$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/16699af0-ce09-3ab9-9da5-515174dfb7ac.roa File: 16699af0-ce09-3ab9-9da5-515174dfb7ac.roa (raw, json) Hash identifier: SzSXAtPDubcKjapWVzo7JdrxA6wNkf6atLONMbrsFYg= Subject key identifier: A2:46:1A:E6:6A:08:1A:C2:2D:4C:DA:8C:49:9F:39:8A:54:EB:78:FC Certificate issuer: /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb Certificate serial: 010D0C9F4328584D1707B8AD30B351394C9B3B80 Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/16699af0-ce09-3ab9-9da5-515174dfb7ac.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 395201 IP address blocks: 151.123.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:b8:ad:30:b3:51:39:4c:9b:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=69f06324-2b88-4507-9454-c86330afc748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bf:3b:3b:46:69:2c:40:b1:a1:fc:97:b0:15: c6:32:7b:5a:2e:6c:ff:b3:f9:7b:1b:61:48:c1:83: 6f:67:e8:73:a8:82:b7:62:f8:36:99:3b:4d:f2:a7: 34:5a:95:de:d4:22:09:31:20:b0:d9:c8:91:ef:01: be:1c:00:7f:03:2b:63:23:d1:7a:a5:7b:27:65:93: e3:bf:3b:0d:0d:b2:9b:24:19:0a:b3:ff:f6:48:69: c5:a6:53:2c:38:dc:76:ac:7a:70:54:dc:22:a5:e5: cb:64:77:eb:fa:73:37:c2:ca:7c:7c:2f:c2:00:6c: 76:bb:90:17:bb:06:49:d0:bc:52:10:b3:f5:bf:c2: f6:e6:0a:ab:3a:0c:cc:84:3f:d9:a6:e0:51:b3:c3: 87:1b:6a:0f:9b:13:aa:b7:a2:24:da:19:28:a7:73: 3c:23:8c:09:de:b2:08:03:54:f4:81:e5:d2:87:97: b3:5a:1e:c4:b9:e2:dd:a7:07:19:49:9a:ef:99:6b: 35:6a:38:a2:18:c2:10:d2:02:75:4e:6d:ff:cd:1a: 16:fa:12:55:88:6c:06:6e:25:fd:88:85:ed:75:83: 56:cf:86:53:03:f9:5d:aa:85:fa:89:4a:02:79:a7: d6:bc:93:42:3f:01:ef:30:b1:c6:52:d4:3d:34:51: 8b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:46:1A:E6:6A:08:1A:C2:2D:4C:DA:8C:49:9F:39:8A:54:EB:78:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/16699af0-ce09-3ab9-9da5-515174dfb7ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl X509v3 Authority Key Identifier: keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer sbgp-ipAddrBlock: critical IPv4: 151.123.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:92:ae:f8:28:c8:f4:ba:51:64:e5:3d:aa:1e:b8:f1:6f:e9: 78:93:30:25:ab:dc:bb:a4:e0:d3:9a:84:ce:f1:e1:dd:1f:e5: dd:65:a9:49:0c:4b:a2:53:44:b3:e2:3c:6d:90:77:d1:7a:19: 58:94:5c:71:ec:d4:5f:f7:54:44:39:37:b4:a8:d5:24:99:83: 16:98:43:13:b4:ba:2c:d6:a1:99:9e:d5:51:7a:94:af:36:75: 68:34:0f:8b:cd:d7:4b:0d:e0:00:32:6e:38:ae:f9:13:6b:9c: f5:01:38:8a:86:a4:df:8b:90:0c:b7:2f:d2:8d:db:d2:c6:19: 83:e0:eb:b0:58:dd:39:a9:d2:d9:c6:7d:55:e8:e0:94:04:9a: 01:f1:b2:e0:11:b1:8d:32:35:b1:60:8e:2b:f0:88:1d:56:28: ab:f9:4a:b4:25:ff:74:23:36:59:60:c0:fc:f0:ad:cc:ec:4e: 47:01:5e:91:08:3a:0d:16:08:31:3d:35:28:c1:1d:a5:17:a4: 71:a2:19:b2:8a:55:ad:95:83:ab:df:86:ee:36:b5:8c:48:43: 23:22:e7:59:e3:f3:cd:50:e5:e4:86:68:59:b5:a4:fe:c4:9c: dc:9b:56:62:77:51:23:14:70:79:8b:e2:74:1f:a7:c3:0b:35: df:89:2e:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0XB7itMLNROUybO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzkwY2ViMWUtMzhmMC00NjkwLThlMTItZmRlZjBkYzBl ZGRiMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk NjlmMDYzMjQtMmI4OC00NTA3LTk0NTQtYzg2MzMwYWZjNzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL87O0ZpLECxofyXsBXGMntaLmz/s/l7G2FI wYNvZ+hzqIK3Yvg2mTtN8qc0WpXe1CIJMSCw2ciR7wG+HAB/AytjI9F6pXsnZZPj vzsNDbKbJBkKs//2SGnFplMsONx2rHpwVNwipeXLZHfr+nM3wsp8fC/CAGx2u5AX uwZJ0LxSELP1v8L25gqrOgzMhD/ZpuBRs8OHG2oPmxOqt6Ik2hkop3M8I4wJ3rII A1T0geXSh5ezWh7EueLdpwcZSZrvmWs1ajiiGMIQ0gJ1Tm3/zRoW+hJViGwGbiX9 iIXtdYNWz4ZTA/ldqoX6iUoCeafWvJNCPwHvMLHGUtQ9NFGLHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJGGuZqCBrCLUzajEmfOYpU63j8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBj ZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVmMGRjMGVkZGIvMTY2OTlhZjAtY2UwOS0z YWI5LTlkYTUtNTE1MTc0ZGZiN2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzkwY2ViMWUtMzhmMC00NjkwLThl MTItZmRlZjBkYzBlZGRiLzM5MGNlYjFlLTM4ZjAtNDY5MC04ZTEyLWZkZWYwZGMw ZWRkYi5jcmwwHwYDVR0jBBgwFoAU7IhVYel9//xGKMwSEvEQkth0VUswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBjZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVm MGRjMGVkZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl3usMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuSrvgoyPS6UWTlPaoeuPFv6XiTMCWr3Luk4NOahM7x4d0f5d1lqUkM S6JTRLPiPG2Qd9F6GViUXHHs1F/3VEQ5N7So1SSZgxaYQxO0uizWoZme1VF6lK82 dWg0D4vN10sN4AAybjiu+RNrnPUBOIqGpN+LkAy3L9KN29LGGYPg67BY3Tmp0tnG fVXo4JQEmgHxsuARsY0yNbFgjivwiB1WKKv5SrQl/3QjNllgwPzwrczsTkcBXpEI Og0WCDE9NSjBHaUXpHGiGbKKVa2Vg6vfhu42tYxIQyMi51nj881Q5eSGaFm1pP7E nNybVmJ3USMUcHmL4nQfp8MLNd+JLiE= -----END CERTIFICATE-----Generated at Thu Mar 26 22:51:06 2026 by rpki-client