$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/1e354080-04c8-3446-bad5-4502d3f8ce7a.roa File: 1e354080-04c8-3446-bad5-4502d3f8ce7a.roa (raw, json) Hash identifier: nyfh9RoSaEcvJmnQsiKIi8Z8hkXVrBecUtN6F9GXB4g= Subject key identifier: 38:BB:4F:50:4D:41:2C:F3:75:7C:D8:0F:0F:EC:70:F4:B5:B8:0D:B8 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584D3F64C911EE5A139422D93480 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/1e354080-04c8-3446-bad5-4502d3f8ce7a.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 62943 IP address blocks: 216.146.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:c9:11:ee:5a:13:94:22:d9:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=b26e2e4f-597f-4c0c-b434-86ce90c557c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a4:28:4a:22:f9:4e:26:58:8d:78:5b:f3:94: 1d:e1:6b:d6:55:73:15:fa:50:fb:38:1a:31:11:4f: 8a:a9:20:4d:7b:00:da:aa:8d:8d:7d:e7:c7:e9:b7: f4:e7:d4:8e:79:a8:41:8f:88:40:80:eb:d3:9e:1b: 61:5d:c2:03:c1:18:83:6a:fb:12:a5:35:22:37:3e: 37:f1:e1:ee:5e:77:c6:00:0d:77:c3:d0:05:c2:1e: 8f:79:0b:18:e7:a8:d6:6d:ae:b5:fe:ff:4c:d7:51: a1:57:96:b2:34:9c:46:c6:98:1c:e7:c4:10:47:f1: f3:4e:5f:da:0d:e2:9d:6c:91:53:1a:d5:44:9a:af: 4f:31:91:b8:20:d4:ba:44:49:7f:d8:00:3b:40:24: c1:6d:ee:07:1c:99:11:98:3d:cb:70:1f:56:51:8b: 4b:5e:b8:3b:40:c1:3f:19:d1:5e:49:90:61:95:1c: f4:2e:aa:4c:9d:7a:bf:3c:37:18:de:a3:19:27:4d: 4b:3a:fe:40:8c:e3:b8:b2:f5:9a:a7:73:36:ac:77: af:a5:e4:40:55:cd:17:14:44:34:60:f1:dc:58:9c: 38:5b:86:e5:74:d8:5b:c0:c2:e7:42:c5:c7:01:c3: 19:03:5f:90:ca:c6:03:3c:03:b8:ea:a3:7e:06:38: 35:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BB:4F:50:4D:41:2C:F3:75:7C:D8:0F:0F:EC:70:F4:B5:B8:0D:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/1e354080-04c8-3446-bad5-4502d3f8ce7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 216.146.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:a7:0e:1c:be:0b:5b:b7:b5:b5:e4:ca:9a:49:33:d3:ff:83: 62:9f:8b:e7:70:21:a4:dc:d5:14:f1:1e:79:6d:22:ab:43:85: 6d:c7:9e:25:93:83:34:47:51:2b:d6:f3:91:53:4b:a8:14:1f: 68:ab:11:37:ec:01:c8:db:0e:d7:95:b6:d6:de:23:00:d3:98: 38:77:6d:f9:c3:b0:38:83:71:e5:24:7d:66:bb:83:4d:7a:86: 5a:c8:fd:af:5b:a3:71:0d:c1:1d:95:94:9c:60:a1:2b:09:35: b8:cd:f3:35:a5:f0:6a:98:31:5c:57:64:e0:32:9b:d6:59:aa: 59:b7:77:d6:6c:c2:7b:5c:78:15:f5:0c:6c:8b:84:39:49:26: d0:c1:4b:d8:bc:34:a1:9e:11:75:bc:05:66:ad:ee:aa:cb:1d: f1:4c:f3:60:f1:2e:34:67:51:30:f2:49:47:6c:3a:29:bb:ea: 61:4e:3b:1c:a6:f3:9e:ec:1e:ee:59:26:1f:d3:39:21:ab:43: 70:52:56:3b:74:96:ef:b8:ba:47:1d:3b:e8:29:62:1d:01:07: 60:f2:3a:eb:93:51:9a:59:85:29:d9:3a:9e:af:c9:d2:36:08: 9d:59:00:39:0f:53:3c:46:8e:ac:f0:98:d3:9c:b0:36:ad:41: c5:6b:25:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZMkR7loTlCLZNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YjI2ZTJlNGYtNTk3Zi00YzBjLWI0MzQtODZjZTkwYzU1N2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKQoSiL5TiZYjXhb85Qd4WvWVXMV+lD7OBox EU+KqSBNewDaqo2NfefH6bf059SOeahBj4hAgOvTnhthXcIDwRiDavsSpTUiNz43 8eHuXnfGAA13w9AFwh6PeQsY56jWba61/v9M11GhV5ayNJxGxpgc58QQR/HzTl/a DeKdbJFTGtVEmq9PMZG4INS6REl/2AA7QCTBbe4HHJkRmD3LcB9WUYtLXrg7QME/ GdFeSZBhlRz0LqpMnXq/PDcY3qMZJ01LOv5AjOO4svWap3M2rHevpeRAVc0XFEQ0 YPHcWJw4W4bldNhbwMLnQsXHAcMZA1+QysYDPAO46qN+Bjg1KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDi7T1BNQSzzdXzYDw/scPS1uA24MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvMWUzNTQwODAtMDRjOC0z NDQ2LWJhZDUtNDUwMmQzZjhjZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JL4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOnDhy+C1u3tbXkyppJM9P/g2Kfi+dwIaTc1RTxHnltIqtDhW3HniWT gzRHUSvW85FTS6gUH2irETfsAcjbDteVttbeIwDTmDh3bfnDsDiDceUkfWa7g016 hlrI/a9bo3ENwR2VlJxgoSsJNbjN8zWl8GqYMVxXZOAym9ZZqlm3d9ZswntceBX1 DGyLhDlJJtDBS9i8NKGeEXW8BWat7qrLHfFM82DxLjRnUTDySUdsOim76mFOOxym 857sHu5ZJh/TOSGrQ3BSVjt0lu+4ukcdO+gpYh0BB2DyOuuTUZpZhSnZOp6vydI2 CJ1ZADkPUzxGjqzwmNOcsDatQcVrJSg= -----END CERTIFICATE-----Generated at Thu Mar 26 19:42:15 2026 by rpki-client