$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/42a224d2-3205-3f19-92d3-d4f7cc416310.roa File: 42a224d2-3205-3f19-92d3-d4f7cc416310.roa (raw, json) Hash identifier: q1IvLjNbaFXwkC6cFrf+lUU3H3rv2soHqpAxBB2JhoQ= Subject key identifier: 4E:D1:8B:FD:A2:47:F2:3C:DE:5B:B8:6F:54:5D:41:BC:C8:80:00:D2 Certificate issuer: /CN=3d9df9b4-6f73-43c8-aacc-4d068a82c5d8 Certificate serial: 010D0C9F4328584D71495F57B2B4D6EE33B2F180 Authority key identifier: 0D:52:33:12:BE:B4:61:AB:88:D5:F1:48:CF:BC:01:2C:2D:B6:5F:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/42a224d2-3205-3f19-92d3-d4f7cc416310.roa Signing time: Wed 08 Apr 2026 21:55:45 +0000 ROA not before: Wed 08 Apr 2026 21:55:45 +0000 ROA not after: Tue 07 Jul 2026 21:55:45 +0000 asID: 401224 IP address blocks: 216.109.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:49:5f:57:b2:b4:d6:ee:33:b2:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9df9b4-6f73-43c8-aacc-4d068a82c5d8 Validity Not Before: Apr 8 21:55:45 2026 GMT Not After : Jul 7 21:55:45 2026 GMT Subject: CN=34461598-1904-40ec-9792-24a5c14b4d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ed:58:7f:ee:91:42:0d:0a:ef:1a:5b:b5:2a: 7b:19:24:57:24:6e:53:6f:bb:9c:3f:e4:a4:bd:4d: ee:e1:ab:3c:97:a6:81:d2:5a:0b:e5:0d:a0:40:89: de:b2:59:38:e4:fb:3c:ea:63:f8:a1:49:17:61:c9: c5:4f:36:ce:46:4a:ea:69:2f:de:5f:a1:8f:8b:97: e5:12:48:68:62:6e:9a:9a:ef:74:8a:8f:12:23:fc: 00:a7:9f:6a:67:eb:e7:6c:14:57:ad:7d:ce:fb:f3: 69:94:76:32:73:3d:5d:3d:69:4f:6a:60:9e:a7:ea: f8:28:bc:88:5d:22:97:d2:d9:0c:4c:4f:1d:03:b9: 9a:9c:cb:bb:5a:4c:7a:12:44:5f:6d:03:24:30:23: e3:43:78:5c:4f:f7:a9:b7:9b:bd:5b:ff:3e:b2:2d: b7:28:9a:d7:21:c9:26:67:ca:ec:4b:26:5f:a5:75: d7:b5:9b:bc:d6:16:ee:2f:1b:6a:73:01:7c:c6:14: 61:09:4b:fe:81:cb:19:15:10:42:39:96:fa:ff:0c: 37:7d:44:dc:e6:e2:c4:21:61:2e:72:12:d4:29:ed: a5:12:80:ff:a4:a9:ff:0a:f3:52:48:e2:9c:1d:c7: 6d:21:42:e1:28:e2:8f:2c:5b:7f:b5:36:29:2f:03: 4b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D1:8B:FD:A2:47:F2:3C:DE:5B:B8:6F:54:5D:41:BC:C8:80:00:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/42a224d2-3205-3f19-92d3-d4f7cc416310.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl X509v3 Authority Key Identifier: keyid:0D:52:33:12:BE:B4:61:AB:88:D5:F1:48:CF:BC:01:2C:2D:B6:5F:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer sbgp-ipAddrBlock: critical IPv4: 216.109.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:90:f0:2f:99:c6:f4:65:a8:12:8d:6d:70:50:63:18:51:09: cc:f2:1f:57:50:56:f2:66:5e:dc:86:41:3d:9f:c9:40:59:73: 5a:f1:d2:20:73:2b:0f:07:4a:27:c3:dd:3a:1b:94:45:4b:3e: 30:56:53:e5:c4:0b:f7:4b:c2:c3:fa:a7:a2:e4:4e:65:bf:84: 42:26:99:58:72:8e:18:be:e4:fa:72:7b:df:f4:7b:b1:09:2e: bb:a3:d6:b1:d1:1d:a9:f8:96:9e:7e:f6:95:f0:46:91:12:ab: f8:33:89:04:96:0e:7b:50:f0:4e:65:2f:33:d9:43:87:9b:48: 5a:07:fe:86:71:1b:03:25:2e:04:ad:c7:4f:21:72:09:14:a6: 72:df:38:8c:a3:22:4b:11:77:7b:6c:b7:97:d7:ae:35:63:51: 23:11:84:f9:8d:25:bf:48:70:73:a6:0f:d6:fd:79:26:5a:4e: 26:83:2b:9e:1b:8c:71:39:ea:19:aa:05:46:f1:d4:2e:65:e9: 37:93:5e:ea:b2:ca:74:f5:f7:f0:f1:36:ca:3c:ed:87:fb:f4: 76:13:9a:e1:96:6b:15:a7:9e:57:bd:13:78:c2:fe:cc:3b:34: 79:8f:1a:6e:9f:c3:30:e2:5a:cf:cb:e5:d9:29:8d:d3:10:c1: 75:7c:fe:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xSV9XsrTW7jOy8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5ZGY5YjQtNmY3My00M2M4LWFhY2MtNGQwNjhhODJj NWQ4MB4XDTI2MDQwODIxNTU0NVoXDTI2MDcwNzIxNTU0NVowLzEtMCsGA1UEAxMk MzQ0NjE1OTgtMTkwNC00MGVjLTk3OTItMjRhNWMxNGI0ZDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO1Yf+6RQg0K7xpbtSp7GSRXJG5Tb7ucP+Sk vU3u4as8l6aB0loL5Q2gQIneslk45Ps86mP4oUkXYcnFTzbORkrqaS/eX6GPi5fl EkhoYm6amu90io8SI/wAp59qZ+vnbBRXrX3O+/NplHYycz1dPWlPamCep+r4KLyI XSKX0tkMTE8dA7manMu7Wkx6EkRfbQMkMCPjQ3hcT/ept5u9W/8+si23KJrXIckm Z8rsSyZfpXXXtZu81hbuLxtqcwF8xhRhCUv+gcsZFRBCOZb6/ww3fUTc5uLEIWEu chLUKe2lEoD/pKn/CvNSSOKcHcdtIULhKOKPLFt/tTYpLwNL+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7Ri/2iR/I83lu4b1RdQbzIgADSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDlk ZjliNC02ZjczLTQzYzgtYWFjYy00ZDA2OGE4MmM1ZDgvNDJhMjI0ZDItMzIwNS0z ZjE5LTkyZDMtZDRmN2NjNDE2MzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2Q5ZGY5YjQtNmY3My00M2M4LWFh Y2MtNGQwNjhhODJjNWQ4LzNkOWRmOWI0LTZmNzMtNDNjOC1hYWNjLTRkMDY4YTgy YzVkOC5jcmwwHwYDVR0jBBgwFoAUDVIzEr60YauI1fFIz7wBLC22X8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDlkZjliNC02ZjczLTQzYzgtYWFjYy00ZDA2 OGE4MmM1ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2G26MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiQ8C+ZxvRlqBKNbXBQYxhRCczyH1dQVvJmXtyGQT2fyUBZc1rx0iBz Kw8HSifD3ToblEVLPjBWU+XEC/dLwsP6p6LkTmW/hEImmVhyjhi+5Ppye9/0e7EJ Lruj1rHRHan4lp5+9pXwRpESq/gziQSWDntQ8E5lLzPZQ4ebSFoH/oZxGwMlLgSt x08hcgkUpnLfOIyjIksRd3tst5fXrjVjUSMRhPmNJb9IcHOmD9b9eSZaTiaDK54b jHE56hmqBUbx1C5l6TeTXuqyynT19/DxNso87Yf79HYTmuGWaxWnnle9E3jC/sw7 NHmPGm6fwzDiWs/L5dkpjdMQwXV8/jw= -----END CERTIFICATE-----Generated at Fri Apr 17 17:59:16 2026 by rpki-client