$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/1b3ab811-ab8f-33b2-b367-243b80e6cf4e.roa File: 1b3ab811-ab8f-33b2-b367-243b80e6cf4e.roa (raw, json) Hash identifier: rqCisRX806694IXrMfABfeza9MexYkxZ+IPk+08OEPU= Subject key identifier: 51:53:FC:EC:79:85:48:50:D7:FA:7E:46:B5:1F:4F:A7:02:CF:73:3A Certificate issuer: /CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Certificate serial: 010D0C9F4328584D19B4DDB96FBD8AA1A93D1240 Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/1b3ab811-ab8f-33b2-b367-243b80e6cf4e.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 53264 IP address blocks: 64.79.96.0/20 maxlen: 24 74.117.236.0/22 maxlen: 24 74.121.180.0/22 maxlen: 24 74.122.192.0/21 maxlen: 24 173.243.112.0/20 maxlen: 24 192.208.176.0/21 maxlen: 24 192.208.184.0/22 maxlen: 24 192.208.188.0/23 maxlen: 24 192.208.190.0/24 maxlen: 24 198.50.24.0/21 maxlen: 24 199.16.8.0/21 maxlen: 24 199.192.200.0/21 maxlen: 24 216.107.144.0/20 maxlen: 24 216.231.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:dd:b9:6f:bd:8a:a1:a9:3d:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=01a90cd8-78a4-41f8-9b72-376a3b903f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:41:11:76:29:07:0c:65:b6:82:e7:ae:f2:a8: 01:72:bb:42:d0:ff:e5:4c:52:13:9d:4c:09:38:38: 9a:33:f7:fb:5e:c6:a0:3c:bd:b4:dd:72:45:cd:ff: 7f:d4:8e:cd:83:6b:61:00:10:a7:6a:d3:f4:c0:16: c6:09:f4:b1:d7:29:4e:2d:fa:2b:1d:cc:50:0a:9f: 80:1a:e4:2b:e1:9f:f8:14:94:eb:f6:27:f6:38:64: c8:ea:7b:cc:66:23:29:1f:48:31:3d:27:3d:77:a2: df:80:8a:5c:dd:4c:35:80:21:a8:e4:a7:6e:e2:60: 8b:34:42:91:dc:e4:e3:45:32:fb:a7:d2:2a:5a:c8: c7:88:90:2c:7c:fd:5a:d0:7e:88:57:63:82:27:22: 69:4c:2f:94:e4:64:fb:ed:ff:73:de:5e:5c:22:91: 7f:62:56:04:74:0b:05:b0:35:48:bf:b5:b3:05:1d: ea:0c:e8:0b:97:43:63:eb:a6:cc:51:41:e1:4d:7e: 96:c2:16:9d:8b:01:23:75:e0:0c:c4:be:6a:ec:dd: 67:52:df:e7:07:e5:84:fa:8c:ea:86:47:08:aa:1d: 8c:34:a4:06:5f:4f:cc:99:dc:c9:9e:0f:2d:e5:c9: 14:c5:c5:a9:24:31:b5:72:a2:ec:7f:f9:55:48:6d: 84:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:53:FC:EC:79:85:48:50:D7:FA:7E:46:B5:1F:4F:A7:02:CF:73:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/1b3ab811-ab8f-33b2-b367-243b80e6cf4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl X509v3 Authority Key Identifier: keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer sbgp-ipAddrBlock: critical IPv4: 64.79.96.0/20 74.117.236.0/22 74.121.180.0/22 74.122.192.0/21 173.243.112.0/20 192.208.176.0-192.208.190.255 198.50.24.0/21 199.16.8.0/21 199.192.200.0/21 216.107.144.0/20 216.231.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:55:64:31:ee:67:4e:44:e7:5c:a8:ab:75:54:b2:7e:c3:6b: 57:b7:d2:e7:a6:a8:62:52:cd:a7:15:18:89:69:68:24:64:84: 68:0e:38:c1:23:7a:0b:77:1d:12:9f:fd:70:a3:22:7e:d8:32: 01:9e:23:3d:90:03:dc:c5:05:0a:4d:1e:db:ca:5c:ff:56:3c: a3:18:0c:bd:e0:5f:9d:bb:20:72:03:98:e5:c9:a0:39:15:dc: 56:1d:62:40:5a:17:9e:e6:55:63:82:a9:ee:a0:52:5e:c6:a2: 42:9b:01:b9:73:9b:0b:4d:a7:47:e3:93:4a:bb:0a:ca:35:32: d8:9d:cb:31:d8:f8:15:4e:c7:5f:57:c7:00:4d:7c:70:b4:7a: b8:55:45:96:5e:9b:24:0b:d3:e0:59:1e:91:b6:a0:5c:07:9f: 70:fc:93:4e:e1:ad:f5:5d:92:dd:bb:d5:e6:4e:92:02:22:c2: ed:c2:25:69:7d:86:70:d8:dc:e7:4b:e5:43:fe:db:fd:8a:35: 1b:8c:7a:37:9f:f9:51:e9:2e:58:b1:48:7c:f8:b1:18:95:a0: 7b:fc:73:2c:0a:18:14:8b:5f:98:89:8a:7e:8a:b3:1e:41:ba: cc:6d:1b:c6:74:07:6b:12:d0:b8:ed:8e:87:08:9f:2b:51:2e: f2:7b:70:01 -----BEGIN CERTIFICATE----- MIIGhzCCBW+gAwIBAgIUAQ0Mn0MoWE0ZtN25b72Koak9EkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU3NGM3OTktN2Q0Yy00ZGYzLWI3MTEtMjk2YzM0MzM4 ZWY1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk MDFhOTBjZDgtNzhhNC00MWY4LTliNzItMzc2YTNiOTAzZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikERdikHDGW2gueu8qgBcrtC0P/lTFITnUwJ ODiaM/f7XsagPL203XJFzf9/1I7Ng2thABCnatP0wBbGCfSx1ylOLforHcxQCp+A GuQr4Z/4FJTr9if2OGTI6nvMZiMpH0gxPSc9d6LfgIpc3Uw1gCGo5Kdu4mCLNEKR 3OTjRTL7p9IqWsjHiJAsfP1a0H6IV2OCJyJpTC+U5GT77f9z3l5cIpF/YlYEdAsF sDVIv7WzBR3qDOgLl0Nj66bMUUHhTX6WwhadiwEjdeAMxL5q7N1nUt/nB+WE+ozq hkcIqh2MNKQGX0/MmdzJng8t5ckUxcWpJDG1cqLsf/lVSG2ETwIDAQABo4IDmTCC A5UwHQYDVR0OBBYEFFFT/Ox5hUhQ1/p+RrUfT6cCz3M6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0 Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZjMzQzMzhlZjUvMWIzYWI4MTEtYWI4Zi0z M2IyLWIzNjctMjQzYjgwZTZjZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWU3NGM3OTktN2Q0Yy00ZGYzLWI3 MTEtMjk2YzM0MzM4ZWY1L2VlNzRjNzk5LTdkNGMtNGRmMy1iNzExLTI5NmMzNDMz OGVmNS5jcmwwHwYDVR0jBBgwFoAUbNfgDzg2OujJMgu3w5YFtxms98QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZj MzQzMzhlZjUuY2VyMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQEQE9gAwQC SnXsAwQCSnm0AwQDSnrAAwQErfNwMAwDBATA0LADBADA0L4DBAPGMhgDBAPHEAgD BAPHwMgDBATYa5ADBATY54AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAslVkMe5nTkTnXKirdVSyfsNrV7fS 56aoYlLNpxUYiWloJGSEaA44wSN6C3cdEp/9cKMiftgyAZ4jPZAD3MUFCk0e28pc /1Y8oxgMveBfnbsgcgOY5cmgORXcVh1iQFoXnuZVY4Kp7qBSXsaiQpsBuXObC02n R+OTSrsKyjUy2J3LMdj4FU7HX1fHAE18cLR6uFVFll6bJAvT4FkekbagXAefcPyT TuGt9V2S3bvV5k6SAiLC7cIlaX2GcNjc50vlQ/7b/Yo1G4x6N5/5UekuWLFIfPix GJWge/xzLAoYFItfmImKfoqzHkG6zG0bxnQHaxLQuO2OhwifK1Eu8ntwAQ== -----END CERTIFICATE-----Generated at Thu Mar 26 15:24:42 2026 by rpki-client