$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/376ad722-4646-3888-9a2c-ace0bdfa2b21.roa File: 376ad722-4646-3888-9a2c-ace0bdfa2b21.roa (raw, json) Hash identifier: gnqzdBB5DGsDO3y6voOGXXSXsnxNKEF5aRF02EJfV5c= Subject key identifier: C1:9D:67:76:84:25:A6:FA:87:BB:8E:07:43:70:56:E2:0F:9D:D9:E3 Certificate issuer: /CN=d6b690dc-d325-42b2-9834-06e4a779b209 Certificate serial: 010D0C9F4328584D20AF51B9017D96B92956F580 Authority key identifier: ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/376ad722-4646-3888-9a2c-ace0bdfa2b21.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 32746 IP address blocks: 204.152.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:51:b9:01:7d:96:b9:29:56:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b690dc-d325-42b2-9834-06e4a779b209 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=164e5dbf-44cc-4dd1-86a3-e4db0a53b125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e2:79:9f:d4:59:28:26:fe:56:48:2a:28:45: c1:0c:54:ec:4f:4a:f6:db:e4:2a:01:30:90:96:c4: b7:1a:fb:00:91:a4:4e:01:82:0c:16:32:36:6c:cf: d2:69:33:f7:14:86:07:af:98:42:40:ae:35:82:1a: 47:e9:ab:53:5c:db:9c:e0:01:69:1d:76:ed:46:29: 7c:85:22:a1:3f:9b:b7:6a:46:d3:e4:7b:b0:ae:8a: 85:af:76:6e:2e:36:4e:15:41:e1:07:b5:df:a8:32: 9e:43:aa:ea:59:11:53:10:8c:6e:74:49:d4:7d:60: 68:39:48:db:8d:cb:a7:c4:89:ac:b2:48:a1:63:be: b9:db:07:bc:06:2e:88:da:18:24:03:9e:f9:c1:b3: 21:b1:6c:c4:fa:8a:eb:c4:11:9a:6e:34:f0:f0:27: 54:35:30:1b:2e:50:0f:af:5f:46:25:66:7a:ea:58: 95:4d:23:80:2d:f4:22:fd:69:a8:9b:aa:ce:4c:76: bf:89:e5:d7:2b:6b:6a:3a:43:9f:82:87:82:74:3d: 99:d9:40:31:c5:3e:28:47:f0:da:3e:23:80:61:69: 55:3f:ec:4f:1e:1e:4a:c8:c5:55:b5:cf:41:be:53: 8d:fe:7a:6b:67:95:98:de:85:a0:11:dd:f0:5b:0b: 24:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9D:67:76:84:25:A6:FA:87:BB:8E:07:43:70:56:E2:0F:9D:D9:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/376ad722-4646-3888-9a2c-ace0bdfa2b21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl X509v3 Authority Key Identifier: keyid:ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer sbgp-ipAddrBlock: critical IPv4: 204.152.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:13:0c:eb:4a:bb:09:1d:bc:84:52:c3:8e:39:77:17:35:92: e6:62:67:27:c8:55:85:dc:ef:15:9b:86:25:24:8e:55:81:e8: b2:37:e3:f7:06:f9:f4:50:4c:02:6e:08:e2:83:81:b9:d3:32: 33:42:5b:1f:a0:e2:f4:2a:63:b5:4e:4f:b0:03:20:2a:2a:98: 56:db:c8:a7:20:21:0f:a3:cd:1f:a0:22:21:27:5d:60:1d:b0: 8a:bd:ee:f1:32:d6:a3:8a:1c:3a:c8:90:93:e8:f5:0e:b9:a7: af:ae:6c:d8:b6:f4:51:0e:ce:a8:ec:f2:e6:3a:b5:e4:b1:a6: d4:5e:e5:00:33:cb:97:f6:44:f8:e2:4c:e8:da:07:e4:4d:b3: 23:4f:41:65:b7:cb:3b:ab:c4:79:7b:bc:86:63:2d:ec:4e:dd: 84:11:2b:69:cb:71:ff:3d:ec:cd:94:70:30:4e:2b:41:65:de: b1:9d:1c:6f:7d:0a:68:6c:8c:ff:07:27:5f:e6:59:36:54:ba: b1:6a:ee:22:9d:46:2e:91:3a:e5:f6:b9:c8:17:6a:69:79:77: f1:77:b9:7d:5d:21:81:10:c1:87:ad:19:86:a8:5e:87:ad:f6: 01:32:34:45:e7:e8:3f:66:25:70:73:71:db:3a:c9:82:2b:be: a6:6f:86:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1G5AX2WuSlW9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNjkwZGMtZDMyNS00MmIyLTk4MzQtMDZlNGE3Nzli MjA5MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk MTY0ZTVkYmYtNDRjYy00ZGQxLTg2YTMtZTRkYjBhNTNiMTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+J5n9RZKCb+VkgqKEXBDFTsT0r22+QqATCQ lsS3GvsAkaROAYIMFjI2bM/SaTP3FIYHr5hCQK41ghpH6atTXNuc4AFpHXbtRil8 hSKhP5u3akbT5HuwroqFr3ZuLjZOFUHhB7XfqDKeQ6rqWRFTEIxudEnUfWBoOUjb jcunxImsskihY7652we8Bi6I2hgkA575wbMhsWzE+orrxBGabjTw8CdUNTAbLlAP r19GJWZ66liVTSOALfQi/Wmom6rOTHa/ieXXK2tqOkOfgoeCdD2Z2UAxxT4oR/Da PiOAYWlVP+xPHh5KyMVVtc9BvlON/nprZ5WY3oWgEd3wWwskUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGdZ3aEJab6h7uOB0NwVuIPndnjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNmI2 OTBkYy1kMzI1LTQyYjItOTgzNC0wNmU0YTc3OWIyMDkvMzc2YWQ3MjItNDY0Ni0z ODg4LTlhMmMtYWNlMGJkZmEyYjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDZiNjkwZGMtZDMyNS00MmIyLTk4 MzQtMDZlNGE3NzliMjA5L2Q2YjY5MGRjLWQzMjUtNDJiMi05ODM0LTA2ZTRhNzc5 YjIwOS5jcmwwHwYDVR0jBBgwFoAU7UQThqHLnfMmsjfCW7+YxO/SX4wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNmI2OTBkYy1kMzI1LTQyYjItOTgzNC0wNmU0 YTc3OWIyMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJh2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHITDOtKuwkdvIRSw445dxc1kuZiZyfIVYXc7xWbhiUkjlWB6LI34/cG +fRQTAJuCOKDgbnTMjNCWx+g4vQqY7VOT7ADICoqmFbbyKcgIQ+jzR+gIiEnXWAd sIq97vEy1qOKHDrIkJPo9Q65p6+ubNi29FEOzqjs8uY6teSxptRe5QAzy5f2RPji TOjaB+RNsyNPQWW3yzurxHl7vIZjLexO3YQRK2nLcf897M2UcDBOK0Fl3rGdHG99 CmhsjP8HJ1/mWTZUurFq7iKdRi6ROuX2ucgXaml5d/F3uX1dIYEQwYetGYaoXoet 9gEyNEXn6D9mJXBzcds6yYIrvqZvhnQ= -----END CERTIFICATE-----Generated at Thu Mar 26 18:10:00 2026 by rpki-client