$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/41bc3a8a-9b23-36e5-acd8-0f8fa5113f7a.roa File: 41bc3a8a-9b23-36e5-acd8-0f8fa5113f7a.roa (raw, json) Hash identifier: 9mc1G3kRzueN+A/Mzs7W5UKV8j9FwrTjNsxODiS7KWI= Subject key identifier: 89:6B:25:31:D9:78:F9:F2:5E:40:59:BB:1D:3E:E2:46:B6:74:DE:02 Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Certificate serial: 010D0C9F4328584D300A525C527C5E9D8286FEC0 Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/41bc3a8a-9b23-36e5-acd8-0f8fa5113f7a.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 22709 IP address blocks: 64.70.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:52:5c:52:7c:5e:9d:82:86:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=7506790d-021a-4453-aedf-f8fb9e627e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d3:ad:90:87:5c:d2:24:50:b9:5a:83:31:2d: 3e:82:11:5c:21:b8:62:0a:17:76:d6:b7:4f:12:9d: 1f:94:94:02:a1:b7:ef:52:97:9e:a7:46:13:70:83: 19:b3:9d:39:2f:70:11:b4:86:7c:73:54:a8:96:0e: 05:19:54:35:6c:00:cf:f1:6f:25:71:bc:71:a0:ea: 36:17:2d:be:6b:1c:6b:d5:c7:ce:4d:dd:c7:c8:43: db:62:94:81:8b:78:1e:cf:78:37:e7:a0:99:09:ba: 4a:d5:7c:c7:6b:5d:1e:8a:29:a3:fc:73:a0:52:39: fd:8f:34:b7:e6:b5:45:7a:51:62:03:60:53:4e:c0: d4:fe:61:5e:0f:16:39:97:38:d5:96:f4:67:83:29: b6:ae:c2:ec:65:47:37:ca:03:4a:8f:2a:c9:cd:16: b0:56:15:a3:2a:16:ae:c5:79:e1:e6:1e:78:6f:ea: 76:d0:a8:91:0b:e2:98:ab:43:90:0d:08:95:57:a0: 7d:70:98:c4:4e:6a:e6:f7:c1:68:e6:b8:bc:cf:c2: 99:77:2d:f4:cc:29:eb:8f:a9:14:8a:52:1b:6d:11: 45:8c:b7:ca:b1:23:16:bc:ee:76:c7:94:3e:0c:63: 95:f4:d1:26:92:a9:9f:cc:05:f2:6a:f5:37:10:4e: 3d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6B:25:31:D9:78:F9:F2:5E:40:59:BB:1D:3E:E2:46:B6:74:DE:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/41bc3a8a-9b23-36e5-acd8-0f8fa5113f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl X509v3 Authority Key Identifier: keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer sbgp-ipAddrBlock: critical IPv4: 64.70.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:9f:76:36:42:71:f9:82:22:62:cb:01:5d:d1:4f:b0:13:89: 9b:85:99:e2:7a:b2:c1:bb:df:8f:ce:84:29:14:f8:ee:80:25: bc:82:65:49:a9:58:17:da:fb:34:31:e7:7c:0e:ec:a7:3c:91: a7:52:7b:70:4d:b6:94:ff:36:84:1a:2f:ee:d9:4c:c8:56:c1: 1b:74:21:de:f8:2c:ec:fc:8b:28:ec:e1:e9:25:e8:8d:c2:b3: 43:b2:70:f6:7c:02:f4:74:7f:f2:8d:34:0c:4b:96:6f:5c:bc: 92:a7:19:45:e3:fe:62:1b:5f:5c:28:92:01:2f:07:8f:43:4c: c5:86:b5:8e:ad:dc:59:15:3a:14:bb:1c:7f:b6:7c:8f:2e:7f: 90:91:bb:c4:4e:e0:6f:aa:d2:cc:a8:ee:3c:5c:ee:d1:d4:bc: 84:aa:65:ac:8d:26:ce:c9:b3:58:49:92:2a:0e:53:eb:f2:10: 35:ef:eb:e5:61:f1:85:ea:1c:43:64:ac:c7:ee:5e:1a:50:25: 36:6b:38:02:db:e6:ba:25:e1:d3:5d:d1:d8:83:f1:05:e0:e2: 12:27:ce:7c:d5:da:de:d3:c6:4c:e9:c3:94:b1:7d:67:82:73: 6c:b2:f4:e0:47:9f:b7:ef:17:30:ca:c3:68:18:f1:fd:cf:3d: 59:67:95:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wClJcUnxenYKG/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1 ZmE3MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NzUwNjc5MGQtMDIxYS00NDUzLWFlZGYtZjhmYjllNjI3ZTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9OtkIdc0iRQuVqDMS0+ghFcIbhiChd21rdP Ep0flJQCobfvUpeep0YTcIMZs505L3ARtIZ8c1Solg4FGVQ1bADP8W8lcbxxoOo2 Fy2+axxr1cfOTd3HyEPbYpSBi3gez3g356CZCbpK1XzHa10eiimj/HOgUjn9jzS3 5rVFelFiA2BTTsDU/mFeDxY5lzjVlvRngym2rsLsZUc3ygNKjyrJzRawVhWjKhau xXnh5h54b+p20KiRC+KYq0OQDQiVV6B9cJjETmrm98Fo5ri8z8KZdy30zCnrj6kU ilIbbRFFjLfKsSMWvO52x5Q+DGOV9NEmkqmfzAXyavU3EE49VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlrJTHZePnyXkBZux0+4ka2dN4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5 YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvNDFiYzNhOGEtOWIyMy0z NmU1LWFjZDgtMGY4ZmE1MTEzZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2 MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw OWNmYjVmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQEaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOfdjZCcfmCImLLAV3RT7ATiZuFmeJ6ssG734/OhCkU+O6AJbyCZUmp WBfa+zQx53wO7Kc8kadSe3BNtpT/NoQaL+7ZTMhWwRt0Id74LOz8iyjs4ekl6I3C s0OycPZ8AvR0f/KNNAxLlm9cvJKnGUXj/mIbX1wokgEvB49DTMWGtY6t3FkVOhS7 HH+2fI8uf5CRu8RO4G+q0syo7jxc7tHUvISqZayNJs7Js1hJkioOU+vyEDXv6+Vh 8YXqHENkrMfuXhpQJTZrOALb5rol4dNd0diD8QXg4hInznzV2t7Txkzpw5SxfWeC c2yy9OBHn7fvFzDKw2gY8f3PPVlnlS0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:51:17 2026 by rpki-client