$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/db08c46a-c530-3729-8f45-1e034d3c907b.roa File: db08c46a-c530-3729-8f45-1e034d3c907b.roa (raw, json) Hash identifier: jhDV1KZoqRD0cnmgUlzFHagcuqnfjGAxiGVeeZxqAp4= Subject key identifier: FC:62:A3:6B:8D:1F:5B:78:2B:F0:C0:68:AF:62:5E:4F:05:C0:67:14 Certificate issuer: /CN=eaf9c250-e52f-4479-99a5-880a3e1b8c2a Certificate serial: 010D0C9F4328584D59EA5DCFB1413BE206D28280 Authority key identifier: 06:9E:80:91:05:68:12:75:6F:A9:33:9E:F5:AA:1C:CF:C1:61:38:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/db08c46a-c530-3729-8f45-1e034d3c907b.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 18559 IP address blocks: 198.54.221.0/24 maxlen: 24 2602:f52d::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:5d:cf:b1:41:3b:e2:06:d2:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf9c250-e52f-4479-99a5-880a3e1b8c2a Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=64c0dc7a-73ee-4a4e-bf6d-05c9f6d2d770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6a:cd:5c:09:2b:8c:11:a6:0c:e1:cb:9c:e1: 05:cf:86:78:c6:76:58:05:5d:88:f9:04:85:a4:3d: 62:35:97:01:4d:71:f6:e9:33:c1:4e:b7:8e:77:3f: 4d:af:22:ea:fc:19:1c:4f:8f:29:ec:d6:23:8e:a6: 2a:73:58:23:5b:7e:62:78:52:b0:25:86:2d:41:a6: 5b:95:84:27:84:4e:c9:1b:19:4b:59:a7:d4:10:9f: c8:a7:3f:1c:c6:c8:c5:3a:30:a5:3a:ba:3e:d1:23: 3d:47:78:b0:af:45:08:f8:5b:47:cd:f0:f4:73:2a: ad:f0:bb:13:9d:14:44:a8:bf:d2:6b:a7:14:7f:03: bb:e6:16:7a:84:73:f7:08:3c:cd:33:80:ba:13:09: 10:d9:8b:a2:cd:da:8b:36:12:d2:49:b7:18:81:97: 37:6e:3d:5d:2f:8d:7c:ff:8b:66:f3:47:06:c8:a1: 8b:a3:1f:25:3d:e2:8d:57:36:f2:75:9a:05:bd:25: 97:9d:b1:40:81:2e:e3:2e:8a:5f:0a:69:ca:06:6c: 7f:35:de:37:2b:6f:2c:a7:bb:bf:f0:95:d3:ec:9f: af:40:3d:ab:1c:e9:0f:e9:11:be:02:78:cc:94:22: 64:35:f4:d4:e4:0b:4d:3c:9a:9b:c4:d6:ab:60:62: e8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:62:A3:6B:8D:1F:5B:78:2B:F0:C0:68:AF:62:5E:4F:05:C0:67:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/db08c46a-c530-3729-8f45-1e034d3c907b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.crl X509v3 Authority Key Identifier: keyid:06:9E:80:91:05:68:12:75:6F:A9:33:9E:F5:AA:1C:CF:C1:61:38:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.cer sbgp-ipAddrBlock: critical IPv4: 198.54.221.0/24 IPv6: 2602:f52d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:ce:9e:b0:c5:f5:f4:49:66:4d:18:56:19:10:79:cb:1c:14: 23:ba:97:ef:be:ae:94:2e:85:d3:7b:17:af:bd:51:e4:21:76: 2a:72:77:a6:2b:f0:d2:f4:f5:48:00:94:0f:05:26:e5:2f:0e: dc:01:18:3d:71:83:f5:c4:2a:df:5a:92:f3:ae:c7:1c:06:d0: 41:36:e4:3b:60:16:97:16:89:2c:41:33:b8:01:2b:4d:a0:a2: fd:56:3b:2f:93:2f:ad:fc:c7:ce:75:c5:14:b8:cb:dd:46:b2: 1b:35:a0:96:23:f0:69:2d:f4:15:f7:0d:39:10:48:b6:de:cf: df:24:2d:94:2a:54:d3:2d:c8:d2:df:64:d1:9f:3f:d4:28:3b: d2:66:55:8f:f0:7a:cc:8f:01:72:e2:dc:e4:f6:16:76:b4:1f: a5:83:96:f2:e5:ea:0e:dd:2c:8d:d2:24:32:3e:85:72:6d:24: 6e:ab:e1:fe:9f:e8:7d:b4:11:25:e5:4e:43:6a:0f:87:4b:89: c5:26:9b:0c:1f:f1:ea:3b:9c:8a:4d:1e:9c:2b:49:de:55:aa: 4e:d7:57:30:77:88:4f:af:63:d2:a2:df:46:13:e9:76:ba:e6: a1:be:d1:f0:d8:5c:34:5d:47:7c:49:85:63:f7:05:3a:98:56: c6:2f:a6:0e -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE1Z6l3PsUE74gbSgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmOWMyNTAtZTUyZi00NDc5LTk5YTUtODgwYTNlMWI4 YzJhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NjRjMGRjN2EtNzNlZS00YTRlLWJmNmQtMDVjOWY2ZDJkNzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2rNXAkrjBGmDOHLnOEFz4Z4xnZYBV2I+QSF pD1iNZcBTXH26TPBTreOdz9NryLq/BkcT48p7NYjjqYqc1gjW35ieFKwJYYtQaZb lYQnhE7JGxlLWafUEJ/Ipz8cxsjFOjClOro+0SM9R3iwr0UI+FtHzfD0cyqt8LsT nRREqL/Sa6cUfwO75hZ6hHP3CDzNM4C6EwkQ2YuizdqLNhLSSbcYgZc3bj1dL418 /4tm80cGyKGLox8lPeKNVzbydZoFvSWXnbFAgS7jLopfCmnKBmx/Nd43K28sp7u/ 8JXT7J+vQD2rHOkP6RG+AnjMlCJkNfTU5AtNPJqbxNarYGLoeQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFPxio2uNH1t4K/DAaK9iXk8FwGcUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lYWY5 YzI1MC1lNTJmLTQ0NzktOTlhNS04ODBhM2UxYjhjMmEvZGIwOGM0NmEtYzUzMC0z NzI5LThmNDUtMWUwMzRkM2M5MDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZWFmOWMyNTAtZTUyZi00NDc5LTk5 YTUtODgwYTNlMWI4YzJhL2VhZjljMjUwLWU1MmYtNDQ3OS05OWE1LTg4MGEzZTFi OGMyYS5jcmwwHwYDVR0jBBgwFoAUBp6AkQVoEnVvqTOe9aocz8FhOLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9lYWY5YzI1MC1lNTJmLTQ0NzktOTlhNS04ODBh M2UxYjhjMmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAxjbdMA4E AgACMAgDBgAmAvUtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQzp6wxfX0SWZNGFYZEHnLHBQjupfvvq6U LoXTexevvVHkIXYqcnemK/DS9PVIAJQPBSblLw7cARg9cYP1xCrfWpLzrsccBtBB NuQ7YBaXFoksQTO4AStNoKL9Vjsvky+t/MfOdcUUuMvdRrIbNaCWI/BpLfQV9w05 EEi23s/fJC2UKlTTLcjS32TRnz/UKDvSZlWP8HrMjwFy4tzk9hZ2tB+lg5by5eoO 3SyN0iQyPoVybSRuq+H+n+h9tBEl5U5Dag+HS4nFJpsMH/HqO5yKTR6cK0neVapO 11cwd4hPr2PSot9GE+l2uuahvtHw2Fw0XUd8SYVj9wU6mFbGL6YO -----END CERTIFICATE-----Generated at Mon Apr 13 12:02:59 2026 by rpki-client