$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/c8d502b4-4e2c-3b1e-9244-290f8fcb10ce.roa File: c8d502b4-4e2c-3b1e-9244-290f8fcb10ce.roa (raw, json) Hash identifier: peUEcVOgjPz+fDT9FSs2blNXW9P4a4p7UOU6mwV0h7o= Subject key identifier: 42:EE:F9:E3:A0:9A:71:CD:F1:17:48:E5:A3:A1:9E:53:5E:4E:53:70 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584D3F64D0259F22F740795D1F00 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/c8d502b4-4e2c-3b1e-9244-290f8fcb10ce.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 62943 IP address blocks: 65.255.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d0:25:9f:22:f7:40:79:5d:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=c1034dd7-4b4e-4f6b-b905-ddc592c87e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:b1:7f:b1:2c:89:7a:0a:7d:32:af:93:ae: bb:b7:7c:77:9b:86:5d:7e:43:7e:de:b8:8f:ca:8f: 71:65:10:87:e9:84:76:a6:45:18:13:45:15:a3:ff: a8:65:a9:b2:71:2e:f7:a2:43:8d:46:44:f1:d2:ee: 84:0e:24:e9:54:36:07:0e:19:e3:46:39:9f:be:63: a8:13:fb:dd:d9:85:d3:5d:c6:65:2f:c5:c2:53:6b: fb:81:f5:21:01:e7:ef:50:54:20:83:9c:f8:0d:44: cb:8b:36:3a:c5:2c:03:86:54:b2:60:4a:42:80:a1: db:f4:b3:06:f8:20:f4:bb:03:96:7a:82:1b:d9:9e: a0:98:ab:2d:fe:87:51:33:2b:39:36:5e:93:cd:c2: 74:6a:5b:5f:eb:4f:ae:f3:52:6d:a9:0a:c0:56:01: a5:5a:ed:d9:86:df:8d:fa:d0:01:6d:ea:bc:ce:cd: 6f:f2:7b:62:13:fb:ec:ed:ea:05:ff:7c:dd:fd:34: f8:a6:be:05:3f:86:4e:e4:89:be:f8:c3:7b:cc:38: e8:1f:31:3b:08:89:50:a0:3a:06:c2:a6:1e:11:8d: 3e:43:2d:2b:c2:62:93:64:e7:00:87:18:37:77:5a: c0:bf:02:87:df:86:95:b7:4b:1b:e3:fa:f9:a0:00: 9c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EE:F9:E3:A0:9A:71:CD:F1:17:48:E5:A3:A1:9E:53:5E:4E:53:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/c8d502b4-4e2c-3b1e-9244-290f8fcb10ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 65.255.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:36:13:34:9e:5b:1d:bc:ee:f5:e1:d7:7c:99:0c:18:64:5e: 93:76:87:1d:2f:0a:64:10:e8:23:02:39:cf:89:2d:2b:db:27: be:2f:b7:24:d0:e4:e5:34:7e:f7:2b:d6:88:67:4d:12:7d:6c: 3a:c0:77:0b:84:08:34:4f:ba:e6:9f:3a:ab:fb:8f:54:d3:39: 4e:7d:e4:a0:97:f8:bf:57:b0:e0:65:49:bd:41:bc:51:13:0c: 43:92:2d:89:97:d4:9c:d6:f1:fd:4e:f4:6d:2b:25:ce:91:3b: c6:b6:b1:3f:b2:fd:ac:34:c0:b3:ab:fb:c1:2b:b0:fb:67:f8: 3e:ee:10:71:c4:2c:87:4a:bd:3b:e1:40:80:be:a3:b7:d4:f9: 5c:a6:0e:bb:02:a3:41:3a:9d:07:f5:a2:27:18:d8:d6:30:93: c0:0d:7c:f7:e7:45:2c:49:8d:fb:ea:ca:51:8b:55:f2:0e:0a: 16:48:87:b2:a0:67:e5:d4:b1:24:76:39:8e:f1:5c:a2:f0:dd: df:9d:e1:4b:6d:73:26:ff:44:7a:2b:18:26:98:ca:27:72:9e: 7c:90:dd:85:b4:83:af:cf:62:44:04:e3:a0:f5:09:be:81:4f: 07:48:d6:82:8d:29:46:44:e6:a8:77:eb:45:3d:85:ae:cf:92: d9:56:49:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNAlnyL3QHldHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YzEwMzRkZDctNGI0ZS00ZjZiLWI5MDUtZGRjNTkyYzg3ZTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzixf7EsiXoKfTKvk667t3x3m4ZdfkN+3riP yo9xZRCH6YR2pkUYE0UVo/+oZamycS73okONRkTx0u6EDiTpVDYHDhnjRjmfvmOo E/vd2YXTXcZlL8XCU2v7gfUhAefvUFQgg5z4DUTLizY6xSwDhlSyYEpCgKHb9LMG +CD0uwOWeoIb2Z6gmKst/odRMys5Nl6TzcJ0altf60+u81JtqQrAVgGlWu3Zht+N +tABbeq8zs1v8ntiE/vs7eoF/3zd/TT4pr4FP4ZO5Im++MN7zDjoHzE7CIlQoDoG wqYeEY0+Qy0rwmKTZOcAhxg3d1rAvwKH34aVt0sb4/r5oACcqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELu+eOgmnHN8RdI5aOhnlNeTlNwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvYzhkNTAyYjQtNGUyYy0z YjFlLTkyNDQtMjkwZjhmY2IxMGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQf+DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFg2EzSeWx287vXh13yZDBhkXpN2hx0vCmQQ6CMCOc+JLSvbJ74vtyTQ 5OU0fvcr1ohnTRJ9bDrAdwuECDRPuuafOqv7j1TTOU595KCX+L9XsOBlSb1BvFET DEOSLYmX1JzW8f1O9G0rJc6RO8a2sT+y/aw0wLOr+8ErsPtn+D7uEHHELIdKvTvh QIC+o7fU+VymDrsCo0E6nQf1oicY2NYwk8ANfPfnRSxJjfvqylGLVfIOChZIh7Kg Z+XUsSR2OY7xXKLw3d+d4Uttcyb/RHorGCaYyidynnyQ3YW0g6/PYkQE46D1Cb6B TwdI1oKNKUZE5qh360U9ha7PktlWSdg= -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:17 2026 by rpki-client