$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/d3bbfb8c-4bb3-354c-8e1b-fc8eee4fc3d2.roa File: d3bbfb8c-4bb3-354c-8e1b-fc8eee4fc3d2.roa (raw, json) Hash identifier: ckvAPCqTxHN3lGVmn3qWaucIUjqYeeI0mEhMXWh2Sa8= Subject key identifier: 30:C6:D0:61:88:66:B1:D7:E9:E1:A0:15:4A:38:89:F0:AA:3F:03:D0 Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42 Certificate serial: 010D0C9F4328584D746FCFEFB455CDE8539CEA80 Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/d3bbfb8c-4bb3-354c-8e1b-fc8eee4fc3d2.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 376 IP address blocks: 132.213.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:cf:ef:b4:55:cd:e8:53:9c:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=47da040e-6976-4e36-95f9-2de3ba47f757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dd:b4:bb:79:50:d2:73:a4:98:db:63:40:9c: 5d:40:e7:d7:a2:f3:68:e4:69:60:f1:d0:05:b4:b8: 5e:5a:3d:e7:fb:42:6b:e0:8d:2b:7a:94:b2:47:74: 70:86:08:4d:d6:8b:a9:b4:e1:df:ac:9b:2c:9b:6c: ba:bb:02:dd:e2:e8:98:cc:b8:82:30:07:c3:e5:ad: e7:4c:8e:79:d4:2c:f0:d0:9e:e6:fe:52:17:f3:f0: b2:1e:9f:55:b2:24:de:46:81:47:5f:85:d5:1d:e8: 88:22:15:d1:8c:c3:ea:26:b9:04:21:9c:a8:9f:86: c1:b3:72:5f:0a:16:76:d4:ac:71:a0:15:dd:27:b2: 1c:59:7d:d2:81:3d:01:fd:09:69:2b:cf:14:f2:f6: 07:ac:eb:ae:f0:a2:72:65:3e:68:40:c7:9f:77:ca: 8d:69:e4:b7:69:6e:86:93:a5:be:dd:f4:de:09:30: 0e:0f:da:57:13:9b:0c:05:ab:cf:c6:fe:fa:51:b4: 5f:36:d6:fb:84:64:0d:ff:46:55:f2:0f:26:a3:e5: 61:7c:60:55:32:46:1f:35:47:99:b8:0c:14:58:e8: 55:09:64:b8:fe:db:cb:ba:c8:da:43:69:3d:85:81: 48:36:56:ad:1d:18:49:29:d1:27:b3:cc:79:cc:c5: 2d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C6:D0:61:88:66:B1:D7:E9:E1:A0:15:4A:38:89:F0:AA:3F:03:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/d3bbfb8c-4bb3-354c-8e1b-fc8eee4fc3d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl X509v3 Authority Key Identifier: keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer sbgp-ipAddrBlock: critical IPv4: 132.213.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:02:c0:a7:4f:0d:eb:99:59:e6:a2:42:17:80:d6:21:46:c0: 7f:26:7d:5e:76:cd:18:d8:d4:a4:87:1a:00:e3:7f:a5:f8:95: 27:e0:9a:1a:68:1b:4c:21:be:0a:cf:6a:fc:27:84:50:3a:50: 2a:64:91:ec:19:66:df:0c:c7:dc:af:fa:a0:4e:69:81:d1:db: ee:21:36:1b:e9:95:2e:62:f5:bd:e1:64:97:f8:44:9d:20:54: e5:01:ab:60:fe:ad:ba:4a:1e:ae:b7:36:3f:0d:f8:d4:1a:18: b7:8d:8c:46:b3:19:63:b9:55:d6:ba:ce:e1:35:60:45:a3:df: a5:88:be:9f:85:08:73:87:0e:ad:b3:e6:3f:68:00:c0:c2:41: 72:1b:a7:35:83:1c:ab:3a:ee:da:20:09:64:21:6a:c2:15:ef: 29:58:35:87:34:19:da:87:8a:c4:26:ba:8f:9f:ac:ae:91:d0: 31:4b:94:e8:ad:ea:65:3c:1f:8a:d0:8a:e0:45:7e:57:94:44: 8a:18:36:d2:2b:2a:aa:fc:11:40:1b:d7:21:9c:21:11:59:82: 09:e9:c5:de:3e:ad:43:f9:14:27:09:5d:67:cd:b6:10:96:04: 22:44:c4:d0:f9:e5:f9:6c:e4:a6:fc:0c:35:ab:98:09:7e:57: 5c:f5:af:0f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE10b8/vtFXN6FOc6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdlYzQ0N2EtOTE3MC00ZTExLWJhODAtMWFhY2E3NmZj ZDQyMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk NDdkYTA0MGUtNjk3Ni00ZTM2LTk1ZjktMmRlM2JhNDdmNzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN20u3lQ0nOkmNtjQJxdQOfXovNo5Glg8dAF tLheWj3n+0Jr4I0repSyR3RwhghN1ouptOHfrJssm2y6uwLd4uiYzLiCMAfD5a3n TI551Czw0J7m/lIX8/CyHp9VsiTeRoFHX4XVHeiIIhXRjMPqJrkEIZyon4bBs3Jf ChZ21KxxoBXdJ7IcWX3SgT0B/QlpK88U8vYHrOuu8KJyZT5oQMefd8qNaeS3aW6G k6W+3fTeCTAOD9pXE5sMBavPxv76UbRfNtb7hGQN/0ZV8g8mo+VhfGBVMkYfNUeZ uAwUWOhVCWS4/tvLusjaQ2k9hYFINlatHRhJKdEns8x5zMUtuQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDDG0GGIZrHX6eGgFUo4ifCqPwPQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82N2Vj NDQ3YS05MTcwLTRlMTEtYmE4MC0xYWFjYTc2ZmNkNDIvZDNiYmZiOGMtNGJiMy0z NTRjLThlMWItZmM4ZWVlNGZjM2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjdlYzQ0N2EtOTE3MC00ZTExLWJh ODAtMWFhY2E3NmZjZDQyLzY3ZWM0NDdhLTkxNzAtNGUxMS1iYTgwLTFhYWNhNzZm Y2Q0Mi5jcmwwHwYDVR0jBBgwFoAU1/68eoDiDVphTAxi6PSMkDn+TL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82N2VjNDQ3YS05MTcwLTRlMTEtYmE4MC0xYWFj YTc2ZmNkNDIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhNUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAWgLAp08N65lZ5qJCF4DWIUbAfyZ9XnbNGNjUpIcaAON/pfiVJ+CaGmgb TCG+Cs9q/CeEUDpQKmSR7Blm3wzH3K/6oE5pgdHb7iE2G+mVLmL1veFkl/hEnSBU 5QGrYP6tukoerrc2Pw341BoYt42MRrMZY7lV1rrO4TVgRaPfpYi+n4UIc4cOrbPm P2gAwMJBchunNYMcqzru2iAJZCFqwhXvKVg1hzQZ2oeKxCa6j5+srpHQMUuU6K3q ZTwfitCK4EV+V5REihg20isqqvwRQBvXIZwhEVmCCenF3j6tQ/kUJwldZ822EJYE IkTE0Pnl+WzkpvwMNauYCX5XXPWvDw== -----END CERTIFICATE-----Generated at Fri Apr 17 12:31:55 2026 by rpki-client