$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/970cd30d-74be-33f9-a710-baa0ae6de29e.roa File: 970cd30d-74be-33f9-a710-baa0ae6de29e.roa (raw, json) Hash identifier: XSxP8tWYRJmMfYyKTsSvQ8G5s2abawZpunprqTbZBx8= Subject key identifier: A9:76:A7:9A:0B:2B:C8:D4:97:FE:AF:0B:62:19:B2:11:E1:7C:68:E4 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D5E1A5AC5D958B5C2606E8500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/970cd30d-74be-33f9-a710-baa0ae6de29e.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 21859 IP address blocks: 216.132.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:5a:c5:d9:58:b5:c2:60:6e:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=07b07c66-a47a-4ae8-8672-6bcaf86e999f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:dc:b0:0a:ac:9e:6b:5e:6a:80:62:ff:c6:45: 0c:87:33:89:5c:60:85:35:4b:04:4b:5a:92:b8:df: d1:5f:c3:ab:a3:dd:04:52:fb:00:11:2c:d4:b8:36: 74:ba:32:4b:27:38:29:cf:09:55:63:44:44:ad:f8: 9a:61:73:6e:5a:02:73:c8:bd:6a:1c:fe:ae:b0:75: 31:29:4c:cd:00:13:a8:0f:5f:33:d9:d2:d0:b5:55: 4f:37:a6:5c:d2:61:a9:a0:72:bf:6a:b5:ea:8b:78: 83:7d:f2:06:6e:07:b1:80:08:8c:b8:15:53:3d:03: bd:93:06:89:b9:94:98:0d:b8:63:df:37:73:64:4f: 67:6b:fa:4a:65:a7:d8:59:1c:4b:09:62:5a:a1:33: b8:b0:23:01:52:b8:9d:93:34:aa:99:91:a7:08:6d: d8:a5:e6:0f:42:1e:18:8d:42:42:fd:b7:9a:e3:f8: b7:f4:38:82:e9:5f:57:c8:2a:22:3e:4e:81:c1:c9: 6d:d6:b0:76:ed:0f:f5:83:18:97:44:32:77:e7:2a: ad:8e:27:a9:26:08:56:fb:28:44:fb:1c:9f:dc:6f: ee:69:c4:d6:64:8b:44:1d:39:2b:48:0c:f3:e8:6e: c4:2b:59:e5:35:55:a5:91:d1:06:91:93:31:1c:32: 39:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:76:A7:9A:0B:2B:C8:D4:97:FE:AF:0B:62:19:B2:11:E1:7C:68:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/970cd30d-74be-33f9-a710-baa0ae6de29e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:8b:81:8e:ee:bb:2f:ad:53:51:7f:01:67:07:2b:60:29:2f: e6:31:a3:6b:5a:7f:08:04:aa:77:cc:b5:09:68:b8:78:40:0c: 21:13:e0:94:80:cd:fb:f0:14:0a:aa:24:5e:30:b9:50:c9:c6: 86:2c:81:4c:6a:0e:7f:31:dd:4d:09:82:db:a5:cb:86:5b:ca: c9:f0:bb:ac:33:e7:6e:75:ea:f2:da:c5:f0:bd:b9:4e:ab:c8: d6:f5:fe:3d:42:e5:00:bf:1a:3c:02:50:02:d0:1e:ec:81:4b: b6:92:8c:d9:6e:ff:e4:21:b1:81:a8:ae:e8:57:47:fa:05:8d: 84:08:7f:d1:d4:a3:ee:f7:c3:52:30:c3:bc:19:b7:da:fe:9d: 1d:1f:02:ac:66:6b:33:49:e3:79:60:a4:c0:20:69:eb:e1:f4: 30:3a:91:df:96:c6:a9:80:db:8c:61:8b:79:8e:b5:03:db:e1: f1:a7:b4:ec:b2:22:a8:f2:22:6e:e9:c2:09:9a:63:23:97:13: 22:23:81:20:00:ca:f7:bd:01:22:8d:75:53:c6:c2:5b:17:54: fc:9f:0b:19:73:19:67:97:0a:f4:c9:c6:38:63:0d:ca:5d:b6: f8:85:8b:b2:b0:51:76:e8:b0:da:22:92:b9:63:45:97:86:2f: 89:88:09:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGlrF2Vi1wmBuhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk MDdiMDdjNjYtYTQ3YS00YWU4LTg2NzItNmJjYWY4NmU5OTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktywCqyea15qgGL/xkUMhzOJXGCFNUsES1qS uN/RX8Oro90EUvsAESzUuDZ0ujJLJzgpzwlVY0RErfiaYXNuWgJzyL1qHP6usHUx KUzNABOoD18z2dLQtVVPN6Zc0mGpoHK/arXqi3iDffIGbgexgAiMuBVTPQO9kwaJ uZSYDbhj3zdzZE9na/pKZafYWRxLCWJaoTO4sCMBUridkzSqmZGnCG3YpeYPQh4Y jUJC/bea4/i39DiC6V9XyCoiPk6Bwclt1rB27Q/1gxiXRDJ35yqtjiepJghW+yhE +xyf3G/uacTWZItEHTkrSAzz6G7EK1nlNVWlkdEGkZMxHDI5ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKl2p5oLK8jUl/6vC2IZshHhfGjkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTcwY2QzMGQtNzRiZS0z M2Y5LWE3MTAtYmFhMGFlNmRlMjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2IRlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSLgY7uuy+tU1F/AWcHK2ApL+Yxo2tafwgEqnfMtQlouHhADCET4JSA zfvwFAqqJF4wuVDJxoYsgUxqDn8x3U0Jgtuly4Zbysnwu6wz52516vLaxfC9uU6r yNb1/j1C5QC/GjwCUALQHuyBS7aSjNlu/+QhsYGoruhXR/oFjYQIf9HUo+73w1Iw w7wZt9r+nR0fAqxmazNJ43lgpMAgaevh9DA6kd+WxqmA24xhi3mOtQPb4fGntOyy IqjyIm7pwgmaYyOXEyIjgSAAyve9ASKNdVPGwlsXVPyfCxlzGWeXCvTJxjhjDcpd tviFi7KwUXbosNoikrljRZeGL4mICSM= -----END CERTIFICATE-----Generated at Fri Apr 10 23:16:30 2026 by rpki-client