$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7/7591ed07-3e4f-34e7-983f-c68801299932.roa File: 7591ed07-3e4f-34e7-983f-c68801299932.roa (raw, json) Hash identifier: rFxgjCZ9Le2muDOISclc7VenSFe/qOeOK+3RX3zFuL4= Subject key identifier: 5C:F1:6C:EA:7A:BF:8D:FF:16:9E:90:5A:D1:C6:52:5F:02:98:68:31 Certificate issuer: /CN=e7255484-0f74-45b3-b1d2-b5eda55e6ce7 Certificate serial: 010D0C9F4328584D15A26471E76F56D0B952BE80 Authority key identifier: DE:AA:75:03:16:19:FC:53:EA:E3:97:BC:11:13:6C:90:61:55:FD:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7/7591ed07-3e4f-34e7-983f-c68801299932.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 11727 IP address blocks: 173.241.96.0/20 maxlen: 24 209.240.112.0/20 maxlen: 24 216.183.128.0/19 maxlen: 24 2604:5340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7/e7255484-0f74-45b3-b1d2-b5eda55e6ce7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7/e7255484-0f74-45b3-b1d2-b5eda55e6ce7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:64:71:e7:6f:56:d0:b9:52:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7255484-0f74-45b3-b1d2-b5eda55e6ce7 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=ff525903-6828-442a-9570-10ff3ed1b410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3d:ea:cd:84:d4:45:de:f5:dd:e3:a0:1a:dd: 52:93:b3:a2:4e:94:b8:5f:c5:ce:35:97:65:77:ad: 6c:5a:1e:e7:54:4c:ed:6d:1c:96:f6:d1:86:2e:20: b4:78:bb:14:3c:54:55:de:98:0b:81:3c:08:53:43: 92:c7:c2:09:6e:b1:33:2e:8c:06:fc:70:8c:3e:7e: 95:7f:0a:c3:fe:2e:65:85:2b:a6:34:7f:1b:69:d1: 3a:8f:a6:ed:95:d3:64:2f:86:46:c1:4d:20:89:78: ce:f9:44:95:b7:e1:df:5e:d9:46:f6:1a:37:ec:b6: cf:47:55:06:ab:2e:30:34:b5:99:7d:15:6d:b7:2b: a1:12:07:bb:ad:c3:b8:12:94:ad:85:4f:7e:4e:81: b0:0c:06:ad:ad:36:33:78:8b:6e:12:86:77:1f:ac: 97:4a:a1:c6:03:96:e6:45:15:1e:39:1b:54:82:84: e0:66:ec:fe:ff:a5:b0:8b:f8:66:0f:13:35:b4:47: 5b:eb:75:f3:87:ba:29:fc:d4:63:78:46:fa:45:a4: 6a:92:36:15:af:c1:bc:2a:2d:3a:90:39:b3:e5:46: a5:cc:86:2c:03:08:c2:70:af:33:e1:87:d1:76:00: 73:51:cb:64:34:c7:80:8b:0b:38:46:0e:7d:92:6c: 52:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F1:6C:EA:7A:BF:8D:FF:16:9E:90:5A:D1:C6:52:5F:02:98:68:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7/7591ed07-3e4f-34e7-983f-c68801299932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7/e7255484-0f74-45b3-b1d2-b5eda55e6ce7.crl X509v3 Authority Key Identifier: keyid:DE:AA:75:03:16:19:FC:53:EA:E3:97:BC:11:13:6C:90:61:55:FD:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7.cer sbgp-ipAddrBlock: critical IPv4: 173.241.96.0/20 209.240.112.0/20 216.183.128.0/19 IPv6: 2604:5340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:63:e8:b2:1d:c3:6f:22:7c:6b:7c:3f:86:88:08:04:74:c3: f0:f9:ec:0a:5e:35:01:21:d4:61:fc:05:16:1a:27:d2:fa:ba: d8:46:27:8e:70:45:d8:5b:02:dc:95:7e:0c:7c:03:92:6b:0f: f7:57:d5:ad:46:92:0b:ed:c4:2f:22:6d:37:bb:c6:6d:bc:46: 1e:22:0b:10:93:7d:df:8a:bc:43:d8:59:ad:e2:0b:86:05:51: 58:21:40:be:de:74:bc:3f:e6:aa:d1:63:e0:56:57:d5:4b:dc: 71:4d:2b:42:00:d2:d6:a4:6c:26:99:47:d5:f4:be:6f:00:fe: a1:01:ee:72:51:86:90:da:9b:6a:52:3a:ee:8a:76:e9:ca:df: 63:e0:5b:67:35:ed:76:f5:46:58:ca:cd:d1:84:bd:fb:12:ae: 13:69:24:52:46:f9:e4:ab:0d:e1:d3:fd:76:da:9b:63:17:e4: b5:00:3a:07:24:16:9c:e4:63:d4:27:38:22:a1:62:8d:9c:30: 0c:c0:16:6b:0a:51:b1:60:e8:83:eb:ef:8f:a0:65:9f:cd:b5: 79:69:65:87:28:fa:2d:6d:f8:45:0e:d7:29:da:0a:04:c7:2c: d0:eb:9a:92:bd:c1:e9:f4:db:67:5b:90:8b:ab:a5:3b:c7:0c: 9f:b2:ab:9c -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE0VomRx529W0LlSvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTcyNTU0ODQtMGY3NC00NWIzLWIxZDItYjVlZGE1NWU2 Y2U3MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk ZmY1MjU5MDMtNjgyOC00NDJhLTk1NzAtMTBmZjNlZDFiNDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj3qzYTURd713eOgGt1Sk7OiTpS4X8XONZdl d61sWh7nVEztbRyW9tGGLiC0eLsUPFRV3pgLgTwIU0OSx8IJbrEzLowG/HCMPn6V fwrD/i5lhSumNH8badE6j6btldNkL4ZGwU0giXjO+USVt+HfXtlG9ho37LbPR1UG qy4wNLWZfRVttyuhEge7rcO4EpSthU9+ToGwDAatrTYzeItuEoZ3H6yXSqHGA5bm RRUeORtUgoTgZuz+/6Wwi/hmDxM1tEdb63Xzh7op/NRjeEb6RaRqkjYVr8G8Ki06 kDmz5UalzIYsAwjCcK8z4YfRdgBzUctkNMeAiws4Rg59kmxSBQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFFzxbOp6v43/Fp6QWtHGUl8CmGgxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lNzI1 NTQ4NC0wZjc0LTQ1YjMtYjFkMi1iNWVkYTU1ZTZjZTcvNzU5MWVkMDctM2U0Zi0z NGU3LTk4M2YtYzY4ODAxMjk5OTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTcyNTU0ODQtMGY3NC00NWIzLWIx ZDItYjVlZGE1NWU2Y2U3L2U3MjU1NDg0LTBmNzQtNDViMy1iMWQyLWI1ZWRhNTVl NmNlNy5jcmwwHwYDVR0jBBgwFoAU3qp1AxYZ/FPq45e8ERNskGFV/W0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lNzI1NTQ4NC0wZjc0LTQ1YjMtYjFkMi1iNWVk YTU1ZTZjZTcuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQErfFgAwQE 0fBwAwQF2LeAMA0EAgACMAcDBQAmBFNAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEdj6LIdw28ifGt8P4aI CAR0w/D57ApeNQEh1GH8BRYaJ9L6uthGJ45wRdhbAtyVfgx8A5JrD/dX1a1Gkgvt xC8ibTe7xm28Rh4iCxCTfd+KvEPYWa3iC4YFUVghQL7edLw/5qrRY+BWV9VL3HFN K0IA0takbCaZR9X0vm8A/qEB7nJRhpDam2pSOu6KdunK32PgW2c17Xb1RljKzdGE vfsSrhNpJFJG+eSrDeHT/Xbam2MX5LUAOgckFpzkY9QnOCKhYo2cMAzAFmsKUbFg 6IPr74+gZZ/NtXlpZYco+i1t+EUO1ynaCgTHLNDrmpK9wen022dbkIurpTvHDJ+y q5w= -----END CERTIFICATE-----Generated at Thu Mar 26 14:13:39 2026 by rpki-client