$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2f38b7d1-b1ed-3703-9281-2bace1cc3dd0.roa File: 2f38b7d1-b1ed-3703-9281-2bace1cc3dd0.roa (raw, json) Hash identifier: 9way6WIEZAtcn0SbZl5o2DKH1KV9TdBZAfG3BRlRDGk= Subject key identifier: DD:EB:FA:A1:7C:9C:28:C5:A3:B1:75:0E:B5:D2:9B:7A:79:DE:32:17 Certificate issuer: /CN=1d639366-c044-456e-b8c8-0de04a543a0c Certificate serial: 010D0C9F4328584D492A72C144D7401C9A6E58A0 Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2f38b7d1-b1ed-3703-9281-2bace1cc3dd0.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 27608 IP address blocks: 216.68.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:72:c1:44:d7:40:1c:9a:6e:58:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=804ee71c-80ec-4d3e-bc2f-e7565f8cd678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:81:3c:e0:ce:6b:f2:cd:a1:24:4b:1d:33:45: dc:78:1c:ba:7e:98:38:98:dd:85:11:2b:04:2d:1e: ad:86:c8:a7:a1:73:cb:6a:63:d4:62:d2:04:a2:f6: 29:c1:d7:d4:f8:12:40:57:6e:54:27:62:36:9d:31: 27:7b:e4:24:4f:f1:6e:11:4c:02:3d:58:26:2b:e7: 41:bc:61:63:18:1a:79:ac:71:bf:e8:53:a9:a8:39: 94:f5:62:b3:e6:f5:1a:1b:35:6c:42:83:21:7f:1e: 20:41:f0:12:8a:2e:6a:56:bc:ea:7c:34:a7:af:7b: ae:aa:9e:bd:5b:e1:ac:d9:0f:7a:f5:f4:fd:72:7a: 4e:4f:58:19:8e:ea:9a:a2:44:41:6f:db:62:a4:4f: ed:ee:eb:e2:a9:1c:5f:a2:1b:4b:42:42:e3:1a:c7: 4b:dd:69:80:55:d2:65:ee:bc:7e:8e:1b:a2:58:41: 01:d1:0d:d7:b4:7c:4c:04:e0:e1:cf:ae:c7:b1:49: 22:8d:f8:e0:af:f4:95:b1:5f:8b:a9:86:7c:8e:89: 7b:27:d8:2a:8f:20:8b:d0:e2:73:9a:ad:f3:f9:33: 9b:1b:29:3b:3c:db:e4:42:d9:97:83:c8:fd:0b:5f: 9f:c5:07:74:a0:1b:a6:16:c6:ee:88:97:f8:7b:68: c3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EB:FA:A1:7C:9C:28:C5:A3:B1:75:0E:B5:D2:9B:7A:79:DE:32:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2f38b7d1-b1ed-3703-9281-2bace1cc3dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl X509v3 Authority Key Identifier: keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer sbgp-ipAddrBlock: critical IPv4: 216.68.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:fb:5b:12:94:7c:65:14:5e:e5:fa:1f:22:f5:08:f4:26:47: 4d:ae:03:b2:70:a7:a5:2d:85:51:a6:4c:7e:47:83:cf:2e:21: 83:86:57:8b:d3:f3:1f:e1:b0:c8:51:04:d6:0b:bf:84:e3:53: 82:46:ac:11:8a:1a:41:97:0c:6e:d2:ce:9b:98:e8:c5:20:bd: e8:7b:dd:67:d6:b8:85:e7:9c:89:27:e5:1b:02:f6:df:64:51: 35:a3:15:4a:2d:55:7b:00:09:40:77:f4:bf:db:40:69:70:93: be:4a:d3:42:c8:b0:4f:d9:7f:6a:aa:c7:02:7d:2c:2e:35:e3: ca:73:b6:4e:0b:8a:16:ea:1b:bf:70:5f:59:01:2c:fd:cd:b8: e1:42:b0:37:a3:36:4f:2d:90:59:e7:04:e4:69:22:f0:4d:6e: e4:87:d0:79:9e:5f:54:c8:10:1e:b6:08:78:17:12:ba:0f:89: 20:b5:e7:20:ae:46:23:59:c0:13:26:c1:a7:c0:2c:fd:db:27: f9:26:87:66:34:15:e1:fa:e4:f6:d5:eb:20:ee:86:f6:30:8d: c1:db:20:0d:95:5a:9d:b3:ee:08:2c:01:fd:f2:d3:04:19:45: b1:0f:3a:59:71:67:8f:0f:36:fd:e3:16:2f:8e:59:5f:11:d3: c9:ea:31:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKnLBRNdAHJpuWKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzkzNjYtYzA0NC00NTZlLWI4YzgtMGRlMDRhNTQz YTBjMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk ODA0ZWU3MWMtODBlYy00ZDNlLWJjMmYtZTc1NjVmOGNkNjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4E84M5r8s2hJEsdM0XceBy6fpg4mN2FESsE LR6thsinoXPLamPUYtIEovYpwdfU+BJAV25UJ2I2nTEne+QkT/FuEUwCPVgmK+dB vGFjGBp5rHG/6FOpqDmU9WKz5vUaGzVsQoMhfx4gQfASii5qVrzqfDSnr3uuqp69 W+Gs2Q969fT9cnpOT1gZjuqaokRBb9tipE/t7uviqRxfohtLQkLjGsdL3WmAVdJl 7rx+jhuiWEEB0Q3XtHxMBODhz67HsUkijfjgr/SVsV+LqYZ8jol7J9gqjyCL0OJz mq3z+TObGyk7PNvkQtmXg8j9C1+fxQd0oBumFsbuiJf4e2jDHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3r+qF8nCjFo7F1DrXSm3p53jIXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYz OTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1NDNhMGMvMmYzOGI3ZDEtYjFlZC0z NzAzLTkyODEtMmJhY2UxY2MzZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWQ2MzkzNjYtYzA0NC00NTZlLWI4 YzgtMGRlMDRhNTQzYTBjLzFkNjM5MzY2LWMwNDQtNDU2ZS1iOGM4LTBkZTA0YTU0 M2EwYy5jcmwwHwYDVR0jBBgwFoAU/DVXyQ49tRkFhaSn5xDpZWoEZ4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUw NGE1NDNhMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ET9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG77WxKUfGUUXuX6HyL1CPQmR02uA7Jwp6UthVGmTH5Hg88uIYOGV4vT 8x/hsMhRBNYLv4TjU4JGrBGKGkGXDG7SzpuY6MUgveh73WfWuIXnnIkn5RsC9t9k UTWjFUotVXsACUB39L/bQGlwk75K00LIsE/Zf2qqxwJ9LC4148pztk4LihbqG79w X1kBLP3NuOFCsDejNk8tkFnnBORpIvBNbuSH0HmeX1TIEB62CHgXEroPiSC15yCu RiNZwBMmwafALP3bJ/kmh2Y0FeH65PbV6yDuhvYwjcHbIA2VWp2z7ggsAf3y0wQZ RbEPOllxZ48PNv3jFi+OWV8R08nqMf0= -----END CERTIFICATE-----Generated at Thu Mar 26 15:18:21 2026 by rpki-client