$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/124454ca-b830-36b5-a709-5f3fb0c7f5dc.roa File: 124454ca-b830-36b5-a709-5f3fb0c7f5dc.roa (raw, json) Hash identifier: /ipRWaFdZiszAgg26B+ex1Ijn338cQi1tnqIksmnXQA= Subject key identifier: 2D:22:45:0E:32:4C:A0:62:E1:F4:04:3E:7E:49:42:12:88:82:C0:F1 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CB81C848C50BECEADDD6BAB00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/124454ca-b830-36b5-a709-5f3fb0c7f5dc.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 13576 IP address blocks: 216.249.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:84:8c:50:be:ce:ad:dd:6b:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=6061025b-9d7c-4292-8f9b-8bef89f1ad3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:23:f3:ad:2f:9c:15:1b:f8:36:82:19:1c:8f: 19:52:e1:78:69:78:f9:be:1d:a1:92:40:d9:d4:4b: 35:fa:2a:e4:b9:3b:71:11:56:81:ae:ab:66:97:79: 8c:83:fc:3b:e7:45:3b:c5:13:0f:80:bd:12:8f:3f: 57:a4:f2:4f:5b:22:3a:83:da:46:89:1a:b3:3e:af: 62:31:26:9f:53:a3:ff:1e:38:c3:fc:f6:85:5b:29: aa:da:a2:f4:15:7e:e9:3b:da:ba:b0:89:ce:bd:69: e2:75:03:c2:92:ec:59:e0:f9:0c:36:11:91:db:42: 9c:aa:db:c9:8f:f2:30:45:15:e9:d8:3d:08:7f:8c: 30:60:25:25:fe:b3:3f:46:af:ec:05:aa:cf:28:24: ab:c9:00:c9:99:86:e6:e6:d5:96:54:4b:62:1e:94: b5:26:55:43:c1:cb:48:42:c5:43:77:c6:89:62:95: e9:00:56:91:d5:b4:52:0a:50:a9:d6:53:d7:7c:e9: 45:df:a4:da:4d:75:0d:1c:fb:d0:24:0d:48:14:5b: a5:6e:99:ca:37:dd:94:e8:ed:c1:3a:26:0f:f4:8f: 13:78:1b:a0:8b:e2:1b:93:6a:cf:d0:73:26:08:14: e9:f1:f2:35:5a:b1:64:47:12:12:77:88:42:50:75: 6f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:22:45:0E:32:4C:A0:62:E1:F4:04:3E:7E:49:42:12:88:82:C0:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/124454ca-b830-36b5-a709-5f3fb0c7f5dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:0c:ae:fc:40:5c:34:9f:7e:63:e2:4b:c4:9f:ce:09:41:d7: 92:5c:d3:ed:55:38:19:68:58:81:8a:ba:d0:e5:47:01:aa:ec: b2:c5:e2:1c:f1:4f:9a:db:d4:f3:45:64:44:e3:0a:d5:d5:c2: be:81:15:da:53:1b:cc:7f:8e:77:5f:0d:bb:8b:72:bf:22:0e: bd:4f:96:ee:b7:ed:fe:65:b3:78:01:ca:60:b5:72:4f:23:5e: 65:13:c5:2b:39:74:b6:3c:f4:b0:05:c9:6f:95:c0:91:ed:c4: 28:34:06:d1:19:c5:c0:56:cf:0e:23:b1:e6:2c:ea:90:50:09: 7b:2c:64:90:42:c2:70:e5:35:de:f8:dc:0e:45:46:00:5c:32: 8b:ca:be:aa:eb:55:35:63:ea:c8:cf:f6:ab:af:f8:50:be:c2: 6f:5a:3e:93:98:a6:09:d3:e5:c1:99:aa:82:8a:d8:9b:ce:61: b3:f9:3a:c5:64:9a:ad:09:51:e1:12:60:8f:96:0b:dc:fe:6d: e4:f7:69:e2:2a:9d:1c:55:17:91:45:c2:a6:70:54:8b:34:fc: 80:25:96:a8:93:16:07:f9:bb:7d:b2:35:e1:26:8c:97:ab:a0: 65:df:e5:73:05:ef:21:5b:91:c2:73:8e:4f:3f:08:a7:aa:8c: 5c:fd:50:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HISMUL7Ord1rqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk NjA2MTAyNWItOWQ3Yy00MjkyLThmOWItOGJlZjg5ZjFhZDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviPzrS+cFRv4NoIZHI8ZUuF4aXj5vh2hkkDZ 1Es1+irkuTtxEVaBrqtml3mMg/w750U7xRMPgL0Sjz9XpPJPWyI6g9pGiRqzPq9i MSafU6P/HjjD/PaFWymq2qL0FX7pO9q6sInOvWnidQPCkuxZ4PkMNhGR20KcqtvJ j/IwRRXp2D0If4wwYCUl/rM/Rq/sBarPKCSryQDJmYbm5tWWVEtiHpS1JlVDwctI QsVDd8aJYpXpAFaR1bRSClCp1lPXfOlF36TaTXUNHPvQJA1IFFulbpnKN92U6O3B OiYP9I8TeBugi+Ibk2rP0HMmCBTp8fI1WrFkRxISd4hCUHVvlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0iRQ4yTKBi4fQEPn5JQhKIgsDxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMTI0NDU0Y2EtYjgzMC0z NmI1LWE3MDktNWYzZmIwYzdmNWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwMrvxAXDSffmPiS8SfzglB15Jc0+1VOBloWIGKutDlRwGq7LLF4hzx T5rb1PNFZETjCtXVwr6BFdpTG8x/jndfDbuLcr8iDr1Plu637f5ls3gBymC1ck8j XmUTxSs5dLY89LAFyW+VwJHtxCg0BtEZxcBWzw4jseYs6pBQCXssZJBCwnDlNd74 3A5FRgBcMovKvqrrVTVj6sjP9quv+FC+wm9aPpOYpgnT5cGZqoKK2JvOYbP5OsVk mq0JUeESYI+WC9z+beT3aeIqnRxVF5FFwqZwVIs0/IAllqiTFgf5u32yNeEmjJer oGXf5XMF7yFbkcJzjk8/CKeqjFz9UH4= -----END CERTIFICATE-----Generated at Mon Mar 2 07:16:42 2026 by rpki-client