$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/3d224895-501e-3aed-857c-97ee5700de82.roa File: 3d224895-501e-3aed-857c-97ee5700de82.roa (raw, json) Hash identifier: TM5tMoZbWL4oHihpzzxMj8DFNQQMfShd31G+tI+MU1A= Subject key identifier: AF:8B:EA:A5:83:E0:0B:D7:C8:4A:EF:99:82:7C:58:19:78:9F:97:E0 Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Certificate serial: 010D0C9F4328584DA6B01148BBD2EA76AD7FB9A0 Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/3d224895-501e-3aed-857c-97ee5700de82.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 30242 IP address blocks: 199.167.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:11:48:bb:d2:ea:76:ad:7f:b9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=c17bc892-5301-43e2-84ec-a16040a3bbb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:92:2f:79:ac:60:99:b8:43:c4:47:6a:0f: a1:12:ac:61:22:6e:0b:fd:c3:16:e5:cd:f4:77:93: 72:0a:55:34:f8:37:45:e0:9f:55:79:31:92:ba:ae: ae:b7:a0:12:34:a5:16:b2:a3:ac:4a:70:b4:88:1a: 62:13:6f:04:df:39:6b:99:64:fd:5a:83:04:87:b2: cc:f3:bb:c0:8e:c1:31:db:66:97:b0:97:f4:cc:0d: 5c:ea:4f:8a:ff:b4:2a:f1:01:34:e9:7b:32:87:55: 89:df:19:89:7c:8e:0c:44:74:b6:4a:07:7f:67:ea: 39:cd:53:f4:35:26:9d:f5:4b:af:af:9b:cf:e2:5a: c2:80:cc:9d:71:21:85:5c:84:de:04:39:7c:e6:9d: 3f:31:9c:5a:ab:9a:b0:5e:a3:b3:04:7c:c6:94:1e: e6:86:47:f4:af:88:1f:9f:2d:67:e1:fa:20:a5:eb: 80:0a:ef:c6:8b:e0:df:8b:2a:34:bf:46:bc:ca:2f: 60:0f:a0:6d:97:a5:a2:68:4d:a9:10:4e:3e:95:c0: 11:21:f9:75:95:48:8e:24:48:36:b2:8e:8d:00:36: f0:16:7a:ad:bb:dc:32:4c:59:e4:08:96:b2:40:1b: 7d:58:83:24:8d:3c:e3:13:03:82:14:09:ed:24:47: 0a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8B:EA:A5:83:E0:0B:D7:C8:4A:EF:99:82:7C:58:19:78:9F:97:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/3d224895-501e-3aed-857c-97ee5700de82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl X509v3 Authority Key Identifier: keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer sbgp-ipAddrBlock: critical IPv4: 199.167.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:4f:26:0e:0e:e6:e4:e2:96:98:d3:0f:86:31:b5:89:ca:5b: 65:b7:cf:f6:2d:b7:e3:72:71:5a:b6:57:63:b0:ba:4f:0f:73: 57:23:28:41:da:cf:f5:19:f4:7b:b7:31:9e:e1:61:be:ce:a8: d2:48:9d:c2:13:0e:b3:cc:70:40:be:52:48:78:6d:51:c2:c4: 13:d9:d2:eb:64:f3:2a:4b:8a:b7:22:c1:5d:40:48:0e:b3:39: 1b:36:f3:0b:5e:82:65:3f:ef:a1:a3:61:f2:67:d9:2b:bb:5f: 1f:24:d3:8b:53:af:a6:3d:66:09:3e:1f:f9:1e:2c:e4:61:7b: 13:71:3f:96:45:2d:7d:2e:36:d1:35:bc:37:e6:28:07:c6:64: 47:54:48:f0:e0:9f:4f:63:32:e9:3b:87:06:df:44:03:1f:58: f1:9b:c6:25:df:de:c9:42:81:22:e8:7c:73:b3:cf:ed:67:03: 7b:0f:cd:0b:9e:56:e9:32:7b:e8:a0:d5:b7:a4:7b:0c:00:21: a3:7b:28:2e:a9:43:8b:46:89:7e:33:88:92:ab:87:a6:f4:d5: 7e:12:59:59:d0:b5:fe:57:1c:ab:e9:3a:6e:35:d0:99:bb:b8: a1:66:9f:35:bf:c8:f7:33:87:44:c4:fb:98:55:ac:79:e7:36: 13:14:b7:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msBFIu9Lqdq1/uaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFkZDY4NjAtNzE5ZS00NmMwLThiN2MtODliOWU4ZDg4 ZGE2MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk YzE3YmM4OTItNTMwMS00M2UyLTg0ZWMtYTE2MDQwYTNiYmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtISSL3msYJm4Q8RHag+hEqxhIm4L/cMW5c30 d5NyClU0+DdF4J9VeTGSuq6ut6ASNKUWsqOsSnC0iBpiE28E3zlrmWT9WoMEh7LM 87vAjsEx22aXsJf0zA1c6k+K/7Qq8QE06Xsyh1WJ3xmJfI4MRHS2Sgd/Z+o5zVP0 NSad9Uuvr5vP4lrCgMydcSGFXITeBDl85p0/MZxaq5qwXqOzBHzGlB7mhkf0r4gf ny1n4fogpeuACu/Gi+Dfiyo0v0a8yi9gD6Btl6WiaE2pEE4+lcARIfl1lUiOJEg2 so6NADbwFnqtu9wyTFnkCJayQBt9WIMkjTzjEwOCFAntJEcK8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+L6qWD4AvXyErvmYJ8WBl4n5fgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRk Njg2MC03MTllLTQ2YzAtOGI3Yy04OWI5ZThkODhkYTYvM2QyMjQ4OTUtNTAxZS0z YWVkLTg1N2MtOTdlZTU3MDBkZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFkZDY4NjAtNzE5ZS00NmMwLThi N2MtODliOWU4ZDg4ZGE2LzIxZGQ2ODYwLTcxOWUtNDZjMC04YjdjLTg5YjllOGQ4 OGRhNi5jcmwwHwYDVR0jBBgwFoAUQnmNqghyfHSiXcmRrdvqyi78pSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRkNjg2MC03MTllLTQ2YzAtOGI3Yy04OWI5 ZThkODhkYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6f8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlPJg4O5uTilpjTD4YxtYnKW2W3z/Ytt+NycVq2V2Owuk8Pc1cjKEHa z/UZ9Hu3MZ7hYb7OqNJIncITDrPMcEC+Ukh4bVHCxBPZ0utk8ypLirciwV1ASA6z ORs28wtegmU/76GjYfJn2Su7Xx8k04tTr6Y9Zgk+H/keLORhexNxP5ZFLX0uNtE1 vDfmKAfGZEdUSPDgn09jMuk7hwbfRAMfWPGbxiXf3slCgSLofHOzz+1nA3sPzQue Vukye+ig1bekewwAIaN7KC6pQ4tGiX4ziJKrh6b01X4SWVnQtf5XHKvpOm410Jm7 uKFmnzW/yPczh0TE+5hVrHnnNhMUt8k= -----END CERTIFICATE-----Generated at Wed May 13 15:27:56 2026 by rpki-client