$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1ac12624-46cf-302e-8b7f-231ef4829527.roa File: 1ac12624-46cf-302e-8b7f-231ef4829527.roa (raw, json) Hash identifier: qsfxZPXvl0TkVOQjlrOqHIRisuUfWRiVaL6cYYAob9k= Subject key identifier: 10:E2:6E:66:68:41:8B:58:A5:7C:77:EC:E4:9E:AD:33:45:DD:B4:10 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D07ACE10A900FD9FCD529BF00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1ac12624-46cf-302e-8b7f-231ef4829527.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 274817 IP address blocks: 216.28.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:e1:0a:90:0f:d9:fc:d5:29:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=1ddb0e63-f9cc-4791-85fd-b5da4e80364e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:16:3e:ec:71:63:c6:ba:b0:c3:01:f1:6f:18: d4:8f:df:0f:3b:1f:93:00:65:f7:dd:4d:2f:1c:2e: 7d:14:4e:b0:99:30:dd:53:85:f4:3a:5c:fe:10:a2: bd:1c:27:19:07:a2:9d:46:71:1e:d8:9a:b9:35:5e: 92:bc:71:d6:d8:87:f8:d2:49:a9:bc:7d:0b:b1:d8: 81:30:8c:ee:0b:74:b7:9b:80:4b:e6:a1:a0:3f:93: df:8e:3e:11:04:d2:f9:6c:4a:65:f3:b8:1f:47:56: 01:51:1b:da:bc:6c:81:f0:06:ea:40:75:15:80:11: 62:90:a2:c0:8b:8a:bc:d5:07:6b:fe:bf:8a:15:81: ea:9b:78:ab:93:50:df:33:34:9a:f5:b2:dd:ae:a2: a4:38:88:52:e7:07:a6:bf:8b:54:e3:07:42:03:7c: 43:92:f4:41:c3:ab:1c:ce:1b:11:11:75:ae:aa:0b: 3e:04:20:c7:b8:57:11:00:2a:8c:0d:ac:b8:fb:36: 54:76:0c:91:67:a0:db:d8:77:62:d1:05:2b:86:09: fa:bd:84:9b:da:32:7a:21:e6:94:14:ca:43:6a:3c: ab:4e:5a:fc:82:81:4f:88:c9:15:53:5d:3a:6a:c4: e6:20:c0:b3:5b:c2:89:f8:03:dd:b4:cf:b7:01:cb: 48:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E2:6E:66:68:41:8B:58:A5:7C:77:EC:E4:9E:AD:33:45:DD:B4:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1ac12624-46cf-302e-8b7f-231ef4829527.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 216.28.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:f1:84:22:50:e4:da:61:8b:7e:48:ca:8a:87:5d:8b:89:6e: f0:3d:6e:1b:3f:c0:90:aa:70:2b:8d:2c:5e:78:f8:25:55:7f: ae:16:1d:4a:d5:03:09:10:dc:cf:3f:c3:90:3d:b1:76:d6:b5: 0b:46:16:36:9f:59:2e:9c:0f:e6:a1:3d:0f:78:71:fa:db:a3: 8d:3f:df:43:54:7a:96:48:65:2f:e2:62:a3:c0:2c:a3:b8:e3: d8:55:8f:82:88:30:34:74:a6:57:d8:f5:5e:20:1b:8c:c5:71: ce:81:79:2d:f8:b9:8a:9a:28:9a:fc:b0:44:9a:f3:e0:ae:96: 53:74:1b:85:29:99:56:c1:f3:15:fd:c4:44:e7:a6:44:41:7f: a3:21:e9:f7:9a:68:c1:5c:8f:35:4b:fe:7e:da:ed:d9:d8:1f: 67:42:0d:42:12:80:85:2e:8b:a4:b8:12:f8:11:cf:00:bd:09: d9:2b:e7:df:b7:6e:05:fd:91:f0:79:0f:a8:12:1e:6b:37:1d: 89:06:74:42:87:97:89:bb:3f:21:fb:0e:66:7b:21:e5:52:83: ce:9c:3f:46:31:aa:39:f4:05:39:4f:44:68:b7:9e:c6:26:78: c0:8a:c3:ab:6e:17:04:85:a3:ce:b0:8b:ad:af:9a:55:e6:fb: fc:ff:ce:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrOEKkA/Z/NUpvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk MWRkYjBlNjMtZjljYy00NzkxLTg1ZmQtYjVkYTRlODAzNjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRY+7HFjxrqwwwHxbxjUj98POx+TAGX33U0v HC59FE6wmTDdU4X0Olz+EKK9HCcZB6KdRnEe2Jq5NV6SvHHW2If40kmpvH0LsdiB MIzuC3S3m4BL5qGgP5Pfjj4RBNL5bEpl87gfR1YBURvavGyB8AbqQHUVgBFikKLA i4q81Qdr/r+KFYHqm3irk1DfMzSa9bLdrqKkOIhS5wemv4tU4wdCA3xDkvRBw6sc zhsREXWuqgs+BCDHuFcRACqMDay4+zZUdgyRZ6Db2Hdi0QUrhgn6vYSb2jJ6IeaU FMpDajyrTlr8goFPiMkVU106asTmIMCzW8KJ+APdtM+3ActIuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDibmZoQYtYpXx37OSerTNF3bQQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMWFjMTI2MjQtNDZjZi0z MDJlLThiN2YtMjMxZWY0ODI5NTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ByYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL7xhCJQ5Nphi35IyoqHXYuJbvA9bhs/wJCqcCuNLF54+CVVf64WHUrV AwkQ3M8/w5A9sXbWtQtGFjafWS6cD+ahPQ94cfrbo40/30NUepZIZS/iYqPALKO4 49hVj4KIMDR0plfY9V4gG4zFcc6BeS34uYqaKJr8sESa8+CullN0G4UpmVbB8xX9 xETnpkRBf6Mh6feaaMFcjzVL/n7a7dnYH2dCDUISgIUui6S4EvgRzwC9Cdkr59+3 bgX9kfB5D6gSHms3HYkGdEKHl4m7PyH7DmZ7IeVSg86cP0Yxqjn0BTlPRGi3nsYm eMCKw6tuFwSFo86wi62vmlXm+/z/zpA= -----END CERTIFICATE-----Generated at Mon Mar 2 10:15:10 2026 by rpki-client