$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b/cf3991eb-5972-3d30-bfbd-8698044dccec.roa File: cf3991eb-5972-3d30-bfbd-8698044dccec.roa (raw, json) Hash identifier: E2ZJV8S2WzN6Zjm2r1h7OIXava08nVH+NuI3dZS+qU4= Subject key identifier: F3:61:B2:3A:FE:14:43:AE:8B:AA:24:BA:2F:32:63:B5:3D:CE:81:22 Certificate issuer: /CN=fcf8ad04-0402-4e5b-ad52-202cba7ac86b Certificate serial: 010D0C9F4328584D285504F7C05EBFB43891B480 Authority key identifier: 2A:DA:05:2D:F4:36:68:AB:BA:61:6C:01:9B:88:F7:38:34:C6:7C:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b/cf3991eb-5972-3d30-bfbd-8698044dccec.roa Signing time: Fri 13 Mar 2026 18:45:13 +0000 ROA not before: Fri 13 Mar 2026 18:45:13 +0000 ROA not after: Thu 11 Jun 2026 18:45:13 +0000 asID: 46685 IP address blocks: 68.65.240.0/21 maxlen: 32 199.68.104.0/21 maxlen: 32 2602:fbeb::/36 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b/fcf8ad04-0402-4e5b-ad52-202cba7ac86b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b/fcf8ad04-0402-4e5b-ad52-202cba7ac86b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:28:55:04:f7:c0:5e:bf:b4:38:91:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcf8ad04-0402-4e5b-ad52-202cba7ac86b Validity Not Before: Mar 13 18:45:13 2026 GMT Not After : Jun 11 18:45:13 2026 GMT Subject: CN=120f0d96-8f74-4ee3-8f29-5b92d231e2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:eb:3c:bf:12:b2:11:91:f3:ad:85:8b:f3:3a: 6b:19:ca:91:4b:6d:72:4f:48:8d:e8:37:b2:12:ae: 3c:cc:35:78:f9:14:8f:d9:7c:0d:8f:22:d8:fc:80: b3:6f:74:1b:e2:bd:97:93:14:c2:d9:79:fc:9e:46: a8:c7:12:07:38:a9:99:b5:42:11:ec:ed:53:a1:69: 95:ba:52:8e:ea:b1:3c:22:8a:7c:f9:08:43:b2:d0: 98:1a:e8:82:1f:27:82:2b:c2:05:f1:99:ca:32:47: 8b:f5:29:82:e6:b8:29:b8:f8:d0:9c:e4:84:d3:a3: e3:2b:a8:76:13:bc:cb:69:bb:bc:70:21:6c:62:24: 93:68:74:cf:a9:42:5f:ee:9a:ad:7b:81:46:3b:f3: c1:b1:c5:f3:e0:52:b7:fc:37:75:29:64:81:a4:8b: 04:2a:c0:11:3c:c1:7f:07:e0:5c:15:e5:e6:32:f7: a5:db:3e:ab:32:1f:55:79:44:3c:7a:93:ac:1f:bf: 2c:fa:70:9a:fb:28:e5:0e:ed:b8:9f:1b:74:0b:35: 4b:1e:f7:3a:1d:b9:34:53:13:e5:3e:74:3c:14:04: 95:4d:a0:38:02:f8:0e:a1:c3:98:15:a8:66:42:83: 35:79:4e:09:15:15:d4:dd:13:96:2f:24:e8:4c:1d: dc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:61:B2:3A:FE:14:43:AE:8B:AA:24:BA:2F:32:63:B5:3D:CE:81:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b/cf3991eb-5972-3d30-bfbd-8698044dccec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b/fcf8ad04-0402-4e5b-ad52-202cba7ac86b.crl X509v3 Authority Key Identifier: keyid:2A:DA:05:2D:F4:36:68:AB:BA:61:6C:01:9B:88:F7:38:34:C6:7C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b.cer sbgp-ipAddrBlock: critical IPv4: 68.65.240.0/21 199.68.104.0/21 IPv6: 2602:fbeb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:37:16:8d:d7:eb:3b:ff:51:ef:ff:12:27:aa:94:85:7c:f1: f4:45:5d:26:73:09:95:60:60:43:94:b8:de:ba:3b:32:89:50: 53:19:9c:e5:f1:a3:da:59:8a:16:88:a0:1f:67:9e:58:60:ce: 1c:ce:6c:1c:28:18:e1:33:91:46:78:81:b2:18:3a:2f:5f:eb: d5:33:01:bb:24:d1:11:8f:36:bf:aa:43:90:87:b3:a5:4e:0b: a0:44:f7:97:8e:88:2c:37:27:46:f7:68:3a:f5:b4:22:d7:c1: 50:f6:2c:20:5a:65:93:84:70:2a:13:fe:90:63:dc:bd:e2:df: 9f:5f:0a:06:02:ec:f9:cd:24:3a:26:ab:bf:2b:f2:3c:5e:99: 16:d5:86:78:b3:c8:bc:a5:97:bb:34:ca:1c:48:60:10:f5:e9: 69:1d:8a:e1:42:6e:0a:6d:21:e2:57:d9:fd:18:fc:6a:d0:4d: 18:70:b8:61:cb:f3:fe:a2:49:3a:be:50:25:a8:90:2f:b8:6e: 65:01:f2:0d:59:75:e6:dd:8b:87:f2:e1:84:fb:b1:58:0d:ab: fa:98:97:30:a1:fa:6a:35:8f:9c:38:c9:0a:45:95:3a:ab:2c: 3b:f1:3e:11:e7:5f:a1:f9:cf:59:2d:57:c8:0a:a8:03:40:06: 00:20:8e:ea -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE0oVQT3wF6/tDiRtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmNmOGFkMDQtMDQwMi00ZTViLWFkNTItMjAyY2JhN2Fj ODZiMB4XDTI2MDMxMzE4NDUxM1oXDTI2MDYxMTE4NDUxM1owLzEtMCsGA1UEAxMk MTIwZjBkOTYtOGY3NC00ZWUzLThmMjktNWI5MmQyMzFlMmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAles8vxKyEZHzrYWL8zprGcqRS21yT0iN6Dey Eq48zDV4+RSP2XwNjyLY/ICzb3Qb4r2XkxTC2Xn8nkaoxxIHOKmZtUIR7O1ToWmV ulKO6rE8Iop8+QhDstCYGuiCHyeCK8IF8ZnKMkeL9SmC5rgpuPjQnOSE06PjK6h2 E7zLabu8cCFsYiSTaHTPqUJf7pqte4FGO/PBscXz4FK3/Dd1KWSBpIsEKsARPMF/ B+BcFeXmMvel2z6rMh9VeUQ8epOsH78s+nCa+yjlDu24nxt0CzVLHvc6Hbk0UxPl PnQ8FASVTaA4AvgOocOYFahmQoM1eU4JFRXU3ROWLyToTB3cGwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFPNhsjr+FEOui6okui8yY7U9zoEiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mY2Y4 YWQwNC0wNDAyLTRlNWItYWQ1Mi0yMDJjYmE3YWM4NmIvY2YzOTkxZWItNTk3Mi0z ZDMwLWJmYmQtODY5ODA0NGRjY2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZmNmOGFkMDQtMDQwMi00ZTViLWFk NTItMjAyY2JhN2FjODZiL2ZjZjhhZDA0LTA0MDItNGU1Yi1hZDUyLTIwMmNiYTdh Yzg2Yi5jcmwwHwYDVR0jBBgwFoAUKtoFLfQ2aKu6YWwBm4j3ODTGfKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mY2Y4YWQwNC0wNDAyLTRlNWItYWQ1Mi0yMDJj YmE3YWM4NmIuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQDREHwAwQD x0RoMA4EAgACMAgDBgQmAvvrADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYNxaN1+s7/1Hv/xInqpSFfPH0 RV0mcwmVYGBDlLjeujsyiVBTGZzl8aPaWYoWiKAfZ55YYM4czmwcKBjhM5FGeIGy GDovX+vVMwG7JNERjza/qkOQh7OlTgugRPeXjogsNydG92g69bQi18FQ9iwgWmWT hHAqE/6QY9y94t+fXwoGAuz5zSQ6Jqu/K/I8XpkW1YZ4s8i8pZe7NMocSGAQ9elp HYrhQm4KbSHiV9n9GPxq0E0YcLhhy/P+okk6vlAlqJAvuG5lAfINWXXm3YuH8uGE +7FYDav6mJcwofpqNY+cOMkKRZU6qyw78T4R51+h+c9ZLVfICqgDQAYAII7q -----END CERTIFICATE-----Generated at Thu Mar 26 03:23:55 2026 by rpki-client