$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/cbf0ebb9-455c-3107-8c84-974a7f12d863.roa File: cbf0ebb9-455c-3107-8c84-974a7f12d863.roa (raw, json) Hash identifier: k3LMuFkHRBUtG8Mfy4ejbqs6SP+UoBgfOKW/GB1H24I= Subject key identifier: 6F:D8:2E:06:39:BE:0B:57:42:A8:31:29:89:C1:5F:3B:DD:CD:94:FF Certificate issuer: /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Certificate serial: 010D0C9F4328584CF5878EFDDC2FEFA908803900 Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/cbf0ebb9-455c-3107-8c84-974a7f12d863.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 20454 IP address blocks: 64.38.208.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:8e:fd:dc:2f:ef:a9:08:80:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=e8dde7a3-7c9b-4c45-97cf-c4fe023c57aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:75:42:9f:e5:d7:03:96:50:01:2b:df:b0:b5: 95:25:39:bf:a0:18:6a:9f:32:9b:cb:64:cf:6d:cb: 14:16:23:50:93:ba:03:5c:77:06:af:bd:a1:44:0d: 03:f3:7e:71:7e:78:51:d9:23:f6:fe:91:63:6a:96: af:98:cc:bf:76:4f:44:23:79:6b:2a:61:b8:fe:31: a4:97:2d:8f:1a:03:bb:96:53:ae:16:f8:a5:4b:a9: 9a:11:84:9a:47:64:b6:ab:47:fc:07:8b:96:a6:62: 1e:1a:ea:db:8b:2f:f7:64:4c:9f:a7:1f:6c:0c:ba: 6a:57:64:68:5f:94:9e:ad:dc:57:31:bb:90:25:94: 77:6e:83:b4:09:cf:cb:13:a8:96:9e:b7:4d:1f:e6: aa:55:63:59:ed:c8:b9:67:5b:47:12:8f:eb:60:b2: 6e:ae:18:bf:6a:ba:04:33:0f:65:e8:df:36:36:df: fc:77:84:8b:e4:7c:dc:51:97:61:e0:d4:bf:2a:2a: 65:4b:ff:17:d7:dc:48:b5:90:12:9b:ab:68:3c:f8: d2:eb:be:7f:2b:cb:26:d9:16:5d:ce:9e:c8:a0:92: 58:fc:fc:eb:81:7b:47:8c:55:1a:6a:d6:89:9d:87: ba:e6:70:99:90:61:02:20:63:04:3d:06:09:99:05: 7f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D8:2E:06:39:BE:0B:57:42:A8:31:29:89:C1:5F:3B:DD:CD:94:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/cbf0ebb9-455c-3107-8c84-974a7f12d863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl X509v3 Authority Key Identifier: keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer sbgp-ipAddrBlock: critical IPv4: 64.38.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:3b:26:0d:e0:d3:64:6b:fc:03:75:11:b6:54:b9:87:41:83: b2:3b:fe:de:33:e0:f8:22:bd:cd:36:53:96:66:0d:e0:d6:b2: 67:c8:41:6b:87:ab:4b:45:14:fd:fc:40:e9:de:4e:37:58:8e: 66:fa:6f:2e:81:a6:f5:46:a7:93:76:83:c5:fe:63:2a:5c:b6: e0:95:57:c9:e4:39:1c:a3:00:02:bc:fb:2a:cb:93:d0:00:88: 45:5e:e1:28:b1:92:e5:e1:2c:b1:2a:e3:d9:43:29:5f:eb:3c: f4:cc:32:42:d0:6c:96:79:d6:d1:af:9b:15:91:a1:4e:7a:03: c3:99:03:c1:62:ec:8f:57:d6:59:21:2e:41:1f:32:36:f0:4a: 83:31:0b:f8:11:40:52:43:28:13:88:6c:9f:71:21:11:78:5a: a1:47:6a:d6:2c:c6:cb:98:7b:6a:75:53:d9:05:37:42:3a:7f: dd:83:95:b4:6a:d6:9b:98:c4:3a:b3:85:e6:d2:39:11:ab:d3: dc:e5:7b:11:41:43:32:05:37:08:fe:3e:01:41:5e:df:f8:67: ea:cc:f2:23:9c:5a:be:d1:b6:c1:12:d1:9a:e2:ab:6f:14:82: fe:0f:fc:10:d0:de:7c:ff:28:8c:f7:06:a2:62:7a:7f:4d:cb: ab:cc:be:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h4793C/vqQiAOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNi Mzk4MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk ZThkZGU3YTMtN2M5Yi00YzQ1LTk3Y2YtYzRmZTAyM2M1N2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnVCn+XXA5ZQASvfsLWVJTm/oBhqnzKby2TP bcsUFiNQk7oDXHcGr72hRA0D835xfnhR2SP2/pFjapavmMy/dk9EI3lrKmG4/jGk ly2PGgO7llOuFvilS6maEYSaR2S2q0f8B4uWpmIeGurbiy/3ZEyfpx9sDLpqV2Ro X5SerdxXMbuQJZR3boO0Cc/LE6iWnrdNH+aqVWNZ7ci5Z1tHEo/rYLJurhi/aroE Mw9l6N82Nt/8d4SL5HzcUZdh4NS/KiplS/8X19xItZASm6toPPjS675/K8sm2RZd zp7IoJJY/PzrgXtHjFUaataJnYe65nCZkGECIGMEPQYJmQV/DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/YLgY5vgtXQqgxKYnBXzvdzZT/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIz MTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvY2JmMGViYjktNDU1Yy0z MTA3LThjODQtOTc0YTdmMTJkODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODAyMzEzZTYtNTZiZi00ZmQ4LWFl MGQtYzllMDU3ZDNiMzk4LzgwMjMxM2U2LTU2YmYtNGZkOC1hZTBkLWM5ZTA1N2Qz YjM5OC5jcmwwHwYDVR0jBBgwFoAU6Nx8ybbq227grPfqrNCHZurVu2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUw NTdkM2IzOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQ7Jg3g02Rr/AN1EbZUuYdBg7I7/t4z4Pgivc02U5ZmDeDWsmfIQWuH q0tFFP38QOneTjdYjmb6by6BpvVGp5N2g8X+YypctuCVV8nkORyjAAK8+yrLk9AA iEVe4SixkuXhLLEq49lDKV/rPPTMMkLQbJZ51tGvmxWRoU56A8OZA8Fi7I9X1lkh LkEfMjbwSoMxC/gRQFJDKBOIbJ9xIRF4WqFHatYsxsuYe2p1U9kFN0I6f92DlbRq 1puYxDqzhebSORGr09zlexFBQzIFNwj+PgFBXt/4Z+rM8iOcWr7RtsES0Zriq28U gv4P/BDQ3nz/KIz3BqJien9Ny6vMvks= -----END CERTIFICATE-----Generated at Thu Feb 26 21:24:44 2026 by rpki-client