$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/abd2e4c2-fd7a-34a0-8f6d-b7b766cd9902.roa File: abd2e4c2-fd7a-34a0-8f6d-b7b766cd9902.roa (raw, json) Hash identifier: gPdSoL7LMh3zR3fvqV4hefM1lOaLCuIdv1iw8B5h0ro= Subject key identifier: 9C:85:E9:D0:AF:0E:15:B8:57:79:C7:6C:89:54:81:1C:FF:93:F5:D4 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584D2BDA1FFDD0B70133A3A47680 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/abd2e4c2-fd7a-34a0-8f6d-b7b766cd9902.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 11090 IP address blocks: 216.137.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:1f:fd:d0:b7:01:33:a3:a4:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=f07be82a-9d7c-4c9c-b8e8-7660f1773816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d9:c6:e9:86:6f:0b:a0:44:6e:c5:68:1e:7d: cb:9a:5a:84:30:98:f9:d4:3d:41:02:33:f9:e1:94: 82:2b:09:93:69:3c:9a:60:b1:d9:61:ef:3b:ea:d0: e7:57:07:1c:3c:d6:91:98:c9:bc:58:bf:58:2a:e7: 8c:88:b7:b3:27:6a:c5:0e:34:fb:6d:69:1c:4e:1a: 2b:ac:a7:59:41:80:ea:4a:36:2e:78:eb:0b:31:47: 19:4b:43:46:90:f4:07:ca:b4:4b:e9:c7:3a:ba:4c: 3a:f2:ae:03:e0:22:c5:48:e6:f2:1d:a3:6c:7c:1b: f0:80:5b:2a:19:79:d5:1f:69:b9:c6:f3:c3:a5:c1: 1e:db:4b:a6:03:c7:0d:45:21:2f:c0:16:25:0b:12: f5:f2:d1:f9:7e:8b:cb:2a:bb:ab:36:13:85:8f:59: 6d:eb:02:9f:ba:6f:6a:cd:47:cd:a4:d0:5c:5a:7c: c9:07:d5:ad:e6:ee:ab:9a:7d:45:07:cb:ea:dd:0b: ec:0d:d1:40:eb:08:e1:1b:1b:14:2c:c4:c3:a8:ae: ab:ad:0e:e8:bc:95:5b:98:8b:62:ed:4c:f7:1f:53: 46:96:86:d4:e2:02:46:8e:d2:58:eb:f2:7c:39:f5: f8:79:42:93:34:a0:a9:e8:24:58:95:b0:2f:d1:cf: 4e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:85:E9:D0:AF:0E:15:B8:57:79:C7:6C:89:54:81:1C:FF:93:F5:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/abd2e4c2-fd7a-34a0-8f6d-b7b766cd9902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:3c:f2:94:6f:67:95:7d:84:1e:2c:85:f9:0f:17:4c:3e:93: ef:15:86:c6:ad:14:e7:88:e2:43:d7:9e:e2:67:87:15:6a:80: e7:d7:47:a7:e1:04:82:7b:93:59:6b:6f:92:ec:b9:cd:d7:35: ce:37:f6:44:00:be:5d:05:de:5d:12:2c:6b:b4:54:06:d3:cc: 3d:6c:8b:ff:87:c9:b0:10:7c:32:a5:38:e7:2c:fb:75:48:29: ea:a8:c0:b1:64:39:57:95:45:d4:84:32:b6:3d:bc:3f:18:9e: 5d:5d:b0:ff:4e:aa:7f:57:36:60:a8:eb:3e:ba:9f:a5:f8:01: cd:f0:02:3c:e2:cd:97:45:b5:31:9d:68:a0:1b:40:64:63:31: 25:21:6e:6e:39:ec:8a:8d:32:05:a1:fd:aa:44:40:00:55:ec: 28:f6:7c:2c:3e:8b:34:39:52:bc:1b:ba:4f:97:9b:2a:67:94: 7a:b1:ca:44:30:d7:82:b2:6c:36:ce:ca:35:e3:12:4d:68:40: c4:3c:c6:ec:55:04:62:27:c4:98:19:2b:30:d1:6b:10:f9:d6: 7b:04:bc:4c:e8:35:00:13:75:2a:ea:ba:62:11:22:10:60:a6: 4b:0b:12:a0:bd:a3:c2:ac:e5:45:d7:c8:df:9e:ca:78:77:9b: 54:a5:75:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2h/90LcBM6OkdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZjA3YmU4MmEtOWQ3Yy00YzljLWI4ZTgtNzY2MGYxNzczODE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidnG6YZvC6BEbsVoHn3LmlqEMJj51D1BAjP5 4ZSCKwmTaTyaYLHZYe876tDnVwccPNaRmMm8WL9YKueMiLezJ2rFDjT7bWkcThor rKdZQYDqSjYueOsLMUcZS0NGkPQHyrRL6cc6ukw68q4D4CLFSObyHaNsfBvwgFsq GXnVH2m5xvPDpcEe20umA8cNRSEvwBYlCxL18tH5fovLKrurNhOFj1lt6wKfum9q zUfNpNBcWnzJB9Wt5u6rmn1FB8vq3QvsDdFA6wjhGxsULMTDqK6rrQ7ovJVbmIti 7Uz3H1NGlobU4gJGjtJY6/J8OfX4eUKTNKCp6CRYlbAv0c9OJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyF6dCvDhW4V3nHbIlUgRz/k/XUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYWJkMmU0YzItZmQ3YS0z NGEwLThmNmQtYjdiNzY2Y2Q5OTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2InoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHs88pRvZ5V9hB4shfkPF0w+k+8VhsatFOeI4kPXnuJnhxVqgOfXR6fh BIJ7k1lrb5Lsuc3XNc439kQAvl0F3l0SLGu0VAbTzD1si/+HybAQfDKlOOcs+3VI KeqowLFkOVeVRdSEMrY9vD8Ynl1dsP9Oqn9XNmCo6z66n6X4Ac3wAjzizZdFtTGd aKAbQGRjMSUhbm457IqNMgWh/apEQABV7Cj2fCw+izQ5Urwbuk+XmypnlHqxykQw 14KybDbOyjXjEk1oQMQ8xuxVBGInxJgZKzDRaxD51nsEvEzoNQATdSrqumIRIhBg pksLEqC9o8Ks5UXXyN+eynh3m1SldVE= -----END CERTIFICATE-----Generated at Thu Mar 26 11:25:36 2026 by rpki-client