$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/5a7a7fbb-4d77-39ae-8fc5-d00ec178844e.roa File: 5a7a7fbb-4d77-39ae-8fc5-d00ec178844e.roa (raw, json) Hash identifier: E/kHAUbQ2Z4Bxb63ahMGNNMthwERvzn/gtlbKCR4TiM= Subject key identifier: B9:06:38:D2:96:0D:F8:C7:AB:D1:4F:66:83:5A:D1:F8:40:DA:0D:09 Certificate issuer: /CN=6063814d-5183-49de-90ee-84cbbecde422 Certificate serial: 010D0C9F4328584D0AFF22CD28FF7E385874DE00 Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/5a7a7fbb-4d77-39ae-8fc5-d00ec178844e.roa Signing time: Tue 03 Mar 2026 06:33:44 +0000 ROA not before: Tue 03 Mar 2026 06:33:44 +0000 ROA not after: Mon 01 Jun 2026 05:33:44 +0000 asID: 394446 IP address blocks: 204.25.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:ff:22:cd:28:ff:7e:38:58:74:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422 Validity Not Before: Mar 3 06:33:44 2026 GMT Not After : Jun 1 05:33:44 2026 GMT Subject: CN=81f16153-7336-4a6a-b280-a28ac4ecacf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:af:29:3d:7b:ab:5e:b1:69:d1:7b:27:4b:5c: 52:b4:bc:99:37:ca:ab:5c:22:fd:44:0b:ef:bc:64: 71:17:52:ef:39:03:be:51:fe:5a:bf:7f:93:aa:d2: 4e:c5:4d:1d:f6:2f:57:fe:0a:89:b6:00:7e:0c:64: cd:44:45:34:6d:2f:a7:9c:d3:44:64:63:f2:07:e5: a3:32:5b:68:b6:5b:1e:17:19:c4:bd:18:4b:8c:74: 77:16:23:a7:36:65:26:29:f3:28:fa:07:7f:71:63: 76:85:e5:79:22:98:03:41:f9:81:bf:c4:61:89:e9: 81:1b:45:37:81:23:02:b2:62:5c:ec:18:3b:6d:81: d5:2b:f5:b9:73:98:b6:16:b5:a4:78:e6:74:98:c9: cb:93:c0:18:48:a1:6a:7b:61:f1:68:38:a4:73:10: ab:b9:06:37:3f:59:a0:03:9c:3e:8e:46:8a:b6:5b: f2:28:b3:05:25:4d:b5:4e:df:b1:3b:1e:17:00:45: 33:ff:8e:bc:cc:57:00:0a:f3:54:ab:c1:a5:b8:2d: 3f:df:90:a5:4f:5c:f4:98:0c:81:a1:7a:dd:08:fa: c1:bb:95:b8:c3:28:46:c8:15:6f:cf:c4:95:2a:b9: 83:05:33:12:33:6b:b7:4e:37:b4:83:7c:55:c2:d1: c3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:06:38:D2:96:0D:F8:C7:AB:D1:4F:66:83:5A:D1:F8:40:DA:0D:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/5a7a7fbb-4d77-39ae-8fc5-d00ec178844e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl X509v3 Authority Key Identifier: keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer sbgp-ipAddrBlock: critical IPv4: 204.25.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:57:42:a3:35:bd:36:3d:a4:9e:0a:d5:2c:4f:62:b6:f3:60: a8:9f:d2:99:eb:cc:05:89:b7:c3:ae:66:e7:b7:9b:0f:f2:3a: 47:74:f6:59:8e:a1:fe:92:57:b9:b6:6c:a2:9d:b2:fd:87:d5: 53:0e:fe:e1:8e:e8:99:76:3f:9d:b0:83:9e:3e:01:3a:54:7a: b9:17:9f:ca:1f:ac:91:29:79:d4:2d:d2:42:98:c4:0b:0f:5f: e9:68:c9:58:f3:49:9e:30:b8:98:e7:83:b5:cb:d0:0b:4d:58: cc:be:5a:bb:10:12:56:3a:65:85:6d:1c:00:7b:30:b4:c1:0d: fb:c7:06:39:e8:0b:62:ec:02:cb:90:a5:ad:44:cd:00:7d:c0: 29:71:d6:b0:d5:9c:e4:02:74:ae:4d:8b:2c:fb:f4:3a:d0:5a: 4d:3c:8d:34:79:7f:f0:57:f6:0a:4d:df:d6:b6:89:5f:e4:24: cf:ac:bf:f5:09:a3:f4:16:48:7b:68:7f:2f:99:05:00:e6:1d: de:ab:6c:b0:94:50:40:cb:30:80:a4:fa:2b:f6:0a:e3:a1:37: 73:a2:ca:bb:59:7a:b1:59:0f:72:b0:04:2c:53:f3:93:c4:98: e8:4f:35:3b:30:fc:76:60:1d:30:a9:fa:12:d5:8a:69:44:19: ef:ce:06:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0K/yLNKP9+OFh03gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA2MzgxNGQtNTE4My00OWRlLTkwZWUtODRjYmJlY2Rl NDIyMB4XDTI2MDMwMzA2MzM0NFoXDTI2MDYwMTA1MzM0NFowLzEtMCsGA1UEAxMk ODFmMTYxNTMtNzMzNi00YTZhLWIyODAtYTI4YWM0ZWNhY2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj68pPXurXrFp0XsnS1xStLyZN8qrXCL9RAvv vGRxF1LvOQO+Uf5av3+TqtJOxU0d9i9X/gqJtgB+DGTNREU0bS+nnNNEZGPyB+Wj MltotlseFxnEvRhLjHR3FiOnNmUmKfMo+gd/cWN2heV5IpgDQfmBv8RhiemBG0U3 gSMCsmJc7Bg7bYHVK/W5c5i2FrWkeOZ0mMnLk8AYSKFqe2HxaDikcxCruQY3P1mg A5w+jkaKtlvyKLMFJU21Tt+xOx4XAEUz/468zFcACvNUq8GluC0/35ClT1z0mAyB oXrdCPrBu5W4wyhGyBVvz8SVKrmDBTMSM2u3Tje0g3xVwtHDmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkGONKWDfjHq9FPZoNa0fhA2g0JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MDYz ODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNiYmVjZGU0MjIvNWE3YTdmYmItNGQ3Ny0z OWFlLThmYzUtZDAwZWMxNzg4NDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjA2MzgxNGQtNTE4My00OWRlLTkw ZWUtODRjYmJlY2RlNDIyLzYwNjM4MTRkLTUxODMtNDlkZS05MGVlLTg0Y2JiZWNk ZTQyMi5jcmwwHwYDVR0jBBgwFoAU+oFKWYuHd/AMGvqgYA7Dhlv3AcAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82MDYzODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNi YmVjZGU0MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBnpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZXQqM1vTY9pJ4K1SxPYrbzYKif0pnrzAWJt8OuZue3mw/yOkd09lmO of6SV7m2bKKdsv2H1VMO/uGO6Jl2P52wg54+ATpUerkXn8ofrJEpedQt0kKYxAsP X+loyVjzSZ4wuJjng7XL0AtNWMy+WrsQElY6ZYVtHAB7MLTBDfvHBjnoC2LsAsuQ pa1EzQB9wClx1rDVnOQCdK5Niyz79DrQWk08jTR5f/BX9gpN39a2iV/kJM+sv/UJ o/QWSHtofy+ZBQDmHd6rbLCUUEDLMICk+iv2CuOhN3OiyrtZerFZD3KwBCxT85PE mOhPNTsw/HZgHTCp+hLVimlEGe/OBsY= -----END CERTIFICATE-----Generated at Sat Mar 14 13:53:49 2026 by rpki-client