$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/89da414e-80c1-31cf-9855-c0809175d8dc.roa File: 89da414e-80c1-31cf-9855-c0809175d8dc.roa (raw, json) Hash identifier: mHl8oHPv+VzosJ3oGXSuY6JmV5SACgpnpS+TxKSLWlE= Subject key identifier: A9:75:2C:4C:91:A3:65:D3:68:AD:F9:05:1D:70:55:7D:1A:FD:94:3A Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584D290F4F86FAB84E393FF25980 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/89da414e-80c1-31cf-9855-c0809175d8dc.roa Signing time: Sat 14 Mar 2026 01:00:31 +0000 ROA not before: Sat 14 Mar 2026 01:00:31 +0000 ROA not after: Fri 12 Jun 2026 01:00:31 +0000 asID: 62943 IP address blocks: 216.213.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:29:0f:4f:86:fa:b8:4e:39:3f:f2:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Mar 14 01:00:31 2026 GMT Not After : Jun 12 01:00:31 2026 GMT Subject: CN=73a6775a-21ef-471a-9f4b-9235fa8b5ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:76:c9:29:a6:7a:ea:5e:ef:fb:cd:10:8e:b4: 8f:07:eb:0b:50:51:e0:60:ec:07:8c:58:a9:3d:ce: 3d:6d:94:d4:48:4a:d6:74:1e:2d:90:de:99:c6:e3: ce:a0:31:be:43:0f:4f:a4:c9:93:2a:72:ef:a8:c6: af:22:3a:d2:80:3f:ab:d3:42:68:2d:79:f8:a1:f6: 73:21:83:ad:32:f3:2a:ce:36:56:9e:20:76:31:dc: 74:7b:c5:63:09:84:c5:e6:c9:3f:0d:2d:da:40:ac: fd:4e:21:6e:2f:02:f9:3b:3b:b0:0a:02:b2:5b:44: 8a:9f:fe:fa:5a:33:8c:e8:f4:10:ad:b7:df:b4:7b: dd:4a:45:b6:64:62:59:32:19:08:9f:46:7a:fd:8d: 79:31:b3:ae:61:11:67:62:3b:b1:7f:65:58:f9:a8: 8c:74:7d:49:85:88:6c:3d:8b:2f:18:6d:80:9b:01: c1:30:b2:e7:45:e9:41:92:47:ce:01:03:46:96:02: 87:1b:7d:8e:01:ad:72:4a:de:63:32:23:af:3c:b4: 03:38:39:b1:0c:64:38:88:43:4d:0c:47:25:e2:13: 6f:c9:79:b9:d9:ca:26:62:16:97:fe:a8:7f:99:f6: d0:28:05:73:ab:21:7b:32:f4:2e:e5:80:e1:10:38: c5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:75:2C:4C:91:A3:65:D3:68:AD:F9:05:1D:70:55:7D:1A:FD:94:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/89da414e-80c1-31cf-9855-c0809175d8dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 216.213.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d7:dd:06:21:a0:47:a6:53:5b:1c:2d:59:43:4c:46:c3:fd: d8:1f:56:40:b9:32:3d:c8:7e:45:19:1c:ed:32:5d:3e:6e:ce: cd:97:4a:a1:3a:84:e8:96:05:70:e6:33:24:6b:02:e6:78:6b: 5b:67:ea:dd:65:44:6e:8d:b3:76:cb:1a:29:6c:83:12:a4:ec: 7a:59:65:3c:8c:0a:88:e4:58:f5:51:e6:57:e2:58:cc:d7:22: 6b:b4:87:d4:dc:ff:08:6e:50:5e:a5:11:32:38:89:8b:12:79: 2e:9a:0b:36:9a:2b:96:2b:4c:b2:69:24:f9:e9:3c:f4:a8:8f: 09:7e:b8:e4:35:ce:10:12:7e:86:57:77:8d:17:21:b5:36:09: ea:7d:bf:a1:49:0e:92:8e:3f:3a:e3:9a:70:29:0e:1c:9d:f2: 9f:d0:7c:e5:24:0a:15:97:ef:a2:06:db:63:97:c0:7a:d3:3a: 34:21:73:61:ed:d3:46:76:98:6d:c3:0a:a9:c3:e3:e2:92:0d: 58:16:ff:4f:e3:31:31:13:26:e7:6e:ba:45:c7:23:9a:c0:85: 25:e6:3c:18:6e:ed:a3:79:5b:52:28:2f:e9:a3:cf:fa:f5:13: 5a:cc:96:7a:0c:e9:2c:56:bc:69:22:d1:b5:89:6b:74:83:13: 00:b0:91:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0pD0+G+rhOOT/yWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDMxNDAxMDAzMVoXDTI2MDYxMjAxMDAzMVowLzEtMCsGA1UEAxMk NzNhNjc3NWEtMjFlZi00NzFhLTlmNGItOTIzNWZhOGI1ZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3bJKaZ66l7v+80QjrSPB+sLUFHgYOwHjFip Pc49bZTUSErWdB4tkN6ZxuPOoDG+Qw9PpMmTKnLvqMavIjrSgD+r00JoLXn4ofZz IYOtMvMqzjZWniB2Mdx0e8VjCYTF5sk/DS3aQKz9TiFuLwL5OzuwCgKyW0SKn/76 WjOM6PQQrbfftHvdSkW2ZGJZMhkIn0Z6/Y15MbOuYRFnYjuxf2VY+aiMdH1JhYhs PYsvGG2AmwHBMLLnRelBkkfOAQNGlgKHG32OAa1ySt5jMiOvPLQDODmxDGQ4iENN DEcl4hNvyXm52comYhaX/qh/mfbQKAVzqyF7MvQu5YDhEDjFQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKl1LEyRo2XTaK35BR1wVX0a/ZQ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvODlkYTQxNGUtODBjMS0z MWNmLTk4NTUtYzA4MDkxNzVkOGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2NUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHX3QYhoEemU1scLVlDTEbD/dgfVkC5Mj3IfkUZHO0yXT5uzs2XSqE6 hOiWBXDmMyRrAuZ4a1tn6t1lRG6Ns3bLGilsgxKk7HpZZTyMCojkWPVR5lfiWMzX Imu0h9Tc/whuUF6lETI4iYsSeS6aCzaaK5YrTLJpJPnpPPSojwl+uOQ1zhASfoZX d40XIbU2Cep9v6FJDpKOPzrjmnApDhyd8p/QfOUkChWX76IG22OXwHrTOjQhc2Ht 00Z2mG3DCqnD4+KSDVgW/0/jMTETJuduukXHI5rAhSXmPBhu7aN5W1IoL+mjz/r1 E1rMlnoM6SxWvGki0bWJa3SDEwCwkdM= -----END CERTIFICATE-----Generated at Thu Mar 26 19:41:22 2026 by rpki-client