$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/d21a8978-b2d2-30a9-a39c-0b84d71329e2.roa File: d21a8978-b2d2-30a9-a39c-0b84d71329e2.roa (raw, json) Hash identifier: 8OvwGgOCpXjtNDzZm+1OMKa7X7oTQ5WHHY8q7hBuVDE= Subject key identifier: 1D:20:0A:27:D5:F8:5E:76:7E:91:71:D5:DC:BB:E0:31:44:AD:53:45 Certificate issuer: /CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc Certificate serial: 010D0C9F4328584D4D5A380F6575D95060342980 Authority key identifier: FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/d21a8978-b2d2-30a9-a39c-0b84d71329e2.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 21615 IP address blocks: 24.75.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:38:0f:65:75:d9:50:60:34:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=fce0f9da-82d0-4718-ba4e-eecada5911bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d8:ee:30:89:a5:ee:b5:3b:ce:a3:59:d9:25: 01:ec:ef:f9:2b:1a:d4:3b:89:01:da:df:0e:bd:f0: 5f:ca:84:7c:75:a0:4e:a7:35:cf:4b:0a:6b:22:bf: 3f:f0:9c:25:74:9a:a7:9a:03:90:10:ae:bd:ea:6e: 43:c9:b5:01:ec:73:d9:bc:f6:23:2e:92:67:fd:11: b8:7e:f6:cf:4c:10:89:05:b5:e0:35:ea:45:bf:4e: 95:6d:b3:45:d8:f9:58:26:f3:b6:47:31:ac:b9:88: b5:fa:8d:fb:c5:58:f8:4c:69:c8:a5:3b:c4:65:61: f8:32:6a:7b:70:f6:72:03:02:e4:a6:ed:d0:dc:b3: 02:c9:a4:af:c4:9c:84:51:bd:7d:7a:83:ab:36:cb: c6:99:81:ed:7f:a0:26:29:16:5f:49:9c:e2:c6:52: 73:cd:0c:8a:70:c6:6a:44:a9:6b:6a:d5:6c:04:ab: b6:30:5c:92:28:c9:64:5f:52:6b:60:02:b4:06:27: 50:78:4f:2d:d8:a3:b8:c3:65:31:05:a4:6c:06:94: 8c:1b:29:9b:d0:3a:08:39:88:9e:48:e5:9e:87:43: 59:90:63:28:ed:11:fe:ab:5b:da:a2:6d:87:af:38: 4a:75:8b:89:98:b3:98:49:9d:d0:1e:fa:49:42:47: fd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:20:0A:27:D5:F8:5E:76:7E:91:71:D5:DC:BB:E0:31:44:AD:53:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/d21a8978-b2d2-30a9-a39c-0b84d71329e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl X509v3 Authority Key Identifier: keyid:FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer sbgp-ipAddrBlock: critical IPv4: 24.75.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:65:1a:60:62:9e:d1:fe:80:6e:dc:2d:06:57:96:60:f1:fa: 7a:e1:e0:de:3c:78:92:d0:fe:13:ce:8a:b1:3f:fa:be:a8:33: a6:ff:d8:4e:36:ef:1c:e1:62:a9:aa:a4:ff:5a:23:99:90:2f: 7a:2a:9c:ab:15:c9:cf:8c:6f:54:2b:22:54:00:65:63:26:a8: 79:4d:02:01:77:0c:89:27:4e:ea:1e:a6:71:fd:3d:34:05:ff: 4d:4a:c3:41:2c:9b:b3:59:39:c8:98:04:31:c3:3d:1e:49:c4: 9b:20:28:09:53:7a:38:ff:bc:03:d0:a8:ba:97:5a:db:62:d5: 8d:52:ff:38:1a:bb:41:3d:61:3f:0b:fa:37:59:59:e7:bc:97: 3b:de:8b:47:aa:7a:90:6b:b3:d6:0d:72:07:f4:88:fd:ed:f5: ff:69:9e:cf:ca:48:a9:4e:60:3c:a5:ec:57:9d:da:7c:5c:91: 98:1d:7f:07:a9:d2:93:0b:b5:16:52:5c:0e:ed:16:67:a7:08: 26:78:13:e6:20:cf:10:e3:ed:7c:13:87:6f:dc:4f:9a:f1:0d: 9f:7a:1c:ea:3b:d3:e7:28:4d:59:d0:20:df:27:38:21:9c:b8: 9d:47:12:db:6f:5d:06:dd:3b:fe:66:35:5c:1c:fc:c2:6f:46: 5d:3e:c6:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWjgPZXXZUGA0KYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E3YWJlZmYtZmVhYy00Y2M5LTkwNzctODY2ZjBiYjFi OGNjMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZmNlMGY5ZGEtODJkMC00NzE4LWJhNGUtZWVjYWRhNTkxMWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdjuMIml7rU7zqNZ2SUB7O/5KxrUO4kB2t8O vfBfyoR8daBOpzXPSwprIr8/8JwldJqnmgOQEK696m5DybUB7HPZvPYjLpJn/RG4 fvbPTBCJBbXgNepFv06VbbNF2PlYJvO2RzGsuYi1+o37xVj4TGnIpTvEZWH4Mmp7 cPZyAwLkpu3Q3LMCyaSvxJyEUb19eoOrNsvGmYHtf6AmKRZfSZzixlJzzQyKcMZq RKlratVsBKu2MFySKMlkX1JrYAK0BidQeE8t2KO4w2UxBaRsBpSMGymb0DoIOYie SOWeh0NZkGMo7RH+q1vaom2HrzhKdYuJmLOYSZ3QHvpJQkf9RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0gCifV+F52fpFx1dy74DFErVNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTdh YmVmZi1mZWFjLTRjYzktOTA3Ny04NjZmMGJiMWI4Y2MvZDIxYTg5NzgtYjJkMi0z MGE5LWEzOWMtMGI4NGQ3MTMyOWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2E3YWJlZmYtZmVhYy00Y2M5LTkw NzctODY2ZjBiYjFiOGNjLzdhN2FiZWZmLWZlYWMtNGNjOS05MDc3LTg2NmYwYmIx YjhjYy5jcmwwHwYDVR0jBBgwFoAU+79+OuW9smvC3UATG67xRb6sEjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTdhYmVmZi1mZWFjLTRjYzktOTA3Ny04NjZm MGJiMWI4Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGEt0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZlGmBintH+gG7cLQZXlmDx+nrh4N48eJLQ/hPOirE/+r6oM6b/2E42 7xzhYqmqpP9aI5mQL3oqnKsVyc+Mb1QrIlQAZWMmqHlNAgF3DIknTuoepnH9PTQF /01Kw0Esm7NZOciYBDHDPR5JxJsgKAlTejj/vAPQqLqXWtti1Y1S/zgau0E9YT8L +jdZWee8lzvei0eqepBrs9YNcgf0iP3t9f9pns/KSKlOYDyl7Fed2nxckZgdfwep 0pMLtRZSXA7tFmenCCZ4E+YgzxDj7XwTh2/cT5rxDZ96HOo70+coTVnQIN8nOCGc uJ1HEttvXQbdO/5mNVwc/MJvRl0+xlc= -----END CERTIFICATE-----Generated at Fri Apr 17 15:19:45 2026 by rpki-client