$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/dd8eae82-74a3-3fb2-a603-a09a3c16a099.roa File: dd8eae82-74a3-3fb2-a603-a09a3c16a099.roa (raw, json) Hash identifier: UCh/7oJoIxMwKREU2T19JlB3giJuwNANEser/hV4GtU= Subject key identifier: 73:79:3F:10:DD:4C:18:4C:85:48:7A:A6:04:A4:C1:17:AE:45:94:28 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584D3F64C7C258ABC2FC1A2F1040 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/dd8eae82-74a3-3fb2-a603-a09a3c16a099.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 62943 IP address blocks: 64.111.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:c7:c2:58:ab:c2:fc:1a:2f:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=71a927bd-8a60-4a8d-8cbf-09de020ee1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:11:97:40:77:3d:ec:cd:c4:73:68:e0:f0:0a: 2b:4c:a0:07:03:17:0f:07:8e:7d:a3:8e:ba:65:5b: bf:33:9c:c2:ab:f8:53:a7:9f:d4:ed:e9:fd:28:63: a0:3c:37:f2:35:39:c0:1c:d7:33:5f:bd:45:c7:f1: 29:bb:f0:53:27:c4:76:5b:90:3d:31:c9:57:e3:8c: 48:1c:1b:d9:dc:57:69:6d:48:3d:4c:be:38:75:bd: 5d:94:f0:fc:8d:f7:b7:84:fd:f8:7a:ab:be:2f:50: ee:ce:90:d8:b1:34:86:85:25:22:03:2a:51:93:79: d5:a3:73:43:53:1d:40:0a:16:cf:95:b7:27:85:cf: ad:e8:e4:f4:55:85:ad:65:9e:80:df:5b:6e:c5:4e: 06:a1:fd:bc:57:e1:ac:d9:c3:13:88:67:eb:31:be: b9:1d:84:5e:ef:a9:da:ae:5b:78:63:55:2c:e8:60: 74:ae:fd:b7:8f:1a:91:6f:71:b1:2b:22:0a:23:7f: 75:19:7d:04:0c:43:48:e9:fb:08:29:9b:b4:bc:c5: 8a:61:56:9c:f8:95:a7:6e:be:11:2f:7e:46:28:02: 78:85:da:f2:50:4a:03:67:65:b9:90:da:ac:69:c4: 59:d7:87:27:5e:d9:c9:f2:60:c9:25:4d:64:75:24: e8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:79:3F:10:DD:4C:18:4C:85:48:7A:A6:04:A4:C1:17:AE:45:94:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/dd8eae82-74a3-3fb2-a603-a09a3c16a099.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 64.111.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:d1:2b:61:1d:70:4a:9e:46:90:4d:6b:ac:bc:a2:0e:81:1b: e1:b5:12:1f:22:12:16:89:24:03:6c:56:ad:73:26:af:b8:e9: b8:a9:a4:af:63:4e:d0:d5:96:37:90:b4:96:70:f4:01:e1:00: d7:ec:1e:01:dd:d4:c7:34:56:48:bb:d7:01:b8:7f:bc:c5:1d: d1:2b:fc:f9:e7:51:ce:fd:bb:99:43:60:d1:f0:5a:13:f6:b2: 96:2c:91:2e:07:c8:cc:e5:9b:cc:4d:99:ba:39:68:e6:04:0a: 5f:49:21:21:66:53:b7:85:64:ed:83:79:13:20:4e:8e:fd:db: 00:53:ad:3d:9d:68:cb:bd:c1:3c:c4:9f:66:c5:53:0b:08:02: 91:61:92:b9:5c:15:58:30:a3:11:8a:6f:47:08:2e:f5:e4:56: 71:52:5b:40:f2:02:1e:da:da:e1:e2:ec:77:1b:b3:53:76:19: 7d:c8:8a:41:bb:e0:5f:34:65:fd:9f:f4:52:9b:79:54:85:47: 3d:5f:8f:50:39:24:26:dc:86:77:4a:db:15:2c:71:d0:52:6d: 01:a4:00:04:d1:4b:82:31:06:45:2b:6e:c9:39:dd:93:ee:ca: 96:5d:a2:a8:2e:2b:f4:92:9c:5f:a9:f1:4b:1a:ba:9b:d8:2c: 86:78:06:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZMfCWKvC/BovEEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NzFhOTI3YmQtOGE2MC00YThkLThjYmYtMDlkZTAyMGVlMWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthGXQHc97M3Ec2jg8AorTKAHAxcPB459o466 ZVu/M5zCq/hTp5/U7en9KGOgPDfyNTnAHNczX71Fx/Epu/BTJ8R2W5A9MclX44xI HBvZ3FdpbUg9TL44db1dlPD8jfe3hP34equ+L1DuzpDYsTSGhSUiAypRk3nVo3ND Ux1AChbPlbcnhc+t6OT0VYWtZZ6A31tuxU4Gof28V+Gs2cMTiGfrMb65HYRe76na rlt4Y1Us6GB0rv23jxqRb3GxKyIKI391GX0EDENI6fsIKZu0vMWKYVac+JWnbr4R L35GKAJ4hdryUEoDZ2W5kNqsacRZ14cnXtnJ8mDJJU1kdSTocwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHN5PxDdTBhMhUh6pgSkwReuRZQoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvZGQ4ZWFlODItNzRhMy0z ZmIyLWE2MDMtYTA5YTNjMTZhMDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQG8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILRK2EdcEqeRpBNa6y8og6BG+G1Eh8iEhaJJANsVq1zJq+46bippK9j TtDVljeQtJZw9AHhANfsHgHd1Mc0Vki71wG4f7zFHdEr/PnnUc79u5lDYNHwWhP2 spYskS4HyMzlm8xNmbo5aOYECl9JISFmU7eFZO2DeRMgTo792wBTrT2daMu9wTzE n2bFUwsIApFhkrlcFVgwoxGKb0cILvXkVnFSW0DyAh7a2uHi7Hcbs1N2GX3IikG7 4F80Zf2f9FKbeVSFRz1fj1A5JCbchndK2xUscdBSbQGkAATRS4IxBkUrbsk53ZPu ypZdoqguK/SSnF+p8UsaupvYLIZ4BvA= -----END CERTIFICATE-----Generated at Thu Mar 26 21:13:44 2026 by rpki-client