$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/a1511da0-2047-36ce-973f-c8381433105e.roa File: a1511da0-2047-36ce-973f-c8381433105e.roa (raw, json) Hash identifier: OoymOIWny9UhHQquuUCYLqr/83/GMx0sUcEFXwRhojc= Subject key identifier: C4:06:B9:46:11:FB:FA:FB:23:A4:1D:F1:22:CB:78:76:FD:50:7E:F7 Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Certificate serial: 010D0C9F4328584D0EA7AD0F16B4D261A8A26180 Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/a1511da0-2047-36ce-973f-c8381433105e.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 6128 IP address blocks: 24.38.0.0/17 maxlen: 24 24.157.32.0/19 maxlen: 24 24.246.96.0/19 maxlen: 24 63.247.160.0/19 maxlen: 24 65.51.0.0/16 maxlen: 24 69.27.224.0/19 maxlen: 24 69.74.0.0/16 maxlen: 24 108.179.0.0/18 maxlen: 24 173.251.0.0/17 maxlen: 24 198.46.96.0/19 maxlen: 24 216.255.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:ad:0f:16:b4:d2:61:a8:a2:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=b295f1c5-989f-4395-ad13-a1952b5b402e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:30:37:01:4b:15:35:f9:7e:de:45:65:d9:06: 3c:1f:dc:41:e0:1e:08:87:e0:fe:fa:bf:78:5d:6f: 5a:9d:6c:12:35:10:bd:d1:08:81:7d:52:ba:30:19: 71:9e:dd:ef:eb:9b:f4:de:62:13:8c:31:21:82:58: 2a:87:49:50:72:f2:fd:96:69:ec:89:fa:fc:3e:a9: 93:52:55:ed:fa:57:52:33:7b:f0:68:1f:a6:8d:c3: 2a:a3:1d:a7:ab:c3:fe:9f:4d:9e:39:bc:72:f1:9a: c0:14:72:32:71:f4:08:8c:9c:c1:93:26:fe:15:83: dd:c3:c2:a8:31:1e:f1:27:d8:19:ac:4e:f5:ca:2e: c4:1a:a5:f6:4a:6c:dc:4e:e5:37:5a:ce:56:ef:1a: a9:74:2d:81:3b:b0:f2:ae:62:04:c7:6b:9e:3a:d1: 37:de:7f:ef:5f:e0:bc:80:bc:e5:55:89:bc:26:0a: 6a:6e:1f:31:e3:41:5f:1d:47:e0:dc:6b:6e:55:21: 1b:d0:36:c7:03:72:f7:88:62:a1:9e:47:8b:ca:78: 82:1e:ff:52:c4:26:81:6e:c2:23:30:b8:9d:cf:e3: c2:56:c9:46:3e:67:f4:2b:72:19:79:09:6b:28:3d: 23:6d:af:d3:57:05:9f:ad:e6:e5:de:6e:f2:c0:f3: 16:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:06:B9:46:11:FB:FA:FB:23:A4:1D:F1:22:CB:78:76:FD:50:7E:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/a1511da0-2047-36ce-973f-c8381433105e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl X509v3 Authority Key Identifier: keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer sbgp-ipAddrBlock: critical IPv4: 24.38.0.0/17 24.157.32.0/19 24.246.96.0/19 63.247.160.0/19 65.51.0.0/16 69.27.224.0/19 69.74.0.0/16 108.179.0.0/18 173.251.0.0/17 198.46.96.0/19 216.255.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e6:50:1c:b4:7c:74:10:b8:ff:bc:3c:a7:e2:39:83:57:0e:9d: fd:12:b3:bd:b0:aa:fe:82:61:6c:ec:67:f5:ff:d8:cd:63:f9: 46:04:f0:e4:4c:a1:5b:a3:f8:fd:2a:7c:d8:38:31:fc:de:9a: 16:ab:9b:30:c9:85:d9:1d:79:2f:d9:76:11:eb:e5:bb:b6:68: d8:40:22:59:52:24:32:e0:98:d8:96:74:29:d9:73:eb:d0:ee: a7:6d:ac:50:94:5e:07:e6:79:95:2b:3e:bc:0e:ea:f6:47:35: 33:b5:7d:6d:7d:7a:9f:57:ff:39:8d:c9:8e:ea:a0:ed:54:9a: 6b:71:cf:fa:d0:18:24:c5:e6:9b:75:36:6e:b6:c7:60:4f:90: 45:6e:c1:61:c7:ff:57:eb:62:bf:36:de:4b:ff:7d:55:b1:28: 0c:7e:49:55:d7:09:b9:f6:8c:41:e0:8f:80:18:10:00:5f:30: 7a:c5:66:e9:70:93:e3:c6:69:b3:cb:20:80:fe:e0:54:99:7a: 81:4f:25:09:21:29:e1:f0:e9:60:b3:09:65:2d:20:1e:a8:10: 0f:64:a5:19:b0:02:da:d7:76:c7:72:9f:ab:af:6b:de:ed:98: bd:7a:5e:46:17:20:bc:2a:48:91:7a:03:c1:7e:76:ee:c7:12: c8:ce:ed:86 -----BEGIN CERTIFICATE----- MIIGfTCCBWWgAwIBAgIUAQ0Mn0MoWE0Op60PFrTSYaiiYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh ZDE1MB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk YjI5NWYxYzUtOTg5Zi00Mzk1LWFkMTMtYTE5NTJiNWI0MDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jA3AUsVNfl+3kVl2QY8H9xB4B4Ih+D++r94 XW9anWwSNRC90QiBfVK6MBlxnt3v65v03mITjDEhglgqh0lQcvL9lmnsifr8PqmT UlXt+ldSM3vwaB+mjcMqox2nq8P+n02eObxy8ZrAFHIycfQIjJzBkyb+FYPdw8Ko MR7xJ9gZrE71yi7EGqX2SmzcTuU3Ws5W7xqpdC2BO7DyrmIEx2ueOtE33n/vX+C8 gLzlVYm8Jgpqbh8x40FfHUfg3GtuVSEb0DbHA3L3iGKhnkeLyniCHv9SxCaBbsIj MLidz+PCVslGPmf0K3IZeQlrKD0jba/TVwWfrebl3m7ywPMWnwIDAQABo4IDjzCC A4swHQYDVR0OBBYEFMQGuUYR+/r7I6Qd8SLLeHb9UH73MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4 YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvYTE1MTFkYTAtMjA0Ny0z NmNlLTk3M2YtYzgzODE0MzMxMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl OGEwMGFkMTUuY2VyMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQHGCYAAwQF GJ0gAwQFGPZgAwQFP/egAwMAQTMDBAVFG+ADAwBFSgMEBmyzAAMEB637AAMEBcYu YAMEBdj/YDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQDmUBy0fHQQuP+8PKfiOYNXDp39ErO9sKr+gmFs7Gf1 /9jNY/lGBPDkTKFbo/j9KnzYODH83poWq5swyYXZHXkv2XYR6+W7tmjYQCJZUiQy 4JjYlnQp2XPr0O6nbaxQlF4H5nmVKz68Dur2RzUztX1tfXqfV/85jcmO6qDtVJpr cc/60BgkxeabdTZutsdgT5BFbsFhx/9X62K/Nt5L/31VsSgMfklV1wm59oxB4I+A GBAAXzB6xWbpcJPjxmmzyyCA/uBUmXqBTyUJISnh8OlgswllLSAeqBAPZKUZsALa 13bHcp+rr2ve7Zi9el5GFyC8KkiRegPBfnbuxxLIzu2G -----END CERTIFICATE-----Generated at Thu Mar 26 15:05:29 2026 by rpki-client