$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f9a138e4-ac45-3dd5-8c47-29aa376b706e.roa File: f9a138e4-ac45-3dd5-8c47-29aa376b706e.roa (raw, json) Hash identifier: duLoGArUnbl+3mP6NHardF0jRRSWmLKMxXQQgNL1qEw= Subject key identifier: 64:6C:AC:4B:17:E4:6E:28:67:E2:7B:DC:EC:49:CF:71:F3:1C:19:46 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D19B49D24F9B2B3640F87A800 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f9a138e4-ac45-3dd5-8c47-29aa376b706e.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 11059 IP address blocks: 216.132.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:9d:24:f9:b2:b3:64:0f:87:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=c3c57b6a-fdbc-4c69-ad10-1a14b1dc7959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:33:82:23:ab:86:81:7a:23:1e:6b:83:92:56: 47:22:ad:6f:da:16:16:a8:e7:33:cc:72:c4:c0:dd: 08:10:ae:a2:22:13:67:52:bd:76:3a:64:ac:ea:ec: 20:b1:9b:a6:36:92:05:2b:d7:08:73:bb:66:55:c2: f4:1e:d1:f8:ab:20:05:d4:f0:02:67:19:4a:c8:c8: db:06:f5:a0:8f:45:0f:52:22:3e:58:71:26:01:f0: 2f:04:a1:1f:fa:ef:20:aa:f5:c9:de:ef:a1:67:4d: e1:0a:a0:89:3f:70:0e:06:9c:78:6a:c2:2c:4e:de: e0:07:3c:d1:ec:4e:d1:a6:42:29:8e:ad:1b:a7:93: 95:6b:3f:da:78:49:15:18:56:84:cf:7b:1c:f5:0d: fb:f7:d0:97:da:77:48:b3:ed:da:4f:86:30:fb:9b: 11:ce:77:80:82:a9:b7:a4:61:f8:1e:56:7f:81:32: 08:dd:82:0e:80:cd:2b:20:70:e6:6d:67:aa:9d:c5: 8a:25:22:72:dd:17:14:a0:91:46:27:58:c4:61:44: c7:93:72:97:8c:0b:f0:6a:eb:33:e4:ce:2a:c1:31: 51:b3:fc:3c:a6:4c:ea:39:23:28:c8:18:c2:4d:8e: 67:b9:02:c0:17:b8:fc:b4:ac:a0:b3:c7:d2:12:ac: 75:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6C:AC:4B:17:E4:6E:28:67:E2:7B:DC:EC:49:CF:71:F3:1C:19:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f9a138e4-ac45-3dd5-8c47-29aa376b706e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:cb:a0:4b:99:1d:72:72:9f:da:48:c5:b6:0b:f1:4f:da:05: 9e:3f:2d:49:2f:71:5a:1a:ef:19:77:6b:8d:ad:0b:d9:d3:1a: 85:fd:3c:32:55:c5:4e:2a:d7:23:0b:83:d5:2c:9a:b8:c4:74: c0:ed:ec:8c:8d:e2:1c:96:13:99:bf:93:29:28:ff:c1:0b:38: c3:71:f4:ca:24:75:a0:b9:32:16:7d:6a:b0:bd:d6:b4:13:d0: 07:2b:f8:8c:61:6f:47:21:63:51:a8:2b:9b:3c:46:6f:b7:08: 51:8c:31:fb:64:21:2c:36:41:7e:92:e5:78:f6:34:ec:97:57: 11:7d:d9:75:ba:84:07:8f:e6:0f:6f:24:ee:7d:c0:e8:11:8d: 49:96:76:24:62:3b:1e:9b:0d:91:f7:4f:82:78:35:bd:63:8f: 00:80:d3:38:c6:07:60:29:bc:c8:ff:18:d9:42:c1:3e:6e:a4: 75:95:f3:ef:e9:17:61:b4:0a:65:4c:55:df:7a:20:42:4e:23: 89:14:c1:e0:5b:04:44:39:9c:b4:a5:b8:c3:a8:a6:23:87:09: 9a:f6:3f:84:5f:03:3f:65:05:ae:26:31:80:1c:93:b3:c4:c0: e3:ba:6c:1e:cd:ce:3c:7d:b4:71:3d:56:27:7a:b3:e1:68:dd: c4:3b:01:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtJ0k+bKzZA+HqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk YzNjNTdiNmEtZmRiYy00YzY5LWFkMTAtMWExNGIxZGM3OTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjOCI6uGgXojHmuDklZHIq1v2hYWqOczzHLE wN0IEK6iIhNnUr12OmSs6uwgsZumNpIFK9cIc7tmVcL0HtH4qyAF1PACZxlKyMjb BvWgj0UPUiI+WHEmAfAvBKEf+u8gqvXJ3u+hZ03hCqCJP3AOBpx4asIsTt7gBzzR 7E7RpkIpjq0bp5OVaz/aeEkVGFaEz3sc9Q3799CX2ndIs+3aT4Yw+5sRzneAgqm3 pGH4HlZ/gTII3YIOgM0rIHDmbWeqncWKJSJy3RcUoJFGJ1jEYUTHk3KXjAvwausz 5M4qwTFRs/w8pkzqOSMoyBjCTY5nuQLAF7j8tKygs8fSEqx1LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRsrEsX5G4oZ+J73OxJz3HzHBlGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjlhMTM4ZTQtYWM0NS0z ZGQ1LThjNDctMjlhYTM3NmI3MDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ISQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzLoEuZHXJyn9pIxbYL8U/aBZ4/LUkvcVoa7xl3a42tC9nTGoX9PDJV xU4q1yMLg9UsmrjEdMDt7IyN4hyWE5m/kyko/8ELOMNx9MokdaC5MhZ9arC91rQT 0Acr+Ixhb0chY1GoK5s8Rm+3CFGMMftkISw2QX6S5Xj2NOyXVxF92XW6hAeP5g9v JO59wOgRjUmWdiRiOx6bDZH3T4J4Nb1jjwCA0zjGB2ApvMj/GNlCwT5upHWV8+/p F2G0CmVMVd96IEJOI4kUweBbBEQ5nLSluMOopiOHCZr2P4RfAz9lBa4mMYAck7PE wOO6bB7Nzjx9tHE9Vid6s+Fo3cQ7AZc= -----END CERTIFICATE-----Generated at Fri Mar 27 03:44:52 2026 by rpki-client