$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b811eb10-0690-3b63-9629-a27848e30555.roa File: b811eb10-0690-3b63-9629-a27848e30555.roa (raw, json) Hash identifier: 9ArF3Hua+BNOrPwchfeNwqA+dOdkR0V9XpDwfeiCzCQ= Subject key identifier: 60:D8:D2:1A:AA:A7:4A:F9:21:0E:2E:D2:C9:08:BC:2A:47:F4:DC:06 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D386A3EEE22238F3F0FE42420 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b811eb10-0690-3b63-9629-a27848e30555.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 62610 IP address blocks: 65.86.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:3e:ee:22:23:8f:3f:0f:e4:24:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=7658a803-7bd7-42ab-b9ed-11c1da31bde0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:82:c1:64:3f:3f:8b:cd:ef:28:bc:c8:0e:92: 4c:be:6d:73:b2:62:f3:93:81:9f:50:c2:0f:a2:8a: a8:28:b7:43:ca:41:88:c5:aa:53:78:31:a9:f1:31: 16:a3:e0:ab:db:9c:48:28:7a:39:08:9d:6e:13:a1: 4e:62:ca:9f:98:88:4b:9b:20:15:49:be:92:84:2c: bd:67:8e:7d:46:65:e2:04:97:50:52:2a:6f:ae:a2: 84:f9:c6:8c:9e:97:90:8f:88:78:a2:65:05:21:6c: b2:74:61:75:c9:1e:4c:95:0a:e2:85:9e:6f:e4:42: 43:f8:80:cd:00:39:6d:fa:bb:7b:4a:4f:99:e5:60: 21:d4:c1:99:ba:a0:a8:2e:2f:fb:97:cf:59:dc:d8: 09:2c:2a:24:81:45:33:a4:d2:70:76:d7:3f:23:35: e9:f4:c0:2d:b8:32:e4:51:7e:6c:99:76:3a:7d:e5: c7:58:e0:8b:4f:d8:78:49:cd:33:41:2b:a8:51:5c: f6:4a:fb:ba:20:54:a4:9e:2f:04:7f:f4:56:83:ff: 6d:30:ee:60:2d:f0:7b:e6:b1:d2:c8:f0:09:e5:83: 8c:ab:2c:d1:e2:53:79:ee:b8:d0:15:02:fd:32:f9: c1:5e:2a:af:c7:2a:ee:33:94:3c:16:b0:44:96:4e: 17:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D8:D2:1A:AA:A7:4A:F9:21:0E:2E:D2:C9:08:BC:2A:47:F4:DC:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b811eb10-0690-3b63-9629-a27848e30555.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:37:13:d6:27:30:c9:03:56:f8:b4:1d:3e:c7:5f:60:8c:f7: a5:e1:27:2f:3e:0b:4a:a9:87:c1:57:36:b8:8a:77:c4:92:64: 60:b1:e2:14:65:48:6b:df:51:08:f8:88:32:fb:7d:9e:e2:e8: 7d:74:d7:85:38:1f:65:36:84:1f:17:a2:2b:eb:09:30:bd:e8: cb:a0:e4:cd:51:ef:1a:3f:11:48:de:67:a3:f4:f3:ce:53:e6: b9:0b:2e:bd:d3:62:be:fd:92:47:f4:14:b7:fa:e9:a0:e7:14: 70:60:51:fd:10:e7:6a:ef:0c:0c:fe:df:47:70:c2:53:48:b2: b2:3a:bc:9d:01:57:4d:34:85:65:41:66:1f:b5:c0:f0:eb:7e: 06:a3:07:1b:a3:07:6b:63:45:0a:45:bf:e7:13:a0:82:61:96: 24:79:60:9c:61:b2:d1:71:c9:86:2b:f8:98:f7:33:89:f9:dc: e2:a4:45:99:0e:33:55:8b:69:eb:91:1d:40:b5:1d:af:ea:44: f2:1c:9a:64:9b:04:91:4e:bc:26:ec:da:d6:fc:7a:21:5f:72: ac:e7:95:fb:e1:95:bc:11:24:6c:b0:6b:30:94:69:38:40:96: 30:bd:8a:3b:dd:80:84:73:ce:1e:78:88:c9:c3:83:ff:43:b0: 2b:c1:10:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04aj7uIiOPPw/kJCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NzY1OGE4MDMtN2JkNy00MmFiLWI5ZWQtMTFjMWRhMzFiZGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoLBZD8/i83vKLzIDpJMvm1zsmLzk4GfUMIP ooqoKLdDykGIxapTeDGp8TEWo+Cr25xIKHo5CJ1uE6FOYsqfmIhLmyAVSb6ShCy9 Z459RmXiBJdQUipvrqKE+caMnpeQj4h4omUFIWyydGF1yR5MlQrihZ5v5EJD+IDN ADlt+rt7Sk+Z5WAh1MGZuqCoLi/7l89Z3NgJLCokgUUzpNJwdtc/IzXp9MAtuDLk UX5smXY6feXHWOCLT9h4Sc0zQSuoUVz2Svu6IFSkni8Ef/RWg/9tMO5gLfB75rHS yPAJ5YOMqyzR4lN57rjQFQL9MvnBXiqvxyruM5Q8FrBElk4XCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDY0hqqp0r5IQ4u0skIvCpH9NwGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjgxMWViMTAtMDY5MC0z YjYzLTk2MjktYTI3ODQ4ZTMwNTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVaVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAg3E9YnMMkDVvi0HT7HX2CM96XhJy8+C0qph8FXNriKd8SSZGCx4hRl SGvfUQj4iDL7fZ7i6H1014U4H2U2hB8XoivrCTC96Mug5M1R7xo/EUjeZ6P0885T 5rkLLr3TYr79kkf0FLf66aDnFHBgUf0Q52rvDAz+30dwwlNIsrI6vJ0BV000hWVB Zh+1wPDrfgajBxujB2tjRQpFv+cToIJhliR5YJxhstFxyYYr+Jj3M4n53OKkRZkO M1WLaeuRHUC1Ha/qRPIcmmSbBJFOvCbs2tb8eiFfcqznlfvhlbwRJGywazCUaThA ljC9ijvdgIRzzh54iMnDg/9DsCvBEDY= -----END CERTIFICATE-----Generated at Thu Mar 26 18:59:26 2026 by rpki-client