$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3cffd828-cce9-3c73-a852-0976eaacdfbb.roa File: 3cffd828-cce9-3c73-a852-0976eaacdfbb.roa (raw, json) Hash identifier: EchVeX/xlmL8+7U5i6BYjpUXEAtf2dK5UkxfbD+c4EM= Subject key identifier: 6A:DB:CE:AC:58:07:69:8C:E4:60:7B:3E:A0:B1:3D:E9:1E:67:E6:FF Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CB551E7932DB79D61BA98CE40 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3cffd828-cce9-3c73-a852-0976eaacdfbb.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 13576 IP address blocks: 216.106.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:e7:93:2d:b7:9d:61:ba:98:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=a22e37f9-2d57-40eb-80a1-0241797ca099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e9:e9:e3:ab:c8:6a:b5:e2:d3:39:e3:f3:b7: 8a:e8:9c:71:02:1d:f5:36:58:a3:9f:04:cd:5a:86: c4:00:e8:d5:35:bb:42:93:c1:67:8e:a9:e2:da:a6: 0b:7f:07:b3:f2:b2:26:32:95:97:51:4f:b1:72:da: 25:3f:ab:7d:e5:64:84:38:46:5d:36:61:49:d7:bb: e8:92:4e:1f:7a:fa:19:fd:c0:f9:be:84:ad:40:e4: e3:3c:a2:44:ad:ae:f0:98:b7:0f:1c:06:cd:fa:aa: 31:df:1a:45:e4:2e:95:50:53:d2:79:c1:0e:02:ad: 5c:61:98:9e:15:24:19:df:f7:2c:69:de:0b:5c:7e: 21:72:a1:df:a6:18:de:fc:ff:9a:3f:a9:de:31:65: 2d:67:19:09:e9:b2:a9:00:d0:47:22:a9:dc:be:7f: 09:fa:d2:ad:8e:d5:32:3d:9f:75:7a:30:95:b6:0d: 1b:5d:0e:74:57:54:0a:67:a3:49:7f:07:8d:50:29: 12:be:76:f3:64:85:53:a7:ff:28:e8:e3:27:bf:ac: 31:f8:b4:77:bc:fb:c9:1b:03:af:63:1d:51:ef:5a: 43:c7:d7:10:77:9a:36:6b:34:2a:8a:72:02:40:1e: 6b:e2:5b:70:76:9a:15:2c:81:86:04:32:d4:8e:d5: bb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DB:CE:AC:58:07:69:8C:E4:60:7B:3E:A0:B1:3D:E9:1E:67:E6:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3cffd828-cce9-3c73-a852-0976eaacdfbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:68:cb:3a:c8:69:0d:50:8c:f6:2f:c7:a4:0f:8b:a7:cd:5d: 61:8e:9b:9a:8b:ed:fa:e7:8d:5a:4f:32:f9:4f:e8:85:42:ba: 93:d4:5b:ca:8d:8e:a8:2a:a4:e1:53:e1:de:f5:60:b6:58:c1: ae:12:e0:17:2f:4a:b6:e0:ac:c3:68:b9:47:7e:6d:d6:38:e4: 2f:96:cd:f5:8f:21:d7:47:64:db:81:b4:42:54:97:40:8b:97: 49:82:26:93:3c:e1:fb:17:fe:69:82:02:55:db:64:95:55:43: 88:9f:50:4f:92:a3:f7:6f:60:0d:4e:3d:e3:a9:09:00:d4:f6: 25:13:80:25:40:ab:e0:ad:8e:fa:42:8b:35:ff:21:30:8d:5e: 2d:bb:31:b9:63:7f:f3:02:c8:e0:6e:e8:20:e8:6f:80:63:29: cd:9d:43:aa:21:ba:51:54:b8:cf:6e:85:f2:5e:e0:ba:b1:9a: af:d2:0c:56:aa:54:56:33:ce:d9:60:4c:1d:f7:ab:b2:1b:49: 8b:50:ef:9f:85:9a:08:d6:13:d7:fd:39:f8:14:a4:fb:79:93: 55:56:78:6b:71:a8:68:0c:4d:2c:ae:ad:a6:54:77:37:81:8d: e2:ce:1d:35:b0:3e:a1:29:b9:a4:41:8e:41:83:db:67:92:b2: b3:33:70:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UeeTLbedYbqYzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk YTIyZTM3ZjktMmQ1Ny00MGViLTgwYTEtMDI0MTc5N2NhMDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgenp46vIarXi0znj87eK6JxxAh31NlijnwTN WobEAOjVNbtCk8Fnjqni2qYLfwez8rImMpWXUU+xctolP6t95WSEOEZdNmFJ17vo kk4fevoZ/cD5voStQOTjPKJEra7wmLcPHAbN+qox3xpF5C6VUFPSecEOAq1cYZie FSQZ3/csad4LXH4hcqHfphje/P+aP6neMWUtZxkJ6bKpANBHIqncvn8J+tKtjtUy PZ91ejCVtg0bXQ50V1QKZ6NJfweNUCkSvnbzZIVTp/8o6OMnv6wx+LR3vPvJGwOv Yx1R71pDx9cQd5o2azQqinICQB5r4ltwdpoVLIGGBDLUjtW7wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrbzqxYB2mM5GB7PqCxPekeZ+b/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvM2NmZmQ4MjgtY2NlOS0z YzczLWE4NTItMDk3NmVhYWNkZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GroMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhoyzrIaQ1QjPYvx6QPi6fNXWGOm5qL7frnjVpPMvlP6IVCupPUW8qN jqgqpOFT4d71YLZYwa4S4BcvSrbgrMNouUd+bdY45C+WzfWPIddHZNuBtEJUl0CL l0mCJpM84fsX/mmCAlXbZJVVQ4ifUE+So/dvYA1OPeOpCQDU9iUTgCVAq+CtjvpC izX/ITCNXi27Mbljf/MCyOBu6CDob4BjKc2dQ6ohulFUuM9uhfJe4Lqxmq/SDFaq VFYzztlgTB33q7IbSYtQ75+FmgjWE9f9OfgUpPt5k1VWeGtxqGgMTSyuraZUdzeB jeLOHTWwPqEpuaRBjkGD22eSsrMzcLs= -----END CERTIFICATE-----Generated at Mon Mar 2 07:15:41 2026 by rpki-client