$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa File: b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa (raw, json) Hash identifier: WwQj/9HeEQ7yRpfNcheD2rFet1TFjcGP1pB+Mrnp8ZM= Subject key identifier: 0F:B7:F6:AF:C2:F8:31:B7:33:25:09:47:AA:91:D3:D4:BB:8C:EC:D4 Certificate issuer: /CN=04c216c1-5924-4a66-9346-a1f215800ceb Certificate serial: 010D0C9F4328584D117262E95DEB2D2D5DEBFE00 Authority key identifier: 98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 399889 IP address blocks: 216.170.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:62:e9:5d:eb:2d:2d:5d:eb:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04c216c1-5924-4a66-9346-a1f215800ceb Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=0ff6fd40-6b26-4a6f-9198-18352502afdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e6:29:61:40:8b:08:75:6a:25:4d:73:31:ac: 06:12:20:04:a6:d5:c6:7d:1a:e0:14:19:52:bb:55: ff:66:2e:e6:f7:b0:5b:45:8d:be:18:fe:21:0b:d1: ed:71:82:04:60:ac:ee:97:1c:65:76:8d:c3:be:1c: 0c:3c:7c:23:2a:f6:fc:21:c4:2a:6a:c1:d6:d9:8c: 90:ff:4d:81:81:bf:ee:36:51:31:2c:e0:5a:e7:85: f8:11:ae:ab:ba:a0:bd:f8:b4:9d:7b:52:93:5e:5e: 3a:ad:40:21:9b:57:45:a3:4e:7b:f5:49:bf:79:20: 70:f4:16:b5:f3:6b:71:ea:f7:d0:2f:d7:b5:78:3f: 23:c2:2a:75:de:d4:45:06:b6:6b:f2:e4:cd:18:89: b3:98:ac:da:6f:bc:62:6b:5f:b5:30:9e:08:65:86: c0:4d:d0:d2:48:d7:39:c8:d2:77:3c:b2:88:6c:8d: 9d:df:71:e5:f1:d0:5d:40:29:f4:5e:52:7e:34:13: 61:30:c1:75:92:8a:d4:d0:09:44:05:ad:c2:3c:d8: d3:3f:47:64:82:ba:65:3a:24:6c:42:78:2c:98:1b: 66:fe:1a:56:9f:77:f5:6a:08:01:56:a7:55:b6:74: d7:fc:03:3b:bd:4a:0c:1e:76:e1:a3:c9:96:fb:09: 41:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B7:F6:AF:C2:F8:31:B7:33:25:09:47:AA:91:D3:D4:BB:8C:EC:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl X509v3 Authority Key Identifier: keyid:98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer sbgp-ipAddrBlock: critical IPv4: 216.170.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:14:59:12:9f:ea:db:a0:35:5b:65:f4:cc:98:fa:b7:da:9a: 23:69:0a:50:df:1e:72:d6:1f:4b:f5:d7:0b:3e:96:26:ba:b9: ca:45:2d:8f:54:1f:8b:7c:24:e6:34:46:8f:91:e7:c9:5f:1f: 66:b7:60:ee:7f:5b:2e:08:03:d6:eb:61:00:f6:bf:78:85:be: 71:d1:b1:a4:af:76:45:c3:f5:c2:9d:4d:2b:0a:2e:13:81:10: e8:70:a2:0d:ed:d9:00:9e:82:e6:65:cb:11:0d:a5:a3:c6:e3: 46:9e:1a:03:32:22:0a:bf:46:7b:b6:ea:d8:2a:78:67:84:29: 9a:42:c0:bc:63:4a:68:ec:84:d8:34:82:c9:93:c0:4e:ee:44: a4:5b:58:e1:04:68:d8:b3:94:f3:9a:5e:e2:4c:9e:72:1d:ea: 67:95:3e:a4:5b:0f:20:43:15:60:3e:82:23:2e:99:0c:e8:39: 9e:0e:a0:35:a4:2f:df:0c:40:61:fa:c8:e8:38:82:a4:bd:ed: ee:9e:20:7f:c1:c7:8f:e2:ac:8f:bf:90:28:00:c2:c3:8d:7a: 73:0b:ec:f9:c8:74:a2:6f:c0:17:0e:07:5e:98:fd:06:79:f4: de:fd:17:1e:b3:bb:98:67:b2:e5:ea:7a:fe:96:5e:d8:44:c9: 91:73:93:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcmLpXestLV3r/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRjMjE2YzEtNTkyNC00YTY2LTkzNDYtYTFmMjE1ODAw Y2ViMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk MGZmNmZkNDAtNmIyNi00YTZmLTkxOTgtMTgzNTI1MDJhZmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeYpYUCLCHVqJU1zMawGEiAEptXGfRrgFBlS u1X/Zi7m97BbRY2+GP4hC9HtcYIEYKzulxxldo3DvhwMPHwjKvb8IcQqasHW2YyQ /02Bgb/uNlExLOBa54X4Ea6ruqC9+LSde1KTXl46rUAhm1dFo0579Um/eSBw9Ba1 82tx6vfQL9e1eD8jwip13tRFBrZr8uTNGImzmKzab7xia1+1MJ4IZYbATdDSSNc5 yNJ3PLKIbI2d33Hl8dBdQCn0XlJ+NBNhMMF1korU0AlEBa3CPNjTP0dkgrplOiRs QngsmBtm/hpWn3f1aggBVqdVtnTX/AM7vUoMHnbho8mW+wlBnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+39q/C+DG3MyUJR6qR09S7jOzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNGMy MTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYyMTU4MDBjZWIvYjRhYmFmNTEtNDJlMi0z OTRkLTgwZTEtYmM2M2Y1NGMwZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDRjMjE2YzEtNTkyNC00YTY2LTkz NDYtYTFmMjE1ODAwY2ViLzA0YzIxNmMxLTU5MjQtNGE2Ni05MzQ2LWExZjIxNTgw MGNlYi5jcmwwHwYDVR0jBBgwFoAUmLhMbN09mwrXBph9YXSVqxVUBDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNGMyMTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYy MTU4MDBjZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2KpoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcUWRKf6tugNVtl9MyY+rfamiNpClDfHnLWH0v11ws+lia6ucpFLY9U H4t8JOY0Ro+R58lfH2a3YO5/Wy4IA9brYQD2v3iFvnHRsaSvdkXD9cKdTSsKLhOB EOhwog3t2QCeguZlyxENpaPG40aeGgMyIgq/Rnu26tgqeGeEKZpCwLxjSmjshNg0 gsmTwE7uRKRbWOEEaNizlPOaXuJMnnId6meVPqRbDyBDFWA+giMumQzoOZ4OoDWk L98MQGH6yOg4gqS97e6eIH/Bx4/irI+/kCgAwsONenML7PnIdKJvwBcOB16Y/QZ5 9N79Fx6zu5hnsuXqev6WXthEyZFzk8Y= -----END CERTIFICATE-----Generated at Thu Mar 26 05:12:04 2026 by rpki-client