$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/281cf22f-5e1e-3f7f-bc06-61fb184bdb55.roa File: 281cf22f-5e1e-3f7f-bc06-61fb184bdb55.roa (raw, json) Hash identifier: H5vZCgEFAuc5XqTUff95v2OLqLdi15c7uV6mRZYDebg= Subject key identifier: 9E:73:83:3D:D3:A2:AF:0D:D2:22:C7:AF:64:6A:C3:12:36:3C:48:A9 Certificate issuer: /CN=13d1e2d5-5089-4514-80fb-652631b3cfab Certificate serial: 010D0C9F4328584D397B6582363ACF2A9E167340 Authority key identifier: 03:53:40:F7:C9:7E:C0:C8:FC:BB:2E:B0:A6:53:6F:04:20:D6:E1:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/281cf22f-5e1e-3f7f-bc06-61fb184bdb55.roa Signing time: Thu 19 Mar 2026 22:11:17 +0000 ROA not before: Thu 19 Mar 2026 22:11:17 +0000 ROA not after: Wed 17 Jun 2026 22:11:17 +0000 asID: 62917 IP address blocks: 172.83.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/13d1e2d5-5089-4514-80fb-652631b3cfab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/13d1e2d5-5089-4514-80fb-652631b3cfab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:7b:65:82:36:3a:cf:2a:9e:16:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13d1e2d5-5089-4514-80fb-652631b3cfab Validity Not Before: Mar 19 22:11:17 2026 GMT Not After : Jun 17 22:11:17 2026 GMT Subject: CN=38d7a89c-5837-4169-ba35-a30ef9befa6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:35:11:91:2b:38:e6:08:6d:3c:e0:1c:f4:e3: 67:95:a9:57:38:d1:fa:0b:93:39:d6:7a:22:94:12: f4:26:f0:40:d0:6d:dd:2c:1e:8d:d3:27:90:97:f1: 9f:bc:7e:90:1a:4f:c6:e0:20:05:c7:24:80:94:2c: da:c7:ec:5a:6d:b0:af:33:b2:a5:0b:0a:b4:60:27: ec:75:7a:89:3e:8e:a8:ca:c6:2e:55:5a:88:01:ab: f2:d5:44:b0:e0:2f:10:2b:88:c4:6d:6c:8f:c4:78: b5:de:af:21:a9:6e:95:fc:22:de:6e:77:b5:bb:bb: 25:e1:1c:16:23:12:59:b7:1f:a0:95:07:1e:34:8b: 87:0b:18:0d:04:a3:98:6b:b4:b7:7e:ac:b6:43:1e: d0:ee:93:b3:f6:40:7b:e8:86:0c:82:67:6c:08:5a: 5b:d9:d1:fb:54:a3:e5:e6:16:fb:2b:51:16:da:36: 6f:76:ea:5b:82:2f:c4:4a:e6:76:d4:74:36:70:30: c7:35:27:e7:1e:b5:2d:4e:63:03:8f:2e:69:3a:56: ce:8e:6c:ed:6c:77:43:e1:e4:6b:df:0c:09:20:dc: 03:01:29:a0:d5:73:d0:03:c2:11:8d:33:92:aa:15: e0:15:b4:34:c0:a3:36:11:fc:ec:c5:9d:d0:98:70: ff:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:73:83:3D:D3:A2:AF:0D:D2:22:C7:AF:64:6A:C3:12:36:3C:48:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/281cf22f-5e1e-3f7f-bc06-61fb184bdb55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/13d1e2d5-5089-4514-80fb-652631b3cfab.crl X509v3 Authority Key Identifier: keyid:03:53:40:F7:C9:7E:C0:C8:FC:BB:2E:B0:A6:53:6F:04:20:D6:E1:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab.cer sbgp-ipAddrBlock: critical IPv4: 172.83.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:35:0a:d6:36:30:43:76:dd:61:9f:10:67:b5:12:19:54:5b: 81:2f:6c:3c:22:c5:42:82:a6:00:91:fb:5c:ec:16:9e:96:cc: 88:bc:21:02:ec:1e:1c:67:f8:2c:54:0a:6e:21:d9:21:bb:2c: d5:da:f9:5f:3e:a0:ab:3d:63:93:2e:47:be:70:68:43:82:4d: 11:26:b6:d0:ff:3b:dd:e0:e1:9c:6f:4e:a9:ec:b1:7e:27:b7: ee:cd:39:8d:c9:41:df:01:47:ec:62:0e:57:8c:c5:4f:fe:f6: f5:63:1d:7e:19:22:81:4b:48:9c:d4:ee:45:87:75:6a:20:7e: 6a:0d:e9:c0:66:eb:6a:96:66:1c:38:d8:22:5f:7e:6c:cd:b2: 8d:1b:1d:3c:42:30:93:49:fe:78:1c:dd:e1:3c:1f:bd:ae:80: 18:f9:c9:0b:85:20:16:4b:84:a0:57:20:68:1e:92:c8:11:18: d2:24:aa:9c:3a:60:83:76:72:89:90:48:22:36:28:d1:98:04: a1:1e:9c:bb:4e:fe:c7:77:df:80:ba:c0:ad:e9:25:f6:53:16: 30:f3:9a:f2:fd:46:10:96:5a:d5:fc:6b:b1:aa:84:1f:84:c5: 02:1b:a0:13:7b:e2:31:39:a3:59:01:c7:3e:44:39:d1:83:10: 57:4b:f3:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05e2WCNjrPKp4Wc0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTNkMWUyZDUtNTA4OS00NTE0LTgwZmItNjUyNjMxYjNj ZmFiMB4XDTI2MDMxOTIyMTExN1oXDTI2MDYxNzIyMTExN1owLzEtMCsGA1UEAxMk MzhkN2E4OWMtNTgzNy00MTY5LWJhMzUtYTMwZWY5YmVmYTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzURkSs45ghtPOAc9ONnlalXONH6C5M51noi lBL0JvBA0G3dLB6N0yeQl/GfvH6QGk/G4CAFxySAlCzax+xabbCvM7KlCwq0YCfs dXqJPo6oysYuVVqIAavy1USw4C8QK4jEbWyPxHi13q8hqW6V/CLebne1u7sl4RwW IxJZtx+glQceNIuHCxgNBKOYa7S3fqy2Qx7Q7pOz9kB76IYMgmdsCFpb2dH7VKPl 5hb7K1EW2jZvdupbgi/ESuZ21HQ2cDDHNSfnHrUtTmMDjy5pOlbOjmztbHdD4eRr 3wwJINwDASmg1XPQA8IRjTOSqhXgFbQ0wKM2EfzsxZ3QmHD/LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5zgz3Toq8N0iLHr2RqwxI2PEipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xM2Qx ZTJkNS01MDg5LTQ1MTQtODBmYi02NTI2MzFiM2NmYWIvMjgxY2YyMmYtNWUxZS0z ZjdmLWJjMDYtNjFmYjE4NGJkYjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTNkMWUyZDUtNTA4OS00NTE0LTgw ZmItNjUyNjMxYjNjZmFiLzEzZDFlMmQ1LTUwODktNDUxNC04MGZiLTY1MjYzMWIz Y2ZhYi5jcmwwHwYDVR0jBBgwFoAUA1NA98l+wMj8uy6wplNvBCDW4Y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xM2QxZTJkNS01MDg5LTQ1MTQtODBmYi02NTI2 MzFiM2NmYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABg1CtY2MEN23WGfEGe1EhlUW4EvbDwixUKCpgCR+1zsFp6WzIi8IQLs Hhxn+CxUCm4h2SG7LNXa+V8+oKs9Y5MuR75waEOCTREmttD/O93g4ZxvTqnssX4n t+7NOY3JQd8BR+xiDleMxU/+9vVjHX4ZIoFLSJzU7kWHdWogfmoN6cBm62qWZhw4 2CJffmzNso0bHTxCMJNJ/ngc3eE8H72ugBj5yQuFIBZLhKBXIGgeksgRGNIkqpw6 YIN2comQSCI2KNGYBKEenLtO/sd334C6wK3pJfZTFjDzmvL9RhCWWtX8a7GqhB+E xQIboBN74jE5o1kBxz5EOdGDEFdL8+M= -----END CERTIFICATE-----Generated at Thu Mar 26 15:10:28 2026 by rpki-client