$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0f0b96ca-620a-3bb2-9bbd-af2144137209.roa File: 0f0b96ca-620a-3bb2-9bbd-af2144137209.roa (raw, json) Hash identifier: avw7DaUtDiungZ974Ds0FuLLQ3y+Eoch8Rtkd4Reyd8= Subject key identifier: E0:7E:CB:8A:A7:9D:EA:8E:11:AD:B5:BD:C4:18:37:F8:E9:33:07:86 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D571FABB4E7AF40E1FC56A280 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0f0b96ca-620a-3bb2-9bbd-af2144137209.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 16904 IP address blocks: 216.133.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:ab:b4:e7:af:40:e1:fc:56:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=c7fce59e-10a8-4016-89f9-a526f13756ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1d:77:3e:2d:b3:e0:d1:08:a4:ae:34:f0:2f: d7:4e:92:55:20:97:15:0c:32:f5:fd:a1:71:81:d2: d0:e0:8e:cb:e7:d9:4c:69:e5:f4:d8:e1:80:22:9d: 2a:1e:93:2f:d2:ed:33:6c:e0:e3:00:d1:6b:90:95: f7:ee:99:eb:7e:a2:07:91:29:ae:48:d7:41:21:ee: 25:a7:ac:ba:5a:d8:09:af:f7:ab:f2:de:12:56:8c: 9f:ab:d1:f2:72:7c:36:02:7c:ab:87:7b:e4:d4:1e: 9b:5a:e5:f2:7a:66:85:d6:28:9a:27:ee:44:f1:ea: 7b:a2:6b:11:92:a5:88:e5:5c:2b:16:aa:71:38:e4: 34:57:e8:55:9b:78:1c:54:37:52:dc:d3:0b:7d:40: c1:32:a1:fa:a1:93:c5:3b:ba:4d:6e:be:fb:de:e1: 3c:82:59:55:4e:39:a1:39:d0:f0:c9:61:65:9d:57: c7:63:cf:7c:cb:a3:20:ab:6e:6f:fc:9a:3d:3f:41: e3:72:24:15:00:0d:ac:da:aa:69:e9:11:2c:db:44: 28:57:d1:05:1b:04:ae:3e:32:34:c0:29:c5:1d:dd: 70:ba:4a:ec:e7:5b:de:f4:c3:45:cb:17:a4:25:60: dc:f7:70:26:e2:9d:6d:77:62:3f:f7:53:87:77:8f: 0f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7E:CB:8A:A7:9D:EA:8E:11:AD:B5:BD:C4:18:37:F8:E9:33:07:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0f0b96ca-620a-3bb2-9bbd-af2144137209.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.133.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:51:bd:52:74:cd:5b:44:e1:c9:bd:d3:e3:60:0c:e5:f9:04: 9d:13:08:eb:f9:ea:15:60:cf:6d:a7:17:0a:a6:58:63:3a:6a: 61:1b:b5:b6:54:2a:a4:14:21:da:c7:92:ab:39:37:79:07:51: a7:cf:62:64:d2:f8:3b:3d:b5:23:bc:1c:f3:0b:7f:14:81:a0: 5f:b0:9d:3b:bf:58:3e:3a:cc:ed:3a:19:43:97:1d:56:36:0c: 75:b6:2b:69:61:92:95:81:b0:9f:53:f3:7b:65:12:c4:7a:b2: 2d:69:f6:72:3c:4f:2f:07:d9:5e:7d:77:08:7c:19:f1:27:6b: 3e:8a:7c:be:fe:5e:a5:00:1e:0e:8f:63:22:c2:6e:2c:9c:91: 2f:0e:b6:4c:8f:17:e9:33:e0:31:e3:53:92:ed:a7:79:e7:ae: 78:24:16:57:57:30:aa:87:85:c5:59:64:09:09:fd:bf:f9:33: fa:af:b4:1d:b2:46:c5:c0:44:0c:61:94:c2:b5:a4:22:65:25: bb:38:1e:52:d6:a8:c9:09:80:d5:e3:24:56:b8:44:77:fb:2d: 0d:71:fc:2b:ec:41:60:a9:1a:2e:be:a2:22:66:fd:29:56:6c: 17:72:b6:7b:21:26:0c:24:f8:9c:9e:09:20:58:7f:b8:63:0e: 4d:47:23:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH6u0569A4fxWooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk YzdmY2U1OWUtMTBhOC00MDE2LTg5ZjktYTUyNmYxMzc1NmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx13Pi2z4NEIpK408C/XTpJVIJcVDDL1/aFx gdLQ4I7L59lMaeX02OGAIp0qHpMv0u0zbODjANFrkJX37pnrfqIHkSmuSNdBIe4l p6y6WtgJr/er8t4SVoyfq9Hycnw2Anyrh3vk1B6bWuXyemaF1iiaJ+5E8ep7omsR kqWI5VwrFqpxOOQ0V+hVm3gcVDdS3NMLfUDBMqH6oZPFO7pNbr773uE8gllVTjmh OdDwyWFlnVfHY898y6Mgq25v/Jo9P0HjciQVAA2s2qpp6REs20QoV9EFGwSuPjI0 wCnFHd1wukrs51ve9MNFyxekJWDc93Am4p1td2I/91OHd48PSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOB+y4qnneqOEa21vcQYN/jpMweGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGYwYjk2Y2EtNjIwYS0z YmIyLTliYmQtYWYyMTQ0MTM3MjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2IWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMlRvVJ0zVtE4cm90+NgDOX5BJ0TCOv56hVgz22nFwqmWGM6amEbtbZU KqQUIdrHkqs5N3kHUafPYmTS+Ds9tSO8HPMLfxSBoF+wnTu/WD46zO06GUOXHVY2 DHW2K2lhkpWBsJ9T83tlEsR6si1p9nI8Ty8H2V59dwh8GfEnaz6KfL7+XqUAHg6P YyLCbiyckS8OtkyPF+kz4DHjU5Ltp3nnrngkFldXMKqHhcVZZAkJ/b/5M/qvtB2y RsXARAxhlMK1pCJlJbs4HlLWqMkJgNXjJFa4RHf7LQ1x/CvsQWCpGi6+oiJm/SlW bBdytnshJgwk+JyeCSBYf7hjDk1HI3A= -----END CERTIFICATE-----Generated at Fri Apr 10 23:16:36 2026 by rpki-client