$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/03561657-9a62-3573-aee8-d1dfed5a37c6.roa File: 03561657-9a62-3573-aee8-d1dfed5a37c6.roa (raw, json) Hash identifier: RczwfE0YwOpN7dbmGOtq7czZ/5Dl6TwRUruxrhoUsm8= Subject key identifier: 24:7F:AE:E9:92:9B:9F:00:2A:B4:04:E6:8A:98:0C:41:67:1F:84:9F Certificate issuer: /CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Certificate serial: 010D0C9F4328584D9220961311B7E60EEBFB3680 Authority key identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/03561657-9a62-3573-aee8-d1dfed5a37c6.roa Signing time: Mon 20 Apr 2026 16:15:15 +0000 ROA not before: Mon 20 Apr 2026 16:15:15 +0000 ROA not after: Sun 19 Jul 2026 16:15:15 +0000 asID: 22641 IP address blocks: 216.169.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:92:20:96:13:11:b7:e6:0e:eb:fb:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Validity Not Before: Apr 20 16:15:15 2026 GMT Not After : Jul 19 16:15:15 2026 GMT Subject: CN=17c0f921-44af-45f5-b683-922499223681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ed:00:8c:85:90:6d:ac:ea:9e:65:b4:75:a4: 24:af:ff:38:23:db:af:b7:c7:b0:fe:ce:77:b5:c1: 5e:6b:6b:03:7a:35:b3:e1:da:c4:9a:9a:7a:59:2f: 6a:7a:58:ac:64:d8:14:65:5a:ce:5b:69:06:d1:1c: 4a:96:81:89:a4:5a:25:a6:99:09:9d:af:52:06:18: 78:91:42:7d:00:51:81:cf:64:d9:7d:bb:b9:6f:3a: 7a:77:f7:09:20:d1:cb:44:05:e9:22:13:e9:2e:33: 70:8c:f7:5f:41:a6:a3:7d:35:e3:ea:03:ee:26:cb: 15:ee:0e:94:06:09:a5:3a:da:23:d4:00:e7:fc:81: 38:f9:86:69:5c:52:fa:8b:a2:a5:1e:c9:18:11:d0: 4b:aa:1c:9e:ee:ad:7a:70:1d:d4:56:dc:6b:69:28: 03:4e:86:b9:fd:34:88:82:1e:c9:91:ff:5e:7f:86: 2a:ec:a1:97:ab:be:3e:b6:3a:d5:7e:16:42:80:19: f9:ef:97:5a:7d:48:3b:cc:e3:f6:c2:f3:3b:da:a6: d8:48:b2:91:24:82:89:13:50:81:58:0d:ab:b2:e1: 9b:04:2f:8d:85:f6:71:de:0d:2e:51:fe:13:42:a5: f7:95:e0:e3:23:13:5a:78:a4:c2:49:4e:b5:14:07: 31:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7F:AE:E9:92:9B:9F:00:2A:B4:04:E6:8A:98:0C:41:67:1F:84:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/03561657-9a62-3573-aee8-d1dfed5a37c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl X509v3 Authority Key Identifier: keyid:F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer sbgp-ipAddrBlock: critical IPv4: 216.169.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:56:02:1d:32:0b:89:93:be:e9:c2:51:ca:49:88:48:48:99: 21:d9:b4:72:2f:08:a0:c4:e9:71:4c:bb:cc:ee:18:09:38:9d: 66:2d:7d:28:d9:c2:da:03:26:e2:9f:34:74:3a:00:58:49:81: fb:1c:3c:97:65:a9:24:ff:ab:b5:6c:07:30:82:46:3b:d8:fa: ce:89:0a:75:02:1e:91:96:80:a6:7e:74:04:f8:bc:4e:46:23: 36:51:1b:98:3c:bb:a0:7f:54:91:73:ac:ce:e0:bc:10:4e:ea: fb:f3:5c:7d:14:3e:8c:1f:c3:76:3a:c2:b8:ab:59:68:2c:e8: 3e:da:45:ce:d4:5f:cd:0a:f5:38:f5:c2:cd:b8:ca:d9:f0:eb: 3c:9d:f0:a5:b1:4d:bb:ce:a5:7f:00:9d:22:4b:81:84:1d:cc: d7:9d:44:a2:76:5a:f8:cf:de:52:30:e0:b5:8a:ed:9a:14:d8: d3:b6:d2:95:96:b7:f6:73:0b:8a:ca:a5:06:79:97:e4:1e:0d: 24:d1:45:7b:7c:76:90:fb:65:4b:32:b5:cf:6f:ce:0a:c1:70: b3:45:b0:17:86:6b:0a:fe:44:8c:1b:86:64:c6:cb:0f:35:18: 8d:2d:65:55:e8:70:b9:24:0e:a5:4f:79:50:0a:49:b3:fb:eb: 47:f1:b2:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2SIJYTEbfmDuv7NoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwMzVlYTItYzFkNS00YjI5LWE4YzQtMWIzMTM3OWM4 YWZmMB4XDTI2MDQyMDE2MTUxNVoXDTI2MDcxOTE2MTUxNVowLzEtMCsGA1UEAxMk MTdjMGY5MjEtNDRhZi00NWY1LWI2ODMtOTIyNDk5MjIzNjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+0AjIWQbazqnmW0daQkr/84I9uvt8ew/s53 tcFea2sDejWz4drEmpp6WS9qelisZNgUZVrOW2kG0RxKloGJpFolppkJna9SBhh4 kUJ9AFGBz2TZfbu5bzp6d/cJINHLRAXpIhPpLjNwjPdfQaajfTXj6gPuJssV7g6U BgmlOtoj1ADn/IE4+YZpXFL6i6KlHskYEdBLqhye7q16cB3UVtxraSgDToa5/TSI gh7Jkf9ef4Yq7KGXq74+tjrVfhZCgBn575dafUg7zOP2wvM72qbYSLKRJIKJE1CB WA2rsuGbBC+NhfZx3g0uUf4TQqX3leDjIxNaeKTCSU61FAcxDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCR/rumSm58AKrQE5oqYDEFnH4SfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODAz NWVhMi1jMWQ1LTRiMjktYThjNC0xYjMxMzc5YzhhZmYvMDM1NjE2NTctOWE2Mi0z NTczLWFlZTgtZDFkZmVkNWEzN2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgwMzVlYTItYzFkNS00YjI5LWE4 YzQtMWIzMTM3OWM4YWZmLzI4MDM1ZWEyLWMxZDUtNGIyOS1hOGM0LTFiMzEzNzlj OGFmZi5jcmwwHwYDVR0jBBgwFoAU8a/gxj9B23Vcsh798dH499Cp++AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODAzNWVhMi1jMWQ1LTRiMjktYThjNC0xYjMx Mzc5YzhhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVWAh0yC4mTvunCUcpJiEhImSHZtHIvCKDE6XFMu8zuGAk4nWYtfSjZ wtoDJuKfNHQ6AFhJgfscPJdlqST/q7VsBzCCRjvY+s6JCnUCHpGWgKZ+dAT4vE5G IzZRG5g8u6B/VJFzrM7gvBBO6vvzXH0UPowfw3Y6wrirWWgs6D7aRc7UX80K9Tj1 ws24ytnw6zyd8KWxTbvOpX8AnSJLgYQdzNedRKJ2WvjP3lIw4LWK7ZoU2NO20pWW t/ZzC4rKpQZ5l+QeDSTRRXt8dpD7ZUsytc9vzgrBcLNFsBeGawr+RIwbhmTGyw81 GI0tZVXocLkkDqVPeVAKSbP760fxssc= -----END CERTIFICATE-----Generated at Wed May 13 06:48:10 2026 by rpki-client