$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/db9f9283-9f59-3943-9b5d-414b64f0037f.roa File: db9f9283-9f59-3943-9b5d-414b64f0037f.roa (raw, json) Hash identifier: cTtaT+C0XrJtOrOIWKkYha1k77jDN36FQKRFMGti7V4= Subject key identifier: 0B:9C:3C:85:00:89:8B:0B:A2:AF:8F:2F:87:AD:6F:53:77:7B:07:ED Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584CBAE722A77E0DC27180BBAC80 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/db9f9283-9f59-3943-9b5d-414b64f0037f.roa Signing time: Mon 02 Feb 2026 14:00:40 +0000 ROA not before: Mon 02 Feb 2026 14:00:40 +0000 ROA not after: Sun 03 May 2026 13:00:40 +0000 asID: 401659 IP address blocks: 64.255.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ba:e7:22:a7:7e:0d:c2:71:80:bb:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Feb 2 14:00:40 2026 GMT Not After : May 3 13:00:40 2026 GMT Subject: CN=2a5646b9-fe1d-422b-85fd-cce3efcd977e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bf:e7:e9:17:39:17:e9:71:b6:14:7c:f7:79: 23:17:bd:91:82:4b:4a:f2:f9:eb:e0:bd:95:a6:df: 1c:7a:e0:08:66:f5:f3:48:be:d4:d7:29:be:4f:2e: 4e:c3:09:f0:f7:a4:1e:93:29:ff:b7:65:f7:9f:a1: 52:a6:63:ec:1b:af:30:de:12:3b:26:8e:57:ab:90: f2:8a:54:2a:7a:5d:b4:8b:2d:29:ae:f9:25:cb:fd: f1:27:74:ad:9e:af:44:02:58:91:4e:87:60:57:17: 07:17:20:33:45:22:fb:fb:e1:df:7c:c5:0b:c5:8e: 5f:0a:7d:1e:37:6a:e8:4c:f5:56:1a:72:7c:db:d9: b1:c9:b7:30:c4:68:d4:73:d9:86:8d:37:4f:f0:d7: 5f:fd:d0:15:b8:cd:ef:2d:7b:6e:c7:b9:86:1c:70: ed:02:83:ea:15:58:17:04:c4:5d:27:4c:84:c9:c2: 9d:1b:4b:cd:be:ee:ff:a0:39:bc:7b:1e:f0:3f:6b: 3e:41:4c:24:a3:dd:eb:60:a4:2e:3c:6d:96:95:89: 7c:a7:ee:38:a7:25:b7:82:b4:73:23:8c:26:b3:bb: bc:e7:75:b9:d0:d9:b3:e5:4e:cc:19:5c:80:2d:35: 56:11:cc:f6:c1:2a:24:6f:50:20:61:c1:b3:4a:d1: e5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:9C:3C:85:00:89:8B:0B:A2:AF:8F:2F:87:AD:6F:53:77:7B:07:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/db9f9283-9f59-3943-9b5d-414b64f0037f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 64.255.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:80:2d:24:c8:f5:1d:0f:bd:ef:13:46:11:1c:57:03:08:c3: 25:25:45:ac:30:a6:88:58:d7:fc:3b:8e:42:b3:2f:db:45:33: 59:14:07:ef:03:38:34:31:55:57:52:35:5d:0e:9e:9c:79:cf: c1:41:7e:47:30:77:be:fa:07:9a:bb:76:1b:31:f4:e9:8f:12: a1:01:c2:91:c0:98:07:95:aa:09:4d:02:7c:19:0e:8f:55:dd: 35:07:c9:e6:39:c0:c4:74:72:d5:35:ba:ce:54:73:4d:ae:32: 0d:4f:19:9b:86:cb:e2:6b:dd:a9:4f:6e:11:d0:9d:4f:4b:72: c7:07:fc:72:bd:d4:be:c1:ce:17:d2:5c:62:ff:00:dd:f8:4e: 58:33:64:ef:3a:b5:1d:2a:f6:7e:90:66:e3:49:e6:da:4c:ec: 2f:dd:09:ae:5b:3a:13:6d:1c:a3:3a:a5:0c:81:c9:7e:aa:b1: 2e:3e:fa:85:c2:4c:e3:79:05:91:1c:ba:81:dc:44:4a:f0:07: ba:8b:91:0b:d8:e1:97:03:a2:55:4c:da:d3:8f:f8:c4:4c:a8: 38:03:28:9d:62:7e:e8:41:e2:d9:a2:21:2d:51:16:4d:89:0b: bc:27:c3:85:36:cf:50:0d:7d:28:a4:c2:29:75:21:75:6a:b5: 0f:9a:c7:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy65yKnfg3CcYC7rIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDIwMjE0MDA0MFoXDTI2MDUwMzEzMDA0MFowLzEtMCsGA1UEAxMk MmE1NjQ2YjktZmUxZC00MjJiLTg1ZmQtY2NlM2VmY2Q5NzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL/n6Rc5F+lxthR893kjF72RgktK8vnr4L2V pt8ceuAIZvXzSL7U1ym+Ty5Owwnw96Qekyn/t2X3n6FSpmPsG68w3hI7Jo5Xq5Dy ilQqel20iy0prvkly/3xJ3Stnq9EAliRTodgVxcHFyAzRSL7++HffMULxY5fCn0e N2roTPVWGnJ829mxybcwxGjUc9mGjTdP8Ndf/dAVuM3vLXtux7mGHHDtAoPqFVgX BMRdJ0yEycKdG0vNvu7/oDm8ex7wP2s+QUwko93rYKQuPG2WlYl8p+44pyW3grRz I4wms7u853W50Nmz5U7MGVyALTVWEcz2wSokb1AgYcGzStHlLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAucPIUAiYsLoq+PL4etb1N3ewftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvZGI5ZjkyODMtOWY1OS0z OTQzLTliNWQtNDE0YjY0ZjAwMzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQP8vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+ALSTI9R0Pve8TRhEcVwMIwyUlRawwpohY1/w7jkKzL9tFM1kUB+8D ODQxVVdSNV0Onpx5z8FBfkcwd776B5q7dhsx9OmPEqEBwpHAmAeVqglNAnwZDo9V 3TUHyeY5wMR0ctU1us5Uc02uMg1PGZuGy+Jr3alPbhHQnU9LcscH/HK91L7BzhfS XGL/AN34TlgzZO86tR0q9n6QZuNJ5tpM7C/dCa5bOhNtHKM6pQyByX6qsS4++oXC TON5BZEcuoHcRErwB7qLkQvY4ZcDolVM2tOP+MRMqDgDKJ1ifuhB4tmiIS1RFk2J C7wnw4U2z1ANfSikwil1IXVqtQ+axys= -----END CERTIFICATE-----Generated at Mon Mar 2 07:49:39 2026 by rpki-client