$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/b276deed-b654-31aa-aead-607837be5406.roa File: b276deed-b654-31aa-aead-607837be5406.roa (raw, json) Hash identifier: NjruXoPxnf8ejyn8UjeHbrUWS2z5dXX0pvXYVSEIVfk= Subject key identifier: A2:0C:B9:0D:2C:7E:C2:E4:D3:A0:30:FF:70:97:82:D1:D2:FE:9F:69 Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F4328584D3DFFB4816C7780296C8AEE00 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/b276deed-b654-31aa-aead-607837be5406.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 16509 IP address blocks: 64.239.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b4:81:6c:77:80:29:6c:8a:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=bbe14a90-4a06-45e3-a8a2-24f9f5f4beef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:56:25:53:9f:9e:8e:66:e6:0a:8a:1d:cc:a5: 5c:be:ec:cf:df:c5:a8:20:73:cb:1b:77:5b:e5:ff: c7:90:77:3b:c6:a0:0b:18:ac:d1:e2:f2:54:89:45: 05:a7:7c:6b:87:84:18:06:c2:70:36:6f:72:07:b2: c6:7d:a4:cd:f3:f0:91:8c:f4:ac:f6:8b:5a:c9:7f: c0:eb:5c:74:6d:54:eb:4d:29:f1:7d:7a:42:a9:7d: 60:c3:fd:a9:e2:b8:b1:5c:f5:53:bb:3a:1c:14:37: 1a:a0:ab:fe:a7:f4:01:a8:27:c3:22:c1:92:d0:f4: 12:4c:2b:10:5f:61:4f:33:e9:3a:c0:f5:da:ef:c6: 5a:85:d8:cc:d1:a7:80:91:c0:21:8b:6b:b1:0d:7c: 38:c3:05:67:83:d6:7a:5b:f1:97:4c:6d:69:d5:a2: 10:3b:45:47:13:a1:64:13:c3:65:21:d3:ff:ce:63: 46:5e:59:d7:7f:c6:7f:ab:c0:5d:89:aa:b6:8d:6a: e2:10:a6:78:c3:5a:b4:9c:7b:28:45:94:ba:be:a9: 7f:28:d2:cc:63:e9:4d:1a:62:a5:06:44:d4:b4:12: e5:4e:1f:32:91:cd:f8:a8:5a:cf:b3:dd:d1:8f:4e: 93:30:51:58:4d:3c:06:08:c9:bd:58:21:2e:a3:c7: 81:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0C:B9:0D:2C:7E:C2:E4:D3:A0:30:FF:70:97:82:D1:D2:FE:9F:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/b276deed-b654-31aa-aead-607837be5406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 64.239.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:0c:1f:63:ff:ca:3a:35:a5:f3:ef:4d:d4:83:90:0d:82:94: 02:f7:f1:67:9e:16:ef:b6:0d:d4:02:f4:e9:3f:25:e1:e6:fb: 09:4b:e1:36:36:c1:da:c6:3f:4d:6f:eb:95:41:bb:2e:a2:be: bf:c7:43:df:f1:b4:c8:90:0d:62:e3:82:ba:bd:f4:e3:73:14: ed:b6:ef:a6:ce:5a:25:03:16:b2:3a:c3:1a:a4:8d:a7:77:6c: 42:da:41:41:b8:6a:8c:d7:88:0b:06:df:02:66:3f:46:dc:27: 20:75:4e:74:02:91:67:c5:d0:6f:99:9e:53:13:a5:f2:34:da: f3:b6:49:b7:cc:8c:70:8c:e6:23:31:80:b7:d2:9a:4a:b6:ce: 07:82:95:a2:4a:35:e7:aa:22:e9:b3:82:0b:99:4a:5f:9e:23: 4f:e2:10:a6:c3:e4:e2:26:3a:51:05:39:21:35:dc:74:4a:12: 97:a2:4c:47:a9:ab:8c:48:40:9f:80:cb:81:21:61:19:37:6c: 95:4c:54:24:23:80:c9:31:3b:ba:53:37:65:5e:14:10:2d:45: 35:88:ca:23:67:f4:e5:32:b6:84:8a:e6:00:b5:02:65:6e:37: c0:98:e1:46:46:c7:76:8a:51:a2:a2:21:31:72:e0:30:ac:66: c2:64:0f:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7SBbHeAKWyK7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YmJlMTRhOTAtNGEwNi00NWUzLWE4YTItMjRmOWY1ZjRiZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFYlU5+ejmbmCoodzKVcvuzP38WoIHPLG3db 5f/HkHc7xqALGKzR4vJUiUUFp3xrh4QYBsJwNm9yB7LGfaTN8/CRjPSs9otayX/A 61x0bVTrTSnxfXpCqX1gw/2p4rixXPVTuzocFDcaoKv+p/QBqCfDIsGS0PQSTCsQ X2FPM+k6wPXa78ZahdjM0aeAkcAhi2uxDXw4wwVng9Z6W/GXTG1p1aIQO0VHE6Fk E8NlIdP/zmNGXlnXf8Z/q8Bdiaq2jWriEKZ4w1q0nHsoRZS6vql/KNLMY+lNGmKl BkTUtBLlTh8ykc34qFrPs93Rj06TMFFYTTwGCMm9WCEuo8eBkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIMuQ0sfsLk06Aw/3CXgtHS/p9pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvYjI3NmRlZWQtYjY1NC0z MWFhLWFlYWQtNjA3ODM3YmU1NDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQO9tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8MH2P/yjo1pfPvTdSDkA2ClAL38WeeFu+2DdQC9Ok/JeHm+wlL4TY2 wdrGP01v65VBuy6ivr/HQ9/xtMiQDWLjgrq99ONzFO2276bOWiUDFrI6wxqkjad3 bELaQUG4aozXiAsG3wJmP0bcJyB1TnQCkWfF0G+ZnlMTpfI02vO2SbfMjHCM5iMx gLfSmkq2zgeClaJKNeeqIumzgguZSl+eI0/iEKbD5OImOlEFOSE13HRKEpeiTEep q4xIQJ+Ay4EhYRk3bJVMVCQjgMkxO7pTN2VeFBAtRTWIyiNn9OUytoSK5gC1AmVu N8CY4UZGx3aKUaKiITFy4DCsZsJkD8o= -----END CERTIFICATE-----Generated at Thu Mar 26 08:09:17 2026 by rpki-client