$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/016473cc-01cd-3366-bfcf-35691cae283c.roa File: 016473cc-01cd-3366-bfcf-35691cae283c.roa (raw, json) Hash identifier: a9BIHJVsMM14MKQJf7hT26ivpArerpJB70jC2mn0wCI= Subject key identifier: 23:F9:E1:88:42:C8:E3:94:40:9F:C7:37:BF:C1:95:88:CA:A1:28:D6 Certificate issuer: /CN=9a696f17-cb36-4b2b-be82-47f0c467096d Certificate serial: 010D0C9F4328584D492A713592F2525C6A3B0A80 Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/016473cc-01cd-3366-bfcf-35691cae283c.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 46632 IP address blocks: 199.33.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:71:35:92:f2:52:5c:6a:3b:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=ee11b776-63c9-415a-a3f4-dbd52d6803ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:72:25:8d:ee:e2:85:82:02:c9:69:85:43:e5: a6:7b:48:23:9e:02:31:d0:a7:50:4d:2e:22:57:7e: ad:68:af:29:86:56:54:ae:09:0c:44:ae:c9:a3:ff: aa:ce:4a:bf:5c:5d:dc:ea:a1:27:bb:63:4c:01:2f: 4e:48:c3:97:3b:ed:41:94:87:54:4d:a4:1b:9f:4d: 4e:73:5e:f5:ef:25:f2:3c:69:d8:cb:f5:5c:a6:97: 57:4a:77:36:20:87:eb:a1:09:7e:6f:c2:ff:f7:c0: d4:e4:b3:7e:a1:5b:4e:2f:71:c7:3a:4f:ce:ab:0e: 16:87:9c:d3:f3:a0:81:9c:9d:58:49:30:24:7a:bf: 8e:64:25:5a:1a:08:40:a8:60:16:27:51:e4:dc:fc: 8f:31:3a:ac:6e:80:7c:c9:73:d3:22:5f:6f:32:6d: ae:b6:96:24:9d:52:9f:59:30:8c:fb:eb:17:bd:1a: 13:a0:d9:7e:b6:03:36:ea:7b:30:96:26:71:76:a8: f6:b3:ca:2b:fe:23:a0:1b:d3:43:72:d4:9e:85:3b: f0:70:c5:c3:57:d6:93:30:b2:a2:47:b1:1b:15:01: 58:de:30:45:6a:06:13:82:d9:24:4c:4c:d1:41:dd: c4:c9:e7:9e:ec:f6:75:33:b7:e2:7d:9d:cd:03:14: 75:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F9:E1:88:42:C8:E3:94:40:9F:C7:37:BF:C1:95:88:CA:A1:28:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/016473cc-01cd-3366-bfcf-35691cae283c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl X509v3 Authority Key Identifier: keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer sbgp-ipAddrBlock: critical IPv4: 199.33.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b5:04:c0:bb:f5:db:b1:de:5a:de:c7:55:ca:39:47:a1:94: b8:74:f7:77:7f:ed:3f:d7:77:31:0c:81:35:2b:90:57:c0:1e: a0:f9:db:56:6e:06:f7:2e:6e:05:22:75:52:a7:c2:70:12:ac: 33:49:d6:ec:98:6c:a9:71:8b:a1:fd:63:f3:2d:fa:94:f5:f7: ff:04:7e:68:3b:ca:61:15:6d:6d:b0:4c:29:76:d5:90:b1:c6: 39:a0:45:7a:6c:30:75:c1:02:75:65:3c:6c:1c:06:fa:0b:4b: eb:f5:75:83:81:66:fb:23:35:9d:6d:34:59:05:ce:ad:4b:a5: a2:09:01:0c:2e:9c:5e:08:74:69:3a:2a:b9:92:95:27:44:47: 8d:cb:56:ec:94:cb:0a:0f:f1:c7:70:55:98:64:6c:7b:90:bf: 6d:e5:c8:1e:c3:ff:e0:2a:19:ea:5b:16:1e:e1:90:20:9d:9b: 1a:d8:1c:48:1a:6b:c4:57:83:5b:2e:b6:d4:71:b1:31:db:2d: c2:58:f0:91:bb:fa:d7:65:0b:ef:89:ce:3d:0a:b0:73:64:94: 2f:82:97:f9:59:aa:51:9d:88:76:4f:50:da:85:47:4a:cf:5d: ae:ab:d1:c7:1f:37:95:74:ac:33:02:fe:c2:bc:ea:3c:f2:a1: 67:c6:f0:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKnE1kvJSXGo7CoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE2OTZmMTctY2IzNi00YjJiLWJlODItNDdmMGM0Njcw OTZkMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk ZWUxMWI3NzYtNjNjOS00MTVhLWEzZjQtZGJkNTJkNjgwM2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HIlje7ihYICyWmFQ+Wme0gjngIx0KdQTS4i V36taK8phlZUrgkMRK7Jo/+qzkq/XF3c6qEnu2NMAS9OSMOXO+1BlIdUTaQbn01O c1717yXyPGnYy/VcppdXSnc2IIfroQl+b8L/98DU5LN+oVtOL3HHOk/Oqw4Wh5zT 86CBnJ1YSTAker+OZCVaGghAqGAWJ1Hk3PyPMTqsboB8yXPTIl9vMm2utpYknVKf WTCM++sXvRoToNl+tgM26nswliZxdqj2s8or/iOgG9NDctSehTvwcMXDV9aTMLKi R7EbFQFY3jBFagYTgtkkTEzRQd3Eyeee7PZ1M7fifZ3NAxR12wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCP54YhCyOOUQJ/HN7/BlYjKoSjWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5 NmYxNy1jYjM2LTRiMmItYmU4Mi00N2YwYzQ2NzA5NmQvMDE2NDczY2MtMDFjZC0z MzY2LWJmY2YtMzU2OTFjYWUyODNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWE2OTZmMTctY2IzNi00YjJiLWJl ODItNDdmMGM0NjcwOTZkLzlhNjk2ZjE3LWNiMzYtNGIyYi1iZTgyLTQ3ZjBjNDY3 MDk2ZC5jcmwwHwYDVR0jBBgwFoAUOGVDxKSXi/HM12fBUAL+77zUroAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5NmYxNy1jYjM2LTRiMmItYmU4Mi00N2Yw YzQ2NzA5NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxyFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADu1BMC79dux3lrex1XKOUehlLh093d/7T/XdzEMgTUrkFfAHqD521Zu BvcubgUidVKnwnASrDNJ1uyYbKlxi6H9Y/Mt+pT19/8Efmg7ymEVbW2wTCl21ZCx xjmgRXpsMHXBAnVlPGwcBvoLS+v1dYOBZvsjNZ1tNFkFzq1LpaIJAQwunF4IdGk6 KrmSlSdER43LVuyUywoP8cdwVZhkbHuQv23lyB7D/+AqGepbFh7hkCCdmxrYHEga a8RXg1suttRxsTHbLcJY8JG7+tdlC++Jzj0KsHNklC+Cl/lZqlGdiHZPUNqFR0rP Xa6r0ccfN5V0rDMC/sK86jzyoWfG8F0= -----END CERTIFICATE-----Generated at Thu Mar 26 16:44:01 2026 by rpki-client