$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/cae9e8a5-2fe5-3525-be00-d85e8ba6be0f.roa File: cae9e8a5-2fe5-3525-be00-d85e8ba6be0f.roa (raw, json) Hash identifier: oJB522c8IEZOmChKmN4MA/Qlne23AxY9PWHyeIbi86Q= Subject key identifier: 1C:49:C2:0A:4F:3B:89:99:64:27:05:15:02:22:12:60:D2:0B:33:8D Certificate issuer: /CN=e056707d-838a-4b8b-bd8e-8a874ea0684d Certificate serial: 010D0C9F4328584D39CF7DB930E2B5F687BECDA0 Authority key identifier: 21:73:27:CC:A7:57:0A:AF:9B:53:F6:47:A1:F4:EE:A3:36:32:1C:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/cae9e8a5-2fe5-3525-be00-d85e8ba6be0f.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 16509 IP address blocks: 216.57.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:7d:b9:30:e2:b5:f6:87:be:cd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e056707d-838a-4b8b-bd8e-8a874ea0684d Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=09567744-6d8e-4a43-87d3-c99a972d5e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:53:85:42:b9:61:de:19:60:73:cd:a8:ef:05: 6a:0c:98:be:1d:1a:e5:3f:34:69:82:d5:71:9a:03: 27:d7:99:c1:05:12:d4:1c:dd:12:76:a2:bc:cb:63: bc:44:40:d7:8b:a4:32:e2:12:83:dc:4b:28:b5:c5: 8f:09:00:b9:49:66:d9:24:1f:30:2f:f0:0f:ae:d8: 9d:22:5b:c4:e1:e7:51:27:75:39:74:19:1f:92:29: 5d:a8:40:19:98:dd:48:3c:35:af:f9:69:71:99:80: 10:8f:99:ea:ee:7e:c3:7d:69:e2:a5:d5:ec:ae:cd: 17:59:22:6a:bb:26:24:7f:17:32:86:72:ae:2a:ab: 06:be:dd:5e:86:1a:14:f3:76:2c:b8:70:e2:0a:5a: 16:09:eb:2a:31:89:ee:d0:e3:ea:66:60:f1:fc:3b: 22:52:bd:98:5d:ef:a2:96:25:0a:f5:f1:a1:22:77: ef:62:63:64:69:6e:85:c5:7d:98:ed:e8:70:3d:ec: 43:55:81:7b:54:ca:e5:e9:ec:0c:2e:67:5f:c7:cd: ef:81:be:9c:45:b1:bb:5e:4f:f3:a0:e6:60:03:b2: ca:2c:6c:61:9f:39:99:89:d5:c1:99:80:e9:dd:b3: 71:c9:ba:37:f0:e2:8f:5a:52:da:f6:86:92:17:46: 46:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:49:C2:0A:4F:3B:89:99:64:27:05:15:02:22:12:60:D2:0B:33:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/cae9e8a5-2fe5-3525-be00-d85e8ba6be0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.crl X509v3 Authority Key Identifier: keyid:21:73:27:CC:A7:57:0A:AF:9B:53:F6:47:A1:F4:EE:A3:36:32:1C:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer sbgp-ipAddrBlock: critical IPv4: 216.57.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:f9:c4:44:fc:f4:e6:51:ec:93:1b:72:60:48:0b:4f:26:c6: 76:53:df:8e:e2:27:7b:2c:02:9f:a3:7f:02:3b:9a:d8:ef:a4: 26:88:b1:3b:e5:3c:b6:b0:f0:3e:fa:fa:19:f5:81:d7:75:7b: 62:24:23:5c:1f:a6:66:a4:91:bf:83:07:7a:93:8e:ea:a7:20: 26:ad:75:44:6b:1d:20:65:f1:44:fa:df:c2:be:c8:43:d5:1f: fc:f6:2e:96:84:14:b6:2d:fc:5e:18:b9:57:f7:68:a8:a7:66: 93:32:e5:48:b5:e0:a9:16:e1:7a:70:a8:fb:04:d9:3b:4e:5b: 16:bb:c6:19:ef:9e:36:bf:70:1b:3c:94:73:35:bd:a6:0d:63: b0:9d:51:fd:b4:48:e5:32:0f:83:55:5c:49:fd:17:d6:a1:08: a7:07:7c:6e:c8:09:2c:12:cd:7d:aa:93:32:a9:0d:e6:0e:3c: 51:2e:82:c9:21:05:3b:ce:f1:bb:d7:5c:eb:e9:ad:80:fa:4b: 9d:02:52:ff:da:35:c8:f4:d3:fe:10:e1:12:63:e0:ed:c6:19: 6b:cd:56:38:49:dc:4d:0d:d0:b3:cb:ec:73:3d:17:54:01:e7: ab:ed:c6:fa:3e:49:5b:fa:5d:80:cd:f1:5d:25:cf:e3:9f:be: 84:54:7f:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z325MOK19oe+zaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA1NjcwN2QtODM4YS00YjhiLWJkOGUtOGE4NzRlYTA2 ODRkMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk MDk1Njc3NDQtNmQ4ZS00YTQzLTg3ZDMtYzk5YTk3MmQ1ZTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFOFQrlh3hlgc82o7wVqDJi+HRrlPzRpgtVx mgMn15nBBRLUHN0SdqK8y2O8REDXi6Qy4hKD3EsotcWPCQC5SWbZJB8wL/APrtid IlvE4edRJ3U5dBkfkildqEAZmN1IPDWv+WlxmYAQj5nq7n7DfWnipdXsrs0XWSJq uyYkfxcyhnKuKqsGvt1ehhoU83YsuHDiCloWCesqMYnu0OPqZmDx/DsiUr2YXe+i liUK9fGhInfvYmNkaW6FxX2Y7ehwPexDVYF7VMrl6ewMLmdfx83vgb6cRbG7Xk/z oOZgA7LKLGxhnzmZidXBmYDp3bNxybo38OKPWlLa9oaSF0ZGlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxJwgpPO4mZZCcFFQIiEmDSCzONMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lMDU2 NzA3ZC04MzhhLTRiOGItYmQ4ZS04YTg3NGVhMDY4NGQvY2FlOWU4YTUtMmZlNS0z NTI1LWJlMDAtZDg1ZThiYTZiZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTA1NjcwN2QtODM4YS00YjhiLWJk OGUtOGE4NzRlYTA2ODRkL2UwNTY3MDdkLTgzOGEtNGI4Yi1iZDhlLThhODc0ZWEw Njg0ZC5jcmwwHwYDVR0jBBgwFoAUIXMnzKdXCq+bU/ZHofTuozYyHHMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lMDU2NzA3ZC04MzhhLTRiOGItYmQ4ZS04YTg3 NGVhMDY4NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DlmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABb5xET89OZR7JMbcmBIC08mxnZT347iJ3ssAp+jfwI7mtjvpCaIsTvl PLaw8D76+hn1gdd1e2IkI1wfpmakkb+DB3qTjuqnICatdURrHSBl8UT638K+yEPV H/z2LpaEFLYt/F4YuVf3aKinZpMy5Ui14KkW4XpwqPsE2TtOWxa7xhnvnja/cBs8 lHM1vaYNY7CdUf20SOUyD4NVXEn9F9ahCKcHfG7ICSwSzX2qkzKpDeYOPFEugskh BTvO8bvXXOvprYD6S50CUv/aNcj00/4Q4RJj4O3GGWvNVjhJ3E0N0LPL7HM9F1QB 56vtxvo+SVv6XYDN8V0lz+OfvoRUf+s= -----END CERTIFICATE-----Generated at Thu Mar 26 07:01:21 2026 by rpki-client