$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/5fa6e3d9-d618-3d95-9a11-af6760164377.roa File: 5fa6e3d9-d618-3d95-9a11-af6760164377.roa (raw, json) Hash identifier: phC3hv7sg5FWVYKe8Z37AVuGoXA3BnFuF5SBIspfm7w= Subject key identifier: 1A:17:6D:49:A8:9B:6A:AC:CE:8B:75:51:17:22:82:06:BE:4E:25:0F Certificate issuer: /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Certificate serial: 010D0C9F4328584D4D5A6E29913225F9C6CFF480 Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/5fa6e3d9-d618-3d95-9a11-af6760164377.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 400790 IP address blocks: 207.228.219.0/24 maxlen: 24 2606:f6c0:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 01 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:6e:29:91:32:25:f9:c6:cf:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=ede9cc9e-0ebe-4a5a-92d9-70a293d7f064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9b:19:bb:d3:a7:a8:79:9c:db:48:ea:57:11: 1a:7f:92:53:0e:9d:99:49:f9:42:b1:d8:aa:ad:7f: a2:95:56:51:39:94:40:f7:d7:2e:f2:6e:d4:db:3d: ae:e6:75:19:50:93:63:b3:a4:24:51:3f:ac:66:48: ec:f9:18:86:f3:8b:b8:19:63:51:51:0d:d4:06:cf: c9:ac:5b:dd:e1:da:34:70:17:6c:5f:8b:9e:e6:48: 1b:10:e8:f6:fa:cc:9f:49:5b:67:8e:43:d8:ca:e8: a0:ed:49:e6:72:3a:75:49:e6:6f:03:d5:14:2b:74: c1:bb:27:33:a2:10:22:9b:24:0c:8b:a1:be:c5:a8: 7c:8c:f8:05:0d:c3:38:e8:59:1a:08:3f:7b:01:5c: bf:a0:3e:b2:7f:55:47:40:1c:33:fc:78:04:a4:06: 7a:e4:ea:ba:cf:0e:8f:85:5e:ec:4c:80:df:57:c7: ba:17:21:8c:8e:aa:2f:fb:b0:43:0a:07:6f:5d:d9: af:6e:25:5e:fd:ab:f1:da:4a:72:88:e1:b2:68:06: f3:dc:20:b6:e5:75:11:a5:75:b1:6d:c1:62:06:fe: d0:ad:55:d1:7b:a8:98:29:85:bd:2f:31:97:78:d6: 3a:20:8a:d9:2c:0a:df:60:3c:20:c8:a9:2d:71:3e: 85:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:17:6D:49:A8:9B:6A:AC:CE:8B:75:51:17:22:82:06:BE:4E:25:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/5fa6e3d9-d618-3d95-9a11-af6760164377.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl X509v3 Authority Key Identifier: keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer sbgp-ipAddrBlock: critical IPv4: 207.228.219.0/24 IPv6: 2606:f6c0:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e9:db:fe:c8:e5:0b:c2:74:59:42:3a:fc:c0:68:d9:ce:29: 28:93:ff:27:c1:10:7f:7e:65:fd:9f:29:84:3d:aa:23:d8:a7: 0c:d2:63:7e:0e:09:df:2e:a6:b2:73:8d:64:92:ed:b3:23:08: 1a:e0:21:15:43:6a:8b:e0:29:19:71:23:96:b8:9b:d5:fd:58: af:99:43:f2:a0:f8:15:11:23:6c:9f:14:1b:8b:bc:00:a3:f5: 32:aa:03:35:5b:1a:53:8c:62:b0:44:23:01:db:e6:d6:fb:35: 63:b5:d0:9e:b8:b9:1b:14:db:3d:ae:15:eb:61:5f:8b:89:e7: 66:9a:5a:09:cc:2c:83:1a:9f:fb:a1:76:82:1b:3a:70:67:79: 86:29:dd:23:15:aa:5e:e7:9a:59:5f:d7:90:d2:25:12:1f:4f: 64:0c:59:de:7f:52:ba:a6:55:27:73:ca:83:2d:31:15:87:13: 28:b2:09:c4:c6:44:ce:f3:c1:bc:6d:eb:dc:69:59:c6:ad:9f: db:31:59:44:8b:92:05:ad:74:3b:95:97:7d:27:1b:c1:24:21: a9:5e:3d:f5:ba:ef:57:b3:fc:67:16:fb:8a:50:6b:1d:56:51: 8c:4e:5a:a1:10:b8:88:69:ea:57:9f:31:2c:58:fe:21:d6:d7: 44:6f:46:8a -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE1NWm4pkTIl+cbP9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2OWU1NWQtM2JhZi00MWU2LTllNjctYmJlNWVkODg4 YmU5MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZWRlOWNjOWUtMGViZS00YTVhLTkyZDktNzBhMjkzZDdmMDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZsZu9OnqHmc20jqVxEaf5JTDp2ZSflCsdiq rX+ilVZROZRA99cu8m7U2z2u5nUZUJNjs6QkUT+sZkjs+RiG84u4GWNRUQ3UBs/J rFvd4do0cBdsX4ue5kgbEOj2+syfSVtnjkPYyuig7Unmcjp1SeZvA9UUK3TBuycz ohAimyQMi6G+xah8jPgFDcM46FkaCD97AVy/oD6yf1VHQBwz/HgEpAZ65Oq6zw6P hV7sTIDfV8e6FyGMjqov+7BDCgdvXdmvbiVe/avx2kpyiOGyaAbz3CC25XURpXWx bcFiBv7QrVXRe6iYKYW9LzGXeNY6IIrZLArfYDwgyKktcT6FaQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFBoXbUmom2qszot1URcigga+TiUPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5 ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1ZWQ4ODhiZTkvNWZhNmUzZDktZDYxOC0z ZDk1LTlhMTEtYWY2NzYwMTY0Mzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmU2OWU1NWQtM2JhZi00MWU2LTll NjctYmJlNWVkODg4YmU5LzJlNjllNTVkLTNiYWYtNDFlNi05ZTY3LWJiZTVlZDg4 OGJlOS5jcmwwHwYDVR0jBBgwFoAUuOVt8qT8p5onhZVWGclu3DiFdDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1 ZWQ4ODhiZTkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAz+TbMA8E AgACMAkDBwAmBvbAAQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVunb/sjlC8J0WUI6/MBo2c4pKJP/J8EQ f35l/Z8phD2qI9inDNJjfg4J3y6msnONZJLtsyMIGuAhFUNqi+ApGXEjlrib1f1Y r5lD8qD4FREjbJ8UG4u8AKP1MqoDNVsaU4xisEQjAdvm1vs1Y7XQnri5GxTbPa4V 62Ffi4nnZppaCcwsgxqf+6F2ghs6cGd5hindIxWqXueaWV/XkNIlEh9PZAxZ3n9S uqZVJ3PKgy0xFYcTKLIJxMZEzvPBvG3r3GlZxq2f2zFZRIuSBa10O5WXfScbwSQh qV499brvV7P8Zxb7ilBrHVZRjE5aoRC4iGnqV58xLFj+IdbXRG9Gig== -----END CERTIFICATE-----Generated at Sun Mar 29 23:30:51 2026 by rpki-client