$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/dccb0538-f728-3b8a-9c4f-16ce6c6a5bac.roa File: dccb0538-f728-3b8a-9c4f-16ce6c6a5bac.roa (raw, json) Hash identifier: MMUdPmjBZVYfB6YROeqbqYhz+Ez0Fjc9ZYflVnAL9IA= Subject key identifier: 06:F2:BF:EA:5D:7B:AE:BF:2B:90:F0:83:E2:9C:09:DE:07:5F:12:1E Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584D0D426E8B96778AD55146E380 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/dccb0538-f728-3b8a-9c4f-16ce6c6a5bac.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 401415 IP address blocks: 216.249.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:6e:8b:96:77:8a:d5:51:46:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=4ba2150e-1f96-474b-9fba-4163d6966cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a3:2f:c8:ff:21:29:4b:d0:25:01:5f:31:1b: c3:68:fe:53:9f:d8:01:59:c4:cb:d0:53:64:57:f3: 86:8e:71:dc:8a:59:af:4d:6a:b2:f0:73:ca:81:04: 21:cf:a2:d1:33:e5:80:8b:63:78:f6:2d:aa:0d:3e: e4:96:0f:d9:85:c7:97:2a:81:cd:7c:75:3f:82:16: 79:87:dd:76:13:0d:eb:b4:32:70:f0:e9:4e:0a:21: f3:76:ff:99:0b:df:ee:7c:c9:a9:c8:9d:db:bb:e9: 9e:0a:13:b9:cc:94:d0:30:98:af:76:e6:fb:e6:c8: 52:6d:06:e6:5c:b8:29:ec:ec:c1:82:bb:35:2c:89: ce:c9:40:6b:14:26:bc:4c:ae:06:6b:70:4e:75:b5: 90:e9:ce:94:1e:cb:1b:01:13:dd:5f:43:95:fb:89: 14:46:99:02:29:34:cd:85:0f:57:2f:ab:0d:b4:c8: f2:15:9b:15:36:a9:1e:5a:a3:2a:5e:2e:8a:2a:21: c8:a4:76:0e:4a:12:10:70:03:1a:c0:65:1b:58:a9: f4:02:80:30:de:56:d1:4a:7e:dd:b7:1e:d4:b8:58: 3a:3c:65:ce:05:eb:56:a3:3e:91:7d:0a:42:f8:b3: 9f:87:2d:31:cd:8e:05:81:64:64:be:00:67:f5:ab: fe:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F2:BF:EA:5D:7B:AE:BF:2B:90:F0:83:E2:9C:09:DE:07:5F:12:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/dccb0538-f728-3b8a-9c4f-16ce6c6a5bac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:f8:e1:1e:65:ae:e0:21:d4:8b:3f:e7:52:ee:b3:3e:a1:84: d5:69:ce:c0:2a:5c:5d:1c:84:24:44:de:4a:f8:02:47:fb:20: cc:39:0f:e8:7b:f9:71:e1:d7:ec:18:1c:5c:fc:81:ab:46:3e: b8:38:18:4f:b6:e4:e2:56:29:c2:92:d2:95:3e:29:cc:19:03: 6a:51:44:f5:c1:61:5a:c9:d9:2d:c9:21:1b:06:d6:75:e2:60: 5f:e7:7a:87:36:ea:40:0b:c3:44:e6:a5:2a:3d:ca:5f:9a:21: 46:6f:ce:88:f9:94:98:96:29:fa:ff:e7:5e:c8:79:84:42:b3: 4b:9f:db:b1:cc:74:d8:00:e0:06:34:c5:f4:d1:0b:a4:e8:fb: a0:c0:63:d2:bc:f4:bc:29:25:fb:db:68:12:4a:6b:34:cc:7d: 4e:19:0a:2e:29:84:b2:8f:a2:51:76:da:7f:25:77:80:6d:0f: 78:1c:7f:9e:1d:36:7d:79:14:94:3f:96:dd:d9:4c:3f:ff:f7: f3:7b:ba:2e:3f:a2:f2:32:5e:f4:dd:68:6d:0d:a2:4f:c4:f0: b3:d9:63:ba:47:df:54:1e:40:24:19:af:23:c8:5a:5f:c2:a9: 7d:1c:77:9f:65:f9:2a:f3:7b:a3:26:dd:c6:d4:ef:77:f9:ce: bd:c2:56:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQm6LlneK1VFG44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk NGJhMjE1MGUtMWY5Ni00NzRiLTlmYmEtNDE2M2Q2OTY2Y2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKMvyP8hKUvQJQFfMRvDaP5Tn9gBWcTL0FNk V/OGjnHcilmvTWqy8HPKgQQhz6LRM+WAi2N49i2qDT7klg/ZhceXKoHNfHU/ghZ5 h912Ew3rtDJw8OlOCiHzdv+ZC9/ufMmpyJ3bu+meChO5zJTQMJivdub75shSbQbm XLgp7OzBgrs1LInOyUBrFCa8TK4Ga3BOdbWQ6c6UHssbARPdX0OV+4kURpkCKTTN hQ9XL6sNtMjyFZsVNqkeWqMqXi6KKiHIpHYOShIQcAMawGUbWKn0AoAw3lbRSn7d tx7UuFg6PGXOBetWoz6RfQpC+LOfhy0xzY4FgWRkvgBn9av+mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbyv+pde66/K5Dwg+KcCd4HXxIeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZGNjYjA1MzgtZjcyOC0z YjhhLTljNGYtMTZjZTZjNmE1YmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PnHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMX44R5lruAh1Is/51Lusz6hhNVpzsAqXF0chCRE3kr4Akf7IMw5D+h7 +XHh1+wYHFz8gatGPrg4GE+25OJWKcKS0pU+KcwZA2pRRPXBYVrJ2S3JIRsG1nXi YF/neoc26kALw0TmpSo9yl+aIUZvzoj5lJiWKfr/517IeYRCs0uf27HMdNgA4AY0 xfTRC6To+6DAY9K89LwpJfvbaBJKazTMfU4ZCi4phLKPolF22n8ld4BtD3gcf54d Nn15FJQ/lt3ZTD//9/N7ui4/ovIyXvTdaG0Nok/E8LPZY7pH31QeQCQZryPIWl/C qX0cd59l+Srze6Mm3cbU73f5zr3CVqc= -----END CERTIFICATE-----Generated at Thu Mar 26 16:28:18 2026 by rpki-client