$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/002d8448-bfd2-3f15-9758-645ea14a426b.roa File: 002d8448-bfd2-3f15-9758-645ea14a426b.roa (raw, json) Hash identifier: 43XjdT0l0dTMSXmVkSMLTHZUzYseww3EPSCKkjXbeAc= Subject key identifier: B2:E9:BE:65:F0:35:72:F5:99:12:F1:00:B6:21:B0:B9:ED:E9:7E:11 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584DCF2B1C2C4904F5DA7C4AF500 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/002d8448-bfd2-3f15-9758-645ea14a426b.roa Signing time: Tue 12 May 2026 13:00:30 +0000 ROA not before: Tue 12 May 2026 13:00:30 +0000 ROA not after: Mon 10 Aug 2026 13:00:30 +0000 asID: 18785 IP address blocks: 216.106.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2b:1c:2c:49:04:f5:da:7c:4a:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: May 12 13:00:30 2026 GMT Not After : Aug 10 13:00:30 2026 GMT Subject: CN=68a343bd-445c-4609-8421-6ff19b138659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b8:de:33:a5:29:ad:05:35:55:90:37:c3:a4: 57:4a:b3:dd:f8:1d:1c:12:d7:b8:af:5a:7a:f8:52: 0c:5d:3f:4a:11:23:ba:1f:31:8d:93:6b:62:8b:34: f6:dc:1c:c9:c8:ca:74:c0:e3:10:9a:2c:16:82:82: 79:5d:20:e9:79:a9:3e:7d:e7:95:dd:a5:12:84:ff: 0d:32:da:3d:43:e8:7e:8d:31:17:84:c3:c0:8b:15: c5:14:66:53:35:10:11:0b:67:c7:ea:3d:15:aa:60: 93:15:bc:64:f6:c1:0e:02:cf:f4:bf:60:25:59:57: 23:7c:16:60:28:9e:f1:89:87:11:d5:f7:86:00:88: 52:90:c1:f9:6e:da:7b:dd:44:97:44:9c:fa:3e:32: 15:a1:0b:90:80:6b:ef:6d:23:27:ff:a5:68:b7:c9: b6:84:e1:91:2d:5a:6b:4d:7e:05:a7:09:4f:11:87: 65:70:61:ee:2c:eb:9f:07:3b:be:cf:23:84:3b:84: cd:ff:d0:08:e0:b3:60:04:47:dd:71:da:9a:bf:2f: 02:00:0f:fd:3e:25:07:16:72:46:b1:b2:df:f1:94: 29:81:5a:46:50:19:41:df:40:b6:5c:e8:c8:0c:96: ae:dd:6b:0f:17:05:c9:61:26:f6:d7:fc:3e:54:93: 04:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E9:BE:65:F0:35:72:F5:99:12:F1:00:B6:21:B0:B9:ED:E9:7E:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/002d8448-bfd2-3f15-9758-645ea14a426b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:42:a4:8c:d6:a6:fa:39:9b:5f:b6:1e:d1:10:36:af:b4:28: 2a:65:5e:a2:81:c0:74:22:0d:d5:1d:76:11:57:eb:75:fc:d9: 5b:68:8b:53:ef:d3:81:1e:d1:bb:97:45:d7:b4:97:8c:4f:fa: e1:7d:fc:d6:fb:e5:f7:e2:a6:d5:5d:23:7b:0e:cb:c8:b3:52: 46:a6:f5:fd:cd:1b:17:33:59:7b:36:bf:89:ab:df:d2:69:af: d6:2c:7e:3e:75:70:50:67:3e:ae:b2:0b:b2:91:35:1f:b1:2b: 5b:86:77:c0:d4:9e:5c:dd:57:8b:0c:87:ca:ce:e6:1c:c8:da: 35:bc:cd:6e:d5:00:ec:b7:55:e1:39:18:0a:05:a6:d3:50:df: 09:05:79:c4:a3:46:b6:23:6c:6d:96:59:7b:14:d2:25:9a:db: 11:9d:c9:43:0b:f4:f9:ba:08:9d:80:20:82:36:41:4d:ad:97: 29:32:f8:d7:a9:cf:3c:7a:e4:16:7e:e1:22:fb:7d:d1:7f:1e: bc:dc:08:7e:ca:47:18:34:af:50:1c:5b:71:f0:99:26:19:d4: 67:f2:5c:c0:32:72:5e:7a:19:f3:d9:c8:55:57:53:8a:60:ea: b2:fe:5f:72:1a:b3:0a:65:d5:f4:61:3e:d9:5b:b6:f3:4d:ae: 0f:ae:e7:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PKxwsSQT12nxK9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDUxMjEzMDAzMFoXDTI2MDgxMDEzMDAzMFowLzEtMCsGA1UEAxMk NjhhMzQzYmQtNDQ1Yy00NjA5LTg0MjEtNmZmMTliMTM4NjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLjeM6UprQU1VZA3w6RXSrPd+B0cEte4r1p6 +FIMXT9KESO6HzGNk2tiizT23BzJyMp0wOMQmiwWgoJ5XSDpeak+feeV3aUShP8N Mto9Q+h+jTEXhMPAixXFFGZTNRARC2fH6j0VqmCTFbxk9sEOAs/0v2AlWVcjfBZg KJ7xiYcR1feGAIhSkMH5btp73USXRJz6PjIVoQuQgGvvbSMn/6Vot8m2hOGRLVpr TX4FpwlPEYdlcGHuLOufBzu+zyOEO4TN/9AI4LNgBEfdcdqavy8CAA/9PiUHFnJG sbLf8ZQpgVpGUBlB30C2XOjIDJau3WsPFwXJYSb21/w+VJMEewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLpvmXwNXL1mRLxALYhsLnt6X4RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMDAyZDg0NDgtYmZkMi0z ZjE1LTk3NTgtNjQ1ZWExNGE0MjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Gr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNCpIzWpvo5m1+2HtEQNq+0KCplXqKBwHQiDdUddhFX63X82Vtoi1Pv 04Ee0buXRde0l4xP+uF9/Nb75ffiptVdI3sOy8izUkam9f3NGxczWXs2v4mr39Jp r9Ysfj51cFBnPq6yC7KRNR+xK1uGd8DUnlzdV4sMh8rO5hzI2jW8zW7VAOy3VeE5 GAoFptNQ3wkFecSjRrYjbG2WWXsU0iWa2xGdyUML9Pm6CJ2AIII2QU2tlyky+Nep zzx65BZ+4SL7fdF/HrzcCH7KRxg0r1AcW3HwmSYZ1GfyXMAycl56GfPZyFVXU4pg 6rL+X3Iaswpl1fRhPtlbtvNNrg+u574= -----END CERTIFICATE-----Generated at Wed May 13 12:50:10 2026 by rpki-client