$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/9f4c1c87-ac99-30b0-90b1-e1df6187e027.roa File: 9f4c1c87-ac99-30b0-90b1-e1df6187e027.roa (raw, json) Hash identifier: LnkTeRL3h067hZGUKV3xJt7Juvbdj8SLN/AV591mvqU= Subject key identifier: 69:45:07:1A:B7:6A:41:B7:14:CC:D4:C7:4A:46:FC:08:FE:C0:2A:93 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584D3F64CFCEDEB99240F09FFD40 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/9f4c1c87-ac99-30b0-90b1-e1df6187e027.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 62943 IP address blocks: 65.255.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:cf:ce:de:b9:92:40:f0:9f:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=adbb16c5-7fcc-4835-bca4-19846fc518fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:81:e5:b6:f4:bc:b6:50:85:10:fd:95:ad:c2: 12:9d:64:3e:74:08:9e:11:75:1c:c7:97:01:d6:6a: 9f:71:ee:bf:ab:95:6d:27:cc:fb:72:90:3f:ee:0b: 81:54:2d:bc:38:af:d7:b1:17:e8:0c:1d:47:51:1b: 17:6d:23:31:c6:ca:7d:2c:a6:30:b3:31:52:6f:4d: a4:33:21:40:1e:b6:4b:ab:8f:39:6e:3c:46:c7:53: d0:77:bb:10:7d:f0:aa:d8:6b:51:85:8f:75:54:41: d6:b9:c2:4e:23:2f:18:87:f5:89:81:d7:17:81:7e: ec:a6:90:b4:d7:6b:3a:78:c4:c5:eb:87:4c:e2:0c: cf:db:8f:ab:ac:77:13:cb:f7:03:06:0f:1c:c3:1e: d7:4d:c9:86:b5:26:2a:7d:d5:33:3a:fb:5e:47:02: 4f:1c:91:dd:1e:6d:81:33:93:f7:16:59:58:c2:14: 9b:39:fc:74:cc:18:de:0f:2b:44:fe:89:56:b4:da: af:e3:3e:4f:74:13:3a:3f:56:49:07:19:ba:68:f2: c9:12:66:19:a2:de:40:88:fa:5c:5d:dd:92:69:a4: 0e:e9:8f:f5:64:82:62:7c:e2:eb:a8:ea:14:d3:ad: da:72:86:e7:8d:b1:f9:c3:47:c9:9e:b9:e2:b3:ab: ac:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:45:07:1A:B7:6A:41:B7:14:CC:D4:C7:4A:46:FC:08:FE:C0:2A:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/9f4c1c87-ac99-30b0-90b1-e1df6187e027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 65.255.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:5a:bb:a2:f9:14:34:9b:68:78:0c:2d:6a:96:09:50:6e:1d: 5a:c6:fc:23:85:e5:4f:bb:35:b9:c8:ea:a7:41:c0:c4:75:4f: 21:3c:1b:5b:ed:f8:60:a1:0f:e6:3c:4c:f0:63:74:1d:74:da: e5:fa:f2:15:af:da:42:17:23:30:97:f6:7c:dc:b3:1a:82:e5: 3c:ea:fc:cb:df:9e:92:54:29:29:43:6d:05:50:bc:41:4d:5f: c3:3a:bb:1d:e3:92:cf:68:af:a4:50:0d:7c:cf:d4:a8:61:04: e7:9e:02:5d:81:42:f8:ca:db:dd:2f:eb:12:72:5b:d4:63:a5: 37:84:cc:ea:9e:8c:08:b8:ba:18:a7:f2:d6:a6:51:2f:e8:8e: 40:29:1f:f8:6e:d0:87:08:63:11:a4:50:0f:9a:9e:1c:13:58: 7c:6d:78:9f:06:4c:86:61:93:14:d3:5e:ff:35:08:b2:d1:41: 2b:14:cf:cd:11:95:4b:1f:6f:d4:61:c3:35:3e:c5:1e:51:d4: 5a:86:22:fa:55:62:e3:46:4a:79:2e:25:94:fc:26:02:a5:b8: 39:fe:57:f8:dc:30:12:f4:9d:46:26:e2:ee:3d:14:3a:13:7a: c3:23:32:65:53:38:c7:2f:b1:c6:e4:2d:9f:43:a6:07:83:5b: 48:b0:12:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZM/O3rmSQPCf/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YWRiYjE2YzUtN2ZjYy00ODM1LWJjYTQtMTk4NDZmYzUxOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIHltvS8tlCFEP2VrcISnWQ+dAieEXUcx5cB 1mqfce6/q5VtJ8z7cpA/7guBVC28OK/XsRfoDB1HURsXbSMxxsp9LKYwszFSb02k MyFAHrZLq485bjxGx1PQd7sQffCq2GtRhY91VEHWucJOIy8Yh/WJgdcXgX7sppC0 12s6eMTF64dM4gzP24+rrHcTy/cDBg8cwx7XTcmGtSYqfdUzOvteRwJPHJHdHm2B M5P3FllYwhSbOfx0zBjeDytE/olWtNqv4z5PdBM6P1ZJBxm6aPLJEmYZot5AiPpc Xd2SaaQO6Y/1ZIJifOLrqOoU063acobnjbH5w0fJnrnis6usMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlFBxq3akG3FMzUx0pG/Aj+wCqTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvOWY0YzFjODctYWM5OS0z MGIwLTkwYjEtZTFkZjYxODdlMDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQf+OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5au6L5FDSbaHgMLWqWCVBuHVrG/COF5U+7NbnI6qdBwMR1TyE8G1vt +GChD+Y8TPBjdB102uX68hWv2kIXIzCX9nzcsxqC5Tzq/MvfnpJUKSlDbQVQvEFN X8M6ux3jks9or6RQDXzP1KhhBOeeAl2BQvjK290v6xJyW9RjpTeEzOqejAi4uhin 8tamUS/ojkApH/hu0IcIYxGkUA+anhwTWHxteJ8GTIZhkxTTXv81CLLRQSsUz80R lUsfb9RhwzU+xR5R1FqGIvpVYuNGSnkuJZT8JgKluDn+V/jcMBL0nUYm4u49FDoT esMjMmVTOMcvscbkLZ9DpgeDW0iwEkI= -----END CERTIFICATE-----Generated at Thu Mar 26 19:42:17 2026 by rpki-client