$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/576def10-b142-4ece-9211-731e3adac706/ffc7320e-f5f4-328d-976c-dc7d83ab9058.roa File: ffc7320e-f5f4-328d-976c-dc7d83ab9058.roa (raw, json) Hash identifier: jmwU4w2DOgkguJxztyx+H+WjhqD6psoZEw6NYtzi7Ms= Subject key identifier: 92:A0:75:EF:24:67:27:18:2F:38:90:89:4B:43:23:BF:C8:76:91:C5 Certificate issuer: /CN=576def10-b142-4ece-9211-731e3adac706 Certificate serial: 010D0C9F4328584DB0E7427BFF07BE3BB8FEF860 Authority key identifier: BF:EE:50:EA:4A:1D:ED:50:5D:6D:39:88:7F:AB:E4:E2:0B:11:D9:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/576def10-b142-4ece-9211-731e3adac706.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/576def10-b142-4ece-9211-731e3adac706/ffc7320e-f5f4-328d-976c-dc7d83ab9058.roa Signing time: Fri 01 May 2026 16:49:48 +0000 ROA not before: Fri 01 May 2026 16:49:48 +0000 ROA not after: Thu 30 Jul 2026 16:49:48 +0000 asID: 402443 IP address blocks: 216.71.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/576def10-b142-4ece-9211-731e3adac706/576def10-b142-4ece-9211-731e3adac706.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/576def10-b142-4ece-9211-731e3adac706/576def10-b142-4ece-9211-731e3adac706.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/576def10-b142-4ece-9211-731e3adac706.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b0:e7:42:7b:ff:07:be:3b:b8:fe:f8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576def10-b142-4ece-9211-731e3adac706 Validity Not Before: May 1 16:49:48 2026 GMT Not After : Jul 30 16:49:48 2026 GMT Subject: CN=0d82c9a7-2e2e-4b8a-bb44-4e22c2e91f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:39:be:37:62:ab:0f:6b:43:6d:85:a2:9c:b2: 08:25:52:cf:79:1c:53:a0:3e:b0:dd:0d:df:ec:ec: 14:5d:b0:12:6b:22:f8:a4:2f:ed:d4:f9:5c:7d:a1: 59:79:6a:14:58:59:66:b7:93:d0:da:1a:2f:fd:ca: dc:8a:90:1c:a5:54:ab:92:db:4c:29:0c:be:0e:63: 32:d5:3d:e6:dc:98:9d:17:f4:18:31:82:7a:60:30: 61:11:01:68:20:ec:c5:97:dd:93:4f:3c:b5:51:15: 83:ac:2b:25:60:18:96:c5:82:c2:05:10:24:b4:3f: 05:9e:10:c6:b5:d2:9f:6c:b2:2d:81:15:d9:ae:a6: 86:07:0d:0a:7d:62:27:d6:a1:31:d0:19:9b:81:d7: 02:ef:93:22:aa:56:41:b7:37:e9:8c:87:aa:80:4b: 7a:46:21:e5:87:0a:bb:63:52:1e:b3:e7:8f:51:c7: 99:3f:31:a4:27:90:e4:c8:8e:f6:39:16:f3:bc:bf: 1b:87:3c:82:56:a2:20:e9:86:b1:19:6f:cc:33:33: c5:f2:ea:dd:96:da:a3:6a:d0:eb:6c:e6:65:e6:e6: cf:55:91:ef:97:2d:46:44:91:4f:e4:e5:c7:56:cd: a4:9e:ac:c4:5b:9f:c2:9b:1e:72:28:0f:ec:7d:f7: 98:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A0:75:EF:24:67:27:18:2F:38:90:89:4B:43:23:BF:C8:76:91:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/576def10-b142-4ece-9211-731e3adac706/ffc7320e-f5f4-328d-976c-dc7d83ab9058.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/576def10-b142-4ece-9211-731e3adac706/576def10-b142-4ece-9211-731e3adac706.crl X509v3 Authority Key Identifier: keyid:BF:EE:50:EA:4A:1D:ED:50:5D:6D:39:88:7F:AB:E4:E2:0B:11:D9:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/576def10-b142-4ece-9211-731e3adac706.cer sbgp-ipAddrBlock: critical IPv4: 216.71.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:f1:4e:bd:96:42:60:4c:18:b4:1d:64:8c:54:5a:6b:d6:fa: 5b:fb:17:90:80:cb:7e:11:8c:65:33:f9:2f:51:d7:67:3b:a0: f5:5a:43:6f:b2:0c:48:ec:79:46:07:d5:73:ae:72:a1:5d:d2: 48:7c:cb:a3:57:cb:bc:c6:c8:18:ab:d5:2f:d3:8c:a7:9d:5f: 16:98:22:2b:2a:02:30:e4:7c:11:59:70:39:25:d1:18:1d:de: 1c:99:c7:64:ec:bb:06:ba:cd:a4:17:33:f9:2d:d9:d2:93:26: 79:57:bb:4f:c4:e2:c9:18:4a:ae:1e:e5:31:81:4d:56:81:a9: d5:34:23:e5:7f:0d:d0:46:5b:2c:17:ea:28:64:9f:b1:c3:d8: e6:3e:5b:db:f2:6e:9d:01:ff:39:7f:68:34:25:e5:33:9a:99: 06:d8:bc:3b:0d:6a:9d:c2:81:fd:79:1e:53:b7:79:67:e2:4e: 63:38:b6:ff:14:9b:c1:b4:89:fe:e6:dd:47:29:0e:fb:8b:f0: 64:e0:fc:c0:cc:3b:0c:c7:5b:72:6f:78:3a:f0:25:29:17:b3: 8a:7c:56:37:d5:81:10:20:3c:dd:f6:a8:de:6e:7f:5c:b2:68: fd:80:c2:3d:5f:eb:73:3e:cd:68:81:b0:d2:91:1b:69:7d:2f: 92:6b:4b:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2w50J7/we+O7j++GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTc2ZGVmMTAtYjE0Mi00ZWNlLTkyMTEtNzMxZTNhZGFj NzA2MB4XDTI2MDUwMTE2NDk0OFoXDTI2MDczMDE2NDk0OFowLzEtMCsGA1UEAxMk MGQ4MmM5YTctMmUyZS00YjhhLWJiNDQtNGUyMmMyZTkxZjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTm+N2KrD2tDbYWinLIIJVLPeRxToD6w3Q3f 7OwUXbASayL4pC/t1PlcfaFZeWoUWFlmt5PQ2hov/crcipAcpVSrkttMKQy+DmMy 1T3m3JidF/QYMYJ6YDBhEQFoIOzFl92TTzy1URWDrCslYBiWxYLCBRAktD8FnhDG tdKfbLItgRXZrqaGBw0KfWIn1qEx0BmbgdcC75MiqlZBtzfpjIeqgEt6RiHlhwq7 Y1Ies+ePUceZPzGkJ5DkyI72ORbzvL8bhzyCVqIg6YaxGW/MMzPF8urdltqjatDr bOZl5ubPVZHvly1GRJFP5OXHVs2knqzEW5/Cmx5yKA/sffeYowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKgde8kZycYLziQiUtDI7/IdpHFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81NzZk ZWYxMC1iMTQyLTRlY2UtOTIxMS03MzFlM2FkYWM3MDYvZmZjNzMyMGUtZjVmNC0z MjhkLTk3NmMtZGM3ZDgzYWI5MDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTc2ZGVmMTAtYjE0Mi00ZWNlLTky MTEtNzMxZTNhZGFjNzA2LzU3NmRlZjEwLWIxNDItNGVjZS05MjExLTczMWUzYWRh YzcwNi5jcmwwHwYDVR0jBBgwFoAUv+5Q6kod7VBdbTmIf6vk4gsR2cYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81NzZkZWYxMC1iMTQyLTRlY2UtOTIxMS03MzFl M2FkYWM3MDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Ed8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPxTr2WQmBMGLQdZIxUWmvW+lv7F5CAy34RjGUz+S9R12c7oPVaQ2+y DEjseUYH1XOucqFd0kh8y6NXy7zGyBir1S/TjKedXxaYIisqAjDkfBFZcDkl0Rgd 3hyZx2Tsuwa6zaQXM/kt2dKTJnlXu0/E4skYSq4e5TGBTVaBqdU0I+V/DdBGWywX 6ihkn7HD2OY+W9vybp0B/zl/aDQl5TOamQbYvDsNap3Cgf15HlO3eWfiTmM4tv8U m8G0if7m3UcpDvuL8GTg/MDMOwzHW3JveDrwJSkXs4p8VjfVgRAgPN32qN5uf1yy aP2Awj1f63M+zWiBsNKRG2l9L5JrS88= -----END CERTIFICATE-----Generated at Wed May 13 11:55:33 2026 by rpki-client