$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/91eb3040-fd56-3483-8b8e-da5efdf7cb3b.roa File: 91eb3040-fd56-3483-8b8e-da5efdf7cb3b.roa (raw, json) Hash identifier: I6V3GmqrAFF9PU7QBwAD3OfPCFLaxgS4skKEorCO89A= Subject key identifier: AD:10:68:F7:49:5D:87:11:F8:98:A1:F2:56:55:EA:86:37:1C:E6:63 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D33CECC4B0E3C411A3A5D8E80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/91eb3040-fd56-3483-8b8e-da5efdf7cb3b.roa Signing time: Tue 17 Mar 2026 21:24:28 +0000 ROA not before: Tue 17 Mar 2026 21:24:28 +0000 ROA not after: Mon 15 Jun 2026 21:24:28 +0000 asID: 270075 IP address blocks: 216.28.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:33:ce:cc:4b:0e:3c:41:1a:3a:5d:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 17 21:24:28 2026 GMT Not After : Jun 15 21:24:28 2026 GMT Subject: CN=39353235-17f6-4afb-aa6e-03b19c71245f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8d:56:0c:a2:e3:8f:59:96:c2:af:bb:94:3c: 71:b1:21:40:da:ad:ac:7e:c4:70:11:6f:1e:6a:c1: 85:65:6d:0a:3f:b1:01:a5:45:51:6a:f3:60:8a:2d: b3:17:6e:37:ca:d0:61:69:14:67:97:56:a4:a8:3d: 68:78:43:78:2d:f6:ca:8e:38:29:54:56:36:5e:09: 85:af:70:2c:67:73:b7:c5:3d:2d:24:88:90:20:76: 2a:8c:90:86:96:09:46:db:9b:0c:e1:de:51:86:e4: 3a:46:21:56:87:12:23:49:eb:1d:93:ac:95:63:ca: ef:40:cf:c3:04:cc:c3:dc:d1:bb:1a:b2:1d:ea:0a: 8e:96:7d:0d:36:55:42:15:24:e3:ee:27:06:1d:b3: 6b:ae:a0:1d:d7:10:ef:40:39:7c:f1:a1:c3:2a:9e: 1a:fa:28:dc:e0:99:95:42:12:03:17:71:63:bd:bc: b9:5a:36:68:d1:17:08:8c:dd:c7:3c:81:71:4d:a0: 63:67:98:ea:92:8d:e0:51:89:5b:c4:d6:6e:f6:df: 46:6c:73:59:0e:90:2d:ab:74:49:49:96:21:c0:59: 06:a5:f5:f2:4c:b5:00:6a:42:ad:32:1b:5c:0f:34: 39:9b:a9:2c:2e:eb:0a:66:b5:80:78:a6:65:62:bf: 1e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:10:68:F7:49:5D:87:11:F8:98:A1:F2:56:55:EA:86:37:1C:E6:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/91eb3040-fd56-3483-8b8e-da5efdf7cb3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 216.28.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:41:b0:45:20:aa:9c:1d:3f:a4:b5:63:a8:83:ba:3a:3a:af: 7e:07:df:dc:03:6e:5d:ea:4b:ef:49:d5:71:dc:86:ef:33:92: f0:22:ec:93:ca:54:ce:d2:83:52:87:7c:f0:c7:ed:44:97:dd: f8:33:2c:88:a3:ab:25:5a:ee:cb:20:a0:7d:b9:1a:96:f8:d9: 32:47:10:1f:03:b8:a8:c9:3d:95:69:70:03:80:9c:ed:d1:57: 1e:fa:6a:54:db:64:18:8e:57:fe:ca:d1:bc:14:b1:32:bb:46: 3d:55:6f:94:4e:73:96:3e:12:51:72:a1:99:b9:23:ee:17:e5: 51:2e:8a:eb:7d:b4:30:01:22:3f:ef:14:8e:09:fa:50:ca:84: c9:87:b8:2e:c1:3a:48:1b:44:01:1e:59:1a:f2:28:55:c1:5a: f3:dd:7c:9b:12:d1:d7:f4:da:50:e8:65:1a:c6:fa:81:8c:9b: 34:94:18:d4:58:29:52:35:ee:00:dd:fc:91:c0:e5:01:a6:56: 90:e8:41:3c:12:d4:cf:9f:d7:0e:5e:70:4d:43:03:1a:eb:cc: 4d:da:00:0c:f4:a5:d6:2c:49:f5:07:6f:29:a5:c8:db:56:34: 7a:25:12:80:f8:71:0b:31:fc:64:4e:9d:14:5f:49:4b:90:e6: 78:18:e1:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0zzsxLDjxBGjpdjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMxNzIxMjQyOFoXDTI2MDYxNTIxMjQyOFowLzEtMCsGA1UEAxMk MzkzNTMyMzUtMTdmNi00YWZiLWFhNmUtMDNiMTljNzEyNDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI1WDKLjj1mWwq+7lDxxsSFA2q2sfsRwEW8e asGFZW0KP7EBpUVRavNgii2zF243ytBhaRRnl1akqD1oeEN4LfbKjjgpVFY2XgmF r3AsZ3O3xT0tJIiQIHYqjJCGlglG25sM4d5RhuQ6RiFWhxIjSesdk6yVY8rvQM/D BMzD3NG7GrId6gqOln0NNlVCFSTj7icGHbNrrqAd1xDvQDl88aHDKp4a+ijc4JmV QhIDF3Fjvby5WjZo0RcIjN3HPIFxTaBjZ5jqko3gUYlbxNZu9t9GbHNZDpAtq3RJ SZYhwFkGpfXyTLUAakKtMhtcDzQ5m6ksLusKZrWAeKZlYr8eNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0QaPdJXYcR+Jih8lZV6oY3HOZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTFlYjMwNDAtZmQ1Ni0z NDgzLThiOGUtZGE1ZWZkZjdjYjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BzXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9BsEUgqpwdP6S1Y6iDujo6r34H39wDbl3qS+9J1XHchu8zkvAi7JPK VM7Sg1KHfPDH7USX3fgzLIijqyVa7ssgoH25Gpb42TJHEB8DuKjJPZVpcAOAnO3R Vx76alTbZBiOV/7K0bwUsTK7Rj1Vb5ROc5Y+ElFyoZm5I+4X5VEuiut9tDABIj/v FI4J+lDKhMmHuC7BOkgbRAEeWRryKFXBWvPdfJsS0df02lDoZRrG+oGMmzSUGNRY KVI17gDd/JHA5QGmVpDoQTwS1M+f1w5ecE1DAxrrzE3aAAz0pdYsSfUHbymlyNtW NHolEoD4cQsx/GROnRRfSUuQ5ngY4bE= -----END CERTIFICATE-----Generated at Thu Mar 26 06:15:43 2026 by rpki-client