$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/211726d9-186c-32fa-9269-934166f8a1be.roa File: 211726d9-186c-32fa-9269-934166f8a1be.roa (raw, json) Hash identifier: II+9lHzkEtTWHKM/WLRzZ/CefVY/XNBgv1Yqz0ZXZbA= Subject key identifier: 11:8E:19:FC:0A:D4:A7:C5:23:9B:B6:42:69:6A:F7:4D:2C:B3:D2:3B Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584D2BDA2032F55D2AB88CC67E00 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/211726d9-186c-32fa-9269-934166f8a1be.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 11090 IP address blocks: 216.137.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:20:32:f5:5d:2a:b8:8c:c6:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=758c96b6-108c-4e59-85ad-ca3a70fa66d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:20:7e:30:cb:fa:10:28:66:34:c4:05:d8:b0: 4d:23:cf:f6:65:08:06:5a:04:66:77:9d:f0:99:67: e6:1e:07:d6:52:da:c8:14:28:98:09:1d:d3:e5:b3: 00:58:96:36:6e:70:85:b2:da:07:d2:85:47:95:d5: 38:b2:7c:3f:e0:04:54:07:1e:b0:ba:69:37:dd:ce: b3:63:3a:be:6d:99:b5:52:f3:2e:41:d4:f3:fb:b2: fd:5a:12:a9:b2:69:ce:4b:2b:4a:7e:97:c0:df:58: 13:90:2f:a3:87:99:cd:66:79:84:3b:fc:18:ff:34: d8:0c:72:d3:6d:1f:6e:33:09:a2:a4:ab:ea:6c:80: 75:75:03:8d:30:5b:52:12:cb:4f:ed:26:34:82:04: 6e:a2:02:6d:c0:c1:e6:98:86:73:6d:01:d4:cf:82: ca:91:76:a8:b9:cb:82:77:ac:43:1a:be:a3:ed:4c: bc:7b:e2:2a:9b:8d:cf:6f:4c:c4:c0:97:58:7c:b7: 0a:0c:8f:fc:dc:c9:f5:74:86:fd:23:63:d9:53:ce: e7:8d:10:cf:7c:d0:ab:a0:73:42:78:99:4f:dd:60: 52:5c:b2:2e:1b:22:e6:7a:a8:d3:76:a7:a4:a5:11: a4:8a:7c:1a:92:cd:05:07:02:85:78:95:4b:b3:ea: db:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8E:19:FC:0A:D4:A7:C5:23:9B:B6:42:69:6A:F7:4D:2C:B3:D2:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/211726d9-186c-32fa-9269-934166f8a1be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:06:25:85:3a:e6:12:f3:e9:28:95:03:6d:35:18:db:8e:85: 69:6f:01:c0:2d:7e:2a:31:f3:49:ad:b3:82:13:c8:9a:a1:56: 48:19:54:13:e8:c0:6d:59:4c:77:51:83:1e:28:34:d8:1f:ed: 1f:e2:8d:72:d9:4a:04:7b:73:c2:88:71:fd:1e:ef:1e:e3:4d: 48:31:7b:a5:67:9e:33:a9:19:9a:7c:e4:10:8e:8f:1e:a9:17: fe:e3:3e:62:58:3f:69:09:e7:0b:66:0e:17:af:3f:8d:0c:79: b9:6d:6d:6b:43:30:94:3f:8e:03:3f:dd:01:fb:e8:7b:e2:ed: ba:b9:c4:4d:aa:74:09:ed:1e:96:bf:02:d9:ec:c8:f8:d3:5e: 7b:d1:5a:aa:7f:86:68:fc:8b:2d:f9:50:0c:d0:f1:b4:59:32: ad:10:7e:38:25:ab:f7:91:63:15:ea:c4:34:ba:6f:a5:93:ba: 71:fe:87:03:84:a0:38:91:7f:1f:1e:b1:a1:a8:48:32:57:fe: 54:f3:31:2f:5f:8c:d8:9e:f2:fe:b8:52:c1:60:f4:1b:a6:08: 06:f5:05:5e:07:b4:7d:cc:08:99:cb:86:80:42:f9:6e:2e:10: 93:27:cd:90:92:9e:86:d1:26:ed:ed:32:ff:36:08:5a:a0:9b: 69:7f:80:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2iAy9V0quIzGfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk NzU4Yzk2YjYtMTA4Yy00ZTU5LTg1YWQtY2EzYTcwZmE2NmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCB+MMv6EChmNMQF2LBNI8/2ZQgGWgRmd53w mWfmHgfWUtrIFCiYCR3T5bMAWJY2bnCFstoH0oVHldU4snw/4ARUBx6wumk33c6z Yzq+bZm1UvMuQdTz+7L9WhKpsmnOSytKfpfA31gTkC+jh5nNZnmEO/wY/zTYDHLT bR9uMwmipKvqbIB1dQONMFtSEstP7SY0ggRuogJtwMHmmIZzbQHUz4LKkXaoucuC d6xDGr6j7Uy8e+Iqm43Pb0zEwJdYfLcKDI/83Mn1dIb9I2PZU87njRDPfNCroHNC eJlP3WBSXLIuGyLmeqjTdqekpRGkinwaks0FBwKFeJVLs+rblQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGOGfwK1KfFI5u2Qmlq900ss9I7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMjExNzI2ZDktMTg2Yy0z MmZhLTkyNjktOTM0MTY2ZjhhMWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2IngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwGJYU65hLz6SiVA201GNuOhWlvAcAtfiox80mts4ITyJqhVkgZVBPo wG1ZTHdRgx4oNNgf7R/ijXLZSgR7c8KIcf0e7x7jTUgxe6VnnjOpGZp85BCOjx6p F/7jPmJYP2kJ5wtmDhevP40MebltbWtDMJQ/jgM/3QH76Hvi7bq5xE2qdAntHpa/ AtnsyPjTXnvRWqp/hmj8iy35UAzQ8bRZMq0Qfjglq/eRYxXqxDS6b6WTunH+hwOE oDiRfx8esaGoSDJX/lTzMS9fjNie8v64UsFg9BumCAb1BV4HtH3MCJnLhoBC+W4u EJMnzZCSnobRJu3tMv82CFqgm2l/gI8= -----END CERTIFICATE-----Generated at Thu Mar 26 11:30:15 2026 by rpki-client