$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/67301716-8f4a-3b96-99db-05bc4802baaa.roa File: 67301716-8f4a-3b96-99db-05bc4802baaa.roa (raw, json) Hash identifier: giKKYS6BWSAghOPKHyjKk4T+KSHKAnHAhJpFBuqh5xc= Subject key identifier: 3C:10:75:97:F3:0D:95:7D:56:C9:C0:5C:88:CD:DC:6F:30:2F:2A:4F Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Certificate serial: 010D0C9F4328584D9FB570AA08C49CA571013B80 Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/67301716-8f4a-3b96-99db-05bc4802baaa.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 40501 IP address blocks: 216.235.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:70:aa:08:c4:9c:a5:71:01:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=068425eb-6d58-4c62-a0a1-7737a7b92669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:39:2a:88:b3:bc:dd:66:b0:71:94:7c:76:d0: 1e:48:3d:dc:49:31:38:95:99:e5:a3:99:6c:48:46: e3:18:f8:91:15:2a:0e:7d:b7:eb:1e:67:72:e6:a5: a6:fc:b7:1a:8c:8f:8c:1e:c6:7e:91:be:b7:32:0a: 8b:25:e3:66:89:94:31:54:1c:44:01:46:44:0a:83: d0:a6:17:17:68:24:57:18:de:fd:99:b5:02:1d:57: 27:e0:90:ae:a2:da:6b:55:e5:84:bb:60:35:5e:72: d0:ac:9d:c9:ca:4f:ea:59:60:dc:c8:6a:c5:02:2a: 3a:3c:90:74:d2:c6:22:5a:12:20:ef:cf:20:ba:44: 31:f3:c7:e4:1e:5a:0a:80:9c:18:57:3b:70:16:a2: 72:f9:1d:08:9b:24:e1:f3:64:35:0a:f1:fe:03:d0: da:74:28:90:b0:98:7f:ae:c2:3e:10:6a:d7:e6:b9: 95:f2:46:0b:2d:2c:69:14:e0:e1:ad:3b:b7:25:2f: de:73:8d:ee:24:3a:83:d7:2f:8b:cf:82:25:cf:dc: de:af:f9:4a:cd:f8:57:44:6d:86:2d:08:ec:4f:c2: b5:1d:08:7c:62:0c:c7:05:e1:4c:8f:76:5a:c9:cc: d1:87:d6:3d:b2:04:1e:44:1a:05:3c:f7:09:01:9b: 30:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:10:75:97:F3:0D:95:7D:56:C9:C0:5C:88:CD:DC:6F:30:2F:2A:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/67301716-8f4a-3b96-99db-05bc4802baaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl X509v3 Authority Key Identifier: keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer sbgp-ipAddrBlock: critical IPv4: 216.235.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:17:d3:34:71:47:84:2f:fb:b6:1f:fe:2f:91:f1:14:15:32: 52:7b:46:d4:2c:79:49:f6:76:c6:3c:b1:a7:2b:24:e4:43:74: ac:54:cc:06:2d:39:9d:ca:44:1c:cb:a6:a9:8c:de:a3:1b:8d: ec:10:14:45:04:bf:7e:f2:33:b2:ed:d1:58:96:5c:30:36:c8: ae:fe:1d:95:01:39:90:9a:9a:6c:cc:98:9e:e9:ad:e0:43:7d: 0b:f4:a4:0f:8c:3d:dd:6a:18:71:65:5c:03:a9:12:2b:8f:27: 10:a6:be:f8:4a:6d:ba:7f:46:36:34:ac:e9:b4:42:da:54:40: 08:b5:84:c1:83:3b:c2:29:c3:c9:8e:d6:98:5b:ed:7a:e7:3f: ad:8c:4c:2a:e9:7f:0e:8d:72:6e:e7:22:67:2e:c4:bb:42:38: fa:ce:ba:f5:45:dd:42:20:55:5e:c6:53:9a:f6:29:67:8c:4c: 0f:27:45:13:11:0a:a3:75:d0:fe:67:32:71:48:d3:22:72:eb: 2f:f5:08:42:67:df:95:ec:7b:52:4d:b4:80:ea:f4:97:e5:19: 9d:19:a8:05:96:e7:fb:f2:2b:3a:cb:68:cf:8a:0d:7d:4d:74: 63:9a:a5:8c:bf:08:50:93:16:d5:a3:87:fb:70:7d:d1:ea:7b: 6c:ea:0e:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftXCqCMScpXEBO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRkMzQ0MTEtMjM1ZC00ZGJlLThhOWMtZjJkYzExZDc1 NTY2MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk MDY4NDI1ZWItNmQ1OC00YzYyLWEwYTEtNzczN2E3YjkyNjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjkqiLO83WawcZR8dtAeSD3cSTE4lZnlo5ls SEbjGPiRFSoOfbfrHmdy5qWm/LcajI+MHsZ+kb63MgqLJeNmiZQxVBxEAUZECoPQ phcXaCRXGN79mbUCHVcn4JCuotprVeWEu2A1XnLQrJ3Jyk/qWWDcyGrFAio6PJB0 0sYiWhIg788gukQx88fkHloKgJwYVztwFqJy+R0ImyTh82Q1CvH+A9DadCiQsJh/ rsI+EGrX5rmV8kYLLSxpFODhrTu3JS/ec43uJDqD1y+Lz4Ilz9zer/lKzfhXRG2G LQjsT8K1HQh8YgzHBeFMj3ZayczRh9Y9sgQeRBoFPPcJAZswMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwQdZfzDZV9VsnAXIjN3G8wLypPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQz NDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRjMTFkNzU1NjYvNjczMDE3MTYtOGY0YS0z Yjk2LTk5ZGItMDViYzQ4MDJiYWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjRkMzQ0MTEtMjM1ZC00ZGJlLThh OWMtZjJkYzExZDc1NTY2L2Y0ZDM0NDExLTIzNWQtNGRiZS04YTljLWYyZGMxMWQ3 NTU2Ni5jcmwwHwYDVR0jBBgwFoAU1gky9BKV+ISXC+5uyq+8ckes3QowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQzNDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRj MTFkNzU1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OtVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYX0zRxR4Qv+7Yf/i+R8RQVMlJ7RtQseUn2dsY8sacrJORDdKxUzAYt OZ3KRBzLpqmM3qMbjewQFEUEv37yM7Lt0ViWXDA2yK7+HZUBOZCammzMmJ7preBD fQv0pA+MPd1qGHFlXAOpEiuPJxCmvvhKbbp/RjY0rOm0QtpUQAi1hMGDO8Ipw8mO 1phb7XrnP62MTCrpfw6Ncm7nImcuxLtCOPrOuvVF3UIgVV7GU5r2KWeMTA8nRRMR CqN10P5nMnFI0yJy6y/1CEJn35Xse1JNtIDq9JflGZ0ZqAWW5/vyKzrLaM+KDX1N dGOapYy/CFCTFtWjh/twfdHqe2zqDg0= -----END CERTIFICATE-----Generated at Wed May 13 15:16:52 2026 by rpki-client