$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a10dd9c4-716a-3203-ac5d-b5083b96747d.roa File: a10dd9c4-716a-3203-ac5d-b5083b96747d.roa (raw, json) Hash identifier: UuCiLXzT/esrx2QJ/bFHSGEEiNXswVm9hr7ZM1rDcrM= Subject key identifier: 6D:48:36:44:1D:7D:D0:0C:52:EB:BF:A4:A6:70:8B:7F:BF:AB:81:12 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D0A779ACB5B864A36F15B6740 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a10dd9c4-716a-3203-ac5d-b5083b96747d.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 11404 IP address blocks: 64.144.96.0/20 maxlen: 24 64.144.144.0/20 maxlen: 24 64.144.240.0/20 maxlen: 24 66.134.96.0/19 maxlen: 24 67.102.192.0/19 maxlen: 24 68.165.112.0/20 maxlen: 24 68.167.80.0/20 maxlen: 24 68.167.96.0/19 maxlen: 24 68.167.160.0/20 maxlen: 24 68.167.208.0/20 maxlen: 24 68.167.224.0/20 maxlen: 24 207.145.16.0/20 maxlen: 24 207.145.112.0/20 maxlen: 24 207.145.128.0/20 maxlen: 24 207.145.160.0/20 maxlen: 24 216.254.32.0/19 maxlen: 24 216.254.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:9a:cb:5b:86:4a:36:f1:5b:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=0d37070c-9697-4ac9-aa7f-5c32653ee477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:92:04:a2:00:d9:c6:d2:8f:ca:5b:25:59:1e: 59:fa:f4:ad:97:50:e2:3b:66:87:9b:a9:bd:4f:49: 1f:4f:f9:53:3f:d6:cf:f7:d6:b6:b4:c8:a8:b9:e4: 31:35:2a:58:e6:a5:99:7f:04:90:23:8b:70:ec:a5: dc:b9:06:79:36:a3:62:22:fa:79:92:2b:bc:1e:41: 5c:ae:a2:c0:20:ab:fd:7f:01:c6:cc:d4:3b:56:07: 8c:00:e5:13:07:03:80:48:23:8e:71:20:db:b9:57: a1:a0:d8:f5:3d:39:8b:7f:44:d3:67:37:8a:a8:11: a8:66:64:df:7c:d8:79:a1:88:0d:28:48:56:80:a6: b6:07:0d:d4:00:c5:3f:69:5d:07:60:28:7f:12:bf: 2a:83:0f:a5:4e:c0:ae:59:f6:3a:af:aa:ba:46:ca: 0b:3d:2d:77:27:27:e7:9d:81:1c:fd:ff:f4:45:88: d5:03:77:e0:ee:9d:39:31:34:e4:66:5e:a6:fd:eb: d4:68:e8:bc:58:6f:cd:ae:01:69:0b:5b:09:63:f6: 27:85:ce:0b:fb:d1:32:8b:43:6c:6c:f1:2a:f0:5d: 44:18:07:5a:7b:11:f0:aa:d4:70:79:d7:67:ad:ba: ec:d5:17:7b:dc:49:76:8d:4c:d2:23:f8:1d:e7:20: 6a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:48:36:44:1D:7D:D0:0C:52:EB:BF:A4:A6:70:8B:7F:BF:AB:81:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a10dd9c4-716a-3203-ac5d-b5083b96747d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.144.96.0/20 64.144.144.0/20 64.144.240.0/20 66.134.96.0/19 67.102.192.0/19 68.165.112.0/20 68.167.80.0-68.167.127.255 68.167.160.0/20 68.167.208.0-68.167.239.255 207.145.16.0/20 207.145.112.0-207.145.143.255 207.145.160.0/20 216.254.32.0/19 216.254.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:37:25:32:86:e6:1c:92:9f:31:6d:8b:a5:48:12:eb:36:17: 97:55:d5:dc:e5:d6:ba:97:60:8b:bb:28:a5:4b:85:fa:2a:5a: c8:2c:04:a2:95:64:ef:c6:ec:a2:59:7c:82:39:39:ad:fd:99: c1:62:0c:07:7f:1d:e6:34:b8:33:2b:3c:14:0f:e7:b5:8a:56: 9b:ff:6e:3e:32:3e:ab:08:1a:75:bf:67:9a:00:2f:d8:c2:59: 8b:43:38:69:2a:1f:ab:e6:00:82:e6:39:c5:83:77:9c:a9:6f: f1:85:d3:4c:c4:cd:cc:57:94:b4:d2:f3:82:4d:01:ba:d3:aa: 05:d8:14:9a:ab:88:9d:43:b8:4e:f6:fb:50:7b:2d:cb:20:11: 15:55:2e:fc:bc:e3:c4:3d:53:c4:dd:07:a8:67:f2:d8:0f:03: e1:8c:0b:b9:c8:02:e2:c4:d6:fa:fd:8c:d6:45:ef:10:a6:72: b4:48:63:ae:fd:e5:d9:39:6d:0c:28:70:88:83:ef:64:52:39: 47:00:85:de:b5:33:f2:82:0a:aa:b6:f1:a9:d5:b4:d1:02:1d: 1d:94:6b:17:7d:66:ed:d0:b7:e9:4a:36:fa:50:ba:b1:e5:d9: 33:5d:fb:3c:e1:3c:50:91:06:9d:04:a1:fd:6e:cf:df:c3:be: 4c:56:8c:cb -----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgIUAQ0Mn0MoWE0Kd5rLW4ZKNvFbZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk MGQzNzA3MGMtOTY5Ny00YWM5LWFhN2YtNWMzMjY1M2VlNDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJIEogDZxtKPylslWR5Z+vStl1DiO2aHm6m9 T0kfT/lTP9bP99a2tMioueQxNSpY5qWZfwSQI4tw7KXcuQZ5NqNiIvp5kiu8HkFc rqLAIKv9fwHGzNQ7VgeMAOUTBwOASCOOcSDbuVehoNj1PTmLf0TTZzeKqBGoZmTf fNh5oYgNKEhWgKa2Bw3UAMU/aV0HYCh/Er8qgw+lTsCuWfY6r6q6RsoLPS13Jyfn nYEc/f/0RYjVA3fg7p05MTTkZl6m/evUaOi8WG/NrgFpC1sJY/Ynhc4L+9Eyi0Ns bPEq8F1EGAdaexHwqtRweddnrbrs1Rd73El2jUzSI/gd5yBqDQIDAQABo4IDvDCC A7gwHQYDVR0OBBYEFG1INkQdfdAMUuu/pKZwi3+/q4ESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTEwZGQ5YzQtNzE2YS0z MjAzLWFjNWQtYjUwODNiOTY3NDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEBECQYAME BECQkAMEBECQ8AMEBUKGYAMEBUNmwAMEBESlcDAMAwQERKdQAwQHRKcAAwQERKeg MAwDBAREp9ADBAREp+ADBATPkRAwDAMEBM+RcAMEBM+RgAMEBM+RoAMEBdj+IAME Bdj+YDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBSNyUyhuYckp8xbYulSBLrNheXVdXc5da6l2CLuyilS4X6 KlrILASilWTvxuyiWXyCOTmt/ZnBYgwHfx3mNLgzKzwUD+e1ilab/24+Mj6rCBp1 v2eaAC/YwlmLQzhpKh+r5gCC5jnFg3ecqW/xhdNMxM3MV5S00vOCTQG606oF2BSa q4idQ7hO9vtQey3LIBEVVS78vOPEPVPE3QeoZ/LYDwPhjAu5yALixNb6/YzWRe8Q pnK0SGOu/eXZOW0MKHCIg+9kUjlHAIXetTPyggqqtvGp1bTRAh0dlGsXfWbt0Lfp Sjb6ULqx5dkzXfs84TxQkQadBKH9bs/fw75MVozL -----END CERTIFICATE-----Generated at Tue Mar 10 14:54:08 2026 by rpki-client