$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3d318881-853b-318c-9edb-e1749b981226.roa File: 3d318881-853b-318c-9edb-e1749b981226.roa (raw, json) Hash identifier: c3fFdSlB66YINeXJm1+cDRjDU4xUGzZKSPDFjpF/Q3I= Subject key identifier: 35:4B:7C:3D:E0:F0:B3:67:57:36:1E:56:FA:27:FA:64:E3:C8:6E:67 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D460AE08E13CD951579936040 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3d318881-853b-318c-9edb-e1749b981226.roa Signing time: Tue 24 Mar 2026 10:10:05 +0000 ROA not before: Tue 24 Mar 2026 10:10:05 +0000 ROA not after: Mon 22 Jun 2026 10:10:05 +0000 asID: 32693 IP address blocks: 69.33.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:0a:e0:8e:13:cd:95:15:79:93:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 24 10:10:05 2026 GMT Not After : Jun 22 10:10:05 2026 GMT Subject: CN=822788ea-9cbb-4f6b-8b01-4193d19313b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:66:f8:60:55:c4:3f:8e:99:31:79:a9:02:a7: a6:b8:53:44:4a:a2:d5:52:30:d0:e8:0f:03:b8:d4: 1e:15:b3:4d:5e:3e:f9:3a:1c:bc:05:ec:74:2f:22: 78:af:b9:0a:88:f3:9a:cb:97:88:15:39:e2:d0:21: eb:11:55:96:34:5e:70:17:7b:fe:75:27:f1:44:98: 68:9d:a0:ca:ff:6b:91:3b:94:da:1a:dd:0d:89:79: 45:a0:cf:fb:f1:6c:af:c8:96:c2:e9:c2:43:98:b7: 1d:a8:7c:c8:c7:94:c6:5c:80:b0:30:68:6b:f5:95: a4:16:45:ea:00:68:b8:14:09:cc:5e:37:1d:01:61: 9a:7f:95:a7:bb:93:7f:4e:54:2d:73:a6:26:21:cf: b5:0a:ff:d3:fa:44:80:0e:03:c7:03:f6:32:df:0c: 4d:aa:94:bc:42:cf:50:84:3d:65:f3:00:72:ac:85: 21:e9:79:73:fb:d5:50:86:9b:9d:2e:0e:46:e8:f9: c3:51:18:61:c1:5d:b3:44:fa:d9:63:c1:fa:99:fe: 7b:cc:63:ee:fa:66:2a:91:59:fa:ca:91:0e:dc:7b: f7:b3:5d:7d:27:0b:bb:8b:30:82:2f:5f:74:7e:80: 43:a4:f1:d3:a7:f3:f5:3a:54:15:95:44:2b:76:25: 20:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4B:7C:3D:E0:F0:B3:67:57:36:1E:56:FA:27:FA:64:E3:C8:6E:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3d318881-853b-318c-9edb-e1749b981226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 69.33.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:82:ef:6e:71:51:89:e4:e4:ab:81:59:3d:a7:55:31:ce:2f: 44:b9:76:9a:3c:49:6f:83:23:d6:59:dd:43:a3:1a:91:a5:42: 68:2e:a2:da:a0:10:14:57:bc:8a:40:5c:f9:bf:7c:f8:be:5e: 21:36:e8:b0:7e:49:db:17:e9:09:88:01:20:7b:9d:52:9a:bb: ef:85:7b:9e:1e:06:49:8f:d1:74:e4:c7:9a:50:6a:b2:8b:9c: 27:10:e5:b8:87:d7:36:8e:58:b4:0d:79:4b:90:24:3d:05:e5: f4:f3:e5:01:94:3d:1d:8a:c0:58:87:2f:6a:93:74:3c:f0:f8: 91:53:5e:83:f1:6d:70:80:d4:50:44:a6:0d:7b:0f:ce:1b:04: 16:bf:d9:a6:96:66:e3:e0:71:e9:f0:93:4c:6a:a4:34:7d:77: 41:0d:20:a7:d9:61:b0:02:a8:bf:77:88:3b:ee:7d:95:28:c8: 45:22:47:b2:9f:50:fa:69:7b:82:c8:6d:d3:fb:3b:77:35:43: 7e:98:9c:4f:13:c5:04:26:05:60:93:cb:b7:ba:dd:49:9e:a0: 40:58:4c:5a:d0:a0:9e:b2:1b:21:1b:4f:b3:3e:1f:59:cc:91: 6e:5a:1e:03:76:cc:9e:81:93:50:cf:7d:b2:bb:43:0b:0a:42: 57:e9:37:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GCuCOE82VFXmTYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNDEwMTAwNVoXDTI2MDYyMjEwMTAwNVowLzEtMCsGA1UEAxMk ODIyNzg4ZWEtOWNiYi00ZjZiLThiMDEtNDE5M2QxOTMxM2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWb4YFXEP46ZMXmpAqemuFNESqLVUjDQ6A8D uNQeFbNNXj75Ohy8Bex0LyJ4r7kKiPOay5eIFTni0CHrEVWWNF5wF3v+dSfxRJho naDK/2uRO5TaGt0NiXlFoM/78WyvyJbC6cJDmLcdqHzIx5TGXICwMGhr9ZWkFkXq AGi4FAnMXjcdAWGaf5Wnu5N/TlQtc6YmIc+1Cv/T+kSADgPHA/Yy3wxNqpS8Qs9Q hD1l8wByrIUh6Xlz+9VQhpudLg5G6PnDURhhwV2zRPrZY8H6mf57zGPu+mYqkVn6 ypEO3Hv3s119Jwu7izCCL190foBDpPHTp/P1OlQVlUQrdiUg7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVLfD3g8LNnVzYeVvon+mTjyG5nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2QzMTg4ODEtODUzYi0z MThjLTllZGItZTE3NDliOTgxMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSHlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGC725xUYnk5KuBWT2nVTHOL0S5dpo8SW+DI9ZZ3UOjGpGlQmguotqg EBRXvIpAXPm/fPi+XiE26LB+SdsX6QmIASB7nVKau++Fe54eBkmP0XTkx5pQarKL nCcQ5biH1zaOWLQNeUuQJD0F5fTz5QGUPR2KwFiHL2qTdDzw+JFTXoPxbXCA1FBE pg17D84bBBa/2aaWZuPgcenwk0xqpDR9d0ENIKfZYbACqL93iDvufZUoyEUiR7Kf UPppe4LIbdP7O3c1Q36YnE8TxQQmBWCTy7e63UmeoEBYTFrQoJ6yGyEbT7M+H1nM kW5aHgN2zJ6Bk1DPfbK7QwsKQlfpNyc= -----END CERTIFICATE-----Generated at Wed Mar 25 18:15:29 2026 by rpki-client