$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/21ed06dc-3a8a-39a6-8098-04f68740e07c.roa File: 21ed06dc-3a8a-39a6-8098-04f68740e07c.roa (raw, json) Hash identifier: JDB7RAWLDlDukTEl0E/17Gv7ais0KWaYuFN3MtXqQVI= Subject key identifier: 67:9E:94:B3:B9:F8:B9:C7:AF:39:03:28:E0:46:C5:57:C7:30:5C:C1 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584D80FFF4946F891F1FD070F380 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/21ed06dc-3a8a-39a6-8098-04f68740e07c.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 11548 IP address blocks: 216.186.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:f4:94:6f:89:1f:1f:d0:70:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=f76a8a57-39cc-4430-90b2-0d29d0fe2512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:06:af:6b:3f:d2:c0:2e:38:4c:02:f1:37:03: 2b:c4:42:38:3b:7a:28:ab:0f:8f:d1:2b:61:7a:a6: 6f:13:3d:7e:f6:2d:9f:91:c3:43:a6:3b:c6:78:56: 2e:37:8d:5a:ba:f4:66:ad:ff:9e:ea:8f:57:ef:61: 4e:ce:44:b5:31:d7:13:a6:35:6f:13:6e:aa:ce:8f: 5c:cf:19:4d:f2:3e:d4:1b:09:41:07:36:63:80:4b: 3c:9d:12:23:68:ca:00:6b:51:fd:9d:22:7f:6c:4a: 56:1b:8b:2a:2a:6c:f6:86:3f:d3:47:06:3c:52:05: 04:31:15:fa:6a:29:78:9f:1b:d5:c6:b2:5e:4b:34: 83:db:b2:74:14:e2:f1:70:0f:7e:03:28:1f:9d:9b: cf:72:21:d3:84:da:d9:a3:d4:30:8b:1a:16:3d:96: 08:19:20:85:0d:38:4e:60:52:14:06:a0:60:25:74: d0:28:58:1b:7c:09:83:31:13:1b:36:69:2e:34:d1: 9b:c6:e6:0f:bb:89:60:ca:cc:59:d1:5c:40:87:d1: 9f:2b:c6:16:4a:2e:59:15:56:93:5f:60:f0:cb:b1: f3:d3:f6:0a:06:06:48:7c:15:2a:ef:25:be:13:20: c4:6f:e1:a0:93:04:09:68:e8:71:74:e2:03:1c:d2: 8a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9E:94:B3:B9:F8:B9:C7:AF:39:03:28:E0:46:C5:57:C7:30:5C:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/21ed06dc-3a8a-39a6-8098-04f68740e07c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 216.186.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:e0:a4:c9:09:57:fc:55:a0:d0:cc:f7:5e:43:c6:64:56:10: ac:12:a1:19:72:4d:9c:97:37:52:d9:1f:6f:c4:28:c0:51:61: 5c:0b:1e:2b:67:9b:e5:f5:5c:92:d6:b4:73:b6:3d:74:f4:19: c9:66:8a:12:b5:ed:26:8c:ac:88:12:38:8d:2f:4d:ed:ea:af: d5:98:d9:4d:c8:41:3d:84:ed:7a:41:ed:21:0f:97:c8:44:16: b4:cb:ab:d5:fb:d7:d2:5f:08:ce:c7:26:6e:15:6b:1f:43:aa: 94:db:30:c9:38:52:53:16:aa:90:d6:d6:1c:43:ae:83:63:61: 7e:70:83:5b:9a:90:a9:08:34:76:89:30:80:4d:da:88:f5:15: 80:ce:0a:cf:28:81:60:a9:c5:81:26:52:aa:74:0a:bc:29:aa: 65:ed:77:66:d7:8b:74:a5:31:47:8d:50:d5:69:b2:1b:0f:88: 36:e5:be:eb:d7:9f:73:cd:65:a8:b2:eb:7a:08:1e:5b:80:79: cc:08:0b:c1:56:dc:36:71:0b:b7:1d:a0:3a:1a:e2:6e:be:b2: e3:07:58:c8:f2:1c:97:26:70:e5:57:87:13:87:df:ea:16:05: 3c:ec:c0:1d:0a:07:f1:82:0a:fe:27:a7:9b:cf:05:29:b0:de: 81:33:ce:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A//SUb4kfH9Bw84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk Zjc2YThhNTctMzljYy00NDMwLTkwYjItMGQyOWQwZmUyNTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAavaz/SwC44TALxNwMrxEI4O3ooqw+P0Sth eqZvEz1+9i2fkcNDpjvGeFYuN41auvRmrf+e6o9X72FOzkS1MdcTpjVvE26qzo9c zxlN8j7UGwlBBzZjgEs8nRIjaMoAa1H9nSJ/bEpWG4sqKmz2hj/TRwY8UgUEMRX6 ail4nxvVxrJeSzSD27J0FOLxcA9+AygfnZvPciHThNrZo9QwixoWPZYIGSCFDThO YFIUBqBgJXTQKFgbfAmDMRMbNmkuNNGbxuYPu4lgysxZ0VxAh9GfK8YWSi5ZFVaT X2Dwy7Hz0/YKBgZIfBUq7yW+EyDEb+GgkwQJaOhxdOIDHNKKJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeelLO5+LnHrzkDKOBGxVfHMFzBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvMjFlZDA2ZGMtM2E4YS0z OWE2LTgwOTgtMDRmNjg3NDBlMDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LpiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/gpMkJV/xVoNDM915DxmRWEKwSoRlyTZyXN1LZH2/EKMBRYVwLHitn m+X1XJLWtHO2PXT0GclmihK17SaMrIgSOI0vTe3qr9WY2U3IQT2E7XpB7SEPl8hE FrTLq9X719JfCM7HJm4Vax9DqpTbMMk4UlMWqpDW1hxDroNjYX5wg1uakKkINHaJ MIBN2oj1FYDOCs8ogWCpxYEmUqp0CrwpqmXtd2bXi3SlMUeNUNVpshsPiDblvuvX n3PNZaiy63oIHluAecwIC8FW3DZxC7cdoDoa4m6+suMHWMjyHJcmcOVXhxOH3+oW BTzswB0KB/GCCv4np5vPBSmw3oEzzic= -----END CERTIFICATE-----Generated at Fri Apr 17 21:15:23 2026 by rpki-client