$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3089e18c-f6cf-3d5a-9c2a-e19e81097cc6.roa File: 3089e18c-f6cf-3d5a-9c2a-e19e81097cc6.roa (raw, json) Hash identifier: cuEzkfGA246Qwt9OaS0s2Ini6JwO2H+746gL3yXen8E= Subject key identifier: 42:52:0D:9E:55:D6:6F:FB:6E:15:20:88:E6:9B:2B:FA:94:2F:65:93 Certificate issuer: /CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Certificate serial: 010D0C9F4328584D3F64C966749F2D32BE8ADC40 Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3089e18c-f6cf-3d5a-9c2a-e19e81097cc6.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 40266 IP address blocks: 204.228.198.0/23 maxlen: 24 204.228.226.0/24 maxlen: 24 206.207.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:c9:66:74:9f:2d:32:be:8a:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=5887118b-79a2-49f9-b4fd-d38bc6fd2893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:05:53:4d:73:65:1d:35:06:df:ac:fb:7f:e9: 77:ba:52:07:8c:96:5e:01:29:22:e9:0b:9b:35:a2: d9:91:38:21:95:a0:f0:ef:1e:ee:cd:c0:4e:ae:0f: 1d:3f:39:af:e4:79:9e:97:8a:3d:1e:68:5d:73:62: fe:b8:4f:63:a1:67:29:a8:f1:30:d8:ff:7f:34:b4: 7a:7b:b0:8f:62:81:ea:1d:58:3c:95:14:7c:ad:b3: 86:ec:09:34:b1:db:00:f4:6d:f9:b7:8c:e8:f2:ea: 46:19:f6:14:7d:9a:86:38:f9:5d:d6:1e:ed:68:76: 3c:4e:39:98:96:ed:bc:4f:0f:79:30:20:21:e5:2f: 6a:7c:62:2a:ac:f0:60:ac:ab:0c:3d:ae:00:3d:fe: 67:db:28:0d:9d:b0:17:c1:17:7d:a6:d9:ae:26:41: d9:8e:ec:8c:a5:78:a1:a7:d9:ea:23:12:14:ea:43: 64:4e:a1:8a:fd:d0:bb:06:ec:8d:81:40:a8:d4:7c: 50:d3:e4:16:c2:56:20:13:a6:d1:87:ca:4f:55:82: fd:af:c8:d6:ff:7b:24:94:d1:ab:58:27:43:5d:78: 04:54:d9:80:3c:88:75:26:16:4c:39:c3:5e:c7:af: d3:a2:6e:d2:f2:c3:e5:ce:21:d9:ed:fd:8e:1b:00: 27:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:52:0D:9E:55:D6:6F:FB:6E:15:20:88:E6:9B:2B:FA:94:2F:65:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3089e18c-f6cf-3d5a-9c2a-e19e81097cc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl X509v3 Authority Key Identifier: keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer sbgp-ipAddrBlock: critical IPv4: 204.228.198.0/23 204.228.226.0/24 206.207.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:38:68:17:af:21:da:70:94:47:35:6a:8b:b7:df:d3:05:0f: 24:d3:9b:b7:be:55:63:69:62:7e:73:cd:d5:a1:b9:ce:73:8d: 07:22:95:0b:db:ff:b8:78:2d:20:ea:ef:11:9d:94:8f:68:42: d3:c5:26:82:96:2b:d8:ad:1c:8c:fb:31:ce:31:ca:7c:a2:33: 3e:19:0c:0a:81:91:0d:c7:3e:0e:21:22:ad:7f:24:dc:48:55: 51:4d:b6:c0:58:bd:d4:27:c9:3b:08:7b:8e:f5:f8:68:02:35: a0:37:c4:29:6d:61:69:98:c3:ed:eb:64:8f:c1:6a:5f:6e:1d: 73:77:5e:bb:bf:7f:9a:a2:8b:a8:6f:91:9f:d2:8d:53:c8:2b: 2b:07:cc:a8:d4:46:22:e9:b8:84:90:76:2a:e0:53:d4:d8:98: 59:d0:b2:5a:1f:68:06:10:00:6a:2d:40:3a:98:2a:16:ca:46: f2:3c:f7:0e:45:53:b4:78:be:c2:fa:74:d5:7c:3a:02:72:cf: 81:0f:61:a0:80:11:f6:c2:7f:2d:29:6f:0b:2f:ae:de:95:45: 56:6e:42:ce:58:1f:dc:03:07:b3:43:f7:1b:96:ab:59:a6:26: 02:1f:15:b4:72:a7:ae:0f:4a:54:9f:a9:ce:69:33:f0:9e:cf: bd:f7:bf:5c -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE0/ZMlmdJ8tMr6K3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhkZjM0NmQtM2Y2Ni00NTU1LWIyYWItNjdmNDUwZWZk Y2IzMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NTg4NzExOGItNzlhMi00OWY5LWI0ZmQtZDM4YmM2ZmQyODkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwVTTXNlHTUG36z7f+l3ulIHjJZeASki6Qub NaLZkTghlaDw7x7uzcBOrg8dPzmv5Hmel4o9Hmhdc2L+uE9joWcpqPEw2P9/NLR6 e7CPYoHqHVg8lRR8rbOG7Ak0sdsA9G35t4zo8upGGfYUfZqGOPld1h7taHY8TjmY lu28Tw95MCAh5S9qfGIqrPBgrKsMPa4APf5n2ygNnbAXwRd9ptmuJkHZjuyMpXih p9nqIxIU6kNkTqGK/dC7BuyNgUCo1HxQ0+QWwlYgE6bRh8pPVYL9r8jW/3sklNGr WCdDXXgEVNmAPIh1JhZMOcNex6/Tom7S8sPlziHZ7f2OGwAnzwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFEJSDZ5V1m/7bhUgiOabK/qUL2WTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yOGRm MzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0NTBlZmRjYjMvMzA4OWUxOGMtZjZjZi0z ZDVhLTljMmEtZTE5ZTgxMDk3Y2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjhkZjM0NmQtM2Y2Ni00NTU1LWIy YWItNjdmNDUwZWZkY2IzLzI4ZGYzNDZkLTNmNjYtNDU1NS1iMmFiLTY3ZjQ1MGVm ZGNiMy5jcmwwHwYDVR0jBBgwFoAU0TE0tLR3LAyK//WCA1AodurlHZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yOGRmMzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0 NTBlZmRjYjMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBzOTGAwQA zOTiAwQAzs9eMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFo4aBevIdpwlEc1aou339MFDyTTm7e+VWNpYn5z zdWhuc5zjQcilQvb/7h4LSDq7xGdlI9oQtPFJoKWK9itHIz7Mc4xynyiMz4ZDAqB kQ3HPg4hIq1/JNxIVVFNtsBYvdQnyTsIe471+GgCNaA3xCltYWmYw+3rZI/Bal9u HXN3Xru/f5qii6hvkZ/SjVPIKysHzKjURiLpuISQdirgU9TYmFnQslofaAYQAGot QDqYKhbKRvI89w5FU7R4vsL6dNV8OgJyz4EPYaCAEfbCfy0pbwsvrt6VRVZuQs5Y H9wDB7ND9xuWq1mmJgIfFbRyp64PSlSfqc5pM/Cez733v1w= -----END CERTIFICATE-----Generated at Sun Mar 22 09:29:43 2026 by rpki-client