$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa File: da2805f3-2f45-37d2-81ac-675892bd2fa3.roa (raw, json) Hash identifier: sjdLjpuRmp7fEK7XcB7xSVoWT9kNvZ5Z344calTyKDw= Subject key identifier: A1:FC:92:49:4D:07:46:49:02:5C:02:E0:37:56:52:94:F6:18:97:1D Certificate issuer: /CN=82d0f472-6865-4d16-9252-e75f7b91368a Certificate serial: 010D0C9F4328584D1707DB36DA2DF95F63A6E3C0 Authority key identifier: 91:F2:68:F5:92:28:40:C7:86:D1:B2:A2:58:B7:AE:F9:4D:9E:BC:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 401382 IP address blocks: 64.190.20.0/24 maxlen: 24 167.150.24.0/22 maxlen: 22 2602:f7e7::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:db:36:da:2d:f9:5f:63:a6:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82d0f472-6865-4d16-9252-e75f7b91368a Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=4b15994b-4f16-4ad3-b0aa-8588db1781df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:db:2f:b6:99:09:0a:4f:c9:77:da:53:fb:04: a8:db:d5:0a:28:a7:0f:3b:ef:4f:38:49:b4:95:31: a8:df:c1:06:29:92:fa:1e:fe:41:65:a1:89:11:2f: 62:0e:38:c4:63:7e:1d:af:df:70:ed:83:3f:b4:16: c1:2c:73:e8:13:0b:38:26:f3:58:6f:e0:a3:82:95: db:a1:f8:34:83:03:0a:d3:9a:50:c4:ed:48:92:b9: 32:e2:aa:b4:7d:e7:6f:b4:b8:ba:d4:1f:35:8f:75: e1:8c:fc:bf:4f:fc:3a:4b:d3:f4:5f:12:ae:62:fd: 34:19:cc:c0:7e:e8:8e:71:98:65:1f:0c:85:bb:93: d0:c0:6e:61:c6:9e:cc:a4:3a:13:24:1e:4c:e0:63: 2f:4c:b0:ae:bc:88:78:5f:93:9d:70:52:39:7a:9e: 85:60:be:91:63:c7:45:97:f4:c3:d9:ae:10:72:cc: 89:2c:d4:cf:e1:04:28:41:eb:5d:35:33:bf:62:fd: 3d:30:2c:a0:00:be:0e:54:cc:e9:ec:28:21:f5:a2: c1:a2:1a:c1:df:53:49:0f:ce:63:ec:e4:5d:b5:7e: aa:c4:a9:1e:1a:2a:4a:2c:69:a5:16:f0:64:e9:e5: c2:9d:0d:77:44:55:b3:f4:58:10:82:e9:aa:59:89: dd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FC:92:49:4D:07:46:49:02:5C:02:E0:37:56:52:94:F6:18:97:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.crl X509v3 Authority Key Identifier: keyid:91:F2:68:F5:92:28:40:C7:86:D1:B2:A2:58:B7:AE:F9:4D:9E:BC:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer sbgp-ipAddrBlock: critical IPv4: 64.190.20.0/24 167.150.24.0/22 IPv6: 2602:f7e7::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:1e:e4:5c:d6:d0:f4:17:17:c4:bd:59:b3:fe:81:54:7c:0b: 38:cd:d2:1f:60:60:da:79:a2:d9:a8:d3:2d:19:71:fc:30:ca: 58:24:23:0a:fa:c6:83:a3:8b:7c:db:6b:12:cf:0e:56:78:07: 76:48:61:3a:82:b6:57:66:f8:7e:51:db:ba:c3:25:c1:69:28: da:ff:1d:6e:98:b1:02:e7:cf:95:a9:9d:7f:94:7b:29:17:13: b4:a4:8e:b4:b8:98:66:24:4f:43:a3:d5:40:1e:24:a1:1c:00: b7:6a:cd:62:92:cb:13:a3:59:e5:09:59:5c:46:13:c8:30:49: 73:2d:18:b7:ab:0f:21:d7:a4:aa:60:67:a1:2e:82:57:bd:e8: 06:50:93:b2:da:3d:59:70:d5:d1:20:23:5e:d4:de:d2:a4:ec: b9:f9:2b:31:0a:31:89:3d:b8:d3:89:57:5c:c4:9e:6a:03:f7: 63:4f:4d:83:bc:68:8a:fd:f6:aa:14:53:b8:b6:e3:73:cb:76: 22:40:30:48:93:f7:a6:3e:2b:7f:e8:4f:99:77:a4:01:38:c1: 32:a5:4c:aa:1e:d1:b5:90:a2:7a:af:d8:03:88:9e:13:c6:ff: 59:3e:d0:90:19:eb:61:2b:43:22:4b:86:f2:8d:bd:38:cb:9c: 26:c3:7d:8a -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE0XB9s22i35X2Om48AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODJkMGY0NzItNjg2NS00ZDE2LTkyNTItZTc1ZjdiOTEz NjhhMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk NGIxNTk5NGItNGYxNi00YWQzLWIwYWEtODU4OGRiMTc4MWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9svtpkJCk/Jd9pT+wSo29UKKKcPO+9POEm0 lTGo38EGKZL6Hv5BZaGJES9iDjjEY34dr99w7YM/tBbBLHPoEws4JvNYb+CjgpXb ofg0gwMK05pQxO1Ikrky4qq0fedvtLi61B81j3XhjPy/T/w6S9P0XxKuYv00GczA fuiOcZhlHwyFu5PQwG5hxp7MpDoTJB5M4GMvTLCuvIh4X5OdcFI5ep6FYL6RY8dF l/TD2a4QcsyJLNTP4QQoQetdNTO/Yv09MCygAL4OVMzp7Cgh9aLBohrB31NJD85j 7ORdtX6qxKkeGipKLGmlFvBk6eXCnQ13RFWz9FgQgumqWYnd0QIDAQABo4IDazCC A2cwHQYDVR0OBBYEFKH8kklNB0ZJAlwC4DdWUpT2GJcdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MmQw ZjQ3Mi02ODY1LTRkMTYtOTI1Mi1lNzVmN2I5MTM2OGEvZGEyODA1ZjMtMmY0NS0z N2QyLTgxYWMtNjc1ODkyYmQyZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODJkMGY0NzItNjg2NS00ZDE2LTky NTItZTc1ZjdiOTEzNjhhLzgyZDBmNDcyLTY4NjUtNGQxNi05MjUyLWU3NWY3Yjkx MzY4YS5jcmwwHwYDVR0jBBgwFoAUkfJo9ZIoQMeG0bKiWLeu+U2evCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MmQwZjQ3Mi02ODY1LTRkMTYtOTI1Mi1lNzVm N2I5MTM2OGEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAQL4UAwQC p5YYMA4EAgACMAgDBgAmAvfnADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByHuRc1tD0FxfEvVmz/oFUfAs4 zdIfYGDaeaLZqNMtGXH8MMpYJCMK+saDo4t822sSzw5WeAd2SGE6grZXZvh+Udu6 wyXBaSja/x1umLEC58+VqZ1/lHspFxO0pI60uJhmJE9Do9VAHiShHAC3as1ikssT o1nlCVlcRhPIMElzLRi3qw8h16SqYGehLoJXvegGUJOy2j1ZcNXRICNe1N7SpOy5 +SsxCjGJPbjTiVdcxJ5qA/djT02DvGiK/faqFFO4tuNzy3YiQDBIk/emPit/6E+Z d6QBOMEypUyqHtG1kKJ6r9gDiJ4Txv9ZPtCQGethK0MiS4byjb04y5wmw32K -----END CERTIFICATE-----Generated at Thu Mar 12 19:52:50 2026 by rpki-client