$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/748d4ebd-cc65-3da7-b158-65e86fed4ebe.roa File: 748d4ebd-cc65-3da7-b158-65e86fed4ebe.roa (raw, json) Hash identifier: tTzNOYccv/TYenjgfC7CVWXegB2jN/u5Inxm8uL+OnU= Subject key identifier: 41:9E:F0:83:AC:2B:37:19:79:8F:09:1F:B7:60:23:73:93:19:0F:58 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584D0D426EB18AD30F19BEAB7D00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/748d4ebd-cc65-3da7-b158-65e86fed4ebe.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 401415 IP address blocks: 216.249.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:6e:b1:8a:d3:0f:19:be:ab:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=5bef4333-423c-4365-b7d7-f7715e8d45b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d1:6d:c0:0e:02:8e:f0:8a:be:2c:e0:a6:91: 52:d3:11:d6:91:07:7e:8f:5b:36:fe:8d:ad:4e:57: 50:bf:e4:cf:23:eb:d8:60:35:76:69:ba:eb:49:a9: ec:b7:34:1c:04:5a:4a:8a:fd:17:14:86:ef:5a:52: c3:d9:f1:d3:80:af:86:1c:b5:2c:b6:10:7e:de:38: d9:33:5b:18:98:b3:ee:28:1e:e1:1d:50:7b:ff:b2: a7:4c:1e:8f:ce:3b:a9:3c:a6:b7:1f:8a:f5:89:a8: e3:16:ff:18:e1:cc:28:b9:e2:00:32:d4:d3:95:43: 0d:15:3b:ac:45:35:55:a4:fe:5a:83:cf:99:f8:bf: 31:b8:30:55:fb:22:31:9f:83:a9:9f:fd:22:7b:d7: f2:cf:05:da:ab:e3:74:39:08:18:05:9a:f7:2d:81: 65:08:5a:3c:40:28:6a:01:a9:64:51:23:7d:80:96: 38:fd:7e:01:c4:5d:86:12:e8:22:ee:25:fd:d3:c0: 53:9e:83:85:56:0a:3d:0c:22:09:f0:ba:51:ed:54: d2:cc:79:1d:90:fa:86:9a:2a:27:bf:4b:69:48:01: e4:63:82:d3:52:aa:4c:64:fa:dc:21:77:6d:b2:fc: ad:d3:6e:18:8c:ed:fd:16:70:ee:79:c0:52:ad:3e: d9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9E:F0:83:AC:2B:37:19:79:8F:09:1F:B7:60:23:73:93:19:0F:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/748d4ebd-cc65-3da7-b158-65e86fed4ebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:3d:28:7b:50:cc:05:79:c4:54:c7:b1:b7:7e:b8:ea:53:9b: 79:c8:a9:7e:7c:85:50:10:32:6d:d3:55:12:ec:c5:be:a4:92: ff:6c:ad:7e:bd:6e:f8:14:c5:8a:8e:ab:40:32:1c:69:70:4c: d2:38:20:e3:36:66:6c:c5:a9:28:23:e6:71:87:d1:c9:12:85: b7:31:36:94:29:21:a3:11:23:13:94:9c:3a:3b:ec:ab:1c:bf: 09:04:10:e2:df:2b:a1:6f:d5:d0:46:ca:f5:25:e0:c4:70:e9: 62:86:21:a2:43:a8:e3:9c:94:66:cb:46:66:2e:5b:83:9e:1d: b8:22:9f:81:d8:15:61:0e:44:a4:dd:83:19:3e:76:1b:c0:84: b4:91:69:f2:e2:06:fd:53:ac:5c:d1:ca:c0:48:ec:cd:11:b4: a3:cc:bf:66:d9:4d:fd:6d:c5:fb:55:3b:3d:11:33:ae:89:c6: ff:91:7c:57:cc:3a:31:47:b8:8c:65:04:22:99:b7:aa:74:b9: 65:14:47:94:83:38:9c:ba:1c:4f:3d:5e:90:61:01:6f:bd:31: 0e:f0:fd:5a:a9:0d:a4:bc:74:6e:9d:0d:4b:03:3d:3c:32:84: cc:d8:87:2d:65:a0:04:8b:27:26:e6:06:d2:91:49:c1:d2:ca: f7:4f:fe:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQm6xitMPGb6rfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk NWJlZjQzMzMtNDIzYy00MzY1LWI3ZDctZjc3MTVlOGQ0NWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNFtwA4CjvCKvizgppFS0xHWkQd+j1s2/o2t TldQv+TPI+vYYDV2abrrSanstzQcBFpKiv0XFIbvWlLD2fHTgK+GHLUsthB+3jjZ M1sYmLPuKB7hHVB7/7KnTB6PzjupPKa3H4r1iajjFv8Y4cwoueIAMtTTlUMNFTus RTVVpP5ag8+Z+L8xuDBV+yIxn4Opn/0ie9fyzwXaq+N0OQgYBZr3LYFlCFo8QChq AalkUSN9gJY4/X4BxF2GEugi7iX908BTnoOFVgo9DCIJ8LpR7VTSzHkdkPqGmion v0tpSAHkY4LTUqpMZPrcIXdtsvyt024YjO39FnDuecBSrT7Z7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGe8IOsKzcZeY8JH7dgI3OTGQ9YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNzQ4ZDRlYmQtY2M2NS0z ZGE3LWIxNTgtNjVlODZmZWQ0ZWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PnJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABU9KHtQzAV5xFTHsbd+uOpTm3nIqX58hVAQMm3TVRLsxb6kkv9srX69 bvgUxYqOq0AyHGlwTNI4IOM2ZmzFqSgj5nGH0ckShbcxNpQpIaMRIxOUnDo77Ksc vwkEEOLfK6Fv1dBGyvUl4MRw6WKGIaJDqOOclGbLRmYuW4OeHbgin4HYFWEORKTd gxk+dhvAhLSRafLiBv1TrFzRysBI7M0RtKPMv2bZTf1txftVOz0RM66Jxv+RfFfM OjFHuIxlBCKZt6p0uWUUR5SDOJy6HE89XpBhAW+9MQ7w/VqpDaS8dG6dDUsDPTwy hMzYhy1loASLJybmBtKRScHSyvdP/rs= -----END CERTIFICATE-----Generated at Thu Mar 26 13:55:45 2026 by rpki-client