$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/872948d5-8843-3551-ad73-6e3b95de2630.roa File: 872948d5-8843-3551-ad73-6e3b95de2630.roa (raw, json) Hash identifier: qJZvr2P2AXnckw6D651VuQyyOWqVxro/WjyaW2vjNcA= Subject key identifier: 96:B8:6C:4F:B2:3B:15:11:EB:37:95:46:27:95:FC:B7:81:F0:F7:96 Certificate issuer: /CN=3e03ba01-86be-4e51-b95f-af6e17a7979e Certificate serial: 010D0C9F4328584DB9567746EAF18DC26AD11600 Authority key identifier: D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/872948d5-8843-3551-ad73-6e3b95de2630.roa Signing time: Mon 04 May 2026 17:20:20 +0000 ROA not before: Mon 04 May 2026 17:20:20 +0000 ROA not after: Sun 02 Aug 2026 17:20:20 +0000 asID: 398391 IP address blocks: 64.226.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b9:56:77:46:ea:f1:8d:c2:6a:d1:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e03ba01-86be-4e51-b95f-af6e17a7979e Validity Not Before: May 4 17:20:20 2026 GMT Not After : Aug 2 17:20:20 2026 GMT Subject: CN=7d6e3bd9-b0f1-413d-9e3a-8cffcca9e4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7d:d0:2c:cd:78:8d:47:c2:99:61:04:13:78: 67:a1:25:a1:47:92:b0:a7:ab:da:57:4f:fc:13:0d: 39:03:87:c5:e1:96:4a:b4:54:02:cf:84:76:c6:ad: db:61:8b:b6:fc:01:40:0c:40:01:18:b8:c1:71:5a: ef:58:64:7e:8d:d7:45:9d:b1:29:15:6a:0c:ff:8f: 52:a8:b6:60:68:60:5f:93:6c:4f:ef:ac:1f:bc:e6: b0:ba:93:cf:bf:89:32:cb:de:a8:8c:60:d1:16:19: 21:f1:7d:c3:e3:3d:3d:61:18:76:01:28:da:0a:fc: 4e:7a:60:e9:a6:fd:78:4f:5e:4a:d8:e8:7f:c1:72: e3:5a:f4:50:c0:ee:17:88:cd:b6:5c:64:e9:cb:f6: fd:ab:9f:42:88:98:b5:e8:11:a9:4e:a1:21:5b:a2: 0f:89:31:cc:27:cf:c8:23:97:f9:66:a2:d6:aa:3a: 26:7a:4d:b2:f5:34:db:8d:ff:92:06:0b:78:df:23: 16:bb:00:78:c4:e1:a6:d9:a3:38:a8:71:16:3b:4f: 9b:21:8f:12:f4:72:fc:ce:e9:14:6b:17:40:8e:32: 16:28:aa:fb:5e:13:62:15:08:fa:c4:e6:43:53:e8: 9e:3e:b6:16:c7:bc:21:c5:16:d9:38:1a:45:1d:48: 81:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B8:6C:4F:B2:3B:15:11:EB:37:95:46:27:95:FC:B7:81:F0:F7:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/872948d5-8843-3551-ad73-6e3b95de2630.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl X509v3 Authority Key Identifier: keyid:D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer sbgp-ipAddrBlock: critical IPv4: 64.226.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:12:68:2e:3e:ef:ef:64:51:15:9c:92:c2:16:32:23:f4:8c: cb:59:b0:30:c2:75:86:e8:74:cd:c9:2e:b0:2f:bd:dc:c0:9e: 5a:1b:a5:14:cf:8a:af:bc:22:0d:04:49:f5:32:96:55:9c:9c: c4:c4:50:1c:bf:12:43:9c:99:e6:f9:52:e4:f0:68:c1:20:75: aa:fd:9c:92:42:84:01:43:f7:08:31:b6:fe:8e:09:11:3a:41: 00:28:b1:d7:6f:06:a6:7b:4f:63:04:df:d4:b5:48:34:19:6d: 5a:f0:42:c7:0f:34:0f:0f:d3:1b:27:fb:2c:ae:d8:41:a8:a8: 6e:51:ce:af:0e:37:a0:48:b0:0d:3b:ef:15:5c:20:0e:14:5c: 7d:70:ab:55:78:6a:fa:71:0d:43:82:ca:81:c8:d7:5b:82:78: f3:6e:14:fe:aa:c7:28:5b:58:fa:c3:f6:9b:25:50:45:fa:19: 7e:f8:63:6f:f8:55:dc:7c:c0:8b:65:c3:aa:6f:08:66:18:c9: 03:54:87:ae:0b:e9:38:81:ad:ed:74:50:72:0f:68:9e:95:ae: 15:c4:3e:64:3c:00:9a:6b:52:97:b7:97:ff:5c:77:7e:a9:f2: 86:17:83:62:73:e9:84:66:a4:46:ad:ae:52:28:35:a1:2d:88: 90:5b:04:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE25VndG6vGNwmrRFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UwM2JhMDEtODZiZS00ZTUxLWI5NWYtYWY2ZTE3YTc5 NzllMB4XDTI2MDUwNDE3MjAyMFoXDTI2MDgwMjE3MjAyMFowLzEtMCsGA1UEAxMk N2Q2ZTNiZDktYjBmMS00MTNkLTllM2EtOGNmZmNjYTllNGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin3QLM14jUfCmWEEE3hnoSWhR5Kwp6vaV0/8 Ew05A4fF4ZZKtFQCz4R2xq3bYYu2/AFADEABGLjBcVrvWGR+jddFnbEpFWoM/49S qLZgaGBfk2xP76wfvOawupPPv4kyy96ojGDRFhkh8X3D4z09YRh2ASjaCvxOemDp pv14T15K2Oh/wXLjWvRQwO4XiM22XGTpy/b9q59CiJi16BGpTqEhW6IPiTHMJ8/I I5f5ZqLWqjomek2y9TTbjf+SBgt43yMWuwB4xOGm2aM4qHEWO0+bIY8S9HL8zukU axdAjjIWKKr7XhNiFQj6xOZDU+iePrYWx7whxRbZOBpFHUiB1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJa4bE+yOxUR6zeVRieV/LeB8PeWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZTAz YmEwMS04NmJlLTRlNTEtYjk1Zi1hZjZlMTdhNzk3OWUvODcyOTQ4ZDUtODg0My0z NTUxLWFkNzMtNmUzYjk1ZGUyNjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvM2UwM2JhMDEtODZiZS00ZTUxLWI5 NWYtYWY2ZTE3YTc5NzllLzNlMDNiYTAxLTg2YmUtNGU1MS1iOTVmLWFmNmUxN2E3 OTc5ZS5jcmwwHwYDVR0jBBgwFoAU00rEQ/6NmukUUAv2fHtKoOM64sEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZTAzYmEwMS04NmJlLTRlNTEtYjk1Zi1hZjZl MTdhNzk3OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4SaC4+7+9kURWcksIWMiP0jMtZsDDCdYbodM3JLrAvvdzAnlobpRTP iq+8Ig0ESfUyllWcnMTEUBy/EkOcmeb5UuTwaMEgdar9nJJChAFD9wgxtv6OCRE6 QQAosddvBqZ7T2ME39S1SDQZbVrwQscPNA8P0xsn+yyu2EGoqG5Rzq8ON6BIsA07 7xVcIA4UXH1wq1V4avpxDUOCyoHI11uCePNuFP6qxyhbWPrD9pslUEX6GX74Y2/4 Vdx8wItlw6pvCGYYyQNUh64L6TiBre10UHIPaJ6VrhXEPmQ8AJprUpe3l/9cd36p 8oYXg2Jz6YRmpEatrlIoNaEtiJBbBCA= -----END CERTIFICATE-----Generated at Wed May 13 10:07:15 2026 by rpki-client