$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6ec033c3-04b4-31de-9442-ab5ae4e2aa50.roa File: 6ec033c3-04b4-31de-9442-ab5ae4e2aa50.roa (raw, json) Hash identifier: hPgJjCnipcQrm+C5SESQwRnGM2nqB5nckhZh8bnNGmY= Subject key identifier: 3E:2A:31:95:54:9E:8C:F1:30:44:00:B8:B2:6B:FD:22:71:1C:FB:1F Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584D0D426E79A8B916E78771E7D8 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6ec033c3-04b4-31de-9442-ab5ae4e2aa50.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 401415 IP address blocks: 216.249.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:6e:79:a8:b9:16:e7:87:71:e7:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=c8b5f197-b7d6-4706-a116-f1ed038c007f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7c:34:24:d3:3a:fd:a8:fc:97:7b:d1:ae:e6: d2:dd:0c:bc:ae:15:e1:a2:19:8d:a2:f8:45:5c:20: 3d:fd:73:52:d2:12:45:c0:04:82:06:45:f4:3a:64: a7:d7:2e:c9:73:2b:62:28:d5:a6:48:33:c3:70:29: 3e:4c:cd:6d:cb:55:ef:cd:a7:f5:f4:2b:62:d7:2d: af:3d:89:75:0d:d4:78:bd:c7:5c:97:79:28:7e:2d: 04:40:88:f5:e4:01:79:3e:65:f6:2d:5a:93:01:70: 28:2f:d8:b6:f9:ea:04:41:ae:fb:0b:a7:e0:ab:03: 9c:18:bc:ec:1c:a4:8a:a8:b1:05:43:2e:3c:16:18: 80:81:9e:17:e1:80:41:25:57:d8:03:8a:28:ce:6b: af:03:9f:21:14:ae:19:1b:11:f6:81:4e:a0:4c:3b: d7:53:c4:c6:95:c7:5d:93:4b:a7:75:ee:93:7e:93: c5:13:a7:6c:27:6f:6f:e7:9c:d1:54:be:01:7b:91: 12:8a:c2:b6:a3:80:82:21:a2:8a:9e:49:53:e0:29: b0:c2:b2:3c:a0:f7:56:34:f5:8c:5f:70:18:99:69: 64:37:8b:4a:f0:56:28:3c:c4:63:cc:49:c0:0b:54: ec:b6:cd:70:c9:d8:f2:2f:30:61:46:0a:80:da:02: ad:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2A:31:95:54:9E:8C:F1:30:44:00:B8:B2:6B:FD:22:71:1C:FB:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6ec033c3-04b4-31de-9442-ab5ae4e2aa50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:5e:5f:3d:71:15:ab:40:6c:5b:f2:f0:8c:1f:84:14:59:89: 4e:2a:78:9f:0f:53:94:77:03:80:2b:3a:75:00:12:dd:34:a7: ab:68:48:ec:61:1a:b7:93:18:5e:a9:28:db:3e:af:24:f8:8a: 2b:86:32:02:78:65:ee:f0:5d:b5:12:7c:4f:b9:d1:7b:1b:c0: 9a:da:14:e9:af:64:8b:c2:92:5f:6c:6b:12:28:20:70:da:b6: 4f:a6:cf:08:66:3a:92:29:8e:54:75:ba:f7:32:bf:50:22:e3: 11:e4:9e:9d:f0:4a:f8:6a:1e:68:12:eb:b8:f1:8c:08:ce:cc: 22:ca:df:fc:68:c4:d5:f4:19:25:7a:be:66:ba:c1:fc:9d:36: 22:65:ea:62:5e:71:b6:f4:c6:82:4b:48:5f:73:9e:8c:0b:d9: ee:22:a3:a4:1f:b9:59:dc:04:dd:40:f3:e2:97:f3:42:99:54: 75:c5:0b:ae:45:c1:3b:c2:3c:d3:96:6d:fb:6e:db:c9:51:2f: 5f:bf:6e:a8:c7:5f:48:5b:82:9a:6b:3d:cd:27:57:0b:71:dc: ce:36:46:3c:7c:f5:ed:e4:6c:67:df:86:51:cc:72:06:ef:71: 83:14:9b:e3:83:14:fc:f0:19:f0:43:89:83:78:b6:8b:3f:41: 52:33:5a:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQm55qLkW54dx59gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk YzhiNWYxOTctYjdkNi00NzA2LWExMTYtZjFlZDAzOGMwMDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXw0JNM6/aj8l3vRrubS3Qy8rhXhohmNovhF XCA9/XNS0hJFwASCBkX0OmSn1y7JcytiKNWmSDPDcCk+TM1ty1Xvzaf19Cti1y2v PYl1DdR4vcdcl3kofi0EQIj15AF5PmX2LVqTAXAoL9i2+eoEQa77C6fgqwOcGLzs HKSKqLEFQy48FhiAgZ4X4YBBJVfYA4oozmuvA58hFK4ZGxH2gU6gTDvXU8TGlcdd k0unde6TfpPFE6dsJ29v55zRVL4Be5ESisK2o4CCIaKKnklT4CmwwrI8oPdWNPWM X3AYmWlkN4tK8FYoPMRjzEnAC1Tsts1wydjyLzBhRgqA2gKtZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4qMZVUnozxMEQAuLJr/SJxHPsfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNmVjMDMzYzMtMDRiNC0z MWRlLTk0NDItYWI1YWU0ZTJhYTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PnGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNeXz1xFatAbFvy8IwfhBRZiU4qeJ8PU5R3A4ArOnUAEt00p6toSOxh GreTGF6pKNs+ryT4iiuGMgJ4Ze7wXbUSfE+50XsbwJraFOmvZIvCkl9saxIoIHDa tk+mzwhmOpIpjlR1uvcyv1Ai4xHknp3wSvhqHmgS67jxjAjOzCLK3/xoxNX0GSV6 vma6wfydNiJl6mJecbb0xoJLSF9znowL2e4io6QfuVncBN1A8+KX80KZVHXFC65F wTvCPNOWbftu28lRL1+/bqjHX0hbgpprPc0nVwtx3M42Rjx89e3kbGffhlHMcgbv cYMUm+ODFPzwGfBDiYN4tos/QVIzWgA= -----END CERTIFICATE-----Generated at Thu Mar 26 05:46:22 2026 by rpki-client