4-4879-9e0c-4dd44b4cc7f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b930876-7fd4-4879-9e0c-4dd44b4cc7f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:a3:a4:3b:cb:a1:bd:c2:78:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b930876-7fd4-4879-9e0c-4dd44b4cc7f7 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=33eb0b73-46a3-43f1-a8f6-9d5b69b2fc28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4c:22:42:bf:83:84:58:bb:75:79:4f:ca:b7: 0b:7a:91:a8:ef:44:30:b4:12:d2:57:c1:62:a3:6d: 84:f3:21:5b:5a:3a:35:d7:83:6e:89:d9:07:fd:4f: 64:ee:31:17:ef:c9:ca:0b:02:84:b0:a2:6b:d9:7d: 51:86:92:fa:85:8b:4b:90:36:d3:1d:90:6d:d2:d0: 17:83:5d:39:40:ea:4d:f2:e5:a9:81:87:82:11:52: 70:cd:00:7a:7d:49:db:3f:01:16:9e:0f:f7:76:9c: d9:e6:cb:5f:e3:1b:87:5e:57:41:41:7f:99:02:ba: 86:f4:12:4f:ac:0b:63:96:7b:e7:1d:40:0f:0d:d7: 6a:80:04:a7:b8:e7:90:6e:f1:4d:e8:d7:2b:d6:1e: 44:41:67:7d:5c:7c:44:31:0c:ce:de:64:b7:a1:72: c0:79:40:47:5d:7b:83:94:59:87:88:70:1f:8a:b7: e6:eb:f6:b9:02:7f:c7:26:b9:4f:47:c0:be:94:57: 3e:c2:60:83:cf:ae:a6:a8:6e:42:8a:bd:94:9a:05: 83:dc:2a:20:6a:52:00:2f:83:85:18:8d:54:ea:80: ee:0c:e4:00:0f:8d:22:e0:a4:fa:ee:ae:64:e2:d2: 4a:7e:c3:a9:68:c3:53:56:56:3f:54:3c:94:c7:aa: 54:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:33:F7:D6:A5:26:20:7B:88:62:5B:EA:1A:DB:08:DB:50:39:95:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b930876-7fd4-4879-9e0c-4dd44b4cc7f7/f4ea5459-55bb-3265-8853-098299ea3d19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b930876-7fd4-4879-9e0c-4dd44b4cc7f7/6b930876-7fd4-4879-9e0c-4dd44b4cc7f7.crl X509v3 Authority Key Identifier: keyid:68:54:80:31:69:F3:83:7F:13:F3:75:11:6F:11:FA:3A:F6:DB:C8:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b930876-7fd4-4879-9e0c-4dd44b4cc7f7.cer sbgp-ipAddrBlock: critical IPv4: 66.113.0.0/19 209.248.64.0/18 IPv6: 2605:90c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ae:4f:aa:f5:31:9c:01:6d:ae:40:3e:aa:8c:35:68:b0:96: 00:12:d3:08:eb:ea:78:50:30:46:f2:78:5d:16:29:17:d2:13: c0:c2:5a:bb:21:3a:a4:7d:75:63:a2:43:11:19:1a:f2:07:06: 7e:b9:c4:b8:d9:bd:38:23:57:b8:e0:1f:e6:ec:b4:10:3e:54: 92:00:0b:6c:60:dc:c8:9e:09:95:08:f9:b5:86:6d:43:b9:ee: b2:c0:d3:ca:9d:32:58:cb:fe:d3:43:dc:75:6f:98:ff:7d:2f: ea:7b:7a:7b:ac:e2:fa:d7:8d:40:26:3b:c2:70:f2:78:94:28: f3:a3:4a:7f:20:7e:72:dd:80:ec:14:16:94:1d:74:d6:96:46: 83:a9:4c:dd:fb:a6:56:aa:8c:4d:f1:43:4a:9c:36:08:6e:56: 4d:70:20:5f:63:24:78:37:94:ad:37:de:99:cd:a9:6e:94:99: 11:57:2a:a3:04:a3:a9:42:af:8f:c2:4a:33:1b:69:2f:b6:51: 15:f7:b1:0b:59:16:ce:18:f2:6d:c6:f3:8d:c2:d4:90:cc:63: 2a:5d:7c:af:9f:23:31:f0:04:ea:8b:46:b9:c0:a1:d6:8a:0c: 2f:73:46:a0:0f:07:b4:c6:7f:94:97:67:0b:37:02:ce:b5:7a: 36:f3:b1:30 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEyuXqOkO8uhvcJ4+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmI5MzA4NzYtN2ZkNC00ODc5LTllMGMtNGRkNDRiNGNj N2Y3MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MzNlYjBiNzMtNDZhMy00M2YxLWE4ZjYtOWQ1YjY5YjJmYzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0wiQr+DhFi7dXlPyrcLepGo70QwtBLSV8Fi o22E8yFbWjo114NuidkH/U9k7jEX78nKCwKEsKJr2X1RhpL6hYtLkDbTHZBt0tAX g105QOpN8uWpgYeCEVJwzQB6fUnbPwEWng/3dpzZ5stf4xuHXldBQX+ZArqG9BJP rAtjlnvnHUAPDddqgASnuOeQbvFN6Ncr1h5EQWd9XHxEMQzO3mS3oXLAeUBHXXuD lFmHiHAfirfm6/a5An/HJrlPR8C+lFc+wmCDz66mqG5Cir2UmgWD3CogalIAL4OF GI1U6oDuDOQAD40i4KT67q5k4tJKfsOpaMNTVlY/VDyUx6pUrQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFMUz99alJiB7iGJb6hrbCNtQOZXhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82Yjkz MDg3Ni03ZmQ0LTQ4NzktOWUwYy00ZGQ0NGI0Y2M3ZjcvZjRlYTU0NTktNTViYi0z MjY1LTg4NTMtMDk4Mjk5ZWEzZDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmI5MzA4NzYtN2ZkNC00ODc5LTll MGMtNGRkNDRiNGNjN2Y3LzZiOTMwODc2LTdmZDQtNDg3OS05ZTBjLTRkZDQ0YjRj YzdmNy5jcmwwHwYDVR0jBBgwFoAUaFSAMWnzg38T83URbxH6OvbbyE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82YjkzMDg3Ni03ZmQ0LTQ4NzktOWUwYy00ZGQ0 NGI0Y2M3ZjcuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFQnEAAwQG 0fhAMA0EAgACMAcDBQAmBZDAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADquT6r1MZwBba5APqqMNWiwlgAS 0wjr6nhQMEbyeF0WKRfSE8DCWrshOqR9dWOiQxEZGvIHBn65xLjZvTgjV7jgH+bs tBA+VJIAC2xg3MieCZUI+bWGbUO57rLA08qdMljL/tND3HVvmP99L+p7enus4vrX jUAmO8Jw8niUKPOjSn8gfnLdgOwUFpQddNaWRoOpTN37plaqjE3xQ0qcNghuVk1w IF9jJHg3lK033pnNqW6UmRFXKqMEo6lCr4/CSjMbaS+2URX3sQtZFs4Y8m3G843C 1JDMYypdfK+fIzHwBOqLRrnAodaKDC9zRqAPB7TGf5SXZws3As61ejbzsTA= -----END CERTIFICATE-----Generated at Mon Mar 2 02:52:18 2026 by rpki-client