$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/76c9a55e-ad49-38eb-9017-9a51b8f21b8e.roa File: 76c9a55e-ad49-38eb-9017-9a51b8f21b8e.roa (raw, json) Hash identifier: xXmqEvh04GcMyBEpb/C2K6tL2oJF9eqQOjhm1BR/KGM= Subject key identifier: D7:90:BA:6F:52:A2:87:9B:1E:93:8F:46:A7:41:8E:0D:17:83:BF:67 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584D2BDA208BE4061FED32E30E80 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/76c9a55e-ad49-38eb-9017-9a51b8f21b8e.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 11090 IP address blocks: 216.137.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:20:8b:e4:06:1f:ed:32:e3:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=2e383fad-6ea9-4e30-8dc4-86f4d6d074b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e3:6e:52:af:9c:9a:51:d0:f7:f7:ba:d5:32: 38:66:5e:31:22:a8:4d:f3:22:40:30:30:2b:18:7f: 9a:fe:93:d6:d8:3a:99:96:75:13:5b:df:6f:aa:cd: d4:79:f9:f5:7f:40:a6:8c:b7:42:ad:c8:aa:17:d3: f4:72:93:81:15:86:ec:34:e4:2b:a8:3e:85:33:75: c8:d8:cc:63:b6:25:49:52:a3:ab:2b:5a:2e:7d:3e: 32:71:68:20:d1:2d:5e:76:9e:38:45:9b:1c:8e:4d: 35:1d:9f:13:3e:99:75:96:71:2d:39:63:72:f8:8b: c0:1b:e0:14:1a:cc:d7:05:4a:a4:e9:a6:01:f1:8a: 7f:19:7f:f3:ce:31:7d:52:5f:08:49:1b:10:c3:e3: 94:7c:14:29:28:4a:85:61:96:75:d4:13:30:07:75: 98:06:09:24:ed:ee:6e:7a:b3:d4:08:0a:0e:4a:e6: 45:ec:4f:75:02:46:f9:61:d8:19:9d:8f:0c:b3:e4: 6b:56:64:e3:3e:b2:8f:8b:2e:e8:27:6a:80:3f:d0: 88:74:17:57:ca:0d:db:34:00:3d:d8:f1:a1:df:85: ad:ae:f1:11:6a:cd:63:c3:65:e2:8c:9d:7f:b3:37: 91:2e:01:35:43:8c:15:5a:6f:e0:7c:df:54:37:60: 04:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:90:BA:6F:52:A2:87:9B:1E:93:8F:46:A7:41:8E:0D:17:83:BF:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/76c9a55e-ad49-38eb-9017-9a51b8f21b8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e1:9d:9b:c7:ae:0f:6d:d1:f5:c0:d8:0e:a8:b1:aa:3a:ed: b1:30:2c:3d:5c:11:ed:f2:ed:be:06:41:67:06:85:d6:87:40: f1:bf:86:f8:2e:ae:95:c0:5b:49:64:27:fb:5a:48:7e:58:20: 89:7a:45:26:b4:fa:35:31:a5:a5:62:b6:16:21:32:46:ed:5a: a3:40:b0:f9:eb:b4:82:69:a8:48:5d:2e:38:fb:54:c4:da:8c: 20:8f:ac:24:c8:60:a3:1a:14:f6:f7:61:6a:40:72:26:b5:ea: c6:4d:37:43:36:96:70:64:0c:2d:0c:4d:20:e3:16:0c:dc:bc: b8:93:9a:ac:4a:fd:18:3b:9b:f7:91:c2:85:aa:be:39:18:70: 8e:1d:36:3d:61:a3:56:87:6c:14:52:60:62:c5:c5:68:da:56: d4:f2:81:b2:61:e6:b5:7e:cd:15:57:7a:a7:e6:aa:74:4d:8c: 2b:8f:09:a1:2f:55:07:fa:44:7b:a1:1a:bb:7d:25:ab:5c:e2: 10:18:b7:25:66:cb:4b:a3:8d:ad:28:3b:9f:f1:c2:cb:5f:a1: 89:23:2a:ad:fb:b6:e5:b3:d6:57:76:3a:cd:a1:85:a7:37:a7: 2e:fa:50:36:8b:4f:f7:39:fc:b2:6a:0e:de:d8:70:11:2d:47: 4c:26:60:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2iCL5AYf7TLjDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk MmUzODNmYWQtNmVhOS00ZTMwLThkYzQtODZmNGQ2ZDA3NGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuNuUq+cmlHQ9/e61TI4Zl4xIqhN8yJAMDAr GH+a/pPW2DqZlnUTW99vqs3Uefn1f0CmjLdCrciqF9P0cpOBFYbsNOQrqD6FM3XI 2MxjtiVJUqOrK1oufT4ycWgg0S1edp44RZscjk01HZ8TPpl1lnEtOWNy+IvAG+AU GszXBUqk6aYB8Yp/GX/zzjF9Ul8ISRsQw+OUfBQpKEqFYZZ11BMwB3WYBgkk7e5u erPUCAoOSuZF7E91Akb5YdgZnY8Ms+RrVmTjPrKPiy7oJ2qAP9CIdBdXyg3bNAA9 2PGh34WtrvERas1jw2XijJ1/szeRLgE1Q4wVWm/gfN9UN2AERQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNeQum9SooebHpOPRqdBjg0Xg79nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNzZjOWE1NWUtYWQ0OS0z OGViLTkwMTctOWE1MWI4ZjIxYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2InIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzhnZvHrg9t0fXA2A6osao67bEwLD1cEe3y7b4GQWcGhdaHQPG/hvgu rpXAW0lkJ/taSH5YIIl6RSa0+jUxpaVithYhMkbtWqNAsPnrtIJpqEhdLjj7VMTa jCCPrCTIYKMaFPb3YWpAcia16sZNN0M2lnBkDC0MTSDjFgzcvLiTmqxK/Rg7m/eR woWqvjkYcI4dNj1ho1aHbBRSYGLFxWjaVtTygbJh5rV+zRVXeqfmqnRNjCuPCaEv VQf6RHuhGrt9Jatc4hAYtyVmy0ujja0oO5/xwstfoYkjKq37tuWz1ld2Os2hhac3 py76UDaLT/c5/LJqDt7YcBEtR0wmYI4= -----END CERTIFICATE-----Generated at Thu Mar 26 12:56:20 2026 by rpki-client