$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/198b7224-5d21-3469-9d4e-fae6f875800f.roa File: 198b7224-5d21-3469-9d4e-fae6f875800f.roa (raw, json) Hash identifier: pnGOZl1iic1zbcPnGEY5nPW/5wvhSkPYxKVNAfrSXGY= Subject key identifier: 18:B3:88:0D:0D:C7:29:6A:76:99:0D:A8:92:A9:B6:5A:24:77:E4:FB Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D089581204D46D2C9948F2500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/198b7224-5d21-3469-9d4e-fae6f875800f.roa Signing time: Mon 02 Mar 2026 09:49:16 +0000 ROA not before: Mon 02 Mar 2026 09:49:16 +0000 ROA not after: Sun 31 May 2026 08:49:16 +0000 asID: 11059 IP address blocks: 65.86.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:08:95:81:20:4d:46:d2:c9:94:8f:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 2 09:49:16 2026 GMT Not After : May 31 08:49:16 2026 GMT Subject: CN=f3468d2e-f0cf-4bd3-a822-7741885fb17e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:55:7f:45:2d:80:28:43:a7:95:65:7d:00:2a: 20:7a:45:de:72:e7:0c:16:82:41:8a:f8:6f:bc:0e: 9e:b2:b1:fe:74:a6:7e:4b:2f:dd:aa:a4:47:72:43: 66:d3:40:75:c5:1e:cb:88:06:93:40:52:fa:e1:06: b5:5b:f7:c8:ec:b6:ed:a1:08:47:57:1a:ba:82:c3: 15:09:cf:fa:48:e1:9a:5b:86:ea:b9:63:e0:46:97: 41:db:24:f4:d3:e5:16:f7:81:b0:bb:9c:97:99:23: 49:a5:6e:63:45:df:82:13:32:09:4c:a2:cd:db:ea: 4e:8b:6f:a0:50:8c:ab:7b:3d:b7:93:a4:35:3d:e9: b9:54:74:28:1f:56:84:ef:13:30:fc:ee:3d:1e:80: e5:3e:65:6c:42:12:fd:3d:32:7f:e8:aa:89:5d:56: 5c:f8:1f:72:56:18:95:c9:88:17:95:f1:b4:ca:61: 04:8d:08:fb:92:e9:91:e0:35:b9:19:a6:cf:09:ad: 44:df:54:db:b6:28:0d:de:1e:18:8c:84:d6:d3:85: 03:43:8e:5a:cc:d9:7c:ef:fa:2c:39:5d:74:15:33: 66:be:f0:0b:3e:84:f7:ce:6d:72:f9:53:3b:50:a4: 1b:09:7d:55:df:ff:4b:d8:20:f6:12:f3:6f:9e:e8: c1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B3:88:0D:0D:C7:29:6A:76:99:0D:A8:92:A9:B6:5A:24:77:E4:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/198b7224-5d21-3469-9d4e-fae6f875800f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:c3:26:1f:a0:f1:e0:e2:c0:2d:f5:a2:93:ee:a0:e0:8f:5b: da:ca:71:40:24:6a:dc:06:f8:85:a5:0f:86:86:51:ca:01:12: 46:a7:ea:ea:e0:16:29:7b:56:e3:b8:19:a7:6d:cd:a8:39:b7: a2:e7:86:b7:a5:9a:f8:40:41:75:34:94:cc:2b:01:fb:c5:5c: 56:b7:80:90:8b:24:0c:38:81:79:3b:34:c2:09:bb:67:ab:51: b7:70:dd:51:5d:fa:b7:e8:36:d3:36:f0:96:3c:67:00:ce:ec: da:9f:11:04:41:d8:a9:61:c5:6b:01:fa:38:63:88:14:3b:f7: b0:56:dc:43:1f:de:a4:70:8f:bb:92:20:6f:d1:66:f1:67:7a: 29:70:53:0a:dc:4e:d9:94:f5:e1:86:9d:8a:bc:72:87:1f:0b: ff:74:ad:d9:53:a0:f2:f1:73:50:03:47:89:ce:84:12:75:bb: 74:a7:e0:e5:bd:ee:aa:fe:36:22:bf:20:ff:79:fd:e7:92:e2: 4e:ca:5b:a5:84:80:d3:18:46:e7:ed:1a:93:5a:99:3e:b1:76: d1:75:61:6a:22:a6:f9:08:d5:bb:6e:44:bb:4d:d9:f2:6f:de: 41:c8:fe:09:5c:c1:34:b5:49:2b:cb:c1:e2:98:93:55:02:0f: 3c:03:91:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0IlYEgTUbSyZSPJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwMjA5NDkxNloXDTI2MDUzMTA4NDkxNlowLzEtMCsGA1UEAxMk ZjM0NjhkMmUtZjBjZi00YmQzLWE4MjItNzc0MTg4NWZiMTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglV/RS2AKEOnlWV9ACogekXecucMFoJBivhv vA6esrH+dKZ+Sy/dqqRHckNm00B1xR7LiAaTQFL64Qa1W/fI7LbtoQhHVxq6gsMV Cc/6SOGaW4bquWPgRpdB2yT00+UW94Gwu5yXmSNJpW5jRd+CEzIJTKLN2+pOi2+g UIyrez23k6Q1Pem5VHQoH1aE7xMw/O49HoDlPmVsQhL9PTJ/6KqJXVZc+B9yVhiV yYgXlfG0ymEEjQj7kumR4DW5GabPCa1E31TbtigN3h4YjITW04UDQ45azNl87/os OV10FTNmvvALPoT3zm1y+VM7UKQbCX1V3/9L2CD2EvNvnujBEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiziA0NxylqdpkNqJKptlokd+T7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTk4YjcyMjQtNWQyMS0z NDY5LTlkNGUtZmFlNmY4NzU4MDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQVbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLDJh+g8eDiwC31opPuoOCPW9rKcUAkatwG+IWlD4aGUcoBEkan6urg Fil7VuO4Gadtzag5t6LnhrelmvhAQXU0lMwrAfvFXFa3gJCLJAw4gXk7NMIJu2er Ubdw3VFd+rfoNtM28JY8ZwDO7NqfEQRB2KlhxWsB+jhjiBQ797BW3EMf3qRwj7uS IG/RZvFneilwUwrcTtmU9eGGnYq8cocfC/90rdlToPLxc1ADR4nOhBJ1u3Sn4OW9 7qr+NiK/IP95/eeS4k7KW6WEgNMYRuftGpNamT6xdtF1YWoipvkI1btuRLtN2fJv 3kHI/glcwTS1SSvLweKYk1UCDzwDke4= -----END CERTIFICATE-----Generated at Tue Mar 3 22:21:37 2026 by rpki-client