$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/fa1010cd-170a-3dd6-b5d7-d5c939d7c369.roa File: fa1010cd-170a-3dd6-b5d7-d5c939d7c369.roa (raw, json) Hash identifier: 6pWmvTHor5tVICtD1IorqlkDw0WTXtlMYy0PV10engw= Subject key identifier: F0:C4:63:E1:C3:AA:8D:20:FE:9A:F9:21:7B:40:80:B6:48:FF:64:59 Certificate issuer: /CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8 Certificate serial: 010D0C9F4328584CAE5EC0BDCA897F2062D8BC00 Authority key identifier: EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/fa1010cd-170a-3dd6-b5d7-d5c939d7c369.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 21734 IP address blocks: 64.74.225.0/24 maxlen: 24 69.25.152.0/24 maxlen: 24 74.201.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:c0:bd:ca:89:7f:20:62:d8:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=c3aa20e7-3855-466a-9477-2dc974e62fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:08:be:3c:39:1b:a1:1d:38:f1:f9:c9:4f:39: 61:9f:e6:c9:af:b9:9f:50:db:ca:d5:8f:67:3f:50: 96:ba:e8:a2:d0:7f:97:4a:21:43:1b:87:2e:fd:e4: 1e:d2:44:06:f3:43:f8:7e:a2:0f:2a:bf:a4:e6:8d: 04:07:1f:77:bb:dd:7a:c2:06:6d:b1:57:a8:08:ae: 3f:e9:c6:b8:0f:66:e8:a8:02:84:84:77:5f:da:78: 83:32:0e:a1:70:24:9c:02:77:70:0e:70:35:2c:f2: 3d:34:b3:53:52:37:a6:ae:bc:93:4b:db:cb:ff:0c: 91:76:51:99:58:d8:bf:25:0c:ab:bc:ac:63:34:c3: e6:61:b0:1f:14:56:4d:d2:e7:69:80:10:5d:85:9a: 7b:b4:1a:2b:5e:9e:05:f7:38:77:f2:aa:41:11:e7: d8:65:ec:a9:bb:5e:3f:22:22:cc:8a:ce:c5:07:96: 8a:fc:00:62:d0:f2:f1:3d:98:7d:7b:eb:b6:d5:12: ca:ba:a7:cf:24:80:19:cc:fc:bc:ab:ad:60:0f:e8: 2b:1d:39:a7:4e:34:52:ff:e7:bc:f7:43:d6:6d:f6: eb:17:4d:46:8c:35:e7:4d:46:ba:7c:f7:6d:20:4e: c0:cd:23:2c:60:8a:8a:63:10:e1:a3:3c:67:7b:92: d0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C4:63:E1:C3:AA:8D:20:FE:9A:F9:21:7B:40:80:B6:48:FF:64:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/fa1010cd-170a-3dd6-b5d7-d5c939d7c369.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl X509v3 Authority Key Identifier: keyid:EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer sbgp-ipAddrBlock: critical IPv4: 64.74.225.0/24 69.25.152.0/24 74.201.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:b7:c6:3e:7a:fc:58:e4:55:18:79:5c:c0:79:34:d6:33:3c: b7:f8:63:f7:84:fd:4d:b7:be:5d:fb:1b:80:62:f9:ef:5a:c1: b2:cb:2d:c1:26:2c:2b:e5:40:43:ea:af:c8:5b:c8:a3:b9:2c: 25:84:c6:1b:57:5e:30:fe:94:67:b4:0c:5f:64:df:fb:71:39: 2a:1e:8c:11:90:0c:35:a9:4e:92:b8:f0:8c:d6:80:f3:54:77: ba:4d:85:62:ed:df:a7:af:ae:65:09:5b:a1:ba:59:24:d0:64: 6e:a6:e7:ef:fc:46:a9:9d:0b:5d:7f:04:6f:8a:38:11:ca:af: 52:3f:15:30:0b:0f:e5:d6:a5:69:c6:34:86:b7:36:6f:e7:64: 58:2b:03:ea:f8:45:67:21:c3:ab:5e:00:4c:4c:49:ed:0a:22: 75:f0:39:92:3a:6a:1e:af:07:20:83:a4:f6:75:18:a5:f7:d9: 74:03:a4:2d:b6:87:2c:3d:bb:e2:b4:57:71:e2:b3:1c:01:8b: 47:45:7e:55:40:f1:4e:50:45:5c:32:28:13:bf:f8:8b:25:fc: dd:b7:17:66:98:6a:7a:db:66:bf:26:1f:47:15:0e:72:5f:e7: 8d:43:bc:bc:66:76:65:f4:a6:ae:6c:45:ff:7f:a0:05:c5:4a: f2:b1:de:e9 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEyuXsC9yol/IGLYvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk3NWMzOWEtNzE1Yy00ZGMwLTg5MWEtYjM4ZjlkN2Ni M2U4MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YzNhYTIwZTctMzg1NS00NjZhLTk0NzctMmRjOTc0ZTYyZmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQi+PDkboR048fnJTzlhn+bJr7mfUNvK1Y9n P1CWuuii0H+XSiFDG4cu/eQe0kQG80P4fqIPKr+k5o0EBx93u916wgZtsVeoCK4/ 6ca4D2boqAKEhHdf2niDMg6hcCScAndwDnA1LPI9NLNTUjemrryTS9vL/wyRdlGZ WNi/JQyrvKxjNMPmYbAfFFZN0udpgBBdhZp7tBorXp4F9zh38qpBEefYZeypu14/ IiLMis7FB5aK/ABi0PLxPZh9e+u21RLKuqfPJIAZzPy8q61gD+grHTmnTjRS/+e8 90PWbfbrF01GjDXnTUa6fPdtIE7AzSMsYIqKYxDhozxne5LQ1wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFPDEY+HDqo0g/pr5IXtAgLZI/2RZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zOTc1 YzM5YS03MTVjLTRkYzAtODkxYS1iMzhmOWQ3Y2IzZTgvZmExMDEwY2QtMTcwYS0z ZGQ2LWI1ZDctZDVjOTM5ZDdjMzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzk3NWMzOWEtNzE1Yy00ZGMwLTg5 MWEtYjM4ZjlkN2NiM2U4LzM5NzVjMzlhLTcxNWMtNGRjMC04OTFhLWIzOGY5ZDdj YjNlOC5jcmwwHwYDVR0jBBgwFoAU6hj3sN+eSGqwsG9FbQ9XzJUOingwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zOTc1YzM5YS03MTVjLTRkYzAtODkxYS1iMzhm OWQ3Y2IzZTguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQErhAwQA RRmYAwQASsmNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGy3xj56/FjkVRh5XMB5NNYzPLf4Y/eE/U23vl37 G4Bi+e9awbLLLcEmLCvlQEPqr8hbyKO5LCWExhtXXjD+lGe0DF9k3/txOSoejBGQ DDWpTpK48IzWgPNUd7pNhWLt36evrmUJW6G6WSTQZG6m5+/8RqmdC11/BG+KOBHK r1I/FTALD+XWpWnGNIa3Nm/nZFgrA+r4RWchw6teAExMSe0KInXwOZI6ah6vByCD pPZ1GKX32XQDpC22hyw9u+K0V3HisxwBi0dFflVA8U5QRVwyKBO/+Isl/N23F2aY anrbZr8mH0cVDnJf541DvLxmdmX0pq5sRf9/oAXFSvKx3uk= -----END CERTIFICATE-----Generated at Thu Feb 26 18:27:50 2026 by rpki-client