$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f22a97e2-6b52-3092-9e30-da9958902a1f.roa File: f22a97e2-6b52-3092-9e30-da9958902a1f.roa (raw, json) Hash identifier: KqEFVgKEEaIU7zkiQlWFKDIikLqe40emkjIQkkQq4Sk= Subject key identifier: A8:8A:28:16:3E:0C:70:50:53:EE:AF:7F:B6:63:51:D3:24:85:E3:34 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CB81C84DC063186865184CE00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f22a97e2-6b52-3092-9e30-da9958902a1f.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 13576 IP address blocks: 216.249.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:84:dc:06:31:86:86:51:84:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=66dcd9d4-5fd5-416c-b132-1d1186080b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:90:97:36:12:13:46:5b:4e:99:f4:99:91:a3: 66:6b:65:6a:ca:58:48:85:c2:ba:f1:11:62:0a:5e: 52:cc:e5:2b:2d:80:25:79:37:21:48:57:79:76:82: 87:ac:8d:8a:83:58:59:72:b6:7d:7b:cc:52:f7:42: 3e:91:49:9f:70:59:1d:8f:8a:6a:e0:a1:f8:b4:47: 3d:4a:ed:6c:a5:54:2b:ae:0f:79:04:92:5b:c7:47: 85:37:86:d6:b7:e8:6c:41:6a:79:54:a9:76:ef:3d: 98:6a:9d:5a:f3:00:f3:6e:5c:6d:25:e3:ad:2f:03: 96:13:9e:33:9c:f0:f9:3d:84:44:bd:ce:01:3a:c3: 85:99:f9:93:18:5e:86:b6:aa:18:f0:e6:47:fc:7e: 7f:aa:61:9d:34:0d:4d:36:9c:07:92:bc:c9:d5:4b: a4:d0:45:ef:31:61:01:e2:f4:8c:cb:a1:b7:3e:c4: 24:5d:2d:fb:d8:79:e4:8d:fc:f7:28:86:24:4e:7b: b7:97:85:9d:0b:21:bf:3f:90:e5:82:33:10:5b:b4: 99:2b:de:3d:0f:85:93:ef:55:6b:c7:bf:f1:4b:39: ee:b7:3f:9a:bb:88:7d:f3:a4:e2:9c:ff:5b:1e:d8: ce:bf:b7:83:0f:2f:ee:38:9f:d7:10:bc:ec:8a:f1: 67:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8A:28:16:3E:0C:70:50:53:EE:AF:7F:B6:63:51:D3:24:85:E3:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f22a97e2-6b52-3092-9e30-da9958902a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:c1:10:dd:64:74:c1:d5:5c:96:31:14:d4:4f:d1:0a:05:ea: c2:ca:70:22:e9:23:e8:c6:16:65:f1:80:92:53:73:04:75:f7: 68:56:b3:ec:dc:de:00:e3:8f:6c:d0:90:ed:bc:b5:85:26:6f: 59:a1:cd:b2:e1:7b:1c:22:9d:11:fc:d6:6a:6f:4d:47:bd:b8: 62:50:c7:6a:1b:32:4c:ec:da:24:d9:07:83:6b:ee:75:b9:fe: 9e:15:86:73:13:6b:09:2f:70:e3:a5:de:e3:0f:a5:59:cc:57: 8a:41:2e:d5:9d:00:71:60:96:b7:b7:70:5f:dd:67:d8:ee:f0: ac:dd:cc:dc:89:17:3e:d2:b2:16:e2:b1:c5:86:2e:a4:7f:46: 90:b0:64:68:23:88:70:8a:b2:52:f9:1b:58:d9:f8:ab:8f:e9: 0e:db:a2:9b:1b:73:74:5e:21:34:37:9d:d0:8a:07:a4:61:cc: 71:ac:58:ed:a9:8a:bb:e6:2e:81:ff:e7:45:5c:66:ac:76:41: 9a:2d:9f:14:b1:84:a5:46:95:02:bf:a9:e5:76:2f:4f:19:45: f5:f1:89:d3:37:5f:37:a7:2c:ee:4f:6d:d2:3f:ef:72:b1:98: d1:21:62:17:a2:ea:44:b9:8c:bd:c8:f6:13:f7:db:f0:45:34: 6e:93:46:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HITcBjGGhlGEzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk NjZkY2Q5ZDQtNWZkNS00MTZjLWIxMzItMWQxMTg2MDgwYjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZCXNhITRltOmfSZkaNma2VqylhIhcK68RFi Cl5SzOUrLYAleTchSFd5doKHrI2Kg1hZcrZ9e8xS90I+kUmfcFkdj4pq4KH4tEc9 Su1spVQrrg95BJJbx0eFN4bWt+hsQWp5VKl27z2Yap1a8wDzblxtJeOtLwOWE54z nPD5PYREvc4BOsOFmfmTGF6GtqoY8OZH/H5/qmGdNA1NNpwHkrzJ1Uuk0EXvMWEB 4vSMy6G3PsQkXS372Hnkjfz3KIYkTnu3l4WdCyG/P5DlgjMQW7SZK949D4WT71Vr x7/xSznutz+au4h986TinP9bHtjOv7eDDy/uOJ/XELzsivFnCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiKKBY+DHBQU+6vf7ZjUdMkheM0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZjIyYTk3ZTItNmI1Mi0z MDkyLTllMzAtZGE5OTU4OTAyYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2PnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPBEN1kdMHVXJYxFNRP0QoF6sLKcCLpI+jGFmXxgJJTcwR192hWs+zc 3gDjj2zQkO28tYUmb1mhzbLhexwinRH81mpvTUe9uGJQx2obMkzs2iTZB4Nr7nW5 /p4VhnMTawkvcOOl3uMPpVnMV4pBLtWdAHFglre3cF/dZ9ju8KzdzNyJFz7Sshbi scWGLqR/RpCwZGgjiHCKslL5G1jZ+KuP6Q7bopsbc3ReITQ3ndCKB6RhzHGsWO2p irvmLoH/50VcZqx2QZotnxSxhKVGlQK/qeV2L08ZRfXxidM3XzenLO5PbdI/73Kx mNEhYhei6kS5jL3I9hP32/BFNG6TRh8= -----END CERTIFICATE-----Generated at Mon Mar 2 08:08:20 2026 by rpki-client