$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/ff845c46-b8ce-3427-9c47-95a32c11df5c.roa File: ff845c46-b8ce-3427-9c47-95a32c11df5c.roa (raw, json) Hash identifier: BH8hCGN/NNAFhOfu90inNCp6wG9BRHkdfrpTxK3NZZ4= Subject key identifier: 5D:73:F2:9C:C5:0A:7F:C3:45:7F:1F:6D:0C:E5:22:D3:B5:F7:15:80 Certificate issuer: /CN=d49cd804-3f4b-4772-bcbd-c7238e36bdea Certificate serial: 010D0C9F4328584D5235013643B84A1FB8F28C80 Authority key identifier: 0C:42:CE:FA:22:4C:5A:5F:9B:51:F8:96:16:2A:72:54:BE:83:B1:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/ff845c46-b8ce-3427-9c47-95a32c11df5c.roa Signing time: Sat 28 Mar 2026 18:44:39 +0000 ROA not before: Sat 28 Mar 2026 18:44:39 +0000 ROA not after: Sun 03 May 2026 15:45:51 +0000 asID: 1299 IP address blocks: 64.77.213.0/24 maxlen: 24 64.77.216.0/23 maxlen: 24 64.77.218.0/24 maxlen: 24 72.14.97.0/24 maxlen: 24 72.14.119.0/24 maxlen: 24 72.14.126.0/24 maxlen: 24 97.75.255.0/24 maxlen: 24 208.101.227.0/24 maxlen: 24 208.101.234.0/23 maxlen: 24 208.101.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d49cd804-3f4b-4772-bcbd-c7238e36bdea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d49cd804-3f4b-4772-bcbd-c7238e36bdea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:35:01:36:43:b8:4a:1f:b8:f2:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d49cd804-3f4b-4772-bcbd-c7238e36bdea Validity Not Before: Mar 28 18:44:39 2026 GMT Not After : May 3 15:45:51 2026 GMT Subject: CN=3db37877-6c06-41ca-92f8-2a4363ed3405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b3:b1:4b:ae:6f:d4:c8:c8:77:ab:e9:34:63: c7:df:51:aa:da:3c:f8:09:31:32:21:a7:d2:9c:e3: 78:9a:2e:db:02:0f:d5:7f:76:1f:89:26:85:5b:24: d0:1e:8c:de:68:35:52:f4:e6:31:c4:9e:ea:43:fc: ef:d6:ed:3e:61:26:5b:f3:bd:a1:1c:fb:24:ac:9e: 1c:ef:6a:20:4c:82:5f:06:83:d8:de:35:36:c9:eb: 18:44:31:75:6c:c3:af:87:f6:c8:54:5e:dd:b0:ef: 7b:19:95:1d:aa:12:f4:c2:65:18:9c:8a:52:27:45: b7:ff:ae:c2:68:67:16:1d:de:86:a9:52:e0:40:ad: 0f:15:c6:57:0b:fa:b6:4e:53:99:6d:20:08:98:b7: 79:ff:ae:2d:d4:31:f0:8b:80:8b:80:bd:4e:ad:bd: 2d:7b:6c:ef:2c:74:93:9c:41:9d:70:16:12:7d:22: d8:0e:30:df:9e:92:a6:56:ef:4e:0a:4e:51:0d:27: bb:2d:ec:6b:d5:62:65:3f:f6:ae:b3:8d:eb:eb:f7: 48:cb:e3:78:1a:92:ca:6b:f5:80:17:5e:f0:3c:f6: 2d:30:b0:e5:39:ec:0f:da:62:b5:4e:b3:c8:a6:ac: a7:39:b1:7f:d6:49:bd:7a:32:0e:c2:66:20:c5:3e: 9d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:73:F2:9C:C5:0A:7F:C3:45:7F:1F:6D:0C:E5:22:D3:B5:F7:15:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/ff845c46-b8ce-3427-9c47-95a32c11df5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d49cd804-3f4b-4772-bcbd-c7238e36bdea.crl X509v3 Authority Key Identifier: keyid:0C:42:CE:FA:22:4C:5A:5F:9B:51:F8:96:16:2A:72:54:BE:83:B1:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer sbgp-ipAddrBlock: critical IPv4: 64.77.213.0/24 64.77.216.0-64.77.218.255 72.14.97.0/24 72.14.119.0/24 72.14.126.0/24 97.75.255.0/24 208.101.227.0/24 208.101.234.0-208.101.236.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e4:ab:e0:bd:95:39:aa:98:3f:dc:00:66:1c:9f:4d:14:07:2b: 33:c7:38:98:47:32:b7:3d:3f:48:7e:70:53:66:f8:20:88:cf: 23:f8:54:67:d7:a9:f2:f8:1e:52:19:18:20:57:15:f6:ea:79: 05:69:bc:93:32:5b:f8:18:b9:88:91:6b:05:b9:df:2b:2f:53: 25:e2:11:ee:48:4f:44:71:68:6d:13:c1:67:92:05:7e:12:89: b9:8f:9c:6b:b4:eb:cc:e8:ea:f4:ef:90:fb:4a:13:b8:19:56: 9a:9c:54:36:88:e2:c2:7b:ef:f8:16:b4:53:5d:9b:60:8b:21: b4:6a:30:80:7e:d4:2d:20:5a:4a:66:78:41:86:62:5c:41:8f: d4:ec:7a:3a:84:e4:60:65:1d:e0:a7:a9:14:1f:0e:3e:dc:8b: 5b:b3:ca:1b:fb:ed:62:1e:d9:2d:f2:27:d9:7b:99:e7:46:31: c2:ee:2c:d0:80:ef:71:8e:a4:03:ea:14:7d:1c:8e:3f:e7:06: 6c:c8:a2:63:1c:58:f2:b1:82:b6:02:df:3c:10:cd:c8:a2:a2: b7:87:44:f5:e9:73:ef:67:a9:d1:70:fd:95:04:5d:6a:19:81: 39:bb:26:52:32:ed:47:2b:fd:98:7d:5c:40:3b:a6:e7:a0:e2: 15:9b:a3:12 -----BEGIN CERTIFICATE----- MIIGfTCCBWWgAwIBAgIUAQ0Mn0MoWE1SNQE2Q7hKH7jyjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ5Y2Q4MDQtM2Y0Yi00NzcyLWJjYmQtYzcyMzhlMzZi ZGVhMB4XDTI2MDMyODE4NDQzOVoXDTI2MDUwMzE1NDU1MVowLzEtMCsGA1UEAxMk M2RiMzc4NzctNmMwNi00MWNhLTkyZjgtMmE0MzYzZWQzNDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrOxS65v1MjId6vpNGPH31Gq2jz4CTEyIafS nON4mi7bAg/Vf3YfiSaFWyTQHozeaDVS9OYxxJ7qQ/zv1u0+YSZb872hHPskrJ4c 72ogTIJfBoPY3jU2yesYRDF1bMOvh/bIVF7dsO97GZUdqhL0wmUYnIpSJ0W3/67C aGcWHd6GqVLgQK0PFcZXC/q2TlOZbSAImLd5/64t1DHwi4CLgL1Orb0te2zvLHST nEGdcBYSfSLYDjDfnpKmVu9OCk5RDSe7Lexr1WJlP/aus43r6/dIy+N4GpLKa/WA F17wPPYtMLDlOewP2mK1TrPIpqynObF/1km9ejIOwmYgxT6d6QIDAQABo4IDjzCC A4swHQYDVR0OBBYEFF1z8pzFCn/DRX8fbQzlItO19xWAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kNDlj ZDgwNC0zZjRiLTQ3NzItYmNiZC1jNzIzOGUzNmJkZWEvZmY4NDVjNDYtYjhjZS0z NDI3LTljNDctOTVhMzJjMTFkZjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDQ5Y2Q4MDQtM2Y0Yi00NzcyLWJj YmQtYzcyMzhlMzZiZGVhL2Q0OWNkODA0LTNmNGItNDc3Mi1iY2JkLWM3MjM4ZTM2 YmRlYS5jcmwwHwYDVR0jBBgwFoAUDELO+iJMWl+bUfiWFipyVL6DsT4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kNDljZDgwNC0zZjRiLTQ3NzItYmNiZC1jNzIz OGUzNmJkZWEuY2VyMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQAQE3VMAwD BANATdgDBABATdoDBABIDmEDBABIDncDBABIDn4DBABhS/8DBADQZeMwDAMEAdBl 6gMEANBl7DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQDkq+C9lTmqmD/cAGYcn00UByszxziYRzK3PT9IfnBT ZvggiM8j+FRn16ny+B5SGRggVxX26nkFabyTMlv4GLmIkWsFud8rL1Ml4hHuSE9E cWhtE8FnkgV+Eom5j5xrtOvM6Or075D7ShO4GVaanFQ2iOLCe+/4FrRTXZtgiyG0 ajCAftQtIFpKZnhBhmJcQY/U7Ho6hORgZR3gp6kUHw4+3Itbs8ob++1iHtkt8ifZ e5nnRjHC7izQgO9xjqQD6hR9HI4/5wZsyKJjHFjysYK2At88EM3IoqK3h0T16XPv Z6nRcP2VBF1qGYE5uyZSMu1HK/2YfVxAO6bnoOIVm6MS -----END CERTIFICATE-----Generated at Fri Apr 17 18:55:28 2026 by rpki-client