$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/d8496ccc-cf35-371c-a177-85bc6f97f738.roa File: d8496ccc-cf35-371c-a177-85bc6f97f738.roa (raw, json) Hash identifier: 0j6q8AvXLoKjwvkGMK7x+JIr/ngGOT1/+gbJIPOtg1s= Subject key identifier: CE:9E:62:5F:FB:8B:FE:4F:56:50:D0:FC:16:8A:0C:16:98:76:11:25 Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Certificate serial: 010D0C9F4328584CAFBC7B9008D20167DE645E80 Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/d8496ccc-cf35-371c-a177-85bc6f97f738.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 397423 IP address blocks: 64.40.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:7b:90:08:d2:01:67:de:64:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=589abe44-9728-4bd3-8abb-783c93b6c182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:af:8e:00:d6:b2:e0:14:ea:cb:8a:b6:cf:c6: bb:e7:b7:35:43:df:f7:78:f4:eb:a2:d3:c0:e9:28: f0:fc:b7:c6:5e:84:63:f7:53:0b:10:0c:6c:0b:80: 55:46:78:a7:24:9b:41:5b:9e:c2:0d:8c:7c:51:19: 34:3e:ab:9d:24:a2:2a:07:22:ab:3e:d5:44:2f:13: 09:49:f2:10:47:b3:8e:a0:43:f2:de:29:87:dd:bc: d6:7c:de:65:3f:f1:af:7d:23:4b:ce:7b:60:b6:3c: 6f:ac:c2:2e:80:5b:fb:86:f7:5c:e9:3f:da:6c:bc: 0c:67:cb:1e:b3:d4:dd:d8:f0:33:62:2c:5a:80:1b: 7f:d5:57:54:96:a4:91:ef:83:59:cf:3b:67:43:f8: d4:ac:a5:75:7c:01:3a:b0:8d:e3:58:a0:99:14:1f: 97:70:6f:b1:b5:2e:a2:34:56:b0:52:87:0b:9d:c0: 2c:1e:d8:8c:aa:72:de:8a:fe:33:d5:51:eb:46:83: c4:34:07:d8:75:2c:6e:7b:80:ad:cc:d7:cb:10:49: f2:e0:94:dc:a2:38:87:81:8a:bc:10:77:65:96:44: a3:54:4c:e3:0e:c6:75:41:72:f8:61:02:0a:0f:6a: b7:a3:f1:a6:fc:9e:11:ad:cf:77:8d:d7:d4:fa:59: 2a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9E:62:5F:FB:8B:FE:4F:56:50:D0:FC:16:8A:0C:16:98:76:11:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/d8496ccc-cf35-371c-a177-85bc6f97f738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl X509v3 Authority Key Identifier: keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer sbgp-ipAddrBlock: critical IPv4: 64.40.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:11:89:d1:85:f4:0f:11:09:a3:ed:b4:aa:21:50:49:c5:e5: d6:28:72:b2:4a:1b:41:00:d3:c1:6e:54:00:c1:78:b8:59:81: 7a:44:76:5c:f4:23:de:46:a2:89:57:61:10:b4:b0:79:64:b8: 02:e0:c7:f4:3b:d8:99:5b:d0:7c:e9:ab:2c:b2:22:ed:69:a4: 4a:42:78:66:15:91:00:8d:a6:09:28:a6:e4:53:3b:52:8e:83: 2b:53:56:3c:6a:f6:b7:a5:46:21:20:f3:f2:c9:82:8c:28:5f: e9:78:62:4d:3a:e7:c8:a7:d2:fb:b5:c0:bb:f4:17:e4:bf:98: 1c:7e:ef:b5:a8:d8:25:78:52:1a:04:1c:2a:b9:19:8b:3e:43: d0:05:f6:10:54:ae:d4:6e:e7:03:70:a3:5a:30:ad:ed:b5:82: d9:6f:3b:c4:60:09:f9:c7:47:8d:08:8b:f7:9a:c5:96:aa:b9: 8c:8e:dc:c8:9c:bf:ea:34:ba:35:05:d3:f4:ac:8f:d3:ec:53: 99:71:6b:f6:3c:ba:88:ef:b9:ae:66:e2:80:80:78:1b:d5:bc: 6c:04:62:77:84:2e:83:3b:db:18:26:7e:36:13:7b:98:83:1b: 73:7b:c8:00:40:83:ea:d5:4e:81:50:1e:36:70:d9:d9:6b:18: 25:4b:d2:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvHuQCNIBZ95kXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk NWVlMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk NTg5YWJlNDQtOTcyOC00YmQzLThhYmItNzgzYzkzYjZjMTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6+OANay4BTqy4q2z8a757c1Q9/3ePTrotPA 6Sjw/LfGXoRj91MLEAxsC4BVRninJJtBW57CDYx8URk0PqudJKIqByKrPtVELxMJ SfIQR7OOoEPy3imH3bzWfN5lP/GvfSNLzntgtjxvrMIugFv7hvdc6T/abLwMZ8se s9Td2PAzYixagBt/1VdUlqSR74NZzztnQ/jUrKV1fAE6sI3jWKCZFB+XcG+xtS6i NFawUocLncAsHtiMqnLeiv4z1VHrRoPENAfYdSxue4CtzNfLEEny4JTcojiHgYq8 EHdllkSjVEzjDsZ1QXL4YQIKD2q3o/Gm/J4Rrc93jdfU+lkqkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6eYl/7i/5PVlDQ/BaKDBaYdhElMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5 MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvZDg0OTZjY2MtY2YzNS0z NzFjLWExNzctODViYzZmOTdmNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4 Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1 YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCiaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0RidGF9A8RCaPttKohUEnF5dYocrJKG0EA08FuVADBeLhZgXpEdlz0 I95GoolXYRC0sHlkuALgx/Q72Jlb0HzpqyyyIu1ppEpCeGYVkQCNpgkopuRTO1KO gytTVjxq9relRiEg8/LJgowoX+l4Yk0658in0vu1wLv0F+S/mBx+77Wo2CV4UhoE HCq5GYs+Q9AF9hBUrtRu5wNwo1owre21gtlvO8RgCfnHR40Ii/eaxZaquYyO3Mic v+o0ujUF0/Ssj9PsU5lxa/Y8uojvua5m4oCAeBvVvGwEYneELoM72xgmfjYTe5iD G3N7yABAg+rVToFQHjZw2dlrGCVL0sg= -----END CERTIFICATE-----Generated at Mon Feb 23 04:03:20 2026 by rpki-client