$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/4d8367d4-1898-320c-b3eb-4aa0e3cbdce0.roa File: 4d8367d4-1898-320c-b3eb-4aa0e3cbdce0.roa (raw, json) Hash identifier: mm+q6AgQP+QwUX6cCkRr0z190p5DU/f9p0jbD4YRF+U= Subject key identifier: AC:F5:ED:05:70:8C:8A:4E:BD:E0:64:E9:A9:02:16:DF:2B:2B:1E:D7 Certificate issuer: /CN=67d0730c-5dbd-466b-a70c-5267ec1b7359 Certificate serial: 010D0C9F4328584D40CA4F1B6A55A2BB88B4E300 Authority key identifier: 1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/4d8367d4-1898-320c-b3eb-4aa0e3cbdce0.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 16509 IP address blocks: 216.99.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:4f:1b:6a:55:a2:bb:88:b4:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67d0730c-5dbd-466b-a70c-5267ec1b7359 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=682800c6-62f8-44bb-b2ed-430e9f050474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8e:09:87:ee:90:84:96:e0:f1:ff:c3:8a:c5: fb:e9:9a:7f:c2:ce:ef:e3:ad:49:8b:76:14:f8:1e: 00:f1:f9:20:b0:73:e0:42:75:b3:76:7c:8f:34:bb: 4a:91:fb:9f:41:b8:b0:65:d6:43:02:a5:f8:a0:99: 02:13:4f:86:08:d6:59:1b:a1:23:e7:51:97:a4:62: 53:e9:26:cd:7a:50:96:f6:64:b9:cb:3d:43:f5:c5: 50:4c:89:a1:b9:83:c8:73:2b:bc:6a:c3:81:54:be: e5:87:9d:84:40:2e:7b:8b:65:ec:2a:62:d8:29:0e: 93:4f:e2:62:f0:d5:97:c9:ee:19:1c:42:ad:58:5a: f2:1e:c3:1f:aa:b0:82:b1:96:71:f9:4f:39:04:06: fc:ab:bc:f7:a3:b1:d3:e9:d5:aa:a3:be:62:f8:df: 14:3c:a9:37:53:d3:48:ad:3e:bd:b4:b6:d2:35:2c: 0e:ac:0c:09:18:35:8b:9d:74:69:00:f3:8b:47:64: ce:e5:ad:ab:f6:b7:49:5f:da:fd:32:3b:d6:ae:37: ff:83:a8:3b:c5:cf:44:2a:60:e0:12:2f:20:69:cd: 69:4b:5c:fc:95:88:57:dc:d9:e3:57:64:0f:ca:7d: 76:d1:2a:03:b8:7a:00:af:20:9e:5a:59:70:12:4e: e5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F5:ED:05:70:8C:8A:4E:BD:E0:64:E9:A9:02:16:DF:2B:2B:1E:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/4d8367d4-1898-320c-b3eb-4aa0e3cbdce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.crl X509v3 Authority Key Identifier: keyid:1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer sbgp-ipAddrBlock: critical IPv4: 216.99.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:b5:2d:9b:4c:ce:03:61:89:a4:82:74:97:a4:c3:a0:a3:d2: 01:20:80:23:2f:bf:57:41:60:cb:01:8c:c0:e3:80:5c:55:9e: 01:c8:29:e9:3b:7a:2e:bd:cb:30:78:83:15:bf:da:a5:50:73: 01:dd:14:03:86:97:07:31:7c:99:7c:7d:02:ab:ef:bc:0a:aa: 13:a3:35:6b:d7:65:4f:ec:1e:88:00:6f:64:98:00:63:85:6e: c3:5d:58:a7:20:9f:00:3b:d8:63:4a:d4:10:78:f2:42:5e:1d: a2:ef:7d:c4:32:63:c6:f7:46:1b:37:5a:7c:7a:1b:e5:05:0b: ea:a2:af:49:35:ed:49:11:c8:e6:11:56:d5:2b:3b:7f:fd:48: f8:b9:e8:1d:09:37:0f:07:6c:17:e4:4b:4a:f8:08:58:d4:a4: 21:fd:3b:9f:a0:48:47:43:0b:0c:77:91:1e:04:f6:3c:69:4f: e5:27:55:0c:30:1f:bb:69:c2:e2:3c:67:72:19:64:5b:74:af: ad:4a:c6:88:36:aa:58:21:b4:45:a1:4e:b1:67:a3:af:81:42: f0:37:5b:33:0d:11:b4:b0:b9:cf:4f:52:5e:81:69:a8:84:0f: 69:99:be:bb:53:a0:24:dc:20:dd:58:37:e9:86:78:26:55:e4: 27:54:9d:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayk8balWiu4i04wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdkMDczMGMtNWRiZC00NjZiLWE3MGMtNTI2N2VjMWI3 MzU5MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NjgyODAwYzYtNjJmOC00NGJiLWIyZWQtNDMwZTlmMDUwNDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY4Jh+6QhJbg8f/DisX76Zp/ws7v461Ji3YU +B4A8fkgsHPgQnWzdnyPNLtKkfufQbiwZdZDAqX4oJkCE0+GCNZZG6Ej51GXpGJT 6SbNelCW9mS5yz1D9cVQTImhuYPIcyu8asOBVL7lh52EQC57i2XsKmLYKQ6TT+Ji 8NWXye4ZHEKtWFryHsMfqrCCsZZx+U85BAb8q7z3o7HT6dWqo75i+N8UPKk3U9NI rT69tLbSNSwOrAwJGDWLnXRpAPOLR2TO5a2r9rdJX9r9MjvWrjf/g6g7xc9EKmDg Ei8gac1pS1z8lYhX3NnjV2QPyn120SoDuHoAryCeWllwEk7l/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKz17QVwjIpOveBk6akCFt8rKx7XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82N2Qw NzMwYy01ZGJkLTQ2NmItYTcwYy01MjY3ZWMxYjczNTkvNGQ4MzY3ZDQtMTg5OC0z MjBjLWIzZWItNGFhMGUzY2JkY2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjdkMDczMGMtNWRiZC00NjZiLWE3 MGMtNTI2N2VjMWI3MzU5LzY3ZDA3MzBjLTVkYmQtNDY2Yi1hNzBjLTUyNjdlYzFi NzM1OS5jcmwwHwYDVR0jBBgwFoAUHceCUo4eRCKZkgNOX319zKG3rlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82N2QwNzMwYy01ZGJkLTQ2NmItYTcwYy01MjY3 ZWMxYjczNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACm1LZtMzgNhiaSCdJekw6Cj0gEggCMvv1dBYMsBjMDjgFxVngHIKek7 ei69yzB4gxW/2qVQcwHdFAOGlwcxfJl8fQKr77wKqhOjNWvXZU/sHogAb2SYAGOF bsNdWKcgnwA72GNK1BB48kJeHaLvfcQyY8b3Rhs3Wnx6G+UFC+qir0k17UkRyOYR VtUrO3/9SPi56B0JNw8HbBfkS0r4CFjUpCH9O5+gSEdDCwx3kR4E9jxpT+UnVQww H7tpwuI8Z3IZZFt0r61Kxog2qlghtEWhTrFno6+BQvA3WzMNEbSwuc9PUl6BaaiE D2mZvrtToCTcIN1YN+mGeCZV5CdUnUs= -----END CERTIFICATE-----Generated at Thu Mar 26 02:04:59 2026 by rpki-client