$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/7b44d906-481e-39c1-8a54-23b40220e02d.roa File: 7b44d906-481e-39c1-8a54-23b40220e02d.roa (raw, json) Hash identifier: RABken4bpE1iyWkUP1LukeDHCsGMVQT/fcYLX/R0FhM= Subject key identifier: FA:AD:FB:CC:A3:99:1F:BA:26:2F:19:F6:8D:EB:27:F9:1C:CB:CC:FD Certificate issuer: /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9 Certificate serial: 010D0C9F4328584D3DFFAB888AF0A6BD01ECB060 Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/7b44d906-481e-39c1-8a54-23b40220e02d.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 16509 IP address blocks: 216.24.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:ab:88:8a:f0:a6:bd:01:ec:b0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=d3f87145-b7ba-46a6-ab31-939a00b0450a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5d:d9:05:31:bd:ca:5c:bd:7f:8a:a8:28:a6: 53:2d:22:34:46:32:8b:dd:65:0f:0e:c5:38:af:5d: d5:ec:65:c8:17:16:9b:a2:0e:d5:bd:de:26:9b:1b: 1b:54:cf:31:a4:c6:ac:b3:3d:4f:9d:60:91:fb:f5: d3:94:18:1e:b9:b6:7b:e1:2e:7b:28:df:01:89:54: b6:9c:9e:8f:37:2b:14:f2:ee:88:e5:0d:a4:1c:c3: a4:57:1f:eb:9f:49:a8:8a:52:cf:1f:e6:f2:e8:34: 3b:66:2d:af:5b:c9:3b:34:d3:71:9b:27:75:19:40: 01:e9:eb:0f:25:28:91:77:8d:7b:4c:8b:32:aa:c9: f4:af:da:8e:55:08:be:3b:e2:eb:c1:74:ca:76:71: df:f5:59:1b:95:a3:3d:ca:32:1d:bb:3a:1c:13:fd: 31:86:d0:08:5d:6f:c7:24:ea:be:2d:2a:20:45:ce: 34:68:fb:a1:26:ca:df:5a:6c:94:7d:cd:7c:08:63: 35:bb:6d:56:80:39:0a:5d:37:cc:72:dd:61:58:6b: f6:3e:cb:8b:34:63:e9:51:31:32:dd:92:a2:92:25: 52:37:cf:bd:c5:2a:bf:2f:ed:a2:3d:9c:21:93:20: f3:2d:e4:14:83:d8:3a:38:a6:88:e1:0d:39:d0:b1: 15:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AD:FB:CC:A3:99:1F:BA:26:2F:19:F6:8D:EB:27:F9:1C:CB:CC:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/7b44d906-481e-39c1-8a54-23b40220e02d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl X509v3 Authority Key Identifier: keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer sbgp-ipAddrBlock: critical IPv4: 216.24.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:cd:b8:c1:14:cc:5d:01:69:f3:22:07:77:e8:2a:7c:04:e0: a7:12:5c:ba:e8:bd:cd:79:b0:f6:0f:5c:f8:fb:7d:69:17:b6: ac:e2:b5:4c:b8:79:63:ef:13:52:91:10:cb:7a:ec:b5:29:47: a2:50:68:a6:2d:d6:a5:73:a4:ec:83:f0:0c:2a:57:75:14:e7: 62:80:d6:63:04:29:87:76:a7:c6:f2:fc:49:9a:95:65:84:4e: aa:f9:5c:95:1a:09:9c:72:d9:d5:a1:2b:bb:53:89:1b:33:a2: bc:88:72:fe:d5:17:80:62:76:ce:44:84:73:87:02:bb:6b:d7: fc:af:af:0e:38:b2:2b:fb:37:58:b9:22:c0:3c:3e:a5:ac:16: 9e:c3:fb:38:ab:66:3f:bf:65:01:6d:66:9b:e8:4d:c5:c1:a1: 9d:03:fc:8c:4c:88:50:c8:ef:b5:86:18:3e:c3:6d:2a:35:5d: c3:30:48:30:a9:4e:ac:9c:26:36:3a:f1:d1:1c:a9:39:b8:cc: 4f:99:1e:01:16:d6:6e:36:7c:6a:8c:1e:fd:ae:24:04:e4:02: 0a:bc:8e:d9:be:cc:82:69:65:8e:e0:fc:e5:c1:f8:02:00:38: 63:1e:33:13:59:ed:2b:8d:4b:50:71:d3:e9:19:08:a7:4c:5b: 12:5f:23:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/6uIivCmvQHssGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxY2I2YWQtNmNkNi00NTgxLWE1YWMtNWE2ZmQ3NDQ5 NWM5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZDNmODcxNDUtYjdiYS00NmE2LWFiMzEtOTM5YTAwYjA0NTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF3ZBTG9yly9f4qoKKZTLSI0RjKL3WUPDsU4 r13V7GXIFxabog7Vvd4mmxsbVM8xpMassz1PnWCR+/XTlBgeubZ74S57KN8BiVS2 nJ6PNysU8u6I5Q2kHMOkVx/rn0moilLPH+by6DQ7Zi2vW8k7NNNxmyd1GUAB6esP JSiRd417TIsyqsn0r9qOVQi+O+LrwXTKdnHf9VkblaM9yjIduzocE/0xhtAIXW/H JOq+LSogRc40aPuhJsrfWmyUfc18CGM1u21WgDkKXTfMct1hWGv2PsuLNGPpUTEy 3ZKikiVSN8+9xSq/L+2iPZwhkyDzLeQUg9g6OKaI4Q050LEVeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqt+8yjmR+6Ji8Z9o3rJ/kcy8z9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NzFj YjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZmZDc0NDk1YzkvN2I0NGQ5MDYtNDgxZS0z OWMxLThhNTQtMjNiNDAyMjBlMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODcxY2I2YWQtNmNkNi00NTgxLWE1 YWMtNWE2ZmQ3NDQ5NWM5Lzg3MWNiNmFkLTZjZDYtNDU4MS1hNWFjLTVhNmZkNzQ0 OTVjOS5jcmwwHwYDVR0jBBgwFoAUntBlR2d0sGuDPxz+dPUN9EuFl7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NzFjYjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZm ZDc0NDk1YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfNuMEUzF0BafMiB3foKnwE4KcSXLrovc15sPYPXPj7fWkXtqzitUy4 eWPvE1KREMt67LUpR6JQaKYt1qVzpOyD8AwqV3UU52KA1mMEKYd2p8by/EmalWWE Tqr5XJUaCZxy2dWhK7tTiRszoryIcv7VF4Bids5EhHOHArtr1/yvrw44siv7N1i5 IsA8PqWsFp7D+zirZj+/ZQFtZpvoTcXBoZ0D/IxMiFDI77WGGD7DbSo1XcMwSDCp TqycJjY68dEcqTm4zE+ZHgEW1m42fGqMHv2uJATkAgq8jtm+zIJpZY7g/OXB+AIA OGMeMxNZ7SuNS1Bx0+kZCKdMWxJfI8Q= -----END CERTIFICATE-----Generated at Thu Mar 26 19:33:55 2026 by rpki-client