$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/92bfe560-c41a-3902-8146-25e1e8af1a21.roa File: 92bfe560-c41a-3902-8146-25e1e8af1a21.roa (raw, json) Hash identifier: rQxd/nhak2jaHMeOf7RtHKVns6UFjIv+YG04M4ivlLQ= Subject key identifier: 35:DC:7D:F5:8C:8E:EF:87:E8:91:C0:E1:B8:F5:46:F1:DA:3B:2D:80 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D0D424873B0AFB5B2BAE0645A Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/92bfe560-c41a-3902-8146-25e1e8af1a21.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 21859 IP address blocks: 64.145.0.0/24 maxlen: 24 64.145.1.0/24 maxlen: 24 64.145.2.0/24 maxlen: 24 64.145.3.0/24 maxlen: 24 64.145.10.0/24 maxlen: 24 207.145.6.0/24 maxlen: 24 207.145.9.0/24 maxlen: 24 207.145.12.0/24 maxlen: 24 207.145.42.0/24 maxlen: 24 207.145.48.0/24 maxlen: 24 216.254.1.0/24 maxlen: 24 216.254.2.0/24 maxlen: 24 216.254.3.0/24 maxlen: 24 216.254.92.0/24 maxlen: 24 216.254.93.0/24 maxlen: 24 216.254.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:48:73:b0:af:b5:b2:ba:e0:64:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=9a03e02b-f7c3-45b7-8a50-d9ca01059d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1f:ad:1e:f5:aa:8f:d4:0a:4e:82:a8:c2:21: dd:3e:b0:e0:10:e0:6c:45:45:a3:f3:fb:a7:6e:7e: 3b:8e:88:ee:e7:dc:d2:61:08:7b:01:a2:03:c2:a9: 4b:ff:de:1d:64:52:03:e1:07:e3:cc:c6:2e:5a:ce: f9:97:96:ee:df:f8:85:51:55:02:f0:3f:29:cc:6b: 1f:7f:70:bb:8b:c9:cd:99:bb:82:80:b1:46:38:35: 44:ef:e1:35:d5:34:c0:35:01:e1:67:17:98:36:0e: bb:8e:ae:3c:e9:44:be:87:05:a0:56:4e:36:8c:5d: 0c:1d:6b:f8:da:81:cd:8b:03:2e:f0:38:2f:47:2f: d4:02:f0:3e:85:e9:79:00:9c:87:1f:0f:91:d8:b8: d9:56:3a:d8:69:e8:0a:34:00:cd:77:1c:00:54:88: 8d:09:23:4d:b7:03:7e:bf:d8:9e:6e:d7:33:1a:a3: 2c:5d:0d:a5:f5:37:44:af:02:3f:b9:ca:1a:5a:f8: 85:26:c1:cf:82:b2:31:05:38:1a:a9:28:21:09:f4: f2:70:b0:b8:1c:22:37:53:5f:b8:68:48:a7:08:94: 23:99:b7:ee:27:22:fd:fa:93:ca:6d:f7:8b:28:ea: 66:1e:79:38:c8:23:8d:9b:d1:fe:79:d6:95:48:cd: 2e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DC:7D:F5:8C:8E:EF:87:E8:91:C0:E1:B8:F5:46:F1:DA:3B:2D:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/92bfe560-c41a-3902-8146-25e1e8af1a21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.145.0.0/22 64.145.10.0/24 207.145.6.0/24 207.145.9.0/24 207.145.12.0/24 207.145.42.0/24 207.145.48.0/24 216.254.1.0-216.254.3.255 216.254.92.0-216.254.94.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f0:80:86:01:dc:4f:60:29:4a:4b:40:4d:5d:f6:b8:a0:2e: 8a:3f:e4:c3:aa:6e:c1:c6:8d:71:e3:4e:fb:26:ac:1e:90:29: 0c:45:0a:b2:67:58:e5:be:54:0b:af:9b:f3:bf:35:ca:3f:e6: 04:a7:71:69:3c:a1:3d:63:99:5d:f3:2e:5d:4f:8b:ee:b8:cd: b0:5e:bb:c9:d2:17:1a:4c:b8:57:d5:7b:ba:6b:01:55:68:3b: 59:93:e1:28:84:98:dc:17:4b:6a:38:fe:ad:d8:9e:9b:4b:73: 4a:fb:e5:0f:f9:cc:18:a5:4e:d4:8f:0c:4e:2f:42:1e:a4:83: dc:9b:d7:93:62:34:2f:e2:64:19:43:73:aa:68:26:2e:c7:aa: bf:1e:bb:4f:c9:32:f6:5b:97:fc:58:23:a4:8f:d9:b7:17:21: cc:26:1c:bd:f3:27:4b:ac:e1:00:fb:66:86:28:2c:93:90:1c: ec:5a:cd:59:8d:3f:d0:f9:66:fc:da:85:66:e1:b7:0e:2f:85: de:83:a2:a7:6f:0f:88:b5:fc:78:e2:82:e1:4d:0a:b1:64:81: c3:42:34:f0:77:a3:12:06:ca:91:56:16:a5:14:31:db:35:4d: ac:d2:26:5e:4e:dd:3c:e3:0c:7d:60:90:fb:60:2b:80:ff:12: 83:85:5a:ee -----BEGIN CERTIFICATE----- MIIGgzCCBWugAwIBAgIUAQ0Mn0MoWE0NQkhzsK+1srrgZFowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk OWEwM2UwMmItZjdjMy00NWI3LThhNTAtZDljYTAxMDU5ZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR+tHvWqj9QKToKowiHdPrDgEOBsRUWj8/un bn47joju59zSYQh7AaIDwqlL/94dZFID4QfjzMYuWs75l5bu3/iFUVUC8D8pzGsf f3C7i8nNmbuCgLFGODVE7+E11TTANQHhZxeYNg67jq486US+hwWgVk42jF0MHWv4 2oHNiwMu8DgvRy/UAvA+hel5AJyHHw+R2LjZVjrYaegKNADNdxwAVIiNCSNNtwN+ v9iebtczGqMsXQ2l9TdErwI/ucoaWviFJsHPgrIxBTgaqSghCfTycLC4HCI3U1+4 aEinCJQjmbfuJyL9+pPKbfeLKOpmHnk4yCONm9H+edaVSM0uxQIDAQABo4IDlTCC A5EwHQYDVR0OBBYEFDXcffWMju+H6JHA4bj1RvHaOy2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTJiZmU1NjAtYzQxYS0z OTAyLTgxNDYtMjVlMWU4YWYxYTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQCQJEAAwQA QJEKAwQAz5EGAwQAz5EJAwQAz5EMAwQAz5EqAwQAz5EwMAwDBADY/gEDBALY/gAw DAMEAtj+XAMEANj+XjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB28ICGAdxPYClKS0BNXfa4oC6KP+TDqm7B xo1x4077JqwekCkMRQqyZ1jlvlQLr5vzvzXKP+YEp3FpPKE9Y5ld8y5dT4vuuM2w XrvJ0hcaTLhX1Xu6awFVaDtZk+EohJjcF0tqOP6t2J6bS3NK++UP+cwYpU7UjwxO L0IepIPcm9eTYjQv4mQZQ3OqaCYux6q/HrtPyTL2W5f8WCOkj9m3FyHMJhy98ydL rOEA+2aGKCyTkBzsWs1ZjT/Q+Wb82oVm4bcOL4Xeg6Knbw+Itfx44oLhTQqxZIHD QjTwd6MSBsqRVhalFDHbNU2s0iZeTt084wx9YJD7YCuA/xKDhVru -----END CERTIFICATE-----Generated at Thu Mar 26 18:25:14 2026 by rpki-client