$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/7349fb17-24d7-3b46-9c87-43a461d41c0b.roa File: 7349fb17-24d7-3b46-9c87-43a461d41c0b.roa (raw, json) Hash identifier: tbn0cw2EnIxWuRCDJRt4Y5v8lGMLbtbLMFsU1UccP8o= Subject key identifier: 38:E8:21:E0:E5:13:82:F2:30:77:BA:B1:1E:7B:5C:AF:E0:F9:C6:DC Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Certificate serial: 010D0C9F4328584D7F9A7BE1A7022CC841584A00 Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/7349fb17-24d7-3b46-9c87-43a461d41c0b.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 54225 IP address blocks: 216.21.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:7b:e1:a7:02:2c:c8:41:58:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=2eac6afa-19a1-4027-b74b-8239f90d3e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:21:3c:6c:56:0a:ac:17:2c:0c:35:08:f0:0b: 30:ee:b2:6b:59:4c:06:ed:de:08:9a:b8:9e:3d:a6: 62:d0:e8:b8:99:8d:ae:d7:18:6b:1f:67:68:16:0a: 96:65:45:c8:d9:e1:3d:95:16:fc:42:d7:82:f6:22: 37:35:44:1e:80:8e:de:7f:5c:3c:fc:62:c1:39:27: 76:f6:5d:22:69:be:22:13:1c:3b:8d:9c:19:4f:63: cf:68:60:7b:4f:d5:48:a4:f2:a6:b6:ac:ab:58:be: e7:98:6f:df:24:31:b1:69:fd:fa:60:c6:81:a8:10: 18:26:15:be:10:44:15:a8:5d:be:dc:f8:0d:56:82: e9:96:f8:96:31:7d:ab:0c:6b:e7:4b:3a:78:fd:68: d9:f0:09:7e:8c:71:73:f3:2c:50:c9:ab:b7:b7:2b: 28:54:3a:ab:29:8e:d3:35:cd:66:3b:30:b2:42:f6: 67:fa:b3:13:3b:80:22:70:d7:24:90:b4:54:cf:f8: 32:80:51:75:a2:7b:05:26:ed:61:9b:9a:9e:d7:90: f3:d8:17:4d:6e:1b:9c:e3:66:f1:c1:07:fb:23:42: c2:17:c8:87:a5:83:8a:34:71:a2:ab:2c:dc:e5:03: 29:1b:8e:3a:85:01:ed:59:fc:24:ef:d9:68:53:00: be:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E8:21:E0:E5:13:82:F2:30:77:BA:B1:1E:7B:5C:AF:E0:F9:C6:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/7349fb17-24d7-3b46-9c87-43a461d41c0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl X509v3 Authority Key Identifier: keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer sbgp-ipAddrBlock: critical IPv4: 216.21.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:4e:18:33:76:2c:e6:1c:0d:d3:ec:53:2c:cb:1d:71:f0:f3: bc:9f:69:8a:db:fc:55:2e:ee:bb:f4:cb:67:e9:1a:63:da:16: db:01:d7:47:a0:52:85:ca:76:ed:48:ab:c6:40:60:9e:b7:97: f9:6f:b3:09:08:00:2f:4a:32:a7:1d:1e:2a:0a:60:24:3d:2d: 3a:29:26:f9:23:ce:d2:d3:53:a3:37:5b:53:f5:3f:2a:36:86: dc:84:c4:04:eb:7e:74:eb:09:c3:cf:4e:05:e3:60:de:aa:11: 56:bd:09:3d:d6:9e:25:ab:fa:6b:bb:04:45:21:12:32:04:a6: 58:7f:38:70:04:23:75:82:cf:71:81:d8:55:34:49:53:da:32: fa:6d:4e:d0:d6:7c:d4:f0:89:8d:d3:ad:2f:11:8f:d3:4e:9e: 91:73:80:7b:09:f0:66:20:33:a7:8f:ee:6e:b1:d4:1d:a5:87: b3:bd:b1:6c:6c:be:9e:0a:89:68:45:47:ef:e6:5e:f9:7b:f8: 17:8a:cc:5b:8c:4d:85:ea:a3:f0:22:4b:51:00:17:32:8d:fd: fd:8a:24:3a:ba:65:09:0a:b7:0c:da:6e:f6:9c:8e:38:71:ef: db:f6:b4:00:44:6a:02:88:c0:fb:f8:20:1d:4d:a5:49:aa:d9: 7a:04:5b:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mnvhpwIsyEFYSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZjE5Y2MtMzQ0ZS00OGM1LWExZjEtNDc1OTNhYTU2 YjBkMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MmVhYzZhZmEtMTlhMS00MDI3LWI3NGItODIzOWY5MGQzZTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryE8bFYKrBcsDDUI8Asw7rJrWUwG7d4Imrie PaZi0Oi4mY2u1xhrH2doFgqWZUXI2eE9lRb8QteC9iI3NUQegI7ef1w8/GLBOSd2 9l0iab4iExw7jZwZT2PPaGB7T9VIpPKmtqyrWL7nmG/fJDGxaf36YMaBqBAYJhW+ EEQVqF2+3PgNVoLplviWMX2rDGvnSzp4/WjZ8Al+jHFz8yxQyau3tysoVDqrKY7T Nc1mOzCyQvZn+rMTO4AicNckkLRUz/gygFF1onsFJu1hm5qe15Dz2BdNbhuc42bx wQf7I0LCF8iHpYOKNHGiqyzc5QMpG446hQHtWfwk79loUwC+hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjoIeDlE4LyMHe6sR57XK/g+cbcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFm MTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5M2FhNTZiMGQvNzM0OWZiMTctMjRkNy0z YjQ2LTljODctNDNhNDYxZDQxYzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzExZjE5Y2MtMzQ0ZS00OGM1LWEx ZjEtNDc1OTNhYTU2YjBkLzMxMWYxOWNjLTM0NGUtNDhjNS1hMWYxLTQ3NTkzYWE1 NmIwZC5jcmwwHwYDVR0jBBgwFoAUTdZg5uF1ESmUCvKCwba2rQLZYH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFmMTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5 M2FhNTZiMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2BXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhOGDN2LOYcDdPsUyzLHXHw87yfaYrb/FUu7rv0y2fpGmPaFtsB10eg UoXKdu1Iq8ZAYJ63l/lvswkIAC9KMqcdHioKYCQ9LTopJvkjztLTU6M3W1P1Pyo2 htyExATrfnTrCcPPTgXjYN6qEVa9CT3WniWr+mu7BEUhEjIEplh/OHAEI3WCz3GB 2FU0SVPaMvptTtDWfNTwiY3TrS8Rj9NOnpFzgHsJ8GYgM6eP7m6x1B2lh7O9sWxs vp4KiWhFR+/mXvl7+BeKzFuMTYXqo/AiS1EAFzKN/f2KJDq6ZQkKtwzabvacjjhx 79v2tABEagKIwPv4IB1NpUmq2XoEW8g= -----END CERTIFICATE-----Generated at Fri Apr 17 17:40:11 2026 by rpki-client