$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d51b882c-f28a-3aa6-bded-aa026e9f7829.roa File: d51b882c-f28a-3aa6-bded-aa026e9f7829.roa (raw, json) Hash identifier: fPMC1ZZDDaH7t++exFhl5OPfMFZLLUXVD4GinB5GjNA= Subject key identifier: A2:6B:BE:5E:72:91:A3:F3:54:3C:88:E9:4D:1C:EF:94:A3:73:35:98 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CB81C847DADFF0E4E0DF39000 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d51b882c-f28a-3aa6-bded-aa026e9f7829.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 13576 IP address blocks: 216.249.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:84:7d:ad:ff:0e:4e:0d:f3:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=c485a61b-9bf6-42b8-bb9e-d84ca915ca13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:af:52:e3:f8:44:f8:7c:89:0f:8c:d2:b6:ac: 27:33:2a:52:e6:e0:0b:9d:df:81:9f:6e:ce:f8:d4: 6a:46:57:ca:a4:ef:18:97:b9:46:44:99:f1:39:f9: 48:89:d1:96:94:61:27:dc:0d:88:a5:88:51:19:51: 84:59:39:84:d0:be:0b:6e:e9:cf:6b:27:1f:a0:ac: ed:4e:51:fa:67:52:09:9d:47:69:0e:23:85:58:62: ab:99:99:f3:2e:3a:c8:b5:7f:0e:fd:de:97:ef:53: 74:35:fa:5b:01:79:75:59:49:22:10:e6:2e:e5:f3: 0a:76:d6:83:4f:ce:0e:29:8f:ed:79:23:06:3c:5a: 25:d4:4f:5e:70:f9:b7:46:85:4b:19:bb:32:9c:eb: 90:09:34:74:d7:f0:d6:60:4d:ec:99:ed:65:07:20: 35:0d:a5:c5:30:d3:4c:88:d8:db:ff:c6:43:1e:4f: 83:7e:eb:2a:50:68:84:51:c4:31:aa:4a:18:d9:b0: 0f:e6:12:01:0f:7a:3c:01:c4:fb:f7:f3:8d:c5:5c: 96:ca:53:b7:ee:df:79:13:92:cc:5c:ac:df:f8:76: 00:ea:a6:e1:36:d7:c8:95:0e:76:e9:54:a1:66:dc: 4f:2c:94:9a:8b:01:4e:e3:e0:c3:f9:5e:ac:36:fc: fd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6B:BE:5E:72:91:A3:F3:54:3C:88:E9:4D:1C:EF:94:A3:73:35:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d51b882c-f28a-3aa6-bded-aa026e9f7829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:95:d8:64:bc:f4:fe:18:aa:b9:c6:33:44:b5:0f:2d:fa:2a: 70:02:1d:d2:af:7d:c7:69:ed:f3:f1:08:4b:07:d6:3f:35:0d: 29:08:cd:28:00:06:99:a3:12:8f:c7:4c:99:ba:cd:59:1e:66: 68:c7:8b:b0:b1:ab:8d:03:e1:dd:9c:ce:0e:e4:5d:39:d4:32: a6:36:35:94:7f:ce:47:0b:96:ac:2d:c8:fb:bb:98:40:15:c3: ab:dc:c9:bc:b8:dd:17:13:85:12:ed:eb:13:3a:f3:cc:52:ec: 59:6a:ef:d8:01:16:94:21:c4:e0:9e:8e:b8:e8:e9:30:8a:eb: 92:23:11:f1:29:c9:44:5c:c9:4c:a7:8a:85:87:5e:20:34:e2: 7b:dc:dd:1f:66:b5:7d:f6:48:f9:31:6f:eb:f4:0c:8e:bc:c4: bf:f9:27:16:d5:cc:fb:cb:5d:5d:0e:97:b8:df:5c:09:49:5e: 82:dd:1c:c1:54:be:0d:14:d2:24:26:e6:63:93:82:21:6e:21: 5e:ea:57:e8:2f:a5:8d:f8:dd:e7:c6:c9:d2:04:a5:29:5c:ee: e8:a2:45:81:55:97:c3:90:c1:76:71:94:e1:58:26:5f:a9:a3: f8:32:c0:64:86:ab:56:aa:d7:0b:65:2c:c1:4c:25:43:8f:77: 5f:77:a8:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HIR9rf8OTg3zkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk YzQ4NWE2MWItOWJmNi00MmI4LWJiOWUtZDg0Y2E5MTVjYTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa9S4/hE+HyJD4zStqwnMypS5uALnd+Bn27O +NRqRlfKpO8Yl7lGRJnxOflIidGWlGEn3A2IpYhRGVGEWTmE0L4LbunPaycfoKzt TlH6Z1IJnUdpDiOFWGKrmZnzLjrItX8O/d6X71N0NfpbAXl1WUkiEOYu5fMKdtaD T84OKY/teSMGPFol1E9ecPm3RoVLGbsynOuQCTR01/DWYE3sme1lByA1DaXFMNNM iNjb/8ZDHk+DfusqUGiEUcQxqkoY2bAP5hIBD3o8AcT79/ONxVyWylO37t95E5LM XKzf+HYA6qbhNtfIlQ526VShZtxPLJSaiwFO4+DD+V6sNvz9rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJrvl5ykaPzVDyI6U0c75SjczWYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZDUxYjg4MmMtZjI4YS0z YWE2LWJkZWQtYWEwMjZlOWY3ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PnjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqV2GS89P4YqrnGM0S1Dy36KnACHdKvfcdp7fPxCEsH1j81DSkIzSgA BpmjEo/HTJm6zVkeZmjHi7Cxq40D4d2czg7kXTnUMqY2NZR/zkcLlqwtyPu7mEAV w6vcyby43RcThRLt6xM688xS7Flq79gBFpQhxOCejrjo6TCK65IjEfEpyURcyUyn ioWHXiA04nvc3R9mtX32SPkxb+v0DI68xL/5JxbVzPvLXV0Ol7jfXAlJXoLdHMFU vg0U0iQm5mOTgiFuIV7qV+gvpY343efGydIEpSlc7uiiRYFVl8OQwXZxlOFYJl+p o/gywGSGq1aq1wtlLMFMJUOPd193qIA= -----END CERTIFICATE-----Generated at Mon Mar 2 14:08:29 2026 by rpki-client