$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/99f40d0e-26f9-386b-bbbd-293755fb24c3.roa File: 99f40d0e-26f9-386b-bbbd-293755fb24c3.roa (raw, json) Hash identifier: k8c7MrKPPiuLeidWK2J/Y539G4KeBKQLzTwqoM6nXFw= Subject key identifier: B2:B8:D4:B4:DA:B5:2F:99:92:D6:8A:03:A4:BE:46:3D:13:64:1F:22 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CB81C733B05B38098C1E42140 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/99f40d0e-26f9-386b-bbbd-293755fb24c3.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 400687 IP address blocks: 216.133.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:73:3b:05:b3:80:98:c1:e4:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=16750ee3-cab1-4189-b94e-ef83bca8074b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a1:d1:4b:f8:86:cc:8a:71:03:aa:47:70:96: 66:f4:ff:b1:9f:f1:c2:13:80:dd:4a:dd:ce:11:16: a4:f1:01:ae:52:44:13:7d:4b:32:0d:d2:45:66:13: d5:22:47:10:74:a0:81:c3:36:32:a6:3f:df:2a:0a: 39:0f:49:86:ce:bb:89:a4:0e:94:1a:97:ec:e2:16: e2:ea:a5:fb:d2:51:b4:3b:53:21:41:67:a3:ef:85: 12:0b:cb:d7:0a:76:62:ca:db:e8:b6:be:74:90:6d: 81:38:6f:f8:35:94:fa:91:d1:48:59:75:99:81:77: c3:fe:01:e1:d2:0c:60:8c:61:7f:21:47:a3:0c:68: 87:96:da:9f:f6:01:19:60:6c:26:f4:fb:56:18:83: 08:3e:c6:8f:04:68:fe:d4:60:36:af:fd:91:9e:77: f1:d0:c0:5d:89:b2:7a:c9:e9:0f:78:e3:95:3e:97: c3:cd:39:3d:82:91:59:ca:3f:e5:a6:d8:cc:bc:4d: 1d:01:01:db:7b:41:8e:bb:3d:55:e4:61:52:95:22: 01:06:7b:8a:55:06:53:40:40:f7:6e:ed:92:f1:06: 30:1e:2a:8a:65:1d:5b:9c:b7:3f:9f:ec:b4:90:d9: dc:a3:47:43:f2:92:16:f1:e2:a7:ed:73:2a:bb:e2: 03:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B8:D4:B4:DA:B5:2F:99:92:D6:8A:03:A4:BE:46:3D:13:64:1F:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/99f40d0e-26f9-386b-bbbd-293755fb24c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.133.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:5e:df:ac:8c:7e:ef:ef:bb:81:9b:a2:b3:87:9e:57:1d:8c: 6a:08:54:26:a6:75:67:2b:f3:14:36:0b:68:37:35:26:7c:6f: 42:4d:66:c8:a2:00:ab:4b:46:df:1b:b5:be:33:b5:2a:af:c6: 5c:bf:c4:87:ab:fd:8f:de:0a:57:06:92:15:2b:6f:6c:9b:23: 19:0d:d9:4a:b3:40:9a:e4:63:9d:56:eb:d8:6e:0c:34:e9:d0: 88:71:06:f1:13:59:89:ed:86:0d:c2:45:c7:25:88:93:0f:a3: 31:61:e1:5b:76:a6:55:ac:80:38:3f:05:50:e5:58:ba:16:09: 63:6d:a3:d1:63:c3:e8:a7:76:bc:57:17:1f:77:4b:68:fa:80: 37:28:a9:56:a5:cf:3d:8d:7a:4e:41:ed:45:57:67:32:69:bd: 20:9e:cf:bb:6c:e2:66:7a:d2:09:63:03:5d:33:2a:05:3a:38: 6f:ff:3c:3c:b7:2e:c8:9e:8a:9b:6b:b3:66:cd:f6:01:c4:8a: 21:a4:c8:93:57:33:d5:18:2b:fc:aa:01:45:99:26:c9:cd:a8: f6:fc:fa:39:42:ba:c0:be:3b:c8:b1:d1:a0:9e:5f:75:a1:1b: 1f:e2:5a:ea:fe:f6:84:dd:57:dc:fd:85:26:fc:a6:11:68:fe: d4:82:38:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HHM7BbOAmMHkIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk MTY3NTBlZTMtY2FiMS00MTg5LWI5NGUtZWY4M2JjYTgwNzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaHRS/iGzIpxA6pHcJZm9P+xn/HCE4DdSt3O ERak8QGuUkQTfUsyDdJFZhPVIkcQdKCBwzYypj/fKgo5D0mGzruJpA6UGpfs4hbi 6qX70lG0O1MhQWej74USC8vXCnZiytvotr50kG2BOG/4NZT6kdFIWXWZgXfD/gHh 0gxgjGF/IUejDGiHltqf9gEZYGwm9PtWGIMIPsaPBGj+1GA2r/2Rnnfx0MBdibJ6 yekPeOOVPpfDzTk9gpFZyj/lptjMvE0dAQHbe0GOuz1V5GFSlSIBBnuKVQZTQED3 bu2S8QYwHiqKZR1bnLc/n+y0kNnco0dD8pIW8eKn7XMqu+IDlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLK41LTatS+ZktaKA6S+Rj0TZB8iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTlmNDBkMGUtMjZmOS0z ODZiLWJiYmQtMjkzNzU1ZmIyNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2IVjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBe36yMfu/vu4GborOHnlcdjGoIVCamdWcr8xQ2C2g3NSZ8b0JNZsii AKtLRt8btb4ztSqvxly/xIer/Y/eClcGkhUrb2ybIxkN2UqzQJrkY51W69huDDTp 0IhxBvETWYnthg3CRccliJMPozFh4Vt2plWsgDg/BVDlWLoWCWNto9Fjw+indrxX Fx93S2j6gDcoqValzz2Nek5B7UVXZzJpvSCez7ts4mZ60gljA10zKgU6OG//PDy3 Lsieiptrs2bN9gHEiiGkyJNXM9UYK/yqAUWZJsnNqPb8+jlCusC+O8ix0aCeX3Wh Gx/iWur+9oTdV9z9hSb8phFo/tSCOD4= -----END CERTIFICATE-----Generated at Sun Mar 1 21:06:29 2026 by rpki-client