$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/7f1cdd4b-0bea-3f13-a2ad-b0076aca68a4.roa File: 7f1cdd4b-0bea-3f13-a2ad-b0076aca68a4.roa (raw, json) Hash identifier: rwfuJ9TVA7B/joRTBrw7hX0MLykQbFOyQQlSrNRLcTM= Subject key identifier: FE:B8:BF:CD:D2:49:EC:78:A2:A3:EA:95:9B:EB:AE:2F:F1:D9:60:39 Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F4328584DCF2B0DCFCC7514C2F6444E80 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/7f1cdd4b-0bea-3f13-a2ad-b0076aca68a4.roa Signing time: Tue 12 May 2026 13:00:30 +0000 ROA not before: Tue 12 May 2026 13:00:30 +0000 ROA not after: Mon 10 Aug 2026 13:00:30 +0000 asID: 21530 IP address blocks: 216.66.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2b:0d:cf:cc:75:14:c2:f6:44:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: May 12 13:00:30 2026 GMT Not After : Aug 10 13:00:30 2026 GMT Subject: CN=09fae617-29aa-4ca3-ba82-84a2d683998c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b5:b6:f3:92:93:49:e8:d0:e7:cd:80:23:71: 5c:e2:70:a6:f9:7f:5e:f3:d7:01:cf:ec:92:26:bb: 58:6f:22:e5:ed:4a:30:f2:c0:78:65:bc:71:5a:be: 2b:e4:ba:69:cc:bc:89:61:ad:39:ae:14:09:83:a1: c3:28:48:31:80:1c:cb:8f:ec:e6:ce:80:55:05:54: 46:63:2a:dd:36:d4:52:a2:80:82:4b:13:b0:66:77: 15:28:b9:0e:fc:84:e1:5c:d6:13:c3:ba:ec:90:08: b1:af:e6:d0:46:29:8d:42:b3:6b:77:f6:fd:67:fa: d2:41:ba:10:70:f4:b0:88:30:61:f4:5e:65:7d:c9: 33:18:7e:36:00:e6:79:ca:76:e2:66:8c:32:c0:48: b9:01:65:db:78:8f:3e:a2:a8:d2:62:50:97:37:33: dd:80:2a:c2:ec:84:28:4f:0d:a2:17:66:53:e0:7b: c7:24:dc:1f:2e:27:73:50:47:b9:f7:11:f7:0b:25: 0a:4c:d0:ee:f9:7f:60:5b:eb:f6:02:cf:e6:37:a0: 6e:73:bc:ef:06:55:b5:a6:40:a9:9f:ce:a6:ff:62: 2f:a0:a3:bd:1e:e7:a8:e5:b7:28:4d:a1:ef:c2:84: a0:31:c2:b9:5d:c3:5f:c3:cf:5c:1d:92:42:7d:89: b6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B8:BF:CD:D2:49:EC:78:A2:A3:EA:95:9B:EB:AE:2F:F1:D9:60:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/7f1cdd4b-0bea-3f13-a2ad-b0076aca68a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 216.66.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:bd:ca:bb:c9:80:5a:ec:24:b1:d0:39:f9:a3:fa:d7:2a:05: ab:d3:8f:af:04:b0:e7:c4:e6:cb:e0:0d:3f:d5:e7:87:b3:01: 0b:7b:23:a7:61:f5:a2:12:2e:fc:35:60:02:38:c8:2b:64:4e: fd:4d:c7:83:d6:ae:51:2c:c8:45:ad:e0:f9:5c:cf:58:1c:aa: 24:3c:3f:a8:7c:2b:df:09:68:42:26:09:4e:a1:27:5e:4c:61: 54:84:70:e3:1b:84:a6:0d:d5:e5:06:27:3f:c5:80:10:b7:e0: d6:6d:3e:e1:f7:e9:8d:48:8c:ba:26:b8:5e:4c:01:2a:2b:0e: 3e:64:f5:10:57:94:c5:05:6e:92:ec:ae:f1:6c:85:81:de:b6: c1:a0:a7:df:ff:d5:83:91:f0:3b:14:fa:16:1d:6f:4d:b2:a2: c5:bb:51:df:93:2c:68:c6:a1:99:d8:0e:db:bc:65:9d:0f:23: 83:8f:3c:3c:af:bc:d3:ca:6b:7b:d3:83:8f:be:35:3d:e5:f7: bd:e3:79:c0:5f:fc:54:59:7e:d0:86:79:d8:2d:74:cb:49:ba: 67:5f:3f:28:ed:af:df:a0:04:1b:2a:c7:08:88:c4:d2:76:07: 09:ad:dc:18:fb:22:6c:43:45:43:f6:b4:83:90:1a:69:9e:b0: b7:35:cd:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PKw3PzHUUwvZEToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI2MDUxMjEzMDAzMFoXDTI2MDgxMDEzMDAzMFowLzEtMCsGA1UEAxMk MDlmYWU2MTctMjlhYS00Y2EzLWJhODItODRhMmQ2ODM5OThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbW285KTSejQ582AI3Fc4nCm+X9e89cBz+yS JrtYbyLl7Uow8sB4ZbxxWr4r5LppzLyJYa05rhQJg6HDKEgxgBzLj+zmzoBVBVRG YyrdNtRSooCCSxOwZncVKLkO/IThXNYTw7rskAixr+bQRimNQrNrd/b9Z/rSQboQ cPSwiDBh9F5lfckzGH42AOZ5ynbiZowywEi5AWXbeI8+oqjSYlCXNzPdgCrC7IQo Tw2iF2ZT4HvHJNwfLidzUEe59xH3CyUKTNDu+X9gW+v2As/mN6Buc7zvBlW1pkCp n86m/2IvoKO9Hueo5bcoTaHvwoSgMcK5XcNfw89cHZJCfYm22QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP64v83SSex4oqPqlZvrri/x2WA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvN2YxY2RkNGItMGJlYS0z ZjEzLWEyYWQtYjAwNzZhY2E2OGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2ELSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKC9yrvJgFrsJLHQOfmj+tcqBavTj68EsOfE5svgDT/V54ezAQt7I6dh 9aISLvw1YAI4yCtkTv1Nx4PWrlEsyEWt4Plcz1gcqiQ8P6h8K98JaEImCU6hJ15M YVSEcOMbhKYN1eUGJz/FgBC34NZtPuH36Y1IjLomuF5MASorDj5k9RBXlMUFbpLs rvFshYHetsGgp9//1YOR8DsU+hYdb02yosW7Ud+TLGjGoZnYDtu8ZZ0PI4OPPDyv vNPKa3vTg4++NT3l973jecBf/FRZftCGedgtdMtJumdfPyjtr9+gBBsqxwiIxNJ2 Bwmt3Bj7ImxDRUP2tIOQGmmesLc1zTs= -----END CERTIFICATE-----Generated at Wed May 13 15:00:49 2026 by rpki-client