$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/a157c38f-dc2b-375e-818d-d69613c22af4.roa File: a157c38f-dc2b-375e-818d-d69613c22af4.roa (raw, json) Hash identifier: 1Bo/Bwca7qbhIgXD2iy+fc8dDaBl5GB7r27SUnbaZYE= Subject key identifier: D1:D8:55:37:7A:94:FD:FA:E5:B9:E8:72:50:D1:9C:A9:CE:B5:8C:7C Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584D7CCFD8A8348BC2856AFD7160 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/a157c38f-dc2b-375e-818d-d69613c22af4.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 7106 IP address blocks: 216.255.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:d8:a8:34:8b:c2:85:6a:fd:71:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=e8983161-3e95-4838-a3d2-cac6b65ecfb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ef:51:1d:3d:f1:27:9d:d6:dc:34:99:1e:00: 48:0d:37:92:d6:10:24:51:bd:c2:34:ca:a3:88:1f: 36:2c:9a:c9:15:4c:cd:f7:28:1e:c8:64:5e:3b:73: 1f:0a:54:ad:f8:43:45:df:bf:2e:84:83:67:71:66: e3:88:33:54:5d:e4:b3:f5:99:db:a1:4a:82:cd:60: 6f:cd:76:77:80:02:de:fc:4b:42:f8:1f:01:c9:ad: 83:76:df:80:51:9e:6d:ae:5f:87:ce:71:10:31:4f: 02:10:62:cc:60:62:e2:3f:5a:0c:20:90:c7:f2:73: b4:00:84:24:d3:c6:12:bb:53:a3:64:23:31:72:21: 6a:59:ad:f1:b8:2a:c4:43:34:cd:1c:a1:f9:c3:e6: 8b:28:77:7f:1b:66:d9:fc:60:6e:e0:d7:d5:a4:c0: e0:c7:8b:2d:37:9e:70:b4:7d:93:3d:1c:5e:0d:ae: 86:73:07:9d:00:c3:fb:23:b2:e1:90:07:14:dd:f7: 5f:85:f4:35:cb:64:12:33:67:db:c5:05:68:87:80: db:4d:dd:88:65:12:5c:0b:c3:96:ce:fb:28:04:a2: 2e:20:14:76:72:f6:c4:6d:e6:9e:ca:5a:d5:61:3d: f9:f5:f1:43:23:d5:39:1b:e6:7d:4d:36:79:58:79: d2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D8:55:37:7A:94:FD:FA:E5:B9:E8:72:50:D1:9C:A9:CE:B5:8C:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/a157c38f-dc2b-375e-818d-d69613c22af4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 216.255.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:12:c9:59:8b:ac:8c:d6:74:f0:46:39:b3:f5:89:b5:7c:51: 64:17:c8:c1:91:a5:bd:48:e2:2b:c3:25:b5:63:ce:47:8d:7e: cc:95:e3:10:5c:63:8a:9e:8b:8e:a2:90:75:7e:8f:29:b4:e1: dc:e9:cf:68:0a:40:a6:7f:72:c0:e6:ea:76:13:54:17:62:d6: 48:27:25:88:4f:51:e8:e4:61:73:85:e5:e6:3b:62:06:5c:62: d1:67:1b:2a:19:be:8c:41:0e:d6:d0:7f:07:aa:7a:60:e1:b7: b8:00:67:d2:1a:a4:d0:8e:8b:07:63:fc:be:b8:08:eb:21:9d: 53:d2:5c:3a:bd:c4:88:43:bd:db:5f:cb:21:f5:d4:ea:1c:6a: c0:cd:cd:7c:2e:9f:47:c1:48:0b:fc:8b:1c:17:0d:e2:56:dd: aa:0b:46:d2:62:43:7d:63:66:18:7f:62:50:3c:bc:cf:a9:ab: 8f:f4:52:73:63:eb:cb:25:45:8f:26:0a:d5:01:fe:ed:9a:df: 2b:07:1f:7c:65:08:7f:1f:b3:ba:58:d4:c4:17:12:87:9f:b6: cc:bd:c3:0a:82:d7:0a:29:c5:a8:a1:61:ac:c5:07:1b:c4:e0: 40:a5:81:99:8e:d6:c4:d4:08:3d:64:3a:b7:45:f5:cc:dc:3a: e4:82:e5:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z9ioNIvChWr9cWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk ZTg5ODMxNjEtM2U5NS00ODM4LWEzZDItY2FjNmI2NWVjZmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO9RHT3xJ53W3DSZHgBIDTeS1hAkUb3CNMqj iB82LJrJFUzN9ygeyGReO3MfClSt+ENF378uhINncWbjiDNUXeSz9ZnboUqCzWBv zXZ3gALe/EtC+B8Bya2Ddt+AUZ5trl+HznEQMU8CEGLMYGLiP1oMIJDH8nO0AIQk 08YSu1OjZCMxciFqWa3xuCrEQzTNHKH5w+aLKHd/G2bZ/GBu4NfVpMDgx4stN55w tH2TPRxeDa6GcwedAMP7I7LhkAcU3fdfhfQ1y2QSM2fbxQVoh4DbTd2IZRJcC8OW zvsoBKIuIBR2cvbEbeaeylrVYT359fFDI9U5G+Z9TTZ5WHnSDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHYVTd6lP365bnoclDRnKnOtYx8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvYTE1N2MzOGYtZGMyYi0z NzVlLTgxOGQtZDY5NjEzYzIyYWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2P8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoSyVmLrIzWdPBGObP1ibV8UWQXyMGRpb1I4ivDJbVjzkeNfsyV4xBc Y4qei46ikHV+jym04dzpz2gKQKZ/csDm6nYTVBdi1kgnJYhPUejkYXOF5eY7YgZc YtFnGyoZvoxBDtbQfweqemDht7gAZ9IapNCOiwdj/L64COshnVPSXDq9xIhDvdtf yyH11OocasDNzXwun0fBSAv8ixwXDeJW3aoLRtJiQ31jZhh/YlA8vM+pq4/0UnNj 68slRY8mCtUB/u2a3ysHH3xlCH8fs7pY1MQXEoeftsy9wwqC1wopxaihYazFBxvE 4EClgZmO1sTUCD1kOrdF9czcOuSC5Us= -----END CERTIFICATE-----Generated at Fri Apr 17 10:11:16 2026 by rpki-client