$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/a40d3bd1-55fe-3d2d-9718-22326d30b380.roa File: a40d3bd1-55fe-3d2d-9718-22326d30b380.roa (raw, json) Hash identifier: Xag6vh7h0KfLVG5Mm+mSfrZ+pEbmd/9MGj1chOL+brY= Subject key identifier: C0:44:73:05:2A:D4:92:69:E2:4E:0E:6B:4E:97:54:62:13:C9:73:A3 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584D492A6ADB3BFDB7A5276A48A0 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/a40d3bd1-55fe-3d2d-9718-22326d30b380.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 394391 IP address blocks: 216.210.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:6a:db:3b:fd:b7:a5:27:6a:48:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=7e1f0f52-c59c-4060-b7ea-e908a77481de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:93:b8:d1:73:6c:88:49:5f:b2:be:8a:50:da: 15:55:f0:1f:c7:4a:06:15:5c:e4:c3:95:fa:e5:5d: 65:80:8e:76:aa:5a:06:4b:da:ef:63:ce:e2:cb:ca: a3:11:26:be:49:20:fc:4a:23:37:26:ed:0d:f5:f5: f3:5c:7e:22:2b:0e:8d:3c:bc:cd:0a:e3:bb:73:0a: d4:fa:1d:45:23:0c:b1:3b:77:75:40:66:2c:67:40: 68:8c:49:76:68:01:6c:27:76:0c:c3:4b:b7:3e:14: 94:4f:ea:da:54:c9:69:c2:91:76:2a:fc:67:b1:6d: 4e:e5:5a:93:5e:7d:13:77:c6:01:86:7d:62:81:ae: a5:fb:e1:bc:29:46:e2:eb:fe:6e:2f:b9:c8:59:5c: 18:64:8e:49:ce:c6:09:a2:06:bf:e9:37:9e:e8:1b: a0:00:8e:ce:f1:95:d5:ba:1e:10:0d:97:ee:3e:33: f4:f7:c4:82:18:24:a4:88:f7:e1:f4:c0:34:26:99: 84:28:f5:62:08:a3:9f:70:59:e5:6d:6c:ae:fa:73: 10:ac:fb:2a:9c:fd:12:ec:9f:a0:2a:af:db:19:8c: 70:8f:81:20:84:f7:f4:1c:8e:a6:13:7f:7b:97:d8: 8c:93:23:89:7e:f9:5b:b8:c4:4b:1f:89:7d:1f:c3: 93:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:44:73:05:2A:D4:92:69:E2:4E:0E:6B:4E:97:54:62:13:C9:73:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/a40d3bd1-55fe-3d2d-9718-22326d30b380.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 216.210.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:be:8a:b7:6a:b6:5e:ce:dc:6f:73:a0:0a:18:8c:51:38:93: c5:f2:18:00:7d:03:0f:09:0d:a1:c9:94:02:c5:4b:49:a1:88: ad:a4:e3:a9:b9:9b:53:00:fc:cc:a3:78:da:6b:f3:6b:57:10: 71:25:bb:e2:d6:ac:91:5b:34:8f:f3:66:75:37:98:09:29:cd: de:e2:9c:77:16:bb:f7:de:72:75:0b:ee:3b:dc:9a:19:d0:88: 90:a5:68:db:71:74:c7:98:8f:6d:91:0a:0d:95:91:b2:06:14: 9d:8f:66:e6:2a:f3:f8:a5:d6:25:51:14:e0:1d:b4:02:c9:00: a1:ec:11:8d:e2:66:4d:63:e7:ee:1f:41:a3:e7:5d:3b:dc:c5: f6:b4:e5:8b:41:fc:d8:3e:46:07:68:ea:33:38:3b:26:dc:3d: e6:64:56:d7:0b:4f:0f:ed:a6:e8:7b:5d:d2:a7:b7:05:00:99: 36:91:96:46:a5:29:ef:9e:a9:28:09:81:95:b6:1a:35:b9:7e: 8e:34:dd:c3:c1:8a:91:45:42:6e:83:71:7b:d0:9f:e3:26:1f: 6a:b3:81:4b:ea:85:27:c6:f5:98:c9:c7:92:65:7c:18:1d:e5: f9:0d:87:87:76:55:7e:3e:48:69:e6:6f:b4:7a:59:88:26:72: a1:0b:04:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKmrbO/23pSdqSKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk N2UxZjBmNTItYzU5Yy00MDYwLWI3ZWEtZTkwOGE3NzQ4MWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJO40XNsiElfsr6KUNoVVfAfx0oGFVzkw5X6 5V1lgI52qloGS9rvY87iy8qjESa+SSD8SiM3Ju0N9fXzXH4iKw6NPLzNCuO7cwrU +h1FIwyxO3d1QGYsZ0BojEl2aAFsJ3YMw0u3PhSUT+raVMlpwpF2KvxnsW1O5VqT Xn0Td8YBhn1iga6l++G8KUbi6/5uL7nIWVwYZI5JzsYJoga/6Tee6BugAI7O8ZXV uh4QDZfuPjP098SCGCSkiPfh9MA0JpmEKPViCKOfcFnlbWyu+nMQrPsqnP0S7J+g Kq/bGYxwj4EghPf0HI6mE397l9iMkyOJfvlbuMRLH4l9H8OTWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBEcwUq1JJp4k4Oa06XVGITyXOjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvYTQwZDNiZDEtNTVmZS0z ZDJkLTk3MTgtMjIzMjZkMzBiMzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2NIIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACG+irdqtl7O3G9zoAoYjFE4k8XyGAB9Aw8JDaHJlALFS0mhiK2k46m5 m1MA/MyjeNpr82tXEHElu+LWrJFbNI/zZnU3mAkpzd7inHcWu/fecnUL7jvcmhnQ iJClaNtxdMeYj22RCg2VkbIGFJ2PZuYq8/il1iVRFOAdtALJAKHsEY3iZk1j5+4f QaPnXTvcxfa05YtB/Ng+Rgdo6jM4OybcPeZkVtcLTw/tpuh7XdKntwUAmTaRlkal Ke+eqSgJgZW2GjW5fo403cPBipFFQm6DcXvQn+MmH2qzgUvqhSfG9ZjJx5JlfBgd 5fkNh4d2VX4+SGnmb7R6WYgmcqELBMA= -----END CERTIFICATE-----Generated at Thu Mar 26 05:17:13 2026 by rpki-client