$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/1f9999a6-d808-39d4-8d54-071e396efd7c.roa File: 1f9999a6-d808-39d4-8d54-071e396efd7c.roa (raw, json) Hash identifier: 1eLZ8kgVtOB2tMbYa7O7tNLiMX8KRd29k09z50j7uoI= Subject key identifier: 00:FA:F0:D5:3E:CA:B6:62:3F:CA:89:FE:AA:6F:48:AB:65:1A:83:AB Certificate issuer: /CN=3d9df9b4-6f73-43c8-aacc-4d068a82c5d8 Certificate serial: 010D0C9F4328584D7149F5E08CEBFC3093096800 Authority key identifier: 0D:52:33:12:BE:B4:61:AB:88:D5:F1:48:CF:BC:01:2C:2D:B6:5F:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/1f9999a6-d808-39d4-8d54-071e396efd7c.roa Signing time: Wed 08 Apr 2026 21:56:56 +0000 ROA not before: Wed 08 Apr 2026 21:56:56 +0000 ROA not after: Tue 07 Jul 2026 21:56:56 +0000 asID: 401224 IP address blocks: 216.109.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:49:f5:e0:8c:eb:fc:30:93:09:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9df9b4-6f73-43c8-aacc-4d068a82c5d8 Validity Not Before: Apr 8 21:56:56 2026 GMT Not After : Jul 7 21:56:56 2026 GMT Subject: CN=2c764791-9e66-4cb7-9ae2-f8950acb4346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:41:29:a2:0c:27:a9:38:f9:2d:0c:1d:d7:a3: 83:6b:dd:eb:8a:39:f4:59:08:0e:45:2c:c4:81:5a: 5b:81:d6:8e:8b:32:3c:03:c2:39:20:20:24:3b:76: 29:f9:45:ad:92:7e:cf:80:af:1c:a4:dd:09:5a:54: 32:d5:d0:db:40:56:14:bb:e8:4d:81:49:5e:1a:96: 3e:80:69:e9:2c:60:41:5e:e8:4d:81:65:08:83:8e: 25:2e:c8:8f:8b:14:35:ec:c5:99:80:65:a0:e6:f8: 67:5c:a4:5d:6b:ed:dd:de:48:ba:ea:a3:21:18:2f: c3:51:ff:cc:00:bf:ec:f0:b7:63:ec:59:5b:48:72: 1f:ac:4d:44:c1:c4:40:6c:18:df:18:fb:81:18:bb: 94:6b:14:1c:06:fc:67:96:11:0b:58:44:3e:b2:8b: 64:01:bb:5d:e8:e9:8a:5c:b4:8b:90:91:d5:2d:56: 33:aa:4b:4c:63:88:85:10:9c:96:1e:7d:dd:6f:d6: 9d:11:f7:17:08:3d:87:2c:33:ff:38:9a:c2:40:8c: a5:6f:17:75:0d:95:7a:62:6d:70:0c:cd:67:85:a0: 60:d4:3e:96:5d:85:5f:c5:d8:27:0b:c0:5b:a2:f0: 81:01:e5:f7:7a:88:1b:c2:39:f7:7e:dd:56:0c:20: 6b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FA:F0:D5:3E:CA:B6:62:3F:CA:89:FE:AA:6F:48:AB:65:1A:83:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/1f9999a6-d808-39d4-8d54-071e396efd7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl X509v3 Authority Key Identifier: keyid:0D:52:33:12:BE:B4:61:AB:88:D5:F1:48:CF:BC:01:2C:2D:B6:5F:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer sbgp-ipAddrBlock: critical IPv4: 216.109.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:58:e5:71:60:dc:2e:41:4d:2b:05:e4:93:26:ab:a3:f6:fc: 94:59:b4:f0:2a:fa:ac:dd:ca:b3:1e:f0:00:5d:be:f7:13:67: b0:57:2f:a8:7d:d2:95:40:b3:8d:29:ef:ba:33:fe:ce:71:06: fc:49:92:ac:9d:ad:25:c2:2e:9e:26:51:48:f7:e4:b9:43:42: af:45:e7:9c:ed:0a:0e:ca:d5:a1:7e:18:f8:e6:b7:32:23:1c: 87:40:71:45:28:4c:f2:21:5d:14:87:37:d2:93:4e:4c:90:87: e2:0e:3a:a1:d7:36:a5:ee:46:dd:ae:8f:d6:6e:d4:70:12:28: 61:de:0b:8c:62:b0:40:b4:08:f1:0f:a7:6f:07:ad:fb:be:7c: 43:97:25:f1:cf:68:e4:46:13:9b:74:ec:d8:8f:69:33:ac:c3: 9f:f8:cf:d1:df:b2:f9:c7:96:48:37:27:13:cc:f6:e9:08:48: 19:2d:2f:bc:dc:0f:25:c4:f4:84:2f:a8:8e:82:41:28:7b:01: d7:89:d8:10:5a:e8:1e:8c:ec:de:6e:ad:e1:59:56:31:04:1a: 7f:14:15:eb:73:b5:e8:81:37:dc:3b:98:44:1b:1f:62:13:a5: a8:c4:5b:41:66:aa:e7:cd:84:f3:0b:92:c2:a7:e5:42:63:ae: ba:45:0e:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xSfXgjOv8MJMJaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5ZGY5YjQtNmY3My00M2M4LWFhY2MtNGQwNjhhODJj NWQ4MB4XDTI2MDQwODIxNTY1NloXDTI2MDcwNzIxNTY1NlowLzEtMCsGA1UEAxMk MmM3NjQ3OTEtOWU2Ni00Y2I3LTlhZTItZjg5NTBhY2I0MzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kEpogwnqTj5LQwd16ODa93rijn0WQgORSzE gVpbgdaOizI8A8I5ICAkO3Yp+UWtkn7PgK8cpN0JWlQy1dDbQFYUu+hNgUleGpY+ gGnpLGBBXuhNgWUIg44lLsiPixQ17MWZgGWg5vhnXKRda+3d3ki66qMhGC/DUf/M AL/s8Ldj7FlbSHIfrE1EwcRAbBjfGPuBGLuUaxQcBvxnlhELWEQ+sotkAbtd6OmK XLSLkJHVLVYzqktMY4iFEJyWHn3db9adEfcXCD2HLDP/OJrCQIylbxd1DZV6Ym1w DM1nhaBg1D6WXYVfxdgnC8BbovCBAeX3eogbwjn3ft1WDCBrmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAD68NU+yrZiP8qJ/qpvSKtlGoOrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDlk ZjliNC02ZjczLTQzYzgtYWFjYy00ZDA2OGE4MmM1ZDgvMWY5OTk5YTYtZDgwOC0z OWQ0LThkNTQtMDcxZTM5NmVmZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2Q5ZGY5YjQtNmY3My00M2M4LWFh Y2MtNGQwNjhhODJjNWQ4LzNkOWRmOWI0LTZmNzMtNDNjOC1hYWNjLTRkMDY4YTgy YzVkOC5jcmwwHwYDVR0jBBgwFoAUDVIzEr60YauI1fFIz7wBLC22X8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDlkZjliNC02ZjczLTQzYzgtYWFjYy00ZDA2 OGE4MmM1ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2G27MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxY5XFg3C5BTSsF5JMmq6P2/JRZtPAq+qzdyrMe8ABdvvcTZ7BXL6h9 0pVAs40p77oz/s5xBvxJkqydrSXCLp4mUUj35LlDQq9F55ztCg7K1aF+GPjmtzIj HIdAcUUoTPIhXRSHN9KTTkyQh+IOOqHXNqXuRt2uj9Zu1HASKGHeC4xisEC0CPEP p28Hrfu+fEOXJfHPaORGE5t07NiPaTOsw5/4z9HfsvnHlkg3JxPM9ukISBktL7zc DyXE9IQvqI6CQSh7AdeJ2BBa6B6M7N5ureFZVjEEGn8UFetzteiBN9w7mEQbH2IT pajEW0FmqufNhPMLksKn5UJjrrpFDkA= -----END CERTIFICATE-----Generated at Fri Apr 17 17:59:21 2026 by rpki-client