$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfe3e283-95fd-4916-9980-82cb3ba1d1c2/b2496d41-8d74-37d5-acc3-73d13388ad42.roa File: b2496d41-8d74-37d5-acc3-73d13388ad42.roa (raw, json) Hash identifier: JcCtJ2K10rkDYymc5TkP6CDUuVWSlIoRLIK9S7bVRM0= Subject key identifier: FC:C4:80:2D:A4:AA:7D:7C:44:D5:1A:9B:CB:49:61:22:42:F3:FA:B3 Certificate issuer: /CN=cfe3e283-95fd-4916-9980-82cb3ba1d1c2 Certificate serial: 010D0C9F4328584D3C9A155CC7B84AF86680C540 Authority key identifier: E1:D6:96:F1:9A:04:FB:83:95:76:74:87:C2:B2:C7:F0:D0:73:19:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfe3e283-95fd-4916-9980-82cb3ba1d1c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfe3e283-95fd-4916-9980-82cb3ba1d1c2/b2496d41-8d74-37d5-acc3-73d13388ad42.roa Signing time: Sat 21 Mar 2026 01:00:30 +0000 ROA not before: Sat 21 Mar 2026 01:00:30 +0000 ROA not after: Fri 19 Jun 2026 01:00:30 +0000 asID: 4241 IP address blocks: 168.240.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfe3e283-95fd-4916-9980-82cb3ba1d1c2/cfe3e283-95fd-4916-9980-82cb3ba1d1c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfe3e283-95fd-4916-9980-82cb3ba1d1c2/cfe3e283-95fd-4916-9980-82cb3ba1d1c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfe3e283-95fd-4916-9980-82cb3ba1d1c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3c:9a:15:5c:c7:b8:4a:f8:66:80:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfe3e283-95fd-4916-9980-82cb3ba1d1c2 Validity Not Before: Mar 21 01:00:30 2026 GMT Not After : Jun 19 01:00:30 2026 GMT Subject: CN=1a42ad1f-54de-4f90-954a-2eb99a4e0ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bc:b2:0f:a8:39:72:22:0b:4b:aa:72:da:ae: f8:58:94:08:bb:d0:28:36:40:82:d6:9b:ed:9b:70: 35:44:48:cd:12:e5:40:a5:4c:46:9b:39:50:7a:df: 1b:e3:c6:bf:62:1d:d7:20:d5:42:c1:ea:20:8f:b7: 44:8f:f6:84:2c:d7:1e:5c:a0:6e:0d:8c:55:45:34: 8e:0f:00:3f:3f:48:22:94:ef:28:c9:22:cd:7d:5f: 8f:3c:a7:6b:f5:15:b4:77:2d:c8:81:18:32:d5:c7: ea:ca:46:af:fb:73:45:dc:4c:1c:7b:a7:cd:76:41: a7:a5:9c:b2:bb:88:73:4a:0d:c1:a1:ca:91:f1:5b: 9b:e8:2d:cd:ac:21:c5:cd:65:c4:bb:d7:b3:36:00: 57:e0:a0:89:9d:63:68:84:8d:13:84:08:82:33:23: 34:f6:0b:07:3b:c1:8b:a1:8e:bc:f7:5e:d8:3a:c4: 9e:d2:7e:b3:d8:a7:64:35:90:a7:09:a2:90:25:76: ff:66:08:4a:6a:34:9c:2d:34:0c:9c:77:b6:02:27: 52:1e:dd:6f:ce:24:08:4d:8b:d2:83:4c:de:d3:ab: 21:f7:90:c7:06:0a:d5:2d:6a:41:66:5e:2a:3f:60: e1:23:7f:34:ec:f0:d6:ec:62:f4:b0:a6:86:1b:e9: aa:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C4:80:2D:A4:AA:7D:7C:44:D5:1A:9B:CB:49:61:22:42:F3:FA:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfe3e283-95fd-4916-9980-82cb3ba1d1c2/b2496d41-8d74-37d5-acc3-73d13388ad42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfe3e283-95fd-4916-9980-82cb3ba1d1c2/cfe3e283-95fd-4916-9980-82cb3ba1d1c2.crl X509v3 Authority Key Identifier: keyid:E1:D6:96:F1:9A:04:FB:83:95:76:74:87:C2:B2:C7:F0:D0:73:19:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfe3e283-95fd-4916-9980-82cb3ba1d1c2.cer sbgp-ipAddrBlock: critical IPv4: 168.240.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:8d:54:0f:04:17:c8:39:e7:a3:67:ed:57:1e:2f:c4:7a:d1: 89:e2:35:8f:4a:8d:d1:c0:2d:0e:20:08:09:55:9c:cd:87:ea: 6d:f1:fc:5a:f6:58:f3:a9:e9:0b:28:55:7a:48:85:43:36:d8: 28:d9:fd:37:19:20:4a:ab:e0:5a:a5:b4:04:e5:78:7a:5f:81: dd:18:fd:b7:a3:e3:83:a5:42:4b:39:45:d0:e1:d2:8c:c5:bf: 1f:29:fd:ff:68:45:a0:37:25:21:c5:c7:1d:32:bd:5b:d2:78: 48:14:3b:bb:48:9b:0f:1b:e0:3e:51:29:84:b8:e3:c6:97:76: 2f:d8:57:42:69:3c:7d:e7:e1:f9:9e:d9:30:a2:6c:93:ef:f1: 61:e3:90:54:86:e9:b9:69:9b:de:01:af:6c:4c:24:15:9f:ce: 39:4a:db:f3:98:5a:6f:46:fa:95:00:e9:11:c5:5b:5c:ac:4a: b3:84:a4:13:ab:57:28:6a:31:97:97:aa:41:a8:2a:f5:95:5f: bf:a7:9e:e5:06:d0:04:bd:5e:17:5a:40:90:a8:f6:7a:59:71: 0f:25:0a:9a:9b:fe:ff:61:6e:f4:5b:88:42:d6:60:f5:e9:16: a9:c2:af:a6:1d:be:f5:fd:ea:fc:9d:1a:54:59:9c:5d:be:fe: 06:11:ae:3c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE08mhVcx7hK+GaAxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZlM2UyODMtOTVmZC00OTE2LTk5ODAtODJjYjNiYTFk MWMyMB4XDTI2MDMyMTAxMDAzMFoXDTI2MDYxOTAxMDAzMFowLzEtMCsGA1UEAxMk MWE0MmFkMWYtNTRkZS00ZjkwLTk1NGEtMmViOTlhNGUwYWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLyyD6g5ciILS6py2q74WJQIu9AoNkCC1pvt m3A1REjNEuVApUxGmzlQet8b48a/Yh3XINVCweogj7dEj/aELNceXKBuDYxVRTSO DwA/P0gilO8oySLNfV+PPKdr9RW0dy3IgRgy1cfqykav+3NF3Ewce6fNdkGnpZyy u4hzSg3BocqR8Vub6C3NrCHFzWXEu9ezNgBX4KCJnWNohI0ThAiCMyM09gsHO8GL oY68917YOsSe0n6z2KdkNZCnCaKQJXb/ZghKajScLTQMnHe2AidSHt1vziQITYvS g0ze06sh95DHBgrVLWpBZl4qP2DhI3807PDW7GL0sKaGG+mq7QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPzEgC2kqn18RNUam8tJYSJC8/qzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZmUz ZTI4My05NWZkLTQ5MTYtOTk4MC04MmNiM2JhMWQxYzIvYjI0OTZkNDEtOGQ3NC0z N2Q1LWFjYzMtNzNkMTMzODhhZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2ZlM2UyODMtOTVmZC00OTE2LTk5 ODAtODJjYjNiYTFkMWMyL2NmZTNlMjgzLTk1ZmQtNDkxNi05OTgwLTgyY2IzYmEx ZDFjMi5jcmwwHwYDVR0jBBgwFoAU4daW8ZoE+4OVdnSHwrLH8NBzGdowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZmUzZTI4My05NWZkLTQ5MTYtOTk4MC04MmNi M2JhMWQxYzIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqPAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAco1UDwQXyDnno2ftVx4vxHrRieI1j0qN0cAtDiAICVWczYfqbfH8WvZY 86npCyhVekiFQzbYKNn9NxkgSqvgWqW0BOV4el+B3Rj9t6Pjg6VCSzlF0OHSjMW/ Hyn9/2hFoDclIcXHHTK9W9J4SBQ7u0ibDxvgPlEphLjjxpd2L9hXQmk8fefh+Z7Z MKJsk+/xYeOQVIbpuWmb3gGvbEwkFZ/OOUrb85hab0b6lQDpEcVbXKxKs4SkE6tX KGoxl5eqQagq9ZVfv6ee5QbQBL1eF1pAkKj2ellxDyUKmpv+/2Fu9FuIQtZg9ekW qcKvph2+9f3q/J0aVFmcXb7+BhGuPA== -----END CERTIFICATE-----Generated at Thu Mar 26 07:24:35 2026 by rpki-client