$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/0cff3be4-0a87-36be-9260-19d9a164f049.roa File: 0cff3be4-0a87-36be-9260-19d9a164f049.roa (raw, json) Hash identifier: CkFVK6XZv2l7Rzwyt2zmSBt7GWOIuLlQcSBLOllo5eI= Subject key identifier: 40:14:C6:BD:C3:7E:A3:0B:92:22:4D:D1:58:B9:D7:C7:95:A9:3B:88 Certificate issuer: /CN=b2797f94-84cd-4d6b-a254-94f6593d32af Certificate serial: 010D0C9F4328584D359F9E53D84B58E7C3F7FE40 Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/0cff3be4-0a87-36be-9260-19d9a164f049.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22079 IP address blocks: 64.186.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:9e:53:d8:4b:58:e7:c3:f7:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=a14a22d5-f504-4b24-8846-d0862cefb471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:44:ac:5b:87:39:50:f1:ea:06:6b:84:af:50: e6:d1:37:a9:36:de:57:48:d4:6b:3a:e1:3e:2d:77: e8:2f:e6:0c:71:12:09:27:d0:11:b2:86:2c:9b:e5: 40:94:7b:d9:4b:08:22:bc:ef:78:35:49:eb:7b:c1: f3:b1:22:e7:43:20:6d:4d:50:86:84:28:12:51:22: 08:c6:1c:70:8d:21:fb:0e:aa:f6:94:3e:73:21:40: b4:31:07:a3:7c:3e:61:66:32:6b:df:21:46:a5:fb: d0:42:54:07:0f:b1:48:fa:f3:76:bb:6e:50:b5:44: 3b:5f:e0:3d:65:b4:cf:1d:3e:49:25:01:af:6d:77: 2a:eb:e9:aa:d6:0d:56:61:25:7e:2f:f1:df:f9:dc: 60:01:b6:c7:6f:11:43:35:3f:19:e5:05:ef:e1:63: f2:e2:e0:56:bb:b5:71:64:f9:81:e3:6b:c1:80:ac: e2:04:a9:cc:d0:d2:0b:b3:55:26:07:47:02:e4:a4: b2:1c:18:b8:ee:fc:02:ec:0c:d8:92:6a:34:f3:03: 3f:25:55:c1:b4:51:ea:1c:ab:fd:fc:2b:74:0e:25: 26:73:5c:c2:f0:14:b2:d9:a2:f5:fc:e4:76:ca:7e: 57:47:b4:a2:06:3b:10:c5:fd:c4:5d:5e:75:a3:1d: 8d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:14:C6:BD:C3:7E:A3:0B:92:22:4D:D1:58:B9:D7:C7:95:A9:3B:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/0cff3be4-0a87-36be-9260-19d9a164f049.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl X509v3 Authority Key Identifier: keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer sbgp-ipAddrBlock: critical IPv4: 64.186.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:02:7c:aa:a2:3c:fc:a5:cd:bd:bf:b2:06:0f:7f:4f:b3:2b: 56:dc:28:2e:1f:7b:2f:d7:8d:5e:73:63:0a:5e:cb:8b:d6:01: 18:4e:d1:9c:b1:ec:44:fd:0d:ac:9e:c3:65:72:85:70:16:00: 63:8a:1a:38:6a:c0:4c:00:75:53:03:60:33:97:ee:42:0f:91: 73:01:b5:49:60:24:53:ca:8c:fa:07:e2:e2:4e:26:c6:46:98: 8b:c3:f7:48:ef:49:b5:77:6d:e1:9e:2d:68:ad:8a:9d:d5:c4: 1d:0b:c1:e2:5b:f3:ad:64:5c:65:36:a0:db:84:bb:a5:02:11: d5:f3:82:31:5f:d1:f5:22:63:6c:c9:37:b5:f7:4c:0d:93:ad: 2d:f3:df:45:ca:8f:68:23:ff:40:3e:bb:42:a7:92:ed:ab:0f: 9a:af:ea:5a:b7:99:50:ae:5c:f6:3f:20:0d:64:df:76:f1:80: 7b:d7:f0:9b:7b:3a:84:16:89:b5:02:7b:49:09:17:9f:f8:24: 4d:8c:46:0c:b8:48:64:eb:59:ce:79:7f:a0:68:64:4f:60:e0: 79:61:ec:44:35:3e:25:14:3f:97:65:0f:dd:2c:e1:f3:c6:18: 9d:8e:db:b3:f5:91:f3:9a:a4:59:e9:93:1f:38:ac:c1:0a:04: 48:33:9c:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n55T2EtY58P3/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI3OTdmOTQtODRjZC00ZDZiLWEyNTQtOTRmNjU5M2Qz MmFmMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YTE0YTIyZDUtZjUwNC00YjI0LTg4NDYtZDA4NjJjZWZiNDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0SsW4c5UPHqBmuEr1Dm0TepNt5XSNRrOuE+ LXfoL+YMcRIJJ9ARsoYsm+VAlHvZSwgivO94NUnre8HzsSLnQyBtTVCGhCgSUSII xhxwjSH7Dqr2lD5zIUC0MQejfD5hZjJr3yFGpfvQQlQHD7FI+vN2u25QtUQ7X+A9 ZbTPHT5JJQGvbXcq6+mq1g1WYSV+L/Hf+dxgAbbHbxFDNT8Z5QXv4WPy4uBWu7Vx ZPmB42vBgKziBKnM0NILs1UmB0cC5KSyHBi47vwC7AzYkmo08wM/JVXBtFHqHKv9 /Ct0DiUmc1zC8BSy2aL1/OR2yn5XR7SiBjsQxf3EXV51ox2NoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAUxr3DfqMLkiJN0Vi518eVqTuIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5 N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2NTkzZDMyYWYvMGNmZjNiZTQtMGE4Ny0z NmJlLTkyNjAtMTlkOWExNjRmMDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjI3OTdmOTQtODRjZC00ZDZiLWEy NTQtOTRmNjU5M2QzMmFmL2IyNzk3Zjk0LTg0Y2QtNGQ2Yi1hMjU0LTk0ZjY1OTNk MzJhZi5jcmwwHwYDVR0jBBgwFoAUaliZMYRR7DUFeyI1/3BS6hhsVyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2 NTkzZDMyYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQLpkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcCfKqiPPylzb2/sgYPf0+zK1bcKC4fey/XjV5zYwpey4vWARhO0Zyx 7ET9Dayew2VyhXAWAGOKGjhqwEwAdVMDYDOX7kIPkXMBtUlgJFPKjPoH4uJOJsZG mIvD90jvSbV3beGeLWitip3VxB0LweJb861kXGU2oNuEu6UCEdXzgjFf0fUiY2zJ N7X3TA2TrS3z30XKj2gj/0A+u0Knku2rD5qv6lq3mVCuXPY/IA1k33bxgHvX8Jt7 OoQWibUCe0kJF5/4JE2MRgy4SGTrWc55f6BoZE9g4Hlh7EQ1PiUUP5dlD90s4fPG GJ2O27P1kfOapFnpkx84rMEKBEgznAI= -----END CERTIFICATE-----Generated at Thu Mar 26 15:01:59 2026 by rpki-client