$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca/17d9cb89-19f0-3f2e-b9c9-000c4b504043.roa File: 17d9cb89-19f0-3f2e-b9c9-000c4b504043.roa (raw, json) Hash identifier: UfLvFzo4BQbwfAdpeHIY4YPtEorekdc5WbuUpiISFCc= Subject key identifier: 04:68:96:29:21:3A:83:13:1A:B8:83:D6:D1:01:07:53:B0:91:E0:55 Certificate issuer: /CN=61393699-9734-421d-a324-4f3368d73fca Certificate serial: 010D0C9F4328584D5234FE3F48BCB6DE34A8DFE0 Authority key identifier: 0A:34:E2:80:44:87:4B:28:F7:9C:57:B2:52:72:7C:22:94:75:70:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca/17d9cb89-19f0-3f2e-b9c9-000c4b504043.roa Signing time: Sat 28 Mar 2026 18:44:38 +0000 ROA not before: Sat 28 Mar 2026 18:44:38 +0000 ROA not after: Sat 16 May 2026 15:54:35 +0000 asID: 400172 IP address blocks: 216.9.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca/61393699-9734-421d-a324-4f3368d73fca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca/61393699-9734-421d-a324-4f3368d73fca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:fe:3f:48:bc:b6:de:34:a8:df:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61393699-9734-421d-a324-4f3368d73fca Validity Not Before: Mar 28 18:44:38 2026 GMT Not After : May 16 15:54:35 2026 GMT Subject: CN=d08eab95-9ad3-4e23-9215-b688c17bd8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:40:23:89:81:0f:07:06:b4:ac:d2:45:77:2c: 18:da:9b:05:67:bc:13:b3:55:65:de:12:15:eb:1f: 47:ea:ff:c9:55:fd:d5:34:9d:5d:7f:70:bb:5d:a8: 1b:90:39:0e:bd:f7:34:f7:ed:c5:06:e1:c6:07:97: f0:d1:22:03:ec:c3:85:cc:fd:04:05:6f:99:45:57: 03:94:98:0d:75:f5:03:02:ad:bb:34:2d:61:05:88: 58:01:ba:41:82:7f:13:52:4f:1c:77:6e:a1:73:2b: 72:12:f0:d0:b3:32:b5:83:57:f9:0a:35:1e:f8:19: 9b:2f:3b:36:23:1f:04:ce:2c:d3:13:f2:49:33:6c: 81:9a:0f:0a:4b:dc:a2:a2:c0:13:4c:7e:91:97:1e: 41:f2:69:a6:29:7e:22:53:16:f0:20:91:01:88:67: 3b:57:29:8a:29:6e:86:49:d8:74:7e:34:86:bb:29: 6f:63:32:21:e1:eb:b1:ba:e9:c6:19:3f:c0:28:5b: b0:57:a4:a7:52:88:70:16:f5:7e:18:db:41:31:41: 12:1c:79:8e:53:d0:33:70:6e:ce:71:63:2a:dc:cc: f5:85:b1:2b:7e:c7:bb:e4:35:05:67:c6:ab:03:59: 39:ab:ff:ac:2f:7d:86:c1:ed:35:76:ee:79:3e:b0: 2f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:68:96:29:21:3A:83:13:1A:B8:83:D6:D1:01:07:53:B0:91:E0:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca/17d9cb89-19f0-3f2e-b9c9-000c4b504043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca/61393699-9734-421d-a324-4f3368d73fca.crl X509v3 Authority Key Identifier: keyid:0A:34:E2:80:44:87:4B:28:F7:9C:57:B2:52:72:7C:22:94:75:70:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca.cer sbgp-ipAddrBlock: critical IPv4: 216.9.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:d7:44:39:d7:f0:c0:a6:54:1f:d2:9f:00:c9:9e:8f:9f:cf: 0c:40:8c:66:46:ab:bd:60:1a:00:2a:63:32:a5:00:43:80:3d: ed:0b:0c:d9:37:a9:2b:7b:65:92:2d:bf:a4:95:63:14:a1:bd: ec:17:8d:34:e7:4a:48:ea:77:d4:42:09:53:ff:5b:9a:ce:4f: 21:5c:47:7a:89:91:5c:c2:9c:bf:2f:7c:37:bc:71:d8:05:8a: b0:55:c2:91:7c:80:fb:43:42:87:4c:02:42:6d:99:b5:9c:a2: 4f:e8:76:4a:72:fe:41:31:7b:8a:dd:99:7d:1b:a6:2c:b3:f7: 3f:4b:44:f8:94:b3:b7:30:cf:e2:d3:05:b9:b7:f3:ab:69:ba: f5:77:4b:71:94:84:f0:94:09:29:2a:df:05:a0:89:57:40:31: 1c:b0:fe:65:d0:59:68:0a:ab:37:d0:62:05:55:0f:fe:e2:2f: 99:1f:10:e6:58:89:26:35:08:ff:98:5a:4d:58:5e:69:5c:6b: 41:77:b8:8b:d4:b5:58:ca:69:b0:a3:34:a0:5d:17:12:19:14: 56:8f:62:35:69:b0:53:0c:9c:90:d9:ed:b7:72:0c:37:48:87: e8:68:48:06:90:e1:d0:43:3f:ec:fa:a4:ea:12:b0:f6:2e:35: 97:ab:5a:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SNP4/SLy23jSo3+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjEzOTM2OTktOTczNC00MjFkLWEzMjQtNGYzMzY4ZDcz ZmNhMB4XDTI2MDMyODE4NDQzOFoXDTI2MDUxNjE1NTQzNVowLzEtMCsGA1UEAxMk ZDA4ZWFiOTUtOWFkMy00ZTIzLTkyMTUtYjY4OGMxN2JkOGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA90AjiYEPBwa0rNJFdywY2psFZ7wTs1Vl3hIV 6x9H6v/JVf3VNJ1df3C7XagbkDkOvfc09+3FBuHGB5fw0SID7MOFzP0EBW+ZRVcD lJgNdfUDAq27NC1hBYhYAbpBgn8TUk8cd26hcytyEvDQszK1g1f5CjUe+BmbLzs2 Ix8EzizTE/JJM2yBmg8KS9yiosATTH6Rlx5B8mmmKX4iUxbwIJEBiGc7VymKKW6G Sdh0fjSGuylvYzIh4euxuunGGT/AKFuwV6SnUohwFvV+GNtBMUESHHmOU9AzcG7O cWMq3Mz1hbErfse75DUFZ8arA1k5q/+sL32Gwe01du55PrAv3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARolikhOoMTGriD1tEBB1OwkeBVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MTM5 MzY5OS05NzM0LTQyMWQtYTMyNC00ZjMzNjhkNzNmY2EvMTdkOWNiODktMTlmMC0z ZjJlLWI5YzktMDAwYzRiNTA0MDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjEzOTM2OTktOTczNC00MjFkLWEz MjQtNGYzMzY4ZDczZmNhLzYxMzkzNjk5LTk3MzQtNDIxZC1hMzI0LTRmMzM2OGQ3 M2ZjYS5jcmwwHwYDVR0jBBgwFoAUCjTigESHSyj3nFeyUnJ8IpR1cE8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MTM5MzY5OS05NzM0LTQyMWQtYTMyNC00ZjMz NjhkNzNmY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2AnpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7XRDnX8MCmVB/SnwDJno+fzwxAjGZGq71gGgAqYzKlAEOAPe0LDNk3 qSt7ZZItv6SVYxShvewXjTTnSkjqd9RCCVP/W5rOTyFcR3qJkVzCnL8vfDe8cdgF irBVwpF8gPtDQodMAkJtmbWcok/odkpy/kExe4rdmX0bpiyz9z9LRPiUs7cwz+LT Bbm386tpuvV3S3GUhPCUCSkq3wWgiVdAMRyw/mXQWWgKqzfQYgVVD/7iL5kfEOZY iSY1CP+YWk1YXmlca0F3uIvUtVjKabCjNKBdFxIZFFaPYjVpsFMMnJDZ7bdyDDdI h+hoSAaQ4dBDP+z6pOoSsPYuNZerWvk= -----END CERTIFICATE-----Generated at Sun Mar 29 04:44:32 2026 by rpki-client