$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/250c85a0-cf56-385d-8e3b-9175af7edb61.roa File: 250c85a0-cf56-385d-8e3b-9175af7edb61.roa (raw, json) Hash identifier: Kdf4rc9Qv5tw5X5JbGim56xUnDZiKLCN5hluYD3cX7c= Subject key identifier: 62:01:B1:81:2A:3B:0E:26:27:6D:0E:82:D2:75:A1:83:AA:9C:39:05 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584D2A74D6FDD6279EABDCDA0700 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/250c85a0-cf56-385d-8e3b-9175af7edb61.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 25645 IP address blocks: 64.92.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:d6:fd:d6:27:9e:ab:dc:da:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=9d3bbd61-0d5d-44ca-8b64-35620fe2a133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ca:f5:40:55:04:25:b6:41:b3:17:9b:83:a7: e2:de:83:60:f2:ef:66:c1:da:83:01:c0:92:65:1d: dd:a4:ba:7a:34:96:40:9f:73:b9:72:7b:8e:f4:67: 7c:fc:97:36:d2:11:ee:3b:a4:ba:e4:93:e8:ee:50: 0b:e1:06:d8:f0:9a:68:4c:44:18:b5:0a:3f:b5:f4: 06:ee:76:70:b8:e9:c1:4c:b5:e1:5b:b6:14:a4:38: ca:14:e8:c9:0a:1b:3a:8c:d2:1c:ac:b1:21:f9:a2: 7f:26:38:5b:00:91:69:00:f0:7f:20:0c:47:ec:be: 77:20:90:a5:e7:23:f5:13:bb:6c:ad:9d:d7:fe:a1: 08:7e:b6:f0:3b:2a:f3:33:ec:f7:94:65:df:28:a5: 99:29:65:a4:9e:45:27:50:e2:c2:31:8f:72:06:dc: ce:00:15:13:93:8d:02:4a:b2:d5:0f:eb:1c:b0:e4: 4c:7a:67:b6:45:1a:45:5d:5b:18:91:81:a4:ed:f6: 4b:3e:0d:04:48:36:ae:bc:77:59:95:84:47:92:d1: 94:1e:6d:97:ff:d3:77:42:ed:bf:a1:e8:6d:5e:0e: 8c:0d:75:4d:6a:74:5c:c9:b3:02:8e:9b:5d:89:b4: 3b:5a:a0:6e:4b:99:52:01:45:97:20:36:39:fb:a8: 0f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:01:B1:81:2A:3B:0E:26:27:6D:0E:82:D2:75:A1:83:AA:9C:39:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/250c85a0-cf56-385d-8e3b-9175af7edb61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 64.92.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:39:09:ea:69:e4:45:d9:34:06:ac:66:4b:f6:04:fc:14:8c: e4:b5:91:31:89:c5:cc:18:e8:61:e8:9b:2b:fb:c4:e3:9a:62: fb:41:c1:21:59:f5:7b:e3:ed:57:2a:a0:62:12:6b:e4:64:ea: 50:e7:50:39:3f:9b:da:dc:b0:e6:98:0b:6c:a0:95:3f:0a:79: 17:c6:49:ee:ac:11:79:33:04:5d:11:e9:5b:6f:33:ae:1f:cc: d3:c8:45:99:e1:d4:a4:84:9b:83:11:94:4c:f0:4d:37:fc:4e: 88:47:03:74:7d:8b:93:04:dd:f4:d0:c4:03:e0:02:8e:a9:c1: b5:6e:e6:67:00:75:9a:16:cd:08:01:34:2e:3a:75:ec:ef:f2: 99:a0:16:f3:08:ea:ee:7b:b8:2a:20:a1:b4:fb:43:ed:18:58: c5:56:13:ac:c9:01:ce:46:8b:58:e2:52:19:72:85:7f:99:ee: 79:9f:86:c5:f3:f7:7b:2c:ed:8f:51:49:cc:cb:8f:38:88:2b: de:7b:a8:8f:6d:f1:b4:04:e2:24:dd:33:2a:45:50:50:b1:ac: b1:4a:79:fa:b9:a4:ba:a0:41:15:db:9b:0f:47:40:95:13:93: f3:62:b3:2f:b7:7d:24:af:ae:f2:fc:a8:44:06:1c:ce:da:af: 1b:03:eb:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdNb91ieeq9zaBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk OWQzYmJkNjEtMGQ1ZC00NGNhLThiNjQtMzU2MjBmZTJhMTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMr1QFUEJbZBsxebg6fi3oNg8u9mwdqDAcCS ZR3dpLp6NJZAn3O5cnuO9Gd8/Jc20hHuO6S65JPo7lAL4QbY8JpoTEQYtQo/tfQG 7nZwuOnBTLXhW7YUpDjKFOjJChs6jNIcrLEh+aJ/JjhbAJFpAPB/IAxH7L53IJCl 5yP1E7tsrZ3X/qEIfrbwOyrzM+z3lGXfKKWZKWWknkUnUOLCMY9yBtzOABUTk40C SrLVD+scsORMeme2RRpFXVsYkYGk7fZLPg0ESDauvHdZlYRHktGUHm2X/9N3Qu2/ oehtXg6MDXVNanRcybMCjptdibQ7WqBuS5lSAUWXIDY5+6gP9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIBsYEqOw4mJ20OgtJ1oYOqnDkFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvMjUwYzg1YTAtY2Y1Ni0z ODVkLThlM2ItOTE3NWFmN2VkYjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFxHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGE5Cepp5EXZNAasZkv2BPwUjOS1kTGJxcwY6GHomyv7xOOaYvtBwSFZ 9Xvj7VcqoGISa+Rk6lDnUDk/m9rcsOaYC2yglT8KeRfGSe6sEXkzBF0R6VtvM64f zNPIRZnh1KSEm4MRlEzwTTf8TohHA3R9i5ME3fTQxAPgAo6pwbVu5mcAdZoWzQgB NC46dezv8pmgFvMI6u57uCogobT7Q+0YWMVWE6zJAc5Gi1jiUhlyhX+Z7nmfhsXz 93ss7Y9RSczLjziIK957qI9t8bQE4iTdMypFUFCxrLFKefq5pLqgQRXbmw9HQJUT k/Nisy+3fSSvrvL8qEQGHM7arxsD65g= -----END CERTIFICATE-----Generated at Thu Mar 26 17:54:10 2026 by rpki-client