$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/18f5c96f-14eb-3372-9eca-1733fe1ed835.roa File: 18f5c96f-14eb-3372-9eca-1733fe1ed835.roa (raw, json) Hash identifier: zpQtME6PaRgw67H3ZUWRJ/0VMiCzv8t1UsRKSkpPKuY= Subject key identifier: 4F:34:BD:75:F6:90:61:A5:3A:10:27:73:C8:7E:CB:5E:5B:91:EA:AF Certificate issuer: /CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Certificate serial: 010D0C9F4328584E210EE68F3BC8E7E24E018BE0 Authority key identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/18f5c96f-14eb-3372-9eca-1733fe1ed835.roa Signing time: Wed 10 Jun 2026 21:00:11 +0000 ROA not before: Wed 10 Jun 2026 21:00:11 +0000 ROA not after: Tue 08 Sep 2026 21:00:11 +0000 asID: 22641 IP address blocks: 216.169.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:21:0e:e6:8f:3b:c8:e7:e2:4e:01:8b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Validity Not Before: Jun 10 21:00:11 2026 GMT Not After : Sep 8 21:00:11 2026 GMT Subject: CN=f3ec710d-4f7d-4074-ac2e-eb08dce93463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6f:4f:a4:c6:42:96:50:c0:f6:e4:d7:70:60: e9:75:c8:a6:dc:d7:5e:5a:2e:b2:57:e3:bc:86:fd: 73:b9:27:e8:82:1f:58:a7:2f:7d:90:76:26:a8:27: 0a:cd:04:4a:0f:f2:c3:93:57:47:d2:5d:d7:58:78: 4f:fa:fc:e8:2e:5e:8c:47:df:f9:22:da:18:ec:1a: 43:e5:35:ea:f8:13:7c:29:27:0e:77:39:5c:ea:82: 56:95:11:f6:0c:5c:c0:c5:bb:23:7c:d7:4b:6f:d2: a3:74:38:1e:3c:37:0e:75:ca:4b:45:24:c4:58:38: b4:4c:bf:cd:04:2d:35:d4:da:d7:c0:ad:a0:80:5d: 1c:3e:e8:77:6f:83:2f:f4:6f:6d:fc:83:93:57:29: 12:36:58:5c:db:97:4f:ec:5a:16:b2:fb:20:55:e7: 75:44:7a:a5:3e:02:ec:8d:68:e6:cd:78:f2:bd:ac: 33:b8:ad:c3:c8:5a:35:d7:20:80:71:b9:61:49:c0: f4:89:bc:4e:d8:6d:1f:9b:ba:bf:f3:82:1e:59:6c: 1c:69:52:d1:9f:6e:f1:5e:c1:59:60:00:c0:95:47: 23:81:ce:b4:d5:95:3b:e2:a3:ed:4a:b0:12:31:94: 80:79:6d:82:00:8f:db:1e:c3:11:7d:c2:91:80:37: e2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:34:BD:75:F6:90:61:A5:3A:10:27:73:C8:7E:CB:5E:5B:91:EA:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/18f5c96f-14eb-3372-9eca-1733fe1ed835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl X509v3 Authority Key Identifier: keyid:F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer sbgp-ipAddrBlock: critical IPv4: 216.169.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ec:e3:b1:e4:be:68:9c:9a:10:48:73:83:b4:b6:c2:43:91: 51:5d:45:f3:71:48:ff:39:a4:f9:43:ee:c7:4e:69:d6:b9:3b: 98:56:54:25:a9:40:68:d1:a4:94:a2:c5:2e:72:d0:d1:da:bd: 98:9b:c3:64:e7:44:c7:e4:ad:00:dc:94:fc:14:c9:a2:4f:f6: 5a:8a:fc:08:a0:dc:da:f8:15:e8:e0:64:58:74:2e:fd:a6:0d: 18:fe:03:4f:77:ab:db:c9:a6:30:6d:9e:1b:90:ff:65:65:5b: 58:fd:6e:c7:d3:fe:56:a6:26:e9:13:81:6a:77:e2:a3:2b:4a: 2c:99:ba:74:1b:df:4e:2d:a3:e7:c6:6b:23:53:25:36:1d:43: f7:8e:9c:51:51:0b:a5:e5:c7:eb:e4:bc:05:10:e4:8b:67:09: e5:66:a8:94:aa:3b:8d:14:33:bb:2a:d8:61:c5:3c:dc:52:0b: 30:62:63:54:01:37:77:22:97:a4:22:03:3e:27:e1:28:37:98: a9:f3:1a:b5:63:42:95:2a:b3:5c:ec:77:4a:69:ac:16:27:3e: ee:33:86:a0:6a:a8:ed:1c:99:08:72:02:e2:43:61:d7:61:a6: 96:62:10:7c:c8:75:68:c2:b0:c6:72:8f:49:79:6d:1d:8c:66: 2d:8a:62:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hDuaPO8jn4k4Bi+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwMzVlYTItYzFkNS00YjI5LWE4YzQtMWIzMTM3OWM4 YWZmMB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk ZjNlYzcxMGQtNGY3ZC00MDc0LWFjMmUtZWIwOGRjZTkzNDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm9PpMZCllDA9uTXcGDpdcim3NdeWi6yV+O8 hv1zuSfogh9Ypy99kHYmqCcKzQRKD/LDk1dH0l3XWHhP+vzoLl6MR9/5ItoY7BpD 5TXq+BN8KScOdzlc6oJWlRH2DFzAxbsjfNdLb9KjdDgePDcOdcpLRSTEWDi0TL/N BC011NrXwK2ggF0cPuh3b4Mv9G9t/IOTVykSNlhc25dP7FoWsvsgVed1RHqlPgLs jWjmzXjyvawzuK3DyFo11yCAcblhScD0ibxO2G0fm7q/84IeWWwcaVLRn27xXsFZ YADAlUcjgc601ZU74qPtSrASMZSAeW2CAI/bHsMRfcKRgDfi1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE80vXX2kGGlOhAnc8h+y15bkeqvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODAz NWVhMi1jMWQ1LTRiMjktYThjNC0xYjMxMzc5YzhhZmYvMThmNWM5NmYtMTRlYi0z MzcyLTllY2EtMTczM2ZlMWVkODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgwMzVlYTItYzFkNS00YjI5LWE4 YzQtMWIzMTM3OWM4YWZmLzI4MDM1ZWEyLWMxZDUtNGIyOS1hOGM0LTFiMzEzNzlj OGFmZi5jcmwwHwYDVR0jBBgwFoAU8a/gxj9B23Vcsh798dH499Cp++AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODAzNWVhMi1jMWQ1LTRiMjktYThjNC0xYjMx Mzc5YzhhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2KnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfs47HkvmicmhBIc4O0tsJDkVFdRfNxSP85pPlD7sdOada5O5hWVCWp QGjRpJSixS5y0NHavZibw2TnRMfkrQDclPwUyaJP9lqK/Aig3Nr4FejgZFh0Lv2m DRj+A093q9vJpjBtnhuQ/2VlW1j9bsfT/lamJukTgWp34qMrSiyZunQb304to+fG ayNTJTYdQ/eOnFFRC6Xlx+vkvAUQ5ItnCeVmqJSqO40UM7sq2GHFPNxSCzBiY1QB N3cil6QiAz4n4Sg3mKnzGrVjQpUqs1zsd0pprBYnPu4zhqBqqO0cmQhyAuJDYddh ppZiEHzIdWjCsMZyj0l5bR2MZi2KYvM= -----END CERTIFICATE-----Generated at Sat Jun 13 17:10:59 2026 by rpki-client