$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/9d20ee29-516f-3930-b849-ad0ee8b7e392.roa File: 9d20ee29-516f-3930-b849-ad0ee8b7e392.roa (raw, json) Hash identifier: qKDBEKhWKsgsin9p1Wy74t2CxwgZXCcRsDFi6J/eL+w= Subject key identifier: 33:4F:E0:71:43:1E:95:E4:73:7D:7B:25:74:D2:4A:94:AF:34:A1:C6 Certificate issuer: /CN=e8253a5c-5822-44df-8846-56b6c0450bbe Certificate serial: 010D0C9F4328584D300A59D9C113CEED7D377680 Authority key identifier: 8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/9d20ee29-516f-3930-b849-ad0ee8b7e392.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 33362 IP address blocks: 158.222.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:59:d9:c1:13:ce:ed:7d:37:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8253a5c-5822-44df-8846-56b6c0450bbe Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=44196276-6c5e-41c6-bce0-9c2d441f48e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:42:36:0a:8d:06:a4:55:00:9c:dd:df:ce:97: cd:9d:48:4a:22:e8:da:af:3f:42:18:3d:0e:ee:f3: 37:b9:79:fa:ee:42:c3:dc:1c:d1:f1:b6:71:63:95: ca:d8:4f:36:47:48:0c:72:3e:c0:60:49:2b:d7:af: 25:ab:e9:81:64:34:f5:76:88:76:b4:05:d7:d0:77: 76:f7:d2:e6:14:f0:39:97:fa:d4:d5:3d:0a:75:5d: ca:5b:2a:93:63:51:31:4b:6a:64:7b:6c:2c:92:ef: 34:41:2f:7a:37:f7:44:36:c6:94:89:9a:76:8c:04: a3:e8:88:5a:41:c6:fb:b7:1e:af:38:5a:93:05:9d: 87:52:2c:78:8c:be:6d:b1:13:43:b5:74:40:89:d0: 65:4f:26:ba:7f:17:0c:a5:d2:cd:6a:08:ad:91:84: 1a:a7:a1:e6:35:fc:16:5f:c3:42:5a:0e:c3:5b:5e: fb:d9:fa:a7:ac:c4:be:ff:5d:b1:9b:be:5b:d4:48: a6:05:bd:ab:b7:f4:0e:4b:2a:ed:c5:cc:48:7b:a9: 28:c6:47:b1:6e:b5:1e:c0:3f:79:25:58:b4:e9:e5: 3b:e8:d7:7d:8d:bd:11:8d:72:3d:22:75:c5:d9:ca: 0b:ee:37:ce:32:bd:5c:0d:76:27:8d:97:4f:3e:65: 10:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4F:E0:71:43:1E:95:E4:73:7D:7B:25:74:D2:4A:94:AF:34:A1:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/9d20ee29-516f-3930-b849-ad0ee8b7e392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl X509v3 Authority Key Identifier: keyid:8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer sbgp-ipAddrBlock: critical IPv4: 158.222.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:d4:3d:c8:c9:bb:7f:2b:c5:72:e2:39:b2:23:b2:5c:b6:32: 57:35:71:94:d2:ac:2b:01:5a:2c:75:52:33:be:e8:18:0f:55: 75:1c:78:66:81:ed:d6:ab:ea:4c:1a:26:87:ae:22:6e:d9:d5: f1:7d:d6:76:25:4d:a6:0c:01:54:12:5b:2f:39:33:06:7a:45: 67:31:d5:17:cf:ca:6d:9d:60:83:41:1e:c0:45:e5:95:a3:aa: d3:df:71:dd:d5:7a:b3:0a:ed:29:c1:cb:ff:c9:1d:c0:39:04: a8:01:e9:c0:1a:91:f1:bc:ad:20:a8:a5:e6:c4:26:a9:1d:82: 9c:2d:bf:7f:89:0e:35:2f:36:04:93:7f:ea:ca:5a:0f:08:b5: ba:2f:ba:2c:a5:09:b3:ab:47:20:12:4d:e5:30:55:1d:97:72: 23:4d:c3:4b:a1:59:b8:96:98:a6:4b:24:78:e8:a9:ce:a9:f3: 72:80:91:f8:1c:4b:8d:e6:5e:37:a5:5e:7d:0b:cf:2a:2c:6f: 56:58:d2:12:4a:b7:8a:87:5d:2b:b4:0a:0e:39:f0:cd:76:a9: ef:19:20:b2:68:de:e7:e6:fe:28:8e:77:14:40:32:c8:15:9b: cb:72:21:be:8b:3a:71:f6:a5:a4:09:62:69:97:94:b0:db:63: 5f:c0:e9:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wClnZwRPO7X03doAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTgyNTNhNWMtNTgyMi00NGRmLTg4NDYtNTZiNmMwNDUw YmJlMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NDQxOTYyNzYtNmM1ZS00MWM2LWJjZTAtOWMyZDQ0MWY0OGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEI2Co0GpFUAnN3fzpfNnUhKIujarz9CGD0O 7vM3uXn67kLD3BzR8bZxY5XK2E82R0gMcj7AYEkr168lq+mBZDT1doh2tAXX0Hd2 99LmFPA5l/rU1T0KdV3KWyqTY1ExS2pke2wsku80QS96N/dENsaUiZp2jASj6Iha Qcb7tx6vOFqTBZ2HUix4jL5tsRNDtXRAidBlTya6fxcMpdLNagitkYQap6HmNfwW X8NCWg7DW1772fqnrMS+/12xm75b1EimBb2rt/QOSyrtxcxIe6koxkexbrUewD95 JVi06eU76Nd9jb0RjXI9InXF2coL7jfOMr1cDXYnjZdPPmUQ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNP4HFDHpXkc317JXTSSpSvNKHGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lODI1 M2E1Yy01ODIyLTQ0ZGYtODg0Ni01NmI2YzA0NTBiYmUvOWQyMGVlMjktNTE2Zi0z OTMwLWI4NDktYWQwZWU4YjdlMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTgyNTNhNWMtNTgyMi00NGRmLTg4 NDYtNTZiNmMwNDUwYmJlL2U4MjUzYTVjLTU4MjItNDRkZi04ODQ2LTU2YjZjMDQ1 MGJiZS5jcmwwHwYDVR0jBBgwFoAUjARRQe9lRA2Nvxc4Mhp+c0pN6gowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lODI1M2E1Yy01ODIyLTQ0ZGYtODg0Ni01NmI2 YzA0NTBiYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnt5eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfUPcjJu38rxXLiObIjsly2Mlc1cZTSrCsBWix1UjO+6BgPVXUceGaB 7dar6kwaJoeuIm7Z1fF91nYlTaYMAVQSWy85MwZ6RWcx1RfPym2dYINBHsBF5ZWj qtPfcd3VerMK7SnBy//JHcA5BKgB6cAakfG8rSCopebEJqkdgpwtv3+JDjUvNgST f+rKWg8ItbovuiylCbOrRyASTeUwVR2XciNNw0uhWbiWmKZLJHjoqc6p83KAkfgc S43mXjelXn0Lzyosb1ZY0hJKt4qHXSu0Cg458M12qe8ZILJo3ufm/iiOdxRAMsgV m8tyIb6LOnH2paQJYmmXlLDbY1/A6Y4= -----END CERTIFICATE-----Generated at Thu Mar 26 20:11:06 2026 by rpki-client