$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/c3b7805c-6e3b-3fd7-96d7-4cdd27a27931.roa File: c3b7805c-6e3b-3fd7-96d7-4cdd27a27931.roa (raw, json) Hash identifier: 0bzqDLvCshtTUJM89Ug/dQXyy8QcfzwG+FQS2DFnmEk= Subject key identifier: 33:BF:AF:FD:C3:C1:FD:E5:D4:C2:D0:D7:32:48:7B:87:50:2B:22:5D Certificate issuer: /CN=67d0730c-5dbd-466b-a70c-5267ec1b7359 Certificate serial: 010D0C9F4328584D5E1A5FAA0DAAFE71B27F16EA Authority key identifier: 1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/c3b7805c-6e3b-3fd7-96d7-4cdd27a27931.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 33132 IP address blocks: 216.99.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:5f:aa:0d:aa:fe:71:b2:7f:16:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67d0730c-5dbd-466b-a70c-5267ec1b7359 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=088f9911-a80b-49e6-a18f-5a4b15f5d6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4f:e1:be:b8:14:ed:63:47:46:12:0c:2b:24: bb:e1:50:1a:38:1d:d6:3d:52:98:bf:c9:f8:ee:0f: bf:54:34:56:81:94:eb:39:da:77:78:fa:72:90:7f: 9c:da:25:a7:e9:02:02:f4:b9:64:94:7a:cf:6f:1a: 30:23:27:27:de:75:78:76:09:3b:51:30:b7:cc:38: 0f:4f:1c:fa:8e:40:b6:c1:13:7d:76:d4:ef:4e:68: 8c:f7:98:47:65:41:d3:aa:3e:d7:a6:49:f0:46:5b: a3:6b:d8:9e:9f:80:f6:bf:0b:41:c7:9b:54:71:4f: 67:3d:41:e6:f7:a5:0e:8c:6b:79:d3:0f:31:ac:d8: 7e:72:89:fc:89:da:e8:03:e9:6f:34:61:ac:ea:2c: fc:a3:ff:f5:37:86:a4:f4:47:a1:0b:5f:35:ac:59: 19:1c:08:44:1f:94:77:0b:d0:d6:5e:4d:05:0b:dc: 19:b4:bc:96:53:36:ce:12:53:dc:1c:56:e4:44:ab: ad:78:10:1d:bf:dc:aa:d5:74:4d:89:f1:20:86:e7: ed:c6:dc:58:9f:c5:0e:49:46:51:b0:30:b6:67:8f: 78:fd:ab:75:4c:cd:1e:0e:ef:6d:4f:8d:b2:46:e9: 50:8e:b7:8d:e7:c5:a6:75:19:8c:fc:14:2d:ba:1f: 74:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:BF:AF:FD:C3:C1:FD:E5:D4:C2:D0:D7:32:48:7B:87:50:2B:22:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/c3b7805c-6e3b-3fd7-96d7-4cdd27a27931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.crl X509v3 Authority Key Identifier: keyid:1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer sbgp-ipAddrBlock: critical IPv4: 216.99.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:5f:ba:25:b5:46:09:1c:b0:2e:04:87:1f:79:09:a8:cf:c9: 5f:50:e4:32:22:e6:4c:29:78:77:2a:80:40:e1:cd:cc:e1:75: 26:e3:ca:cb:60:af:2c:fb:5a:d8:d8:ce:ef:b1:7c:1e:18:2b: 45:4a:67:02:5d:e4:9d:41:fe:67:81:69:f4:3b:ea:77:fb:0b: 57:86:74:1c:a4:12:32:db:93:3c:1e:1b:c6:72:b9:f0:64:24: 0e:b0:e6:87:17:dc:c9:a8:4e:77:37:e9:02:ba:d6:43:35:9a: dd:15:33:36:52:39:06:8a:b0:37:68:61:ab:44:c6:7c:1f:47: 13:6c:7c:36:13:9a:68:2c:32:33:b6:42:ec:cb:6a:07:fa:af: ac:52:1f:9b:35:92:d6:84:5b:d1:26:89:26:de:e6:54:a7:fe: 54:93:cb:cf:12:a3:03:29:65:6a:1e:a2:1f:44:76:67:13:be: 01:de:79:58:c4:5a:c0:1b:c1:23:7e:b7:f1:5f:a5:1b:da:78: fa:26:6f:fd:f6:22:fe:02:b2:80:09:f5:72:5b:4b:13:64:a3: 1c:c7:89:da:8b:e2:dd:6f:45:85:34:52:ba:82:c4:42:d8:55: 94:f7:fb:2c:b1:92:5b:2b:d3:1a:ed:8c:72:0d:cc:38:46:e5: 36:46:49:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGl+qDar+cbJ/FuowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdkMDczMGMtNWRiZC00NjZiLWE3MGMtNTI2N2VjMWI3 MzU5MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk MDg4Zjk5MTEtYTgwYi00OWU2LWExOGYtNWE0YjE1ZjVkNmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU/hvrgU7WNHRhIMKyS74VAaOB3WPVKYv8n4 7g+/VDRWgZTrOdp3ePpykH+c2iWn6QIC9LlklHrPbxowIycn3nV4dgk7UTC3zDgP Txz6jkC2wRN9dtTvTmiM95hHZUHTqj7XpknwRluja9ien4D2vwtBx5tUcU9nPUHm 96UOjGt50w8xrNh+con8idroA+lvNGGs6iz8o//1N4ak9EehC181rFkZHAhEH5R3 C9DWXk0FC9wZtLyWUzbOElPcHFbkRKuteBAdv9yq1XRNifEghuftxtxYn8UOSUZR sDC2Z494/at1TM0eDu9tT42yRulQjreN58WmdRmM/BQtuh90NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDO/r/3Dwf3l1MLQ1zJIe4dQKyJdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82N2Qw NzMwYy01ZGJkLTQ2NmItYTcwYy01MjY3ZWMxYjczNTkvYzNiNzgwNWMtNmUzYi0z ZmQ3LTk2ZDctNGNkZDI3YTI3OTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjdkMDczMGMtNWRiZC00NjZiLWE3 MGMtNTI2N2VjMWI3MzU5LzY3ZDA3MzBjLTVkYmQtNDY2Yi1hNzBjLTUyNjdlYzFi NzM1OS5jcmwwHwYDVR0jBBgwFoAUHceCUo4eRCKZkgNOX319zKG3rlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82N2QwNzMwYy01ZGJkLTQ2NmItYTcwYy01MjY3 ZWMxYjczNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GPdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdfuiW1RgkcsC4Ehx95CajPyV9Q5DIi5kwpeHcqgEDhzczhdSbjystg ryz7WtjYzu+xfB4YK0VKZwJd5J1B/meBafQ76nf7C1eGdBykEjLbkzweG8ZyufBk JA6w5ocX3MmoTnc36QK61kM1mt0VMzZSOQaKsDdoYatExnwfRxNsfDYTmmgsMjO2 QuzLagf6r6xSH5s1ktaEW9EmiSbe5lSn/lSTy88SowMpZWoeoh9EdmcTvgHeeVjE WsAbwSN+t/FfpRvaePomb/32Iv4CsoAJ9XJbSxNkoxzHidqL4t1vRYU0UrqCxELY VZT3+yyxklsr0xrtjHINzDhG5TZGSWg= -----END CERTIFICATE-----Generated at Tue Apr 7 13:31:34 2026 by rpki-client