$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/97377f8a-0665-37a9-8ffa-a31cdce7265d.roa File: 97377f8a-0665-37a9-8ffa-a31cdce7265d.roa (raw, json) Hash identifier: iBqxAXK+mvfH9c1krpxbg6z6JhxcligTG9FwVIfe5EI= Subject key identifier: E2:59:15:1E:C8:6C:AA:E4:68:5C:FF:78:59:F0:EF:2D:83:F9:31:4D Certificate issuer: /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Certificate serial: 010D0C9F4328584D6AAA8576D32397A2A421AC00 Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/97377f8a-0665-37a9-8ffa-a31cdce7265d.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 53991 IP address blocks: 216.245.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:85:76:d3:23:97:a2:a4:21:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=9ddc6fd8-fc95-45dc-bb6d-d5ef660e8cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d6:5e:fc:92:fc:6d:da:fc:8c:dc:d7:84:36: d4:d1:79:9b:f9:54:34:e8:8d:74:25:49:2e:ef:be: 54:d2:24:d7:af:a7:05:75:33:25:e7:7e:c3:b2:a0: 29:72:ee:61:92:86:6f:72:1b:09:21:f2:77:ee:59: 41:70:5c:ab:16:a0:3a:03:0c:52:fa:54:c6:db:f9: 0e:17:0e:1f:3c:db:d0:60:8e:83:81:fd:0a:bf:7f: 61:bf:80:33:c5:e8:62:c9:d5:5e:e7:82:ff:dd:c7: 2e:be:06:48:f4:c8:07:b0:8a:2c:66:2b:3c:10:4e: 43:51:7d:17:cb:5e:f2:2f:bd:9c:a6:de:f5:b1:66: 66:1e:0a:7b:4b:04:a7:3d:5d:94:2a:19:87:d1:45: a4:2b:6f:9a:e0:6a:9b:91:a5:02:fc:af:65:7a:87: 2b:08:fe:65:e7:71:9a:67:1b:70:dc:ff:2d:29:19: ca:0e:8a:12:dc:c1:8f:a4:88:a7:8f:03:da:3b:e6: 19:0a:4c:71:06:01:5d:5a:10:46:d8:ac:2c:32:d2: 5a:6e:5f:f0:2c:27:82:4a:4d:21:ec:e7:fe:64:b8: db:9e:ae:f2:17:27:7a:53:a4:72:13:3b:95:f1:a9: 1a:4c:89:f3:b2:96:3d:c3:8f:bf:9c:df:3f:7c:0d: 3d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:59:15:1E:C8:6C:AA:E4:68:5C:FF:78:59:F0:EF:2D:83:F9:31:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/97377f8a-0665-37a9-8ffa-a31cdce7265d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl X509v3 Authority Key Identifier: keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer sbgp-ipAddrBlock: critical IPv4: 216.245.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:4a:7e:4e:84:95:ea:30:62:22:20:20:f1:24:b6:7f:e3:38: c1:6e:91:5f:1c:51:99:65:62:17:0a:15:43:e0:7d:4c:b3:34: 55:f8:63:81:2b:b6:bc:15:83:dc:c8:60:67:4c:c5:2a:72:8b: e1:93:a0:85:17:6e:c2:c9:d5:09:e1:90:fa:b2:17:ba:59:97: 00:6e:f7:24:4d:ec:14:7f:80:a3:9c:19:2a:04:18:2d:a0:82: ce:1b:ed:4c:6f:c9:0f:36:ac:26:53:99:3a:15:df:44:26:73: 31:84:3c:ef:ea:f8:36:32:12:d0:0a:38:47:f3:1b:19:32:7f: 13:1f:61:57:86:9d:75:45:c7:06:cf:84:db:69:6e:54:aa:3e: be:3f:48:10:56:ba:a2:00:7b:8c:e4:41:ed:d0:dd:84:13:59: d4:0f:6c:8e:f0:d1:de:ab:85:5d:52:2e:ca:09:9e:dd:9e:34: c9:53:d1:c9:bf:ce:53:b2:ad:da:26:be:d0:31:d3:2b:fe:eb: 15:3e:4c:7e:37:af:e2:d0:f2:bc:ae:a3:4c:bd:cb:51:e2:88: cf:31:40:45:46:48:fd:a9:e3:05:72:1d:77:bf:9e:2a:90:9c: 66:55:fa:b0:d7:89:01:a4:f4:ca:7e:94:ee:e4:b7:2b:60:59: 4e:f8:e8:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqoV20yOXoqQhrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIyNjE3YzAtMDNmNC00YWQ3LTlkMTEtMzZiMmM2NDk2 YjdkMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk OWRkYzZmZDgtZmM5NS00NWRjLWJiNmQtZDVlZjY2MGU4Y2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtZe/JL8bdr8jNzXhDbU0Xmb+VQ06I10JUku 775U0iTXr6cFdTMl537DsqApcu5hkoZvchsJIfJ37llBcFyrFqA6AwxS+lTG2/kO Fw4fPNvQYI6Dgf0Kv39hv4AzxehiydVe54L/3ccuvgZI9MgHsIosZis8EE5DUX0X y17yL72cpt71sWZmHgp7SwSnPV2UKhmH0UWkK2+a4GqbkaUC/K9leocrCP5l53Ga Zxtw3P8tKRnKDooS3MGPpIinjwPaO+YZCkxxBgFdWhBG2KwsMtJabl/wLCeCSk0h 7Of+ZLjbnq7yFyd6U6RyEzuV8akaTInzspY9w4+/nN8/fA09WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJZFR7IbKrkaFz/eFnw7y2D+TFNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2 MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIyYzY0OTZiN2QvOTczNzdmOGEtMDY2NS0z N2E5LThmZmEtYTMxY2RjZTcyNjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGIyNjE3YzAtMDNmNC00YWQ3LTlk MTEtMzZiMmM2NDk2YjdkL2RiMjYxN2MwLTAzZjQtNGFkNy05ZDExLTM2YjJjNjQ5 NmI3ZC5jcmwwHwYDVR0jBBgwFoAUb4y8Y/4j18SoBgk6tbahaqOUWLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIy YzY0OTZiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PWaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFKfk6EleowYiIgIPEktn/jOMFukV8cUZllYhcKFUPgfUyzNFX4Y4Er trwVg9zIYGdMxSpyi+GToIUXbsLJ1QnhkPqyF7pZlwBu9yRN7BR/gKOcGSoEGC2g gs4b7UxvyQ82rCZTmToV30QmczGEPO/q+DYyEtAKOEfzGxkyfxMfYVeGnXVFxwbP hNtpblSqPr4/SBBWuqIAe4zkQe3Q3YQTWdQPbI7w0d6rhV1SLsoJnt2eNMlT0cm/ zlOyrdomvtAx0yv+6xU+TH43r+LQ8ryuo0y9y1HiiM8xQEVGSP2p4wVyHXe/niqQ nGZV+rDXiQGk9Mp+lO7ktytgWU746OM= -----END CERTIFICATE-----Generated at Fri Apr 17 13:40:06 2026 by rpki-client