$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/b8f1b0d4-5487-3c51-9f61-4e97726e3695.roa File: b8f1b0d4-5487-3c51-9f61-4e97726e3695.roa (raw, json) Hash identifier: n+CjymLwsAVwWuC0C4lOlRkLwsWoAHOY576Slpuu5jc= Subject key identifier: C7:D8:39:67:85:3A:20:B2:A9:96:B7:46:92:40:19:7E:C8:97:E0:95 Certificate issuer: /CN=580e739b-bb2f-4e02-9a24-4813328e39cf Certificate serial: 010D0C9F4328584CF95B23E5772C3FFFD1A43340 Authority key identifier: E7:79:6E:D4:0C:02:40:FD:99:B7:72:46:72:82:E5:A1:D4:89:C8:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/b8f1b0d4-5487-3c51-9f61-4e97726e3695.roa Signing time: Tue 24 Feb 2026 21:04:57 +0000 ROA not before: Tue 24 Feb 2026 21:04:57 +0000 ROA not after: Mon 25 May 2026 20:04:57 +0000 asID: 3736 IP address blocks: 204.138.71.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f9:5b:23:e5:77:2c:3f:ff:d1:a4:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=580e739b-bb2f-4e02-9a24-4813328e39cf Validity Not Before: Feb 24 21:04:57 2026 GMT Not After : May 25 20:04:57 2026 GMT Subject: CN=77915eaf-3c70-4837-87bf-b80279052a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9d:32:f5:41:d3:1c:78:e5:8a:f7:67:59:94: af:ae:90:a5:e6:78:3b:c5:d4:07:58:10:3b:00:07: a6:f9:37:2a:3f:bf:8a:6f:65:6d:46:0d:f4:c7:6b: 8b:99:96:a4:5d:58:0f:d1:38:56:54:d4:fd:cb:a4: aa:fd:76:95:bb:2a:e6:b2:9f:83:69:55:ad:49:75: 62:bd:2c:95:ce:de:bc:b1:10:13:df:87:42:1e:6f: 8c:ed:c9:d0:d9:80:ae:8c:32:4f:fa:d8:e4:b5:45: ae:9f:55:c6:cd:56:52:aa:a4:56:19:2a:5d:1f:3c: a2:22:45:90:3f:f5:8b:03:ba:1e:b9:10:b6:1e:ed: d2:ad:1c:ef:8b:3f:51:33:08:49:17:23:de:d4:57: 23:97:a3:0d:6e:dc:2e:00:19:e0:56:31:e5:b8:e6: ed:57:e1:96:e2:00:33:db:38:f3:fb:ac:1e:39:29: 35:c9:38:a9:c7:d0:14:a2:2d:a1:76:c0:c3:8c:5d: cf:f6:51:27:2b:6d:c4:44:2d:ca:ba:b2:13:8b:cf: 23:2e:be:ea:15:94:cf:4f:fd:52:90:9f:14:f4:e0: 92:cd:77:05:f4:50:2b:d6:fa:09:db:60:d6:f0:77: ac:0c:e5:ba:30:8e:a0:46:91:c5:ed:fa:f0:cd:14: 62:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D8:39:67:85:3A:20:B2:A9:96:B7:46:92:40:19:7E:C8:97:E0:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/b8f1b0d4-5487-3c51-9f61-4e97726e3695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.crl X509v3 Authority Key Identifier: keyid:E7:79:6E:D4:0C:02:40:FD:99:B7:72:46:72:82:E5:A1:D4:89:C8:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer sbgp-ipAddrBlock: critical IPv4: 204.138.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f5:0d:00:e5:12:f5:8e:1d:a2:0c:12:67:fe:a1:13:77:67: ef:d0:8f:ce:8e:2a:ea:75:8a:44:0c:a3:35:3a:e9:7d:9f:eb: 9d:23:fa:ff:df:72:66:3b:a6:b9:e5:a2:aa:65:69:dd:19:7d: 9d:57:8e:9a:cc:0a:14:10:8b:63:0f:93:b7:6b:22:06:b0:1a: ab:13:53:12:d7:29:6e:5d:8f:fb:96:68:83:e2:a3:5f:a3:d6: b5:2c:72:e1:e8:d9:b6:6f:93:fa:d7:8b:8b:88:1b:51:75:19: 13:d5:4b:08:26:90:d6:c6:35:6b:e1:24:39:03:0f:cc:51:8d: 8c:8d:ad:e4:2c:de:a9:31:97:40:49:0c:a3:76:47:b9:91:b0: ba:6d:a4:15:0a:b1:bd:c2:f8:e9:80:05:35:59:da:80:d6:a7: e8:fa:93:5e:4c:0c:bc:19:db:a3:a8:ad:d5:00:8b:8d:1c:7c: 19:7b:14:fa:3e:4b:2e:c8:42:a8:00:93:06:4d:fa:7b:a8:1e: 9e:2a:a5:51:67:04:b0:07:32:65:8d:6e:9c:05:5e:e5:8d:13: 56:d3:dc:46:71:31:d4:39:c0:5e:cd:03:97:fe:7a:10:9e:40: 77:fc:30:97:a1:ea:bf:52:9e:47:8b:f4:b8:d1:cc:07:88:82: c2:f4:1e:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz5WyPldyw//9GkM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTgwZTczOWItYmIyZi00ZTAyLTlhMjQtNDgxMzMyOGUz OWNmMB4XDTI2MDIyNDIxMDQ1N1oXDTI2MDUyNTIwMDQ1N1owLzEtMCsGA1UEAxMk Nzc5MTVlYWYtM2M3MC00ODM3LTg3YmYtYjgwMjc5MDUyYTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh50y9UHTHHjlivdnWZSvrpCl5ng7xdQHWBA7 AAem+TcqP7+Kb2VtRg30x2uLmZakXVgP0ThWVNT9y6Sq/XaVuyrmsp+DaVWtSXVi vSyVzt68sRAT34dCHm+M7cnQ2YCujDJP+tjktUWun1XGzVZSqqRWGSpdHzyiIkWQ P/WLA7oeuRC2Hu3SrRzviz9RMwhJFyPe1Fcjl6MNbtwuABngVjHluObtV+GW4gAz 2zjz+6weOSk1yTipx9AUoi2hdsDDjF3P9lEnK23ERC3KurITi88jLr7qFZTPT/1S kJ8U9OCSzXcF9FAr1voJ22DW8HesDOW6MI6gRpHF7frwzRRi7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfYOWeFOiCyqZa3RpJAGX7Il+CVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81ODBl NzM5Yi1iYjJmLTRlMDItOWEyNC00ODEzMzI4ZTM5Y2YvYjhmMWIwZDQtNTQ4Ny0z YzUxLTlmNjEtNGU5NzcyNmUzNjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTgwZTczOWItYmIyZi00ZTAyLTlh MjQtNDgxMzMyOGUzOWNmLzU4MGU3MzliLWJiMmYtNGUwMi05YTI0LTQ4MTMzMjhl MzljZi5jcmwwHwYDVR0jBBgwFoAU53lu1AwCQP2Zt3JGcoLlodSJyLUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81ODBlNzM5Yi1iYjJmLTRlMDItOWEyNC00ODEz MzI4ZTM5Y2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzIpHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAED1DQDlEvWOHaIMEmf+oRN3Z+/Qj86OKup1ikQMozU66X2f650j+v/f cmY7prnloqplad0ZfZ1XjprMChQQi2MPk7drIgawGqsTUxLXKW5dj/uWaIPio1+j 1rUscuHo2bZvk/rXi4uIG1F1GRPVSwgmkNbGNWvhJDkDD8xRjYyNreQs3qkxl0BJ DKN2R7mRsLptpBUKsb3C+OmABTVZ2oDWp+j6k15MDLwZ26OordUAi40cfBl7FPo+ Sy7IQqgAkwZN+nuoHp4qpVFnBLAHMmWNbpwFXuWNE1bT3EZxMdQ5wF7NA5f+ehCe QHf8MJeh6r9SnkeL9LjRzAeIgsL0Hhc= -----END CERTIFICATE-----Generated at Mon Mar 2 05:09:43 2026 by rpki-client