$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/2d8ca45f-228d-3ffc-9008-f26a1700290a.roa File: 2d8ca45f-228d-3ffc-9008-f26a1700290a.roa (raw, json) Hash identifier: zJGRFhvGHpxVViI0aYTMHVE+ym4q8uKsqnrtaCw4Wtc= Subject key identifier: 7D:EF:60:CD:1B:00:34:3E:0E:52:6C:C0:E4:6A:E6:65:60:8D:26:45 Certificate issuer: /CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7 Certificate serial: 010D0C9F4328584D86955977FD183146AEF14B80 Authority key identifier: BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/2d8ca45f-228d-3ffc-9008-f26a1700290a.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 8075 IP address blocks: 216.99.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:59:77:fd:18:31:46:ae:f1:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=00d955fc-291a-4960-9f82-12bad9fb84fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ba:84:c4:97:41:e4:df:1d:4d:0d:21:d3:99: 4c:98:22:1c:42:8b:8d:ef:9b:29:3f:b7:09:24:51: 07:ed:24:c6:b6:15:31:5f:1b:4f:a6:95:d0:1f:96: a6:a0:5b:08:b5:38:a8:0d:88:e3:63:36:4b:53:36: 6c:e0:bf:aa:85:bc:5b:3b:8f:b5:8d:f2:cc:33:c0: 86:49:78:82:d2:e4:c7:31:ad:26:3d:c2:e6:46:46: 25:e7:71:e6:aa:cf:39:8a:77:b8:76:16:87:88:46: 5b:0a:7b:ca:c0:ca:ae:bb:b6:ad:a0:25:a7:c7:47: f3:55:4b:d4:60:76:44:c2:65:1c:55:21:15:8b:09: a7:4c:ea:fe:90:44:61:83:5d:23:47:90:4a:ea:c2: 1d:d0:3a:bd:d2:01:50:2e:d8:2e:eb:10:95:9c:12: 4e:5b:08:48:17:1f:a9:f9:15:5d:4d:79:c9:d4:44: 43:ae:72:13:32:8e:28:92:3c:e6:30:2b:85:b2:78: 74:94:8b:00:ce:f9:eb:96:65:81:38:62:37:2a:13: dc:4c:c8:ee:02:16:f5:3b:c5:30:78:f2:bb:c6:d2: fd:d2:85:a3:6f:de:5f:1c:08:51:38:28:54:f1:af: 1c:d8:44:e2:ad:2e:85:1a:a6:ce:f3:df:7c:d9:3c: b1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EF:60:CD:1B:00:34:3E:0E:52:6C:C0:E4:6A:E6:65:60:8D:26:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/2d8ca45f-228d-3ffc-9008-f26a1700290a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl X509v3 Authority Key Identifier: keyid:BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer sbgp-ipAddrBlock: critical IPv4: 216.99.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:8c:97:3b:ee:7d:4d:83:27:67:a7:a5:08:ee:1a:74:e2:40: 33:02:fb:9b:00:59:90:2d:55:98:ee:53:48:3d:7e:08:77:cb: 71:05:e2:5d:37:96:70:93:65:97:5c:a8:e8:1b:55:e2:22:8a: 78:4f:dc:93:07:78:43:03:92:09:12:ff:7c:72:c2:49:53:d5: 82:03:d2:77:a2:33:6b:0a:d7:50:46:99:17:ec:0f:c4:f8:29: 1e:8d:18:10:5e:0f:a7:bb:e8:80:d1:1a:6f:83:1b:d5:32:20: c2:03:d5:25:3d:43:b5:5d:75:fe:84:65:b1:23:10:3d:09:cd: 05:fc:34:ab:64:33:52:18:99:83:28:0d:ce:9b:6c:31:89:0d: 9b:38:49:2c:04:57:96:1a:84:aa:ba:bb:e4:4c:25:83:d8:f7: fa:38:b3:89:1d:4f:94:1e:60:ec:65:59:d1:b3:d7:f7:d9:24: 29:a7:45:87:28:bf:53:4c:3d:55:b4:dd:6c:56:46:d7:c6:45: 31:d3:2a:ab:f8:b9:c8:0a:8f:24:36:5b:12:89:72:fa:fa:78: 42:6a:04:0c:4a:14:91:0c:3c:02:fb:ae:3d:77:6d:90:26:3f: e0:c6:b3:84:b2:c9:b6:8b:a5:d9:7e:67:9d:8a:90:ae:a5:51: e4:6f:f7:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlVl3/RgxRq7xS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY3MmE3OTgtYTk3OS00ZjUxLTg1YWUtZTBlZWMzZGNi OWY3MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk MDBkOTU1ZmMtMjkxYS00OTYwLTlmODItMTJiYWQ5ZmI4NGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7qExJdB5N8dTQ0h05lMmCIcQouN75spP7cJ JFEH7STGthUxXxtPppXQH5amoFsItTioDYjjYzZLUzZs4L+qhbxbO4+1jfLMM8CG SXiC0uTHMa0mPcLmRkYl53Hmqs85ine4dhaHiEZbCnvKwMquu7atoCWnx0fzVUvU YHZEwmUcVSEViwmnTOr+kERhg10jR5BK6sId0Dq90gFQLtgu6xCVnBJOWwhIFx+p +RVdTXnJ1ERDrnITMo4okjzmMCuFsnh0lIsAzvnrlmWBOGI3KhPcTMjuAhb1O8Uw ePK7xtL90oWjb95fHAhROChU8a8c2ETirS6FGqbO89982Tyx2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3vYM0bADQ+DlJswORq5mVgjSZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNjcy YTc5OC1hOTc5LTRmNTEtODVhZS1lMGVlYzNkY2I5ZjcvMmQ4Y2E0NWYtMjI4ZC0z ZmZjLTkwMDgtZjI2YTE3MDAyOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzY3MmE3OTgtYTk3OS00ZjUxLTg1 YWUtZTBlZWMzZGNiOWY3L2M2NzJhNzk4LWE5NzktNGY1MS04NWFlLWUwZWVjM2Rj YjlmNy5jcmwwHwYDVR0jBBgwFoAUuikoNWCwwHyqzvaenrqtsKIgNgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNjcyYTc5OC1hOTc5LTRmNTEtODVhZS1lMGVl YzNkY2I5ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2GOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+MlzvufU2DJ2enpQjuGnTiQDMC+5sAWZAtVZjuU0g9fgh3y3EF4l03 lnCTZZdcqOgbVeIiinhP3JMHeEMDkgkS/3xywklT1YID0neiM2sK11BGmRfsD8T4 KR6NGBBeD6e76IDRGm+DG9UyIMID1SU9Q7Vddf6EZbEjED0JzQX8NKtkM1IYmYMo Dc6bbDGJDZs4SSwEV5YahKq6u+RMJYPY9/o4s4kdT5QeYOxlWdGz1/fZJCmnRYco v1NMPVW03WxWRtfGRTHTKqv4ucgKjyQ2WxKJcvr6eEJqBAxKFJEMPAL7rj13bZAm P+DGs4SyybaLpdl+Z52KkK6lUeRv92k= -----END CERTIFICATE-----Generated at Fri Apr 17 03:49:41 2026 by rpki-client