$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/3cbb1fcf-9925-31c8-b2a7-c63ce0b5ca2a.roa File: 3cbb1fcf-9925-31c8-b2a7-c63ce0b5ca2a.roa (raw, json) Hash identifier: vNiyW7EyWYcZOQXyZkMLn/CXS93KYJMZVZvn/FyTCE0= Subject key identifier: BD:56:8E:FF:C8:C9:DF:9D:9D:42:ED:B5:D6:0A:E3:73:65:F8:67:94 Certificate issuer: /CN=109733f6-670d-4e02-a6e2-403ebf727263 Certificate serial: 010D0C9F4328584D65152C60F7F367931AC5CD80 Authority key identifier: E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/3cbb1fcf-9925-31c8-b2a7-c63ce0b5ca2a.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 46741 IP address blocks: 216.228.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:2c:60:f7:f3:67:93:1a:c5:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=109733f6-670d-4e02-a6e2-403ebf727263 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=05e4360d-9362-4635-8844-ec4ffa24748c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dd:39:23:eb:a7:83:50:3a:a7:d6:46:08:41: 08:6c:81:b7:56:fc:ab:47:75:f5:07:1d:6b:79:7a: af:08:35:93:42:2e:36:66:7d:43:e6:19:f7:2e:f5: 5b:b3:e7:8e:e7:ed:6a:58:b5:da:ab:77:2c:9b:50: 93:20:92:6c:43:0a:fd:55:a1:89:01:cb:eb:66:72: 00:22:f4:38:0c:45:fe:a2:c0:b3:55:ba:b2:ea:e1: 12:8a:87:8d:bf:68:8a:16:bc:47:80:97:48:44:9c: e1:38:e5:10:71:a2:6a:45:dc:12:79:4f:49:be:3c: 38:49:cb:41:e2:30:01:5a:d8:56:0d:a0:3b:ce:db: 5a:91:a3:e4:c5:9e:61:fb:66:9e:ef:ec:aa:bd:21: 0d:83:2a:c2:c9:7d:22:b5:99:e2:45:49:ab:95:0a: 38:1c:6c:91:c3:26:bf:57:39:88:ef:bc:6f:66:f6: 40:02:7c:57:b9:df:f6:7f:58:0a:68:35:55:78:0f: ce:a1:40:b3:28:a7:7f:2f:b9:59:e9:db:58:f2:16: 1a:84:18:d9:79:b0:e0:bf:b7:f4:ff:87:50:47:12: f7:70:16:e5:fe:b8:1f:1d:6d:1d:15:d1:68:f4:2c: b4:f0:6d:c6:10:49:19:cd:75:8c:e3:0b:95:13:aa: 12:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:56:8E:FF:C8:C9:DF:9D:9D:42:ED:B5:D6:0A:E3:73:65:F8:67:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/3cbb1fcf-9925-31c8-b2a7-c63ce0b5ca2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl X509v3 Authority Key Identifier: keyid:E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer sbgp-ipAddrBlock: critical IPv4: 216.228.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:bb:60:fd:69:c2:0c:2a:ff:61:d2:2a:65:0e:53:6b:25:91: 16:74:ad:db:1e:72:6e:ca:28:2b:ce:d8:95:40:52:5c:b2:13: 74:e5:e2:a0:2a:d1:d4:78:d6:01:b3:a4:9b:49:82:ea:b6:1a: 11:07:fc:54:ef:65:2b:8f:44:55:26:0a:67:0d:57:e8:d1:81: 83:37:7f:37:88:9e:c3:c1:83:a3:0c:d8:51:7a:73:5d:cf:ae: 1f:ec:26:6c:85:ef:89:a6:4f:4c:8c:45:76:16:c4:90:08:b4: 56:ba:c1:6c:ac:b9:b0:f3:c2:d7:5b:05:82:34:43:5d:be:d1: ad:f4:15:4a:4b:fd:45:40:1d:cd:6e:bd:52:ec:4f:cc:c4:6a: ca:e5:c2:39:3b:63:31:f5:26:e4:ef:f4:40:d4:f4:b5:db:62: ca:e0:39:c1:89:28:fb:7b:9e:c6:4f:32:99:ec:06:cc:28:61: 86:f9:2c:79:d9:85:2d:c5:c1:ef:df:08:d3:20:26:f5:5a:55: b5:d7:65:00:04:8a:3f:63:e0:d4:a1:9c:bd:70:15:59:88:6a: f1:ba:9f:a7:be:4d:9c:00:f6:5d:39:5c:52:6e:6d:9e:a7:58: f2:01:9d:fe:42:0c:c7:6d:91:d8:d2:7a:d7:83:d4:15:30:e0: c5:6c:62:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFSxg9/NnkxrFzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA5NzMzZjYtNjcwZC00ZTAyLWE2ZTItNDAzZWJmNzI3 MjYzMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk MDVlNDM2MGQtOTM2Mi00NjM1LTg4NDQtZWM0ZmZhMjQ3NDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp905I+ung1A6p9ZGCEEIbIG3VvyrR3X1Bx1r eXqvCDWTQi42Zn1D5hn3LvVbs+eO5+1qWLXaq3csm1CTIJJsQwr9VaGJAcvrZnIA IvQ4DEX+osCzVbqy6uESioeNv2iKFrxHgJdIRJzhOOUQcaJqRdwSeU9Jvjw4SctB 4jABWthWDaA7zttakaPkxZ5h+2ae7+yqvSENgyrCyX0itZniRUmrlQo4HGyRwya/ VzmI77xvZvZAAnxXud/2f1gKaDVVeA/OoUCzKKd/L7lZ6dtY8hYahBjZebDgv7f0 /4dQRxL3cBbl/rgfHW0dFdFo9Cy08G3GEEkZzXWM4wuVE6oSVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1Wjv/Iyd+dnULttdYK43Nl+GeUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDk3 MzNmNi02NzBkLTRlMDItYTZlMi00MDNlYmY3MjcyNjMvM2NiYjFmY2YtOTkyNS0z MWM4LWIyYTctYzYzY2UwYjVjYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTA5NzMzZjYtNjcwZC00ZTAyLWE2 ZTItNDAzZWJmNzI3MjYzLzEwOTczM2Y2LTY3MGQtNGUwMi1hNmUyLTQwM2ViZjcy NzI2My5jcmwwHwYDVR0jBBgwFoAU6VzkBNOP6K017vlgU1aSnQ7BeSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDk3MzNmNi02NzBkLTRlMDItYTZlMi00MDNl YmY3MjcyNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OTqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFu7YP1pwgwq/2HSKmUOU2slkRZ0rdsecm7KKCvO2JVAUlyyE3Tl4qAq 0dR41gGzpJtJguq2GhEH/FTvZSuPRFUmCmcNV+jRgYM3fzeInsPBg6MM2FF6c13P rh/sJmyF74mmT0yMRXYWxJAItFa6wWysubDzwtdbBYI0Q12+0a30FUpL/UVAHc1u vVLsT8zEasrlwjk7YzH1JuTv9EDU9LXbYsrgOcGJKPt7nsZPMpnsBswoYYb5LHnZ hS3Fwe/fCNMgJvVaVbXXZQAEij9j4NShnL1wFVmIavG6n6e+TZwA9l05XFJubZ6n WPIBnf5CDMdtkdjSeteD1BUw4MVsYsU= -----END CERTIFICATE-----Generated at Fri Apr 17 15:26:47 2026 by rpki-client