$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/16dc15d2-2b5d-39cc-bbc4-3a5e1b071724.roa File: 16dc15d2-2b5d-39cc-bbc4-3a5e1b071724.roa (raw, json) Hash identifier: n4BUSwn91E7hSsQVFAw50tQJxckNlo2Rq2YWC4BtkHM= Subject key identifier: A4:6F:6B:47:74:1D:B2:5C:F2:C5:D3:C7:5E:85:B6:60:60:D3:9B:E1 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584D0D4262ABFF962D830C0331E0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/16dc15d2-2b5d-39cc-bbc4-3a5e1b071724.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 202 IP address blocks: 192.25.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:62:ab:ff:96:2d:83:0c:03:31:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=3d605e80-a98e-42e1-be0d-4c0cd9f2d116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e1:c4:b3:f9:79:27:36:05:64:3d:6d:54:bb: 58:14:b8:a3:88:42:99:a9:42:d0:a7:f4:be:01:d0: 18:4d:b2:ac:7c:af:24:ca:5e:bb:2b:0b:ba:76:a2: 7d:c0:5b:91:2f:3d:ea:b5:cb:78:ab:4e:7e:30:c4: ab:5a:f1:cd:27:b4:3c:3f:bf:37:33:d9:c2:4a:15: f2:7e:d5:04:70:d5:c6:79:d2:0e:c1:48:9b:52:b1: 3e:4f:c0:05:d9:23:1e:cc:6b:f7:59:3c:0d:fa:5f: 31:92:74:fb:94:5a:8b:72:e4:d1:2c:35:19:48:d0: 64:5e:af:ca:fd:a4:c3:99:2b:69:3a:57:90:61:b3: a3:20:74:46:e7:cd:6a:38:d3:5a:e2:6e:34:94:81: 0f:ab:a4:d7:d0:2f:c1:65:37:8e:99:d9:61:4f:60: aa:df:e4:72:9e:53:7f:b6:32:0c:89:78:bc:e5:34: 88:51:fa:09:56:60:f3:58:56:0a:95:ad:a1:f0:50: db:32:de:05:e6:b6:03:d5:17:7a:95:a1:64:ed:37: 7a:79:a5:e3:be:a1:6a:6b:81:55:71:a6:b9:93:b9: 00:c1:7c:bf:27:c0:76:04:b6:36:e7:ff:70:f1:f2: 0d:16:e5:4a:ed:64:96:ce:66:e9:0d:fe:6e:e0:09: 59:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6F:6B:47:74:1D:B2:5C:F2:C5:D3:C7:5E:85:B6:60:60:D3:9B:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/16dc15d2-2b5d-39cc-bbc4-3a5e1b071724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.25.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ab:f1:c0:f3:f7:26:20:68:73:55:24:9a:ad:d7:ec:31:97: 5e:7a:4d:d8:70:b5:da:82:67:d1:ce:c9:5a:b7:98:e3:70:8f: cf:34:42:de:6c:bf:73:5c:f5:92:f5:68:2e:1d:41:2c:85:fc: 7a:bf:9b:de:db:96:68:ac:d2:1c:45:a8:4c:39:52:d3:b5:47: 3f:1c:23:5a:a6:2b:68:80:c4:2a:8c:e6:15:4e:46:d3:2e:c1: b0:41:a6:63:03:e6:18:71:7e:e4:53:97:30:cd:46:10:c3:7f: 95:bf:58:c9:aa:0f:cd:fa:7b:0e:69:77:7f:5d:b9:b7:cb:73: 49:6d:eb:df:18:7a:a4:4e:e9:66:c2:39:6a:a5:9d:26:fc:98: b6:e3:02:96:9a:de:f2:7d:09:08:2d:cd:91:5f:fa:c9:72:55: 0f:56:55:ce:f8:39:c1:92:d6:39:64:0e:8e:6d:c9:88:a8:7a: 16:1d:ac:5d:9c:e8:da:88:cf:9a:2e:e7:a5:3c:5a:3c:e2:4a: b8:d5:2c:29:2d:23:09:6b:cb:9e:6c:20:ee:a7:37:b6:51:ed: 27:e6:4f:33:69:ae:dc:3d:65:1a:5d:88:ea:18:e0:da:91:c6: 63:a4:bb:14:5b:ac:cf:8d:3c:8b:9e:63:4b:58:95:dc:9e:71: 1d:44:31:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQmKr/5YtgwwDMeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk M2Q2MDVlODAtYTk4ZS00MmUxLWJlMGQtNGMwY2Q5ZjJkMTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweHEs/l5JzYFZD1tVLtYFLijiEKZqULQp/S+ AdAYTbKsfK8kyl67Kwu6dqJ9wFuRLz3qtct4q05+MMSrWvHNJ7Q8P783M9nCShXy ftUEcNXGedIOwUibUrE+T8AF2SMezGv3WTwN+l8xknT7lFqLcuTRLDUZSNBkXq/K /aTDmStpOleQYbOjIHRG581qONNa4m40lIEPq6TX0C/BZTeOmdlhT2Cq3+RynlN/ tjIMiXi85TSIUfoJVmDzWFYKla2h8FDbMt4F5rYD1Rd6laFk7Td6eaXjvqFqa4FV caa5k7kAwXy/J8B2BLY25/9w8fINFuVK7WSWzmbpDf5u4AlZ6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRva0d0HbJc8sXTx16FtmBg05vhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMTZkYzE1ZDItMmI1ZC0z OWNjLWJiYzQtM2E1ZTFiMDcxNzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwBmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWr8cDz9yYgaHNVJJqt1+wxl156TdhwtdqCZ9HOyVq3mONwj880Qt5s v3Nc9ZL1aC4dQSyF/Hq/m97blmis0hxFqEw5UtO1Rz8cI1qmK2iAxCqM5hVORtMu wbBBpmMD5hhxfuRTlzDNRhDDf5W/WMmqD836ew5pd39dubfLc0lt698YeqRO6WbC OWqlnSb8mLbjApaa3vJ9CQgtzZFf+slyVQ9WVc74OcGS1jlkDo5tyYioehYdrF2c 6NqIz5ou56U8WjziSrjVLCktIwlry55sIO6nN7ZR7SfmTzNprtw9ZRpdiOoY4NqR xmOkuxRbrM+NPIueY0tYldyecR1EMeY= -----END CERTIFICATE-----Generated at Thu Mar 26 18:08:49 2026 by rpki-client