$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3cffd828-cce9-3c73-a852-0976eaacdfbb.roa File: 3cffd828-cce9-3c73-a852-0976eaacdfbb.roa (raw, json) Hash identifier: QZd50yF/UNNgixlhBRTv2f1qXkYMrthU7ZKUdXenhd4= Subject key identifier: 60:B1:1C:43:21:B8:54:35:8F:E0:83:B9:1F:54:FF:81:97:C6:99:40 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584D95F001BD6ACA83457E8C7800 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3cffd828-cce9-3c73-a852-0976eaacdfbb.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 13576 IP address blocks: 216.106.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:01:bd:6a:ca:83:45:7e:8c:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=74ed95a4-2608-488a-97fb-8a54f5d27780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:82:d2:fc:73:00:83:cc:3d:81:d9:cf:95:14: c7:94:ef:05:3f:ca:4e:40:1d:36:d1:f3:ca:99:2f: be:33:02:98:c4:04:78:e0:eb:70:9e:54:b8:05:b2: 2e:6d:cf:33:f3:15:72:21:28:ca:bd:96:82:49:39: 5d:f4:63:82:0c:c0:a3:20:b3:79:60:f7:d6:d8:d2: f7:da:31:1b:2b:3e:53:8d:33:5f:4f:bf:6b:38:94: 0f:b8:3f:39:56:97:3e:10:19:c0:e6:49:7b:bd:38: c1:8b:f7:8d:10:89:79:cc:65:46:50:31:f3:fa:96: 50:d8:f7:9f:92:1d:60:18:6f:77:ef:96:aa:ef:f8: 53:c0:79:64:cb:4f:0c:89:1d:67:bd:08:84:8a:04: 88:d0:7a:1e:51:30:47:11:a7:c3:22:2a:78:59:d0: 5b:39:50:88:04:24:0b:0b:91:cf:5b:ab:ff:0b:ac: 9b:c7:43:18:c9:be:55:72:70:13:fa:67:57:8d:56: 96:69:4b:40:1b:07:bc:05:5e:48:b2:c0:b8:5e:27: bc:16:dc:73:1d:d1:a0:af:44:08:45:e9:fe:c7:76: 77:0c:97:19:a3:29:4d:a4:1c:c5:dd:5e:1a:ed:0f: d9:dc:19:be:25:06:66:1b:e9:a2:c0:8b:7a:38:a7: b1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B1:1C:43:21:B8:54:35:8F:E0:83:B9:1F:54:FF:81:97:C6:99:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3cffd828-cce9-3c73-a852-0976eaacdfbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:a6:e2:65:6e:6c:5d:70:d2:cf:f2:9e:27:d5:75:a7:5d:d6: 09:4f:d6:30:dc:77:82:30:57:35:f7:f1:bb:6c:16:99:f7:9d: 53:6e:a0:ab:bf:55:0b:bd:39:85:df:28:c8:1d:46:34:e7:2f: 5f:39:e4:31:d4:7f:e4:8a:59:af:1f:bf:b0:ac:33:8e:cb:c1: 72:96:77:4b:1b:15:32:e7:45:f3:2c:4d:3b:af:bb:a9:05:3e: d0:92:11:24:05:c7:e6:6a:99:22:79:14:3a:38:9a:d0:31:50: 75:10:ba:6b:11:b4:81:5c:b3:ba:ce:45:ae:51:a2:9f:9a:06: 53:d8:09:25:d9:ad:39:34:ce:54:76:ad:70:c9:58:fa:54:9c: 4b:b2:3b:65:b6:99:95:64:b4:aa:95:e6:02:8c:95:8c:6e:ba: d5:14:7e:4e:3c:c8:cf:3f:60:7c:4e:9f:4b:01:81:f9:12:ed: d5:67:72:36:60:e2:98:3d:ae:a2:05:75:30:50:49:56:22:43: 3f:23:86:d7:60:b2:e0:6c:5d:49:71:3f:a9:c3:1a:1c:91:4e: ea:ec:34:16:c0:f4:db:ae:2b:21:de:df:04:ad:1b:f9:d1:ec: c3:03:b7:8d:ed:9e:15:a6:e3:1b:7c:5b:c7:c7:98:88:3e:7c: 4c:35:53:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8AG9asqDRX6MeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NzRlZDk1YTQtMjYwOC00ODhhLTk3ZmItOGE1NGY1ZDI3NzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4LS/HMAg8w9gdnPlRTHlO8FP8pOQB020fPK mS++MwKYxAR44OtwnlS4BbIubc8z8xVyISjKvZaCSTld9GOCDMCjILN5YPfW2NL3 2jEbKz5TjTNfT79rOJQPuD85Vpc+EBnA5kl7vTjBi/eNEIl5zGVGUDHz+pZQ2Pef kh1gGG9375aq7/hTwHlky08MiR1nvQiEigSI0HoeUTBHEafDIip4WdBbOVCIBCQL C5HPW6v/C6ybx0MYyb5VcnAT+mdXjVaWaUtAGwe8BV5IssC4Xie8FtxzHdGgr0QI Ren+x3Z3DJcZoylNpBzF3V4a7Q/Z3Bm+JQZmG+miwIt6OKex/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCxHEMhuFQ1j+CDuR9U/4GXxplAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvM2NmZmQ4MjgtY2NlOS0z YzczLWE4NTItMDk3NmVhYWNkZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GroMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAem4mVubF1w0s/ynifVdadd1glP1jDcd4IwVzX38btsFpn3nVNuoKu/ VQu9OYXfKMgdRjTnL1855DHUf+SKWa8fv7CsM47LwXKWd0sbFTLnRfMsTTuvu6kF PtCSESQFx+ZqmSJ5FDo4mtAxUHUQumsRtIFcs7rORa5Rop+aBlPYCSXZrTk0zlR2 rXDJWPpUnEuyO2W2mZVktKqV5gKMlYxuutUUfk48yM8/YHxOn0sBgfkS7dVncjZg 4pg9rqIFdTBQSVYiQz8jhtdgsuBsXUlxP6nDGhyRTursNBbA9NuuKyHe3wStG/nR 7MMDt43tnhWm4xt8W8fHmIg+fEw1U5E= -----END CERTIFICATE-----Generated at Wed May 13 08:49:35 2026 by rpki-client