$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cb578ea6-9895-3de3-8e51-86848fbdb755.roa File: cb578ea6-9895-3de3-8e51-86848fbdb755.roa (raw, json) Hash identifier: Z96Flm1PmJhNPvR9XNMj3e9Zwzzo5FxgrhWftLtGEGQ= Subject key identifier: AC:C7:79:E4:03:6F:16:D7:8F:EF:D2:53:BA:28:00:0D:AF:7A:70:E2 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CAE572C1A1F06B4AB21661880 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cb578ea6-9895-3de3-8e51-86848fbdb755.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 13576 IP address blocks: 216.249.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:2c:1a:1f:06:b4:ab:21:66:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=029efbb5-4861-4791-90a4-1f538fea8ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:53:b6:1d:2d:de:00:20:41:ec:d1:5c:0a:01: ca:8e:2a:53:5c:c2:a3:39:1e:cb:84:35:ec:60:5d: 03:bc:04:ec:96:86:01:04:53:fe:11:3d:50:ba:aa: 4a:03:00:26:ee:6d:70:73:3b:cf:db:62:80:34:21: b8:a8:e7:44:26:cb:28:b7:e0:98:21:e9:d5:da:76: fd:b9:14:3f:91:63:91:c0:d5:2a:b0:d5:32:85:4d: 45:2c:96:5f:b8:9a:b3:e7:7f:ef:8b:2d:06:9b:26: f9:3c:e4:fa:a7:34:92:d1:5b:a8:7f:b4:01:ef:dd: fc:80:26:65:0f:b6:d7:2a:7c:89:8e:30:7a:71:41: 59:3c:5e:d3:4d:d0:ea:f1:39:8f:05:1e:08:72:61: 31:32:48:3c:62:66:08:18:38:27:30:8c:1e:45:7d: 37:38:35:5f:73:2a:2e:7e:c0:36:1e:c9:7d:80:d4: 81:87:94:e7:c2:8a:ea:cd:04:e8:fe:b2:f8:64:96: c1:5c:28:75:35:26:a6:4a:08:bd:8c:a7:56:cc:e0: b8:c8:b2:3b:bd:b3:a5:1c:07:d0:ee:c7:25:8c:21: 5c:dc:cf:97:c8:c9:bb:20:6c:48:fd:1b:ed:f7:44: 31:c3:1a:e8:ab:43:64:ff:dd:54:ff:78:77:08:f7: 09:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C7:79:E4:03:6F:16:D7:8F:EF:D2:53:BA:28:00:0D:AF:7A:70:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cb578ea6-9895-3de3-8e51-86848fbdb755.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:77:b6:f9:2d:9c:de:5c:aa:d5:ee:f2:d0:9c:24:47:62:f7: 22:98:66:da:f9:d2:23:a9:88:3d:e7:87:c7:7a:20:6a:ea:c1: c5:e9:f1:71:6c:be:8a:bc:28:b3:94:bb:fc:34:59:50:bc:7d: 41:ce:ea:01:c6:52:04:bc:86:17:d7:d5:1d:56:c0:1d:9f:a4: ba:a1:13:0a:a3:4c:40:48:44:1d:2d:d9:81:89:ef:de:da:2b: b5:9b:08:ea:76:f5:12:13:19:f0:3e:38:6d:a3:24:48:f7:89: 06:84:ad:a4:dc:66:91:5e:9e:8e:8c:4e:12:9d:f7:df:c2:2e: e4:07:d8:82:9a:8a:f9:ef:97:ce:5e:b3:02:0d:1d:f1:d3:37: 92:f0:50:48:81:f3:e9:65:80:16:15:5e:21:a5:22:2c:a2:9e: 1a:ab:52:b8:46:02:e4:c4:c5:ab:a7:16:9f:17:ec:a2:ee:cd: f7:a8:71:14:fa:f9:a7:4d:74:e2:21:b3:f5:ef:f1:bf:d8:3c: c1:d5:f1:d2:ac:3c:6d:90:9a:8f:cb:4b:fd:75:a5:ef:74:d5: f7:61:f7:44:90:f9:76:e4:7c:7d:2c:77:cd:b3:4f:09:ec:29: 8b:3d:a5:0b:2b:e3:68:ad:4f:db:a7:2b:a7:44:1f:4a:5e:9b: f2:02:64:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVywaHwa0qyFmGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MDI5ZWZiYjUtNDg2MS00NzkxLTkwYTQtMWY1MzhmZWE4YWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFO2HS3eACBB7NFcCgHKjipTXMKjOR7LhDXs YF0DvATsloYBBFP+ET1QuqpKAwAm7m1wczvP22KANCG4qOdEJssot+CYIenV2nb9 uRQ/kWORwNUqsNUyhU1FLJZfuJqz53/viy0Gmyb5POT6pzSS0Vuof7QB7938gCZl D7bXKnyJjjB6cUFZPF7TTdDq8TmPBR4IcmExMkg8YmYIGDgnMIweRX03ODVfcyou fsA2Hsl9gNSBh5TnworqzQTo/rL4ZJbBXCh1NSamSgi9jKdWzOC4yLI7vbOlHAfQ 7scljCFc3M+XyMm7IGxI/Rvt90Qxwxroq0Nk/91U/3h3CPcJaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzHeeQDbxbXj+/SU7ooAA2venDiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvY2I1NzhlYTYtOTg5NS0z ZGUzLThlNTEtODY4NDhmYmRiNzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PnFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD53tvktnN5cqtXu8tCcJEdi9yKYZtr50iOpiD3nh8d6IGrqwcXp8XFs voq8KLOUu/w0WVC8fUHO6gHGUgS8hhfX1R1WwB2fpLqhEwqjTEBIRB0t2YGJ797a K7WbCOp29RITGfA+OG2jJEj3iQaEraTcZpFeno6MThKd99/CLuQH2IKaivnvl85e swINHfHTN5LwUEiB8+llgBYVXiGlIiyinhqrUrhGAuTExaunFp8X7KLuzfeocRT6 +adNdOIhs/Xv8b/YPMHV8dKsPG2Qmo/LS/11pe901fdh90SQ+XbkfH0sd82zTwns KYs9pQsr42itT9unK6dEH0pem/ICZIs= -----END CERTIFICATE-----Generated at Mon Mar 2 09:33:51 2026 by rpki-client