$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/ff75745d-e16b-3695-8fc4-2e0562920e2f.roa File: ff75745d-e16b-3695-8fc4-2e0562920e2f.roa (raw, json) Hash identifier: 5o5Jo5hQp+dRTXJbGX18FRKAgZjvuDWS0WhWtAXGHDE= Subject key identifier: AC:1A:D1:4E:39:98:30:CF:75:47:EE:39:E0:1A:E1:9D:37:0F:94:91 Certificate issuer: /CN=34592396-ac3d-4a48-97f1-caed65436525 Certificate serial: 010D0C9F4328584D1F4A16B0B5235F3931ED5B80 Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/ff75745d-e16b-3695-8fc4-2e0562920e2f.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 139358 IP address blocks: 216.38.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:16:b0:b5:23:5f:39:31:ed:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=d5020b29-8269-4702-a020-712f64bd2a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:23:c1:b3:c4:d8:cb:f9:08:6c:aa:db:31:98: 37:c8:da:f5:ca:e1:a1:af:25:f8:7d:b0:aa:d6:49: 9f:c1:7d:2a:31:24:93:a1:82:24:12:52:1f:e6:90: 5a:57:26:86:e9:ea:6c:a5:38:cc:03:23:12:b6:cf: 70:3a:b6:6b:e0:f2:a3:0f:19:17:55:57:be:9c:6a: a7:1b:34:18:c3:6d:d6:5d:23:ae:49:a3:30:db:10: ea:1a:b4:56:34:a6:9b:3a:d3:34:6b:d9:82:ad:d5: c5:d9:6e:36:13:8c:58:ad:5c:57:a1:c9:dd:5d:e8: cf:ef:0e:09:4a:bf:6a:9d:08:52:16:05:da:a0:2d: a3:41:b6:4b:93:aa:d0:e6:ad:03:39:cc:8c:74:d3: e5:0c:0b:c7:d0:b0:9c:30:6f:ea:b3:7b:56:cc:8c: 64:07:dd:9b:bb:ee:06:54:b6:2a:f5:f2:ae:9e:8f: b7:f7:58:ea:2c:ee:50:15:68:34:0f:8e:59:c9:ca: 7d:55:02:88:76:87:4a:67:56:f6:73:15:83:21:39: 28:4f:72:b9:68:7c:62:77:0e:2f:ba:c5:24:be:0e: 52:9a:f0:ea:98:b7:9d:5a:b8:80:5e:9c:ae:d2:ef: f5:2a:dd:23:f3:05:7e:9b:a5:eb:e6:13:34:b0:df: 9f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1A:D1:4E:39:98:30:CF:75:47:EE:39:E0:1A:E1:9D:37:0F:94:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/ff75745d-e16b-3695-8fc4-2e0562920e2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl X509v3 Authority Key Identifier: keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer sbgp-ipAddrBlock: critical IPv4: 216.38.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:4e:e8:94:f2:d4:27:f2:cd:81:64:42:59:ba:65:29:16:5e: ca:68:94:ee:62:84:db:70:7e:be:23:af:e0:34:d8:95:c9:4f: 6b:6f:5e:7d:0b:90:99:6f:d5:38:04:1f:c4:fa:8c:ee:65:57: b8:c5:8b:32:d3:fd:a8:42:9e:93:17:8e:2d:c5:4d:5b:38:6e: a9:a2:07:b7:17:35:a4:c4:c7:8a:5e:80:ce:b2:09:54:43:15: 8f:0d:31:60:46:bb:96:4d:fe:3d:35:dd:44:43:e2:d6:4d:b0: 38:e8:72:8a:93:d9:59:49:b0:64:10:34:5d:a0:7b:b9:2e:ce: 6c:7b:9e:0f:2d:20:50:43:0e:e9:75:27:39:74:46:c8:65:ec: 22:9e:4a:d4:2c:c1:32:4c:60:37:17:b2:ce:88:c0:13:c2:38: f4:00:3c:e9:84:48:5d:e9:6f:7e:41:1b:5e:54:86:98:d6:8c: d8:ef:e6:14:a7:47:63:3a:96:43:7f:9c:51:12:09:f6:0b:57: 52:07:40:bb:fa:73:2d:fe:d9:22:dd:84:aa:6f:f9:28:84:06: ce:9f:5f:45:7b:26:0c:3d:20:d2:c2:4d:e3:d2:e8:ea:f2:55: fc:68:06:8b:6c:7c:4c:7a:c6:ff:d2:aa:e0:fe:81:df:c2:de: a8:9c:db:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fShawtSNfOTHtW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ1OTIzOTYtYWMzZC00YTQ4LTk3ZjEtY2FlZDY1NDM2 NTI1MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZDUwMjBiMjktODI2OS00NzAyLWEwMjAtNzEyZjY0YmQyYTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyPBs8TYy/kIbKrbMZg3yNr1yuGhryX4fbCq 1kmfwX0qMSSToYIkElIf5pBaVyaG6epspTjMAyMSts9wOrZr4PKjDxkXVVe+nGqn GzQYw23WXSOuSaMw2xDqGrRWNKabOtM0a9mCrdXF2W42E4xYrVxXocndXejP7w4J Sr9qnQhSFgXaoC2jQbZLk6rQ5q0DOcyMdNPlDAvH0LCcMG/qs3tWzIxkB92bu+4G VLYq9fKuno+391jqLO5QFWg0D45Zycp9VQKIdodKZ1b2cxWDITkoT3K5aHxidw4v usUkvg5SmvDqmLedWriAXpyu0u/1Kt0j8wV+m6Xr5hM0sN+fDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwa0U45mDDPdUfuOeAa4Z03D5SRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDU5 MjM5Ni1hYzNkLTRhNDgtOTdmMS1jYWVkNjU0MzY1MjUvZmY3NTc0NWQtZTE2Yi0z Njk1LThmYzQtMmUwNTYyOTIwZTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQ1OTIzOTYtYWMzZC00YTQ4LTk3 ZjEtY2FlZDY1NDM2NTI1LzM0NTkyMzk2LWFjM2QtNGE0OC05N2YxLWNhZWQ2NTQz NjUyNS5jcmwwHwYDVR0jBBgwFoAU4Pkf4Q9Z7oe8umGKzul0yYPhQUEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDU5MjM5Ni1hYzNkLTRhNDgtOTdmMS1jYWVk NjU0MzY1MjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2CarMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABO6JTy1CfyzYFkQlm6ZSkWXspolO5ihNtwfr4jr+A02JXJT2tvXn0L kJlv1TgEH8T6jO5lV7jFizLT/ahCnpMXji3FTVs4bqmiB7cXNaTEx4pegM6yCVRD FY8NMWBGu5ZN/j013URD4tZNsDjocoqT2VlJsGQQNF2ge7kuzmx7ng8tIFBDDul1 Jzl0Rshl7CKeStQswTJMYDcXss6IwBPCOPQAPOmESF3pb35BG15UhpjWjNjv5hSn R2M6lkN/nFESCfYLV1IHQLv6cy3+2SLdhKpv+SiEBs6fX0V7Jgw9INLCTePS6Ory VfxoBotsfEx6xv/SquD+gd/C3qic26c= -----END CERTIFICATE-----Generated at Thu Mar 26 15:07:33 2026 by rpki-client