$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33f60f77-e56e-337c-8508-ee08712a3c7d.roa File: 33f60f77-e56e-337c-8508-ee08712a3c7d.roa (raw, json) Hash identifier: bVnNZcAw/VJZhwApGyhaGDivRNxaas0QybEzf4P2NEY= Subject key identifier: CE:1A:A2:74:CD:A0:8D:61:00:79:2F:1D:D9:DB:A7:B6:5A:3D:D4:08 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D089518D883122DF0C7E65480 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33f60f77-e56e-337c-8508-ee08712a3c7d.roa Signing time: Mon 02 Mar 2026 09:48:27 +0000 ROA not before: Mon 02 Mar 2026 09:48:27 +0000 ROA not after: Sun 31 May 2026 08:48:27 +0000 asID: 11059 IP address blocks: 68.164.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:08:95:18:d8:83:12:2d:f0:c7:e6:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 2 09:48:27 2026 GMT Not After : May 31 08:48:27 2026 GMT Subject: CN=1726eca0-d1ac-401d-bc93-8e143cf9f9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9c:e6:6d:8f:45:6a:07:a6:21:57:01:11:4a: a3:73:e0:c7:83:bb:ac:f0:1e:7d:83:3b:5d:59:48: 61:0c:29:0c:e0:95:00:4e:d6:9d:3c:7f:35:cc:94: cc:51:87:a4:9a:ed:30:4c:da:b5:99:d6:30:dd:57: ac:90:f3:47:23:08:57:4c:55:12:8c:23:66:6d:11: 66:19:dc:ac:a0:b6:c7:4c:0f:bf:46:44:60:46:d0: 42:e5:25:da:5c:20:1a:bb:88:4d:e8:76:3f:c4:66: 6c:5c:e4:1a:55:06:3f:13:72:49:d3:2f:78:eb:14: e7:ce:a7:f8:cb:3d:2a:0e:4a:55:84:f6:0e:4e:58: c8:b7:40:b3:11:d5:ca:eb:2f:55:54:9a:3a:6d:6c: b1:a1:69:11:e3:16:2a:58:5e:43:4d:d0:6a:a0:36: da:d1:7a:f3:04:a0:9e:18:3a:8b:12:39:b1:f7:d8: 36:9a:08:52:64:0a:54:99:c1:27:8c:c8:35:1c:a0: 20:d2:0b:cf:87:ee:eb:39:e2:a9:ce:b7:2f:d6:0c: c1:88:0f:46:b7:9b:23:a9:78:67:5b:92:2e:8e:21: 6a:8d:1e:5e:57:33:87:73:e5:af:c2:f3:2e:61:60: 9a:9d:02:94:c8:73:47:55:e2:df:32:c2:46:52:18: 41:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1A:A2:74:CD:A0:8D:61:00:79:2F:1D:D9:DB:A7:B6:5A:3D:D4:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33f60f77-e56e-337c-8508-ee08712a3c7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:ea:60:56:eb:89:36:22:34:25:fe:b9:53:4e:3b:40:44:e6: fd:f8:ae:72:39:85:b0:79:85:68:4b:ad:0e:d7:a6:1c:26:30: 60:57:d3:f7:ef:34:48:ca:bd:5c:5d:f0:fc:7c:ba:a0:0b:99: dc:05:2f:45:60:f1:30:38:6c:6e:13:c2:d2:27:df:c6:56:1c: 02:86:9a:45:53:2e:71:76:85:77:66:81:b3:94:58:1c:ab:6e: 2f:05:64:e8:c7:5d:fc:99:02:7f:62:d4:aa:ed:d1:80:1b:98: 78:5c:97:22:4c:96:64:21:93:2c:53:99:d3:e6:7e:f3:41:ba: 12:70:51:13:4a:0f:c2:47:13:eb:19:32:2c:c5:1f:b9:de:61: 25:92:e2:85:93:a6:d1:6d:a1:b1:be:4f:bb:fb:a9:4d:67:70: 67:8f:56:9d:ec:46:47:ab:33:fd:d1:08:ac:56:50:ed:b0:9d: b0:15:af:38:4a:49:df:bd:17:4c:e7:b6:fa:29:ac:e1:36:e6: 79:0d:0c:e7:1c:33:89:f1:45:3b:e2:bc:51:f3:38:a6:b7:c0: e9:c2:ba:15:04:09:68:e7:07:ac:23:31:23:0d:e0:3a:cb:8f: 7f:48:2d:98:b6:c6:bd:08:47:4c:f0:94:c1:53:54:bd:e6:69: ab:ee:33:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0IlRjYgxIt8MfmVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwMjA5NDgyN1oXDTI2MDUzMTA4NDgyN1owLzEtMCsGA1UEAxMk MTcyNmVjYTAtZDFhYy00MDFkLWJjOTMtOGUxNDNjZjlmOWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpzmbY9FagemIVcBEUqjc+DHg7us8B59gztd WUhhDCkM4JUATtadPH81zJTMUYekmu0wTNq1mdYw3VeskPNHIwhXTFUSjCNmbRFm GdysoLbHTA+/RkRgRtBC5SXaXCAau4hN6HY/xGZsXOQaVQY/E3JJ0y946xTnzqf4 yz0qDkpVhPYOTljIt0CzEdXK6y9VVJo6bWyxoWkR4xYqWF5DTdBqoDba0XrzBKCe GDqLEjmx99g2mghSZApUmcEnjMg1HKAg0gvPh+7rOeKpzrcv1gzBiA9Gt5sjqXhn W5IujiFqjR5eVzOHc+WvwvMuYWCanQKUyHNHVeLfMsJGUhhBZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4aonTNoI1hAHkvHdnbp7ZaPdQIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzNmNjBmNzctZTU2ZS0z MzdjLTg1MDgtZWUwODcxMmEzYzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTqYFbriTYiNCX+uVNOO0BE5v34rnI5hbB5hWhLrQ7XphwmMGBX0/fv NEjKvVxd8Px8uqALmdwFL0Vg8TA4bG4TwtIn38ZWHAKGmkVTLnF2hXdmgbOUWByr bi8FZOjHXfyZAn9i1Krt0YAbmHhclyJMlmQhkyxTmdPmfvNBuhJwURNKD8JHE+sZ MizFH7neYSWS4oWTptFtobG+T7v7qU1ncGePVp3sRkerM/3RCKxWUO2wnbAVrzhK Sd+9F0zntvoprOE25nkNDOccM4nxRTvivFHzOKa3wOnCuhUECWjnB6wjMSMN4DrL j39ILZi2xr0IR0zwlMFTVL3maavuM8w= -----END CERTIFICATE-----Generated at Tue Mar 3 22:21:32 2026 by rpki-client