$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef91536a-6165-3248-b2df-6f916cdd18de.roa File: ef91536a-6165-3248-b2df-6f916cdd18de.roa (raw, json) Hash identifier: wSWfDsVU4at1YNfQTZAMuT5XYonSzgyGu2T5QoI2YIg= Subject key identifier: FF:E1:78:DC:B4:CA:43:08:FD:29:D0:1E:66:2B:52:5E:F0:6E:43:5D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D4C34629792B6B814F2AC1E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef91536a-6165-3248-b2df-6f916cdd18de.roa Signing time: Thu 26 Mar 2026 15:08:34 +0000 ROA not before: Thu 26 Mar 2026 15:08:34 +0000 ROA not after: Wed 24 Jun 2026 15:08:34 +0000 asID: 26134 IP address blocks: 216.87.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:34:62:97:92:b6:b8:14:f2:ac:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 26 15:08:34 2026 GMT Not After : Jun 24 15:08:34 2026 GMT Subject: CN=6a11a99d-d883-40f9-b08b-24c1e0d513c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:71:96:c3:be:79:25:cd:ac:b4:b1:08:f5:7b: 56:10:2c:bd:2a:5b:ca:1b:43:af:3e:a1:d3:0a:56: 18:1d:83:44:b6:47:9c:c4:7d:aa:99:34:fd:dd:ff: 9b:7b:77:93:cb:77:5c:53:4b:fa:ed:cb:fe:04:3d: fb:e6:42:cb:8a:c4:dd:39:a1:a4:58:f8:92:9c:51: 94:17:f9:74:0e:6f:34:5d:4e:41:cd:2c:7c:7b:ea: 96:2a:99:a9:54:1b:22:95:60:84:e8:d6:21:08:39: 1f:bf:ff:9f:dc:42:ef:71:36:a7:4c:f7:83:73:21: 63:dc:cb:16:87:55:df:03:dd:90:5b:a9:90:e6:de: 78:e6:2d:8a:df:8c:69:47:b7:81:dd:c1:09:15:e1: 7b:7e:9f:29:32:3b:ac:5d:df:dd:68:49:98:f8:ef: f1:a3:9a:58:fe:f3:4d:67:c6:53:e2:ca:d5:47:9d: bb:18:45:7d:55:d4:62:d9:ef:4f:e4:4c:0b:d7:b7: 09:a8:7c:b0:d0:0f:c3:46:c2:7c:0a:ad:59:2b:71: d9:55:05:70:e0:8f:f2:16:b9:d3:8e:48:b2:da:36: 41:1c:2a:b2:ae:16:00:64:8c:b3:91:11:47:2e:e0: c7:b3:81:20:d4:93:06:d9:53:9b:67:20:bd:bc:da: 26:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E1:78:DC:B4:CA:43:08:FD:29:D0:1E:66:2B:52:5E:F0:6E:43:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef91536a-6165-3248-b2df-6f916cdd18de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:3d:9b:d1:d7:77:18:3e:43:d0:5f:62:fb:be:76:f4:09:83: 97:9c:7b:75:36:7f:5f:a1:34:50:2c:14:2c:e9:4e:5d:5d:cb: 2c:dd:93:ce:71:d6:90:fa:da:d9:75:25:7d:f5:96:85:b5:33: 44:45:92:7d:73:40:5d:b2:3f:32:71:a3:ad:4e:a5:ce:2e:c4: b8:f8:a3:ed:07:0c:7c:1d:9f:ec:e2:da:71:12:49:d6:ec:42: 91:d3:3c:e0:df:ec:c6:26:4b:f7:79:c0:4c:05:bf:b2:43:65: 5b:1c:00:bc:5e:35:4c:f7:88:9a:f3:5a:91:29:e7:fb:c4:12: e9:d9:d2:1f:81:6b:f8:42:7f:f4:6e:cf:4b:65:dd:76:e8:ec: 8e:d1:92:7b:90:65:2c:eb:8c:2c:98:80:1c:d3:80:9f:93:14: 12:d5:fc:63:5b:64:07:a4:38:d7:5b:4b:d5:bd:78:9b:77:5e: 96:4d:86:58:41:8f:5b:3f:b5:e8:bb:31:a6:9b:a8:25:57:7e: 40:f9:5a:2d:89:a2:88:20:54:90:a3:48:4a:c9:d8:61:ed:4d: 04:ed:27:b2:a0:53:9f:9c:b0:54:04:55:98:0c:11:5e:dc:a9: 9d:3b:8c:7e:31:88:83:18:6b:eb:7f:ae:06:ec:65:42:8e:a3: 32:6d:7c:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1MNGKXkra4FPKsHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNjE1MDgzNFoXDTI2MDYyNDE1MDgzNFowLzEtMCsGA1UEAxMk NmExMWE5OWQtZDg4My00MGY5LWIwOGItMjRjMWUwZDUxM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHGWw755Jc2stLEI9XtWECy9KlvKG0OvPqHT ClYYHYNEtkecxH2qmTT93f+be3eTy3dcU0v67cv+BD375kLLisTdOaGkWPiSnFGU F/l0Dm80XU5BzSx8e+qWKpmpVBsilWCE6NYhCDkfv/+f3ELvcTanTPeDcyFj3MsW h1XfA92QW6mQ5t545i2K34xpR7eB3cEJFeF7fp8pMjusXd/daEmY+O/xo5pY/vNN Z8ZT4srVR527GEV9VdRi2e9P5EwL17cJqHyw0A/DRsJ8Cq1ZK3HZVQVw4I/yFrnT jkiy2jZBHCqyrhYAZIyzkRFHLuDHs4Eg1JMG2VObZyC9vNomcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/heNy0ykMI/SnQHmYrUl7wbkNdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWY5MTUzNmEtNjE2NS0z MjQ4LWIyZGYtNmY5MTZjZGQxOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEA9m9HXdxg+Q9BfYvu+dvQJg5ece3U2f1+hNFAsFCzpTl1dyyzdk85x 1pD62tl1JX31loW1M0RFkn1zQF2yPzJxo61Opc4uxLj4o+0HDHwdn+zi2nESSdbs QpHTPODf7MYmS/d5wEwFv7JDZVscALxeNUz3iJrzWpEp5/vEEunZ0h+Ba/hCf/Ru z0tl3Xbo7I7RknuQZSzrjCyYgBzTgJ+TFBLV/GNbZAekONdbS9W9eJt3XpZNhlhB j1s/tei7MaabqCVXfkD5Wi2JooggVJCjSErJ2GHtTQTtJ7KgU5+csFQEVZgMEV7c qZ07jH4xiIMYa+t/rgbsZUKOozJtfGg= -----END CERTIFICATE-----Generated at Sat Mar 28 13:25:18 2026 by rpki-client