$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4014fbc1-d2d1-376f-b669-c371f55fd20b.roa File: 4014fbc1-d2d1-376f-b669-c371f55fd20b.roa (raw, json) Hash identifier: MBmPggSmHnIbRPK9YRc8Y5jgbeU5mazSZ4vG881ruRA= Subject key identifier: 6D:6D:83:09:0C:38:A8:A7:75:81:F4:6A:75:FA:A9:B1:09:55:7B:1B Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CB81C84CB370F638F825F9700 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4014fbc1-d2d1-376f-b669-c371f55fd20b.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 399439 IP address blocks: 216.249.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:84:cb:37:0f:63:8f:82:5f:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=c98a7b92-cc72-4239-b426-c82f93d978e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:37:22:97:54:a0:1c:69:27:c4:f6:f7:a3:b9: 91:14:6c:c4:63:d8:c9:0e:31:a2:59:04:df:cb:24: 8d:6c:dd:0b:2c:c6:6d:c5:24:65:68:73:a1:10:b5: 22:1d:80:4e:51:42:6d:83:b3:2b:18:77:5f:f1:64: b0:9c:ff:e1:a1:37:6b:d0:2a:a8:80:6c:f6:fe:4b: aa:a5:2e:c8:93:e1:65:78:97:6d:e0:df:b8:5c:b1: 3c:5b:89:6d:17:be:0c:2b:a9:c2:db:25:b9:5a:8e: 1e:55:7e:ad:43:eb:3a:ed:42:4a:0c:b9:d5:3f:6e: 82:75:60:54:8d:a2:19:ec:2a:d7:97:92:d9:60:c1: e2:87:91:86:27:57:d8:ff:8e:78:53:01:06:08:d9: da:c5:7d:d7:8c:b1:5e:85:b8:d9:d3:0f:73:4d:9e: 48:e9:8b:3f:6d:6b:c6:72:2c:94:f4:19:28:92:6d: 41:31:37:31:6a:19:29:ca:7a:c5:06:8c:3d:3a:7b: ff:05:3d:9d:04:20:5e:7a:8a:3e:89:ef:db:57:a9: d6:db:68:6f:bb:df:d4:77:77:59:5b:c7:ce:01:27: 1d:67:b6:9f:3a:bc:74:51:bc:db:94:72:23:f7:4b: ba:76:31:1d:87:8f:79:28:8e:fd:f4:93:0e:07:9a: 99:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6D:83:09:0C:38:A8:A7:75:81:F4:6A:75:FA:A9:B1:09:55:7B:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4014fbc1-d2d1-376f-b669-c371f55fd20b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:3f:91:48:e8:29:ba:4c:fa:ca:74:27:d9:23:cb:09:3b:fb: 5b:99:ae:50:a5:68:3e:55:01:0c:1a:c4:bd:07:bf:5e:96:37: bd:12:43:35:d2:64:ff:14:20:ae:3d:d0:6a:84:c8:27:d3:55: 61:9e:8d:c0:3a:21:fa:02:9a:dc:34:ee:2e:f5:af:33:0f:e6: a0:d2:9d:dc:3e:42:e2:68:5d:21:af:92:f4:1d:11:f6:f2:f8: 6c:92:13:4c:0a:a8:b2:f2:ae:95:90:20:93:9c:9c:6f:1e:22: 06:4c:cf:06:20:94:c1:74:50:ed:4d:0e:a3:82:24:e6:0a:c3: 46:c1:6b:4a:f8:12:13:39:8d:d9:5e:73:fd:30:ce:89:c6:69: ea:8e:ca:59:51:e3:3f:77:19:35:85:21:99:a7:6d:e7:93:ac: 5e:ce:fc:a3:a9:69:20:1f:83:23:da:b0:1b:a8:fb:fa:67:ed: 4a:ae:7f:21:ff:13:27:df:f5:41:f5:36:72:63:3e:b8:82:22: 04:2c:3f:6f:eb:fa:a2:35:e9:c3:56:71:4d:27:46:3d:ce:ae: 0e:d5:47:11:07:a0:a4:a0:94:f6:d1:5e:e7:d7:c9:3d:14:1d: 79:df:9d:76:f3:94:d7:d9:49:2d:20:4a:4e:dc:92:a2:23:86: 09:5d:6f:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HITLNw9jj4JflwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk Yzk4YTdiOTItY2M3Mi00MjM5LWI0MjYtYzgyZjkzZDk3OGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDcil1SgHGknxPb3o7mRFGzEY9jJDjGiWQTf yySNbN0LLMZtxSRlaHOhELUiHYBOUUJtg7MrGHdf8WSwnP/hoTdr0CqogGz2/kuq pS7Ik+FleJdt4N+4XLE8W4ltF74MK6nC2yW5Wo4eVX6tQ+s67UJKDLnVP26CdWBU jaIZ7CrXl5LZYMHih5GGJ1fY/454UwEGCNnaxX3XjLFehbjZ0w9zTZ5I6Ys/bWvG ciyU9Bkokm1BMTcxahkpynrFBow9Onv/BT2dBCBeeoo+ie/bV6nW22hvu9/Ud3dZ W8fOAScdZ7afOrx0UbzblHIj90u6djEdh495KI799JMOB5qZhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1tgwkMOKindYH0anX6qbEJVXsbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNDAxNGZiYzEtZDJkMS0z NzZmLWI2NjktYzM3MWY1NWZkMjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2PnkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGs/kUjoKbpM+sp0J9kjywk7+1uZrlClaD5VAQwaxL0Hv16WN70SQzXS ZP8UIK490GqEyCfTVWGejcA6IfoCmtw07i71rzMP5qDSndw+QuJoXSGvkvQdEfby +GySE0wKqLLyrpWQIJOcnG8eIgZMzwYglMF0UO1NDqOCJOYKw0bBa0r4EhM5jdle c/0wzonGaeqOyllR4z93GTWFIZmnbeeTrF7O/KOpaSAfgyPasBuo+/pn7UqufyH/ Eyff9UH1NnJjPriCIgQsP2/r+qI16cNWcU0nRj3Org7VRxEHoKSglPbRXufXyT0U HXnfnXbzlNfZSS0gSk7ckqIjhgldb18= -----END CERTIFICATE-----Generated at Mon Mar 2 17:41:27 2026 by rpki-client