$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fafa4742-5c7e-32c1-8538-6898e7b8dc15.roa File: fafa4742-5c7e-32c1-8538-6898e7b8dc15.roa (raw, json) Hash identifier: y2FfAmkm0upz5lrcXZGuGDa5y8UgEGB/363x1LZ4MIk= Subject key identifier: 29:14:30:B4:9D:38:32:42:20:93:82:42:F1:D6:DA:E8:4B:5B:87:02 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584D27AA851CB419C26A4AA4C2C0 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fafa4742-5c7e-32c1-8538-6898e7b8dc15.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 36492 IP address blocks: 64.9.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:85:1c:b4:19:c2:6a:4a:a4:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=2661baf1-ce07-4602-bfe7-9251b2a8c37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:08:55:a1:6c:f5:00:8b:ef:ae:8a:1e:ce:c4: 78:4a:f2:22:f9:89:41:38:a6:9a:58:b5:4d:b2:ed: bc:01:94:8d:55:c8:0e:40:1a:66:78:0f:8d:66:9d: 1e:dc:d8:00:92:6e:f8:6d:25:2d:90:78:52:fa:a2: e4:6a:61:31:c7:61:22:9f:ea:0b:88:bb:28:cf:4e: a8:3d:58:d2:e6:40:b2:2f:45:2d:ba:0f:1a:8d:da: 53:5c:c7:d5:ca:16:12:73:8b:ad:ec:be:b1:a0:aa: 8a:0b:9a:b2:0b:ea:fb:37:2f:29:3e:b3:8c:e2:63: 26:bf:8f:57:f2:22:cc:15:aa:58:71:02:92:52:b9: 12:ec:cf:e2:74:c9:c6:96:58:71:43:0b:8b:e9:f6: 00:77:23:dd:49:a8:85:71:c6:ce:a8:b4:7e:df:50: d7:ba:6f:93:f5:6f:94:b2:d9:e1:3f:1d:db:7c:16: 35:c9:00:47:ec:21:07:f8:b0:45:33:28:71:d2:45: 8e:03:30:41:ee:15:33:1c:72:c8:29:a2:d0:56:0e: 77:15:f8:f7:68:1f:34:0e:44:d9:f4:1f:cf:fe:c4: 1b:55:8a:66:a2:76:93:be:60:fb:58:d1:24:db:cd: 8d:25:ab:81:98:4a:6c:56:69:b1:dd:f7:59:c5:e3: 70:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:14:30:B4:9D:38:32:42:20:93:82:42:F1:D6:DA:E8:4B:5B:87:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fafa4742-5c7e-32c1-8538-6898e7b8dc15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 64.9.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:47:b3:0d:18:e1:da:0e:fc:2d:41:0f:ce:eb:81:68:6a:35: b7:df:80:6e:86:46:7e:d3:d0:1f:f7:44:80:2b:3c:ab:c4:02: bd:2e:97:34:7c:35:73:c2:d9:24:5a:37:16:ab:9b:d9:28:94: 2e:5c:d4:27:26:33:86:1e:f3:55:74:61:01:e5:4b:62:c1:14: 4d:fe:da:98:8a:88:19:76:4b:5f:e5:0b:71:de:a1:b2:67:cb: 65:2d:49:71:e2:38:13:44:48:b5:77:5c:38:e4:f7:f4:65:be: 1b:5e:eb:e3:61:28:24:7d:c8:35:27:f9:39:6c:a8:01:ff:f9: 64:15:c7:bf:74:70:6e:86:02:a0:7e:d0:99:ee:a8:91:32:9d: cd:73:dd:46:7e:8d:91:db:28:12:6e:af:0b:d8:55:72:9a:dd: 77:1b:17:96:09:d8:b1:dc:a0:7a:d9:f9:9a:98:77:08:e0:79: 9e:24:a0:38:57:f9:1d:7e:2e:dc:8b:8d:4d:d4:48:6b:0f:af: a7:e4:56:4e:25:43:4e:6d:6c:e9:03:6c:da:e4:a6:84:d6:88: f3:27:22:ca:11:5d:16:60:97:23:0b:af:23:b9:56:63:f8:0e: 63:c6:e2:bb:5b:81:3d:62:d0:82:9f:cb:58:93:9e:06:b3:34: fc:99:fd:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqoUctBnCakqkwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MjY2MWJhZjEtY2UwNy00NjAyLWJmZTctOTI1MWIyYThjMzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQhVoWz1AIvvrooezsR4SvIi+YlBOKaaWLVN su28AZSNVcgOQBpmeA+NZp0e3NgAkm74bSUtkHhS+qLkamExx2Ein+oLiLsoz06o PVjS5kCyL0Utug8ajdpTXMfVyhYSc4ut7L6xoKqKC5qyC+r7Ny8pPrOM4mMmv49X 8iLMFapYcQKSUrkS7M/idMnGllhxQwuL6fYAdyPdSaiFccbOqLR+31DXum+T9W+U stnhPx3bfBY1yQBH7CEH+LBFMyhx0kWOAzBB7hUzHHLIKaLQVg53Ffj3aB80DkTZ 9B/P/sQbVYpmonaTvmD7WNEk282NJauBmEpsVmmx3fdZxeNwiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkUMLSdODJCIJOCQvHW2uhLW4cCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZmFmYTQ3NDItNWM3ZS0z MmMxLTg1MzgtNjg5OGU3YjhkYzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQAnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRHsw0Y4doO/C1BD87rgWhqNbffgG6GRn7T0B/3RIArPKvEAr0ulzR8 NXPC2SRaNxarm9kolC5c1CcmM4Ye81V0YQHlS2LBFE3+2piKiBl2S1/lC3HeobJn y2UtSXHiOBNESLV3XDjk9/Rlvhte6+NhKCR9yDUn+TlsqAH/+WQVx790cG6GAqB+ 0JnuqJEync1z3UZ+jZHbKBJurwvYVXKa3XcbF5YJ2LHcoHrZ+ZqYdwjgeZ4koDhX +R1+LtyLjU3USGsPr6fkVk4lQ05tbOkDbNrkpoTWiPMnIsoRXRZglyMLryO5VmP4 DmPG4rtbgT1i0IKfy1iTngazNPyZ/SE= -----END CERTIFICATE-----Generated at Thu Mar 26 22:31:55 2026 by rpki-client