$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da1c77da-37f9-38f2-818a-c7e7fd2ecacc.roa File: da1c77da-37f9-38f2-818a-c7e7fd2ecacc.roa (raw, json) Hash identifier: cm3gEIpMGimwBKdfeBU8C37+2CmHaucDWqC/2la2tFY= Subject key identifier: 22:B4:E6:06:9F:9A:90:5F:2B:F5:9B:E1:7C:37:DD:0D:5C:B0:F2:4E Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D07ACEE7F0ED755B400509D00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da1c77da-37f9-38f2-818a-c7e7fd2ecacc.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 16509 IP address blocks: 216.115.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:ee:7f:0e:d7:55:b4:00:50:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=ec7aa24b-180d-4f84-9386-1d8d83d26df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c4:e2:53:6c:63:ca:6e:07:3e:70:4f:70:56: e0:7c:e8:b3:04:cd:89:9f:db:ba:08:fe:10:30:11: 14:c1:c2:13:46:f3:90:13:71:e3:d2:4b:1b:1e:6d: 83:ac:f2:aa:c0:db:c5:c5:67:6e:b0:b3:04:21:24: 20:3a:28:ca:93:dd:63:f0:42:8f:b5:86:09:78:93: 05:e5:eb:19:38:00:9b:7c:76:27:4d:af:a2:3b:c1: 72:f5:d0:74:c3:45:12:1e:bb:a4:d5:e6:1a:cf:44: 03:e9:0d:78:74:61:de:b8:fd:df:81:60:63:7a:b3: 65:55:49:94:ef:6c:ac:99:fe:f6:28:0c:4c:91:b6: 44:d8:22:ef:72:97:9d:93:ad:a2:de:1a:2c:42:20: 8d:89:b1:fe:2f:18:a2:48:ae:00:35:ce:74:d9:01: 67:38:74:c4:ca:dd:87:c7:d1:96:c9:7e:22:45:f7: ba:77:d2:a1:06:d0:96:71:9f:1b:49:b5:bf:08:e5: b1:4b:43:c3:1d:b1:cf:32:7a:0b:40:20:56:45:2e: 58:e3:d8:2c:d3:5c:11:eb:2b:8c:97:db:35:04:d9: 09:cb:98:3c:d4:d0:b5:2f:e3:05:f0:a0:0c:14:bf: 1b:1e:ac:57:26:40:4a:f2:7e:7f:74:63:4c:63:36: bc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B4:E6:06:9F:9A:90:5F:2B:F5:9B:E1:7C:37:DD:0D:5C:B0:F2:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da1c77da-37f9-38f2-818a-c7e7fd2ecacc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 216.115.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:3d:03:04:5b:4d:db:82:60:0f:0e:c0:1e:3d:8a:b2:b8:69: 0a:da:cc:4a:dc:53:d6:bf:cc:2e:aa:26:81:44:80:a6:a7:30: 2c:ed:1b:88:bb:26:78:43:dc:99:31:83:35:8c:7d:f7:4e:07: 96:dd:18:a3:2a:71:c6:4a:12:75:e0:45:db:ad:65:3f:3c:19: 3c:3b:22:37:e0:4e:90:c8:1a:bb:bd:b8:c3:80:7f:06:fb:4c: bb:68:e1:93:70:d9:1f:d6:f5:96:07:71:f5:93:88:60:cd:ee: 3c:9c:0c:2c:cb:dc:98:38:dd:f6:2a:77:09:b0:1c:db:a7:c2: ca:28:b5:c1:16:3b:40:96:c8:c6:20:5c:37:f2:26:83:fd:b9: 61:f7:9f:56:01:f3:f8:5a:e9:d7:3e:24:e0:40:78:01:5f:f8: 91:6f:eb:45:da:ec:94:6a:d4:8f:8b:48:53:97:eb:5c:e5:72: ce:f5:2f:64:cc:cb:e8:ba:74:73:12:e6:84:0b:e2:38:2b:c9: a3:ed:4f:20:9c:40:f0:b0:49:38:cc:b8:74:76:89:0d:ab:20: b2:20:8f:43:b2:56:61:b4:f1:bb:64:33:ef:38:3f:9d:5d:04: e5:d3:9e:33:c3:c3:eb:74:37:56:ba:4f:cc:ad:c0:96:34:40: 32:a5:2d:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrO5/DtdVtABQnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk ZWM3YWEyNGItMTgwZC00Zjg0LTkzODYtMWQ4ZDgzZDI2ZGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcTiU2xjym4HPnBPcFbgfOizBM2Jn9u6CP4Q MBEUwcITRvOQE3Hj0ksbHm2DrPKqwNvFxWdusLMEISQgOijKk91j8EKPtYYJeJMF 5esZOACbfHYnTa+iO8Fy9dB0w0USHruk1eYaz0QD6Q14dGHeuP3fgWBjerNlVUmU 72ysmf72KAxMkbZE2CLvcpedk62i3hosQiCNibH+LxiiSK4ANc502QFnOHTEyt2H x9GWyX4iRfe6d9KhBtCWcZ8bSbW/COWxS0PDHbHPMnoLQCBWRS5Y49gs01wR6yuM l9s1BNkJy5g81NC1L+MF8KAMFL8bHqxXJkBK8n5/dGNMYza8LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCK05gafmpBfK/Wb4Xw33Q1csPJOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZGExYzc3ZGEtMzdmOS0z OGYyLTgxOGEtYzdlN2ZkMmVjYWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HPUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJs9AwRbTduCYA8OwB49irK4aQrazErcU9a/zC6qJoFEgKanMCztG4i7 JnhD3JkxgzWMffdOB5bdGKMqccZKEnXgRdutZT88GTw7IjfgTpDIGru9uMOAfwb7 TLto4ZNw2R/W9ZYHcfWTiGDN7jycDCzL3Jg43fYqdwmwHNunwsootcEWO0CWyMYg XDfyJoP9uWH3n1YB8/ha6dc+JOBAeAFf+JFv60Xa7JRq1I+LSFOX61zlcs71L2TM y+i6dHMS5oQL4jgryaPtTyCcQPCwSTjMuHR2iQ2rILIgj0OyVmG08btkM+84P51d BOXTnjPDw+t0N1a6T8ytwJY0QDKlLZg= -----END CERTIFICATE-----Generated at Mon Mar 2 09:48:05 2026 by rpki-client