$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd/21b758c9-e698-35f4-b007-715f1166d50d.roa File: 21b758c9-e698-35f4-b007-715f1166d50d.roa (raw, json) Hash identifier: Bskuy3ENp8PyrAxrCva4Z+w6GbnMFpuCnqWyNvuB2kg= Subject key identifier: 86:F9:36:97:3F:00:A6:63:19:1D:76:22:F1:B0:27:34:4D:37:F0:4F Certificate issuer: /CN=d3510324-7081-47df-ae57-12a0470696dd Certificate serial: 010D0C9F4328584D5243C7C8178A63E87FCC8100 Authority key identifier: 22:11:82:48:4A:13:E0:AE:9C:5D:2A:A3:1A:92:A0:5A:75:CB:B5:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd/21b758c9-e698-35f4-b007-715f1166d50d.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 23089 IP address blocks: 9.128.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd/d3510324-7081-47df-ae57-12a0470696dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd/d3510324-7081-47df-ae57-12a0470696dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:c7:c8:17:8a:63:e8:7f:cc:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3510324-7081-47df-ae57-12a0470696dd Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=c11a42a0-281c-4173-ab30-68b8a2388a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:73:f4:ca:75:e7:db:a8:36:77:0f:49:6f:80: b3:54:df:aa:d0:92:2d:ec:e0:6a:16:f9:77:c1:b4: 31:b9:25:43:98:42:1f:e1:b5:fa:4f:53:36:34:24: 1b:ed:5a:74:e5:95:86:a8:f8:e0:ab:57:7a:3d:90: 13:71:26:b9:36:63:ab:18:e1:51:0a:c4:20:fb:dd: 14:70:43:9f:94:5b:b5:fd:9a:ae:4d:ce:63:4f:99: 82:31:b4:1d:08:fb:f3:b6:39:cd:1e:a7:f9:75:1c: d7:3a:d9:e3:cb:61:b2:4f:de:8a:9f:15:e2:9b:84: 0d:87:94:9d:3e:40:0a:46:4b:35:1c:fb:10:35:f5: da:3d:b2:60:90:55:c3:ee:3b:46:c6:81:03:ea:fb: 1f:3f:96:e9:1d:b2:7d:77:12:4e:fa:70:67:36:f4: 30:6d:44:1b:36:e6:98:41:cd:93:16:87:22:2c:48: f9:12:07:e6:02:cd:7d:14:40:58:57:9d:5f:84:c2: bf:e1:e0:a3:06:17:90:bb:9d:41:a7:7e:a2:e5:7d: c7:51:df:34:18:ca:6a:e3:c6:ab:b2:d7:46:1e:c8: 97:f1:ee:4d:2b:42:83:57:54:97:5b:65:34:f5:4a: 0e:cc:ab:e6:5e:8d:73:ac:10:bb:91:82:7d:07:61: 1f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F9:36:97:3F:00:A6:63:19:1D:76:22:F1:B0:27:34:4D:37:F0:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd/21b758c9-e698-35f4-b007-715f1166d50d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd/d3510324-7081-47df-ae57-12a0470696dd.crl X509v3 Authority Key Identifier: keyid:22:11:82:48:4A:13:E0:AE:9C:5D:2A:A3:1A:92:A0:5A:75:CB:B5:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3510324-7081-47df-ae57-12a0470696dd.cer sbgp-ipAddrBlock: critical IPv4: 9.128.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:b5:b3:b3:a7:d0:b5:35:d1:52:36:36:77:9b:ec:38:7c:77: b2:04:31:48:00:4c:1e:91:9e:44:bb:29:6f:d4:6e:5f:e9:43: 3d:b3:4a:fe:c2:05:59:2e:a1:67:57:39:a3:79:29:36:b9:d3: 90:1e:c0:f2:fd:37:d6:82:27:2c:f8:c0:01:b3:ef:c7:01:8e: 63:ad:46:9e:f2:73:a6:cf:ae:c8:85:c3:01:91:8b:5d:b2:e8: bd:74:36:03:cb:34:4d:55:6f:37:27:06:ed:7e:a1:0c:23:a6: ca:60:be:3b:21:1e:75:e8:ca:ba:bf:35:b1:ba:99:96:fd:4a: 4c:ce:33:87:8c:36:26:95:95:35:ba:e9:e1:ad:05:c7:ea:56: d9:71:9c:bd:a8:07:86:27:48:3f:e1:0c:02:4d:d6:bc:94:49: 7b:6d:8e:d8:58:82:ef:34:ae:61:b0:d0:b1:15:5a:fa:33:08: 75:a2:34:aa:7d:54:9f:3b:ff:90:ef:88:b6:f9:82:8d:40:31: 51:8b:3e:c4:2a:82:0b:8e:54:72:2a:c4:da:97:b3:15:78:f1: d4:f9:0c:33:b3:b4:0c:c9:6e:1b:40:fa:2c:2e:fc:7b:e6:47: 3d:7a:5d:b2:a6:c8:d1:02:0b:1c:08:9d:42:8b:0c:76:58:b8: ed:bf:7d:47 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1SQ8fIF4pj6H/MgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM1MTAzMjQtNzA4MS00N2RmLWFlNTctMTJhMDQ3MDY5 NmRkMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk YzExYTQyYTAtMjgxYy00MTczLWFiMzAtNjhiOGEyMzg4YTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHP0ynXn26g2dw9Jb4CzVN+q0JIt7OBqFvl3 wbQxuSVDmEIf4bX6T1M2NCQb7Vp05ZWGqPjgq1d6PZATcSa5NmOrGOFRCsQg+90U cEOflFu1/ZquTc5jT5mCMbQdCPvztjnNHqf5dRzXOtnjy2GyT96KnxXim4QNh5Sd PkAKRks1HPsQNfXaPbJgkFXD7jtGxoED6vsfP5bpHbJ9dxJO+nBnNvQwbUQbNuaY Qc2TFociLEj5EgfmAs19FEBYV51fhMK/4eCjBheQu51Bp36i5X3HUd80GMpq48ar stdGHsiX8e5NK0KDV1SXW2U09UoOzKvmXo1zrBC7kYJ9B2EfFwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIb5Npc/AKZjGR12IvGwJzRNN/BPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kMzUx MDMyNC03MDgxLTQ3ZGYtYWU1Ny0xMmEwNDcwNjk2ZGQvMjFiNzU4YzktZTY5OC0z NWY0LWIwMDctNzE1ZjExNjZkNTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZDM1MTAzMjQtNzA4MS00N2RmLWFl NTctMTJhMDQ3MDY5NmRkL2QzNTEwMzI0LTcwODEtNDdkZi1hZTU3LTEyYTA0NzA2 OTZkZC5jcmwwHwYDVR0jBBgwFoAUIhGCSEoT4K6cXSqjGpKgWnXLtXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kMzUxMDMyNC03MDgxLTQ3ZGYtYWU1Ny0xMmEw NDcwNjk2ZGQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMACYAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAnrWzs6fQtTXRUjY2d5vsOHx3sgQxSABMHpGeRLspb9RuX+lDPbNK/sIF WS6hZ1c5o3kpNrnTkB7A8v031oInLPjAAbPvxwGOY61GnvJzps+uyIXDAZGLXbLo vXQ2A8s0TVVvNycG7X6hDCOmymC+OyEedejKur81sbqZlv1KTM4zh4w2JpWVNbrp 4a0Fx+pW2XGcvagHhidIP+EMAk3WvJRJe22O2FiC7zSuYbDQsRVa+jMIdaI0qn1U nzv/kO+ItvmCjUAxUYs+xCqCC45UcirE2pezFXjx1PkMM7O0DMluG0D6LC78e+ZH PXpdsqbI0QILHAidQosMdli47b99Rw== -----END CERTIFICATE-----Generated at Wed Apr 15 16:15:44 2026 by rpki-client