$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/cbb5f61a-8980-3ead-b1f0-0ab0e50a1d76.roa File: cbb5f61a-8980-3ead-b1f0-0ab0e50a1d76.roa (raw, json) Hash identifier: h23vdBUsF6TfuXoyv6rvNh9X2ZRq1EUw/W/EsHebDdY= Subject key identifier: 3A:6F:00:4D:EB:FA:C3:63:EA:9C:75:0D:64:86:FF:5B:E5:C6:EC:18 Certificate issuer: /CN=b98f151e-4679-4527-a2b7-2b1bf9c28738 Certificate serial: 010D0C9F4328584D5024F19D431791590729F420 Authority key identifier: 7E:AD:4B:F8:CB:87:EB:55:CF:15:68:C1:EB:E5:C9:04:3C:2D:F9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/cbb5f61a-8980-3ead-b1f0-0ab0e50a1d76.roa Signing time: Sat 28 Mar 2026 01:00:31 +0000 ROA not before: Sat 28 Mar 2026 01:00:31 +0000 ROA not after: Fri 26 Jun 2026 01:00:31 +0000 asID: 16509 IP address blocks: 173.240.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/b98f151e-4679-4527-a2b7-2b1bf9c28738.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/b98f151e-4679-4527-a2b7-2b1bf9c28738.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:50:24:f1:9d:43:17:91:59:07:29:f4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b98f151e-4679-4527-a2b7-2b1bf9c28738 Validity Not Before: Mar 28 01:00:31 2026 GMT Not After : Jun 26 01:00:31 2026 GMT Subject: CN=b7a03611-3169-494c-a3f9-1049c965deb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8e:07:29:75:21:7b:e1:72:a4:d0:91:4b:71: 0e:9a:cf:5f:5a:d1:ed:5d:dc:7a:cd:0a:ba:b8:40: 4b:20:a6:e8:8a:99:c6:37:01:db:94:03:d3:6a:35: 44:cc:3c:3b:92:21:d2:3a:ac:d2:2a:19:0e:18:7d: 64:94:27:89:23:3a:ca:60:c0:55:be:66:4d:91:09: f2:3c:ce:10:ce:c0:66:dd:7f:11:1b:e0:11:f5:79: 13:54:a3:b4:0b:a8:fd:a9:bf:3e:3e:43:7d:a5:4a: 67:ac:5b:58:6c:91:a5:0e:79:02:48:0f:b1:9f:f3: 4a:90:08:74:a7:7f:45:ad:05:45:bf:a2:2f:23:99: 64:b7:22:85:9b:6e:d2:19:07:e4:95:b1:bd:05:71: b4:94:bd:90:ed:5f:b2:e6:2c:92:23:c7:f9:c2:ef: c6:cc:f4:49:d6:81:05:dd:7c:9b:16:ab:0d:bc:ec: 66:94:72:b1:20:6a:c9:99:b0:e8:d9:ce:16:2e:a0: 51:75:ca:40:f1:b3:73:a2:1d:44:91:85:f1:39:37: b3:a2:60:9b:75:07:14:e6:00:ce:67:0a:0f:c4:ee: 74:3d:c7:67:d4:62:7c:26:a1:f3:7d:49:f1:8b:9a: f0:fd:b2:5c:87:ed:da:55:39:74:0f:22:49:0d:50: 3a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6F:00:4D:EB:FA:C3:63:EA:9C:75:0D:64:86:FF:5B:E5:C6:EC:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/cbb5f61a-8980-3ead-b1f0-0ab0e50a1d76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/b98f151e-4679-4527-a2b7-2b1bf9c28738.crl X509v3 Authority Key Identifier: keyid:7E:AD:4B:F8:CB:87:EB:55:CF:15:68:C1:EB:E5:C9:04:3C:2D:F9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738.cer sbgp-ipAddrBlock: critical IPv4: 173.240.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:21:df:d2:f5:fa:ca:3b:b1:0a:59:6a:86:3d:65:c1:60:9b: 4f:59:23:fd:24:30:88:51:04:6d:ee:12:b1:1a:51:5c:00:d0: 6e:7f:35:9d:29:00:e4:9a:bc:41:42:05:a3:67:66:b4:69:a6: 20:70:a7:9e:3d:6c:32:ea:69:dc:49:bc:25:76:f1:a3:48:62: d7:8c:27:ec:bf:13:cb:da:23:63:91:1a:22:82:2c:af:61:25: 35:ef:a0:e1:8d:17:0e:07:28:46:c0:88:47:da:82:c0:f8:1f: cb:5f:03:98:a3:71:c6:ee:bd:98:7a:f2:23:99:ca:e4:48:83: 7d:23:5d:8f:cf:d6:c6:7e:d4:b8:13:47:33:02:97:bf:d3:91: 95:dd:9c:d6:85:57:2c:93:55:c5:09:38:f0:0f:81:a2:bb:7c: 5b:7a:f7:b3:25:e2:35:ea:a0:18:57:12:24:a1:ff:99:da:02: 3f:0a:eb:ea:0a:62:dc:77:03:49:3c:e3:63:e6:db:c1:9e:39: fd:a3:97:5e:aa:a6:22:68:6d:9d:e5:3d:1e:19:b2:8c:3f:78: 21:b9:13:9d:34:d2:e9:8d:69:09:bf:89:e8:88:ee:89:6d:c8: ba:5f:4b:26:96:90:dc:6d:a9:e1:c2:26:01:86:7b:e6:bb:1a: 40:ce:92:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1QJPGdQxeRWQcp9CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4ZjE1MWUtNDY3OS00NTI3LWEyYjctMmIxYmY5YzI4 NzM4MB4XDTI2MDMyODAxMDAzMVoXDTI2MDYyNjAxMDAzMVowLzEtMCsGA1UEAxMk YjdhMDM2MTEtMzE2OS00OTRjLWEzZjktMTA0OWM5NjVkZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI4HKXUhe+FypNCRS3EOms9fWtHtXdx6zQq6 uEBLIKboipnGNwHblAPTajVEzDw7kiHSOqzSKhkOGH1klCeJIzrKYMBVvmZNkQny PM4QzsBm3X8RG+AR9XkTVKO0C6j9qb8+PkN9pUpnrFtYbJGlDnkCSA+xn/NKkAh0 p39FrQVFv6IvI5lktyKFm27SGQfklbG9BXG0lL2Q7V+y5iySI8f5wu/GzPRJ1oEF 3XybFqsNvOxmlHKxIGrJmbDo2c4WLqBRdcpA8bNzoh1EkYXxOTezomCbdQcU5gDO ZwoPxO50Pcdn1GJ8JqHzfUnxi5rw/bJch+3aVTl0DyJJDVA6xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpvAE3r+sNj6px1DWSG/1vlxuwYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iOThm MTUxZS00Njc5LTQ1MjctYTJiNy0yYjFiZjljMjg3MzgvY2JiNWY2MWEtODk4MC0z ZWFkLWIxZjAtMGFiMGU1MGExZDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjk4ZjE1MWUtNDY3OS00NTI3LWEy YjctMmIxYmY5YzI4NzM4L2I5OGYxNTFlLTQ2NzktNDUyNy1hMmI3LTJiMWJmOWMy ODczOC5jcmwwHwYDVR0jBBgwFoAUfq1L+MuH61XPFWjB6+XJBDwt+Y8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iOThmMTUxZS00Njc5LTQ1MjctYTJiNy0yYjFi ZjljMjg3MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfDZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMh39L1+so7sQpZaoY9ZcFgm09ZI/0kMIhRBG3uErEaUVwA0G5/NZ0p AOSavEFCBaNnZrRppiBwp549bDLqadxJvCV28aNIYteMJ+y/E8vaI2ORGiKCLK9h JTXvoOGNFw4HKEbAiEfagsD4H8tfA5ijccbuvZh68iOZyuRIg30jXY/P1sZ+1LgT RzMCl7/TkZXdnNaFVyyTVcUJOPAPgaK7fFt697Ml4jXqoBhXEiSh/5naAj8K6+oK Ytx3A0k842Pm28GeOf2jl16qpiJobZ3lPR4Zsow/eCG5E5000umNaQm/ieiI7olt yLpfSyaWkNxtqeHCJgGGe+a7GkDOkr0= -----END CERTIFICATE-----Generated at Fri Apr 17 12:33:24 2026 by rpki-client