$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/0ea31230-a310-3723-8781-993a54e89d70.roa File: 0ea31230-a310-3723-8781-993a54e89d70.roa (raw, json) Hash identifier: 9+0fJ6VWGoCZATa4aUNFdraIBy+sUEHnX/GxUMM3Zz8= Subject key identifier: 33:0B:D5:0C:AB:D6:C2:4D:3B:B4:EF:ED:A2:96:F3:70:C0:90:FB:AA Certificate issuer: /CN=b2456e11-ca83-4345-8884-0becc0831fb7 Certificate serial: 010D0C9F4328584DA11AC06F1C0FAEBC29CD3A80 Authority key identifier: E8:0D:FA:19:40:E1:CD:5A:C6:10:AE:B8:44:D8:0B:05:C4:18:0B:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/0ea31230-a310-3723-8781-993a54e89d70.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 14618 IP address blocks: 216.181.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:c0:6f:1c:0f:ae:bc:29:cd:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2456e11-ca83-4345-8884-0becc0831fb7 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=38be848d-b933-4caf-8ac2-7311abfdaa77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:60:c6:0c:2d:cf:e8:d4:60:91:30:82:90:c1: 6d:ed:da:72:bb:8e:0e:49:49:0c:12:32:48:3b:b2: 12:b1:8e:b2:b1:2c:a3:06:53:5a:62:a1:83:07:dc: 77:37:c7:df:92:32:ff:23:00:ff:99:47:d3:fa:93: 07:f7:ce:0b:2a:54:91:74:7e:c7:a6:14:ab:d2:90: 9c:e1:2f:f0:53:79:ac:ab:d2:38:75:a3:58:62:2a: 88:a9:56:94:b1:ab:42:a3:b5:6b:0e:45:ff:0a:87: 92:0d:a4:64:94:df:3d:87:80:cd:6f:cf:b9:7b:4c: 06:2d:8a:e7:14:64:7c:5e:2c:75:01:85:ea:59:d3: 83:2e:60:61:2d:96:d7:bb:58:da:8c:6f:ac:c3:11: e6:17:0b:f3:51:0b:5d:f7:63:86:9f:a6:70:28:78: d9:25:29:46:87:20:3b:92:e9:ae:ea:30:51:20:6f: 73:97:7b:4b:ee:02:4f:c7:3c:53:25:fc:bf:e2:a8: 58:bf:f2:22:a3:93:65:e1:02:8b:19:3e:82:0d:6f: 0a:ed:1b:61:13:29:82:1f:38:d6:7b:9d:6b:ab:3c: 61:d0:ea:81:95:c8:29:e6:3a:83:f3:cf:e3:a5:85: f3:71:4b:24:a0:28:40:9b:89:10:85:b0:d5:45:18: 65:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0B:D5:0C:AB:D6:C2:4D:3B:B4:EF:ED:A2:96:F3:70:C0:90:FB:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/0ea31230-a310-3723-8781-993a54e89d70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.crl X509v3 Authority Key Identifier: keyid:E8:0D:FA:19:40:E1:CD:5A:C6:10:AE:B8:44:D8:0B:05:C4:18:0B:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer sbgp-ipAddrBlock: critical IPv4: 216.181.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c7:f8:36:ba:5a:ed:75:cd:9f:08:09:32:80:72:cb:3f:43: af:04:ab:06:3a:31:00:42:76:2b:65:98:95:8b:05:f4:eb:48: b4:bc:12:97:b6:6e:4e:d3:2a:3b:50:a3:99:b6:8c:76:e5:0d: a9:dd:44:a1:13:f4:fb:a0:e6:04:e8:80:4d:08:80:73:d0:e9: 34:c5:83:df:2f:09:9b:c6:32:12:52:c7:93:30:84:3d:f2:a4: d8:09:6c:68:a5:a7:1e:a0:84:ef:7b:de:df:a6:d1:74:3d:ee: 52:d2:af:d6:31:e1:6e:60:00:2b:34:2e:f8:33:64:f8:9c:a8: b5:5e:11:9c:34:d0:e5:e2:6d:4b:47:ed:b8:31:e7:e8:25:95: c3:90:ab:a8:45:35:18:aa:08:71:74:30:d4:f6:9a:e2:47:f9: 0f:0d:24:64:b4:bd:b6:55:c5:99:e1:1e:6e:50:61:22:69:97: cc:e8:31:dc:1e:b5:1e:8d:06:58:16:4e:59:68:d7:62:2f:af: d1:65:d6:d3:5e:e0:92:08:cf:45:c3:33:8a:d0:05:84:da:a5: 59:69:13:1d:e7:7b:8d:44:fe:82:d8:a1:8a:f8:5e:d9:23:3a: 7f:5d:9d:a5:ec:16:e9:0b:c3:90:1e:70:52:86:56:fe:f0:2f: 3f:87:85:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGsBvHA+uvCnNOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI0NTZlMTEtY2E4My00MzQ1LTg4ODQtMGJlY2MwODMx ZmI3MB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk MzhiZTg0OGQtYjkzMy00Y2FmLThhYzItNzMxMWFiZmRhYTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2DGDC3P6NRgkTCCkMFt7dpyu44OSUkMEjJI O7ISsY6ysSyjBlNaYqGDB9x3N8ffkjL/IwD/mUfT+pMH984LKlSRdH7HphSr0pCc 4S/wU3msq9I4daNYYiqIqVaUsatCo7VrDkX/CoeSDaRklN89h4DNb8+5e0wGLYrn FGR8Xix1AYXqWdODLmBhLZbXu1jajG+swxHmFwvzUQtd92OGn6ZwKHjZJSlGhyA7 kumu6jBRIG9zl3tL7gJPxzxTJfy/4qhYv/Iio5Nl4QKLGT6CDW8K7RthEymCHzjW e51rqzxh0OqBlcgp5jqD88/jpYXzcUskoChAm4kQhbDVRRhlswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDML1Qyr1sJNO7Tv7aKW83DAkPuqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMjQ1 NmUxMS1jYTgzLTQzNDUtODg4NC0wYmVjYzA4MzFmYjcvMGVhMzEyMzAtYTMxMC0z NzIzLTg3ODEtOTkzYTU0ZTg5ZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjI0NTZlMTEtY2E4My00MzQ1LTg4 ODQtMGJlY2MwODMxZmI3L2IyNDU2ZTExLWNhODMtNDM0NS04ODg0LTBiZWNjMDgz MWZiNy5jcmwwHwYDVR0jBBgwFoAU6A36GUDhzVrGEK64RNgLBcQYCxUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMjQ1NmUxMS1jYTgzLTQzNDUtODg4NC0wYmVj YzA4MzFmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LUTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHH+Da6Wu11zZ8ICTKAcss/Q68EqwY6MQBCditlmJWLBfTrSLS8Epe2 bk7TKjtQo5m2jHblDandRKET9Pug5gTogE0IgHPQ6TTFg98vCZvGMhJSx5MwhD3y pNgJbGilpx6ghO973t+m0XQ97lLSr9Yx4W5gACs0LvgzZPicqLVeEZw00OXibUtH 7bgx5+gllcOQq6hFNRiqCHF0MNT2muJH+Q8NJGS0vbZVxZnhHm5QYSJpl8zoMdwe tR6NBlgWTllo12Ivr9Fl1tNe4JIIz0XDM4rQBYTapVlpEx3ne41E/oLYoYr4Xtkj On9dnaXsFukLw5AecFKGVv7wLz+HhZs= -----END CERTIFICATE-----Generated at Sun May 3 17:10:45 2026 by rpki-client