$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa File: 2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa (raw, json) Hash identifier: Gz9EY/5fZVqLabxOLr1QS85ES68PGQ6LkQY8S9z4nYc= Subject key identifier: D0:BD:46:6F:A4:D7:86:60:0F:F5:F0:4F:18:80:4D:28:B6:4F:58:8F Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F4328584D492A67BD4AECAD1645EBF880 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 13807 IP address blocks: 64.64.144.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:67:bd:4a:ec:ad:16:45:eb:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=0422d32c-f85d-493b-80fc-c4d21ce856fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a2:74:f4:25:c8:d4:c2:ea:58:95:ba:de:92: 73:54:e4:2c:6a:5e:d1:8e:8e:56:8b:5a:0e:e9:c5: 1b:ed:3b:2d:5b:66:a9:0d:05:b6:37:5b:f1:ff:6a: 30:02:76:ec:3c:de:ab:c7:d5:30:89:ee:84:30:9b: ca:de:f7:c2:65:f8:30:f0:c3:4f:de:d4:76:49:ad: b0:59:85:3a:a8:a8:ac:dc:80:23:74:dc:ae:1f:59: 53:ce:a5:44:1e:8f:7f:47:48:74:c1:51:f5:04:66: ff:de:04:d7:5f:f5:da:02:fe:98:30:39:0b:c5:33: 7e:c3:db:29:bd:77:94:5b:d1:3c:51:1f:71:01:84: fa:f3:f4:22:a5:6c:42:3c:29:1b:81:96:0f:96:6a: 46:40:5a:70:9e:9e:ec:ed:e4:af:97:7f:87:91:e3: cf:9f:b3:b8:8c:8a:98:ce:ae:07:93:cc:b8:c8:0c: ce:4f:38:86:81:80:73:57:b8:a5:0e:46:9a:e2:db: a8:de:87:61:d1:87:6b:19:b6:d3:ea:62:18:a5:74: 66:93:57:c9:27:0b:69:fc:c6:41:d3:12:81:a9:59: 32:80:7b:7b:f2:e8:59:89:44:a0:df:42:84:05:ac: 0f:0a:31:ba:c5:32:0b:19:08:69:a6:d4:62:01:fc: fc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BD:46:6F:A4:D7:86:60:0F:F5:F0:4F:18:80:4D:28:B6:4F:58:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv4: 64.64.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ce:25:1b:66:b4:5b:e9:9c:06:6f:0e:0b:89:18:fb:14:ce: 20:a8:64:1e:ae:36:d5:62:e5:a6:02:06:73:73:48:f4:f6:4d: 55:a2:3c:2b:41:f0:f5:5d:66:79:46:b1:69:6d:ae:a2:b5:3c: 87:58:33:d1:fe:a4:2d:94:40:5d:49:d8:da:bc:c8:fc:50:39: 01:d2:48:55:7f:25:6d:99:76:d8:32:6e:43:89:12:af:6f:07: ce:7f:45:4b:86:c3:2b:cf:bb:7b:d7:a2:b0:53:01:df:ef:ca: 44:73:ed:4a:4b:34:53:ba:c7:0c:13:a2:e7:99:78:ab:c4:2c: 90:b9:18:43:78:b1:44:cb:69:a7:3a:c0:ed:35:2a:64:20:2c: 2b:08:8a:7c:51:0e:f9:de:d0:fc:53:e5:55:a0:70:e4:39:fe: b8:d8:a1:5f:bd:78:0c:06:b0:02:07:ec:e5:2a:d8:eb:39:a7: 9f:21:42:09:2b:ba:98:36:d8:79:0e:aa:4b:60:34:a5:ed:72: f9:99:8f:d4:31:c9:2b:8b:ef:8b:62:fc:72:ce:4b:15:c8:d9: 31:69:48:e8:68:39:fc:d2:f0:d8:55:96:2e:7d:41:b5:f4:58: df:93:c2:1b:86:ab:14:be:94:6f:d7:d4:91:cd:54:a4:4a:bb: 61:fb:ab:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKme9SuytFkXr+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk MDQyMmQzMmMtZjg1ZC00OTNiLTgwZmMtYzRkMjFjZTg1NmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKJ09CXI1MLqWJW63pJzVOQsal7Rjo5Wi1oO 6cUb7TstW2apDQW2N1vx/2owAnbsPN6rx9Uwie6EMJvK3vfCZfgw8MNP3tR2Sa2w WYU6qKis3IAjdNyuH1lTzqVEHo9/R0h0wVH1BGb/3gTXX/XaAv6YMDkLxTN+w9sp vXeUW9E8UR9xAYT68/QipWxCPCkbgZYPlmpGQFpwnp7s7eSvl3+HkePPn7O4jIqY zq4Hk8y4yAzOTziGgYBzV7ilDkaa4tuo3odh0YdrGbbT6mIYpXRmk1fJJwtp/MZB 0xKBqVkygHt78uhZiUSg30KEBawPCjG6xTILGQhpptRiAfz8vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNC9Rm+k14ZgD/XwTxiATSi2T1iPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvMmE0ZTNhZDYtZjZiYS0z MGI5LWE0YzUtYjRkOGRiMTA2NDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQECQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbOJRtmtFvpnAZvDguJGPsUziCoZB6uNtVi5aYCBnNzSPT2TVWiPCtB 8PVdZnlGsWltrqK1PIdYM9H+pC2UQF1J2Nq8yPxQOQHSSFV/JW2ZdtgybkOJEq9v B85/RUuGwyvPu3vXorBTAd/vykRz7UpLNFO6xwwToueZeKvELJC5GEN4sUTLaac6 wO01KmQgLCsIinxRDvne0PxT5VWgcOQ5/rjYoV+9eAwGsAIH7OUq2Os5p58hQgkr upg22HkOqktgNKXtcvmZj9QxySuL74ti/HLOSxXI2TFpSOhoOfzS8NhVli59QbX0 WN+TwhuGqxS+lG/X1JHNVKRKu2H7q9E= -----END CERTIFICATE-----Generated at Thu Mar 26 08:11:19 2026 by rpki-client