$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b3c803fa-85ae-3863-8071-433b48f6cb42.roa File: b3c803fa-85ae-3863-8071-433b48f6cb42.roa (raw, json) Hash identifier: VpolzGnlQ6zkx4wScBXOdfG+GfVTy5RQnvXM2zFQfC4= Subject key identifier: E2:E1:B1:71:93:C4:31:67:83:97:8A:20:33:79:B3:DA:12:49:6F:70 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D60E4FA379A58E27DC8508880 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b3c803fa-85ae-3863-8071-433b48f6cb42.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 21866 IP address blocks: 216.219.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e4:fa:37:9a:58:e2:7d:c8:50:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=68645fdf-c22c-4e41-aca5-a8dc7162379f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ac:2c:4a:4c:4e:ea:65:98:0a:8e:28:12:32: 9e:13:17:77:34:ad:c0:9c:97:6e:eb:89:de:96:46: 61:79:38:f0:dd:2b:a3:18:ef:cd:30:95:a1:71:de: da:15:f0:d3:63:2d:41:ff:29:37:b3:76:8d:ff:34: db:da:fb:1f:b5:6c:59:e3:1f:80:c6:0a:c5:c8:d5: 54:85:df:15:ea:27:67:ac:3c:3d:cf:ed:37:d3:60: 8a:5c:6d:4b:3f:6f:36:8c:2e:76:af:44:70:58:53: 24:90:48:80:a4:1a:fc:15:8a:73:b9:fd:23:f3:4f: 59:80:f4:7d:a5:b4:fb:f5:de:81:db:c1:bf:8a:e7: c8:0d:3f:fb:f6:91:bb:ee:78:4d:13:6a:8f:03:52: ac:93:04:96:72:ce:9c:bc:5c:63:8d:ba:70:ae:97: 89:6b:40:96:2a:22:22:4c:cf:8c:ea:bc:21:45:0f: 77:93:ed:a0:c1:a5:54:1c:30:d6:06:4e:bb:e8:54: c7:49:45:89:72:32:48:ed:1c:1e:d4:e3:a0:d8:c4: d2:37:9a:2d:db:11:75:5b:35:14:e8:64:18:bf:00: 67:91:e5:26:2d:7e:e9:95:41:0c:76:98:a7:84:d1: 8c:c9:a2:a5:0f:af:e5:00:50:c8:0b:99:2e:39:00: ef:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E1:B1:71:93:C4:31:67:83:97:8A:20:33:79:B3:DA:12:49:6F:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b3c803fa-85ae-3863-8071-433b48f6cb42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 216.219.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:65:49:4f:9a:d8:1c:58:f8:b8:d6:6a:7d:2d:59:8b:d6:46: 7f:c7:ec:b6:0b:68:64:c8:af:34:11:77:59:a3:68:35:1a:41: e0:94:7c:11:ed:ea:7a:10:7a:ed:6b:fe:62:35:40:83:51:72: f6:1c:6f:e8:45:ce:12:03:34:6f:a4:a5:d0:46:5f:9c:fe:57: bf:e0:21:bd:60:63:4e:52:94:a7:83:be:7a:a2:d6:34:29:71: 36:40:90:6b:5c:9b:a3:a4:45:3a:2d:c1:18:31:d0:c4:e3:99: bc:c4:59:c8:6e:3f:64:ae:66:bb:92:93:eb:f8:0e:84:86:f4: 27:ec:53:ac:f4:0d:ef:9d:ce:6f:92:95:06:f1:d1:86:09:98: 8a:58:7d:cf:c7:c8:9d:80:05:22:76:3c:ec:41:c6:fd:0d:64: b4:0e:0c:a1:e1:eb:78:1d:92:ee:1e:08:85:67:23:1e:e3:50: cb:55:3b:62:61:7d:bd:f0:20:3b:d2:c5:75:93:29:d1:be:0f: 74:23:de:79:a1:ae:60:9c:50:c4:f8:c5:51:b4:86:70:e1:fe: 7b:9b:ee:d4:be:df:12:ed:a2:96:b4:17:3c:72:64:14:db:9f: c3:a0:db:6b:28:29:6d:a2:45:25:c7:01:2d:05:7a:93:af:25: f4:ef:cf:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5Po3mljifchQiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk Njg2NDVmZGYtYzIyYy00ZTQxLWFjYTUtYThkYzcxNjIzNzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6wsSkxO6mWYCo4oEjKeExd3NK3AnJdu64ne lkZheTjw3SujGO/NMJWhcd7aFfDTYy1B/yk3s3aN/zTb2vsftWxZ4x+AxgrFyNVU hd8V6idnrDw9z+0302CKXG1LP282jC52r0RwWFMkkEiApBr8FYpzuf0j809ZgPR9 pbT79d6B28G/iufIDT/79pG77nhNE2qPA1KskwSWcs6cvFxjjbpwrpeJa0CWKiIi TM+M6rwhRQ93k+2gwaVUHDDWBk676FTHSUWJcjJI7Rwe1OOg2MTSN5ot2xF1WzUU 6GQYvwBnkeUmLX7plUEMdpinhNGMyaKlD6/lAFDIC5kuOQDv/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLhsXGTxDFng5eKIDN5s9oSSW9wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYjNjODAzZmEtODVhZS0z ODYzLTgwNzEtNDMzYjQ4ZjZjYjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Nt+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFlSU+a2BxY+LjWan0tWYvWRn/H7LYLaGTIrzQRd1mjaDUaQeCUfBHt 6noQeu1r/mI1QINRcvYcb+hFzhIDNG+kpdBGX5z+V7/gIb1gY05SlKeDvnqi1jQp cTZAkGtcm6OkRTotwRgx0MTjmbzEWchuP2SuZruSk+v4DoSG9CfsU6z0De+dzm+S lQbx0YYJmIpYfc/HyJ2ABSJ2POxBxv0NZLQODKHh63gdku4eCIVnIx7jUMtVO2Jh fb3wIDvSxXWTKdG+D3Qj3nmhrmCcUMT4xVG0hnDh/nub7tS+3xLtopa0FzxyZBTb n8Og22soKW2iRSXHAS0FepOvJfTvz1Q= -----END CERTIFICATE-----Generated at Sat Apr 18 00:05:45 2026 by rpki-client