$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/d3cdd8b8-a5e2-3355-9c49-e239e28e4e87.roa File: d3cdd8b8-a5e2-3355-9c49-e239e28e4e87.roa (raw, json) Hash identifier: jwJRwSW4/N6s1/BbFjcBLlWTrr7oO/Ti1GlT4T+gZcw= Subject key identifier: 7E:DD:DB:93:B1:9E:CD:1D:74:4D:3C:CE:B9:4B:D0:D7:4C:88:36:4B Certificate issuer: /CN=a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0 Certificate serial: 010D0C9F4328584D40CA4F603F0EA52EC8B2FDA0 Authority key identifier: B3:3C:FA:77:C0:A6:7D:0A:F6:F9:19:8E:41:82:EE:A9:3B:6B:D2:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/d3cdd8b8-a5e2-3355-9c49-e239e28e4e87.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 19171 IP address blocks: 64.253.128.0/19 maxlen: 24 98.143.80.0/20 maxlen: 24 162.245.56.0/22 maxlen: 24 192.189.36.0/22 maxlen: 24 199.182.220.0/22 maxlen: 24 208.65.232.0/22 maxlen: 24 208.118.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:4f:60:3f:0e:a5:2e:c8:b2:fd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=5be934a4-40ce-4b5f-9e9f-0d4c46df6196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9b:d3:9f:99:2c:88:f1:a6:dd:f1:3a:e4:9e: 68:b6:cc:7f:bf:18:33:dc:61:24:17:00:5d:55:fa: 6d:b4:7a:39:3f:11:09:3a:3b:c1:80:72:5d:eb:e2: 52:e9:1e:19:0f:f1:78:f8:4e:51:a1:ac:8e:96:1a: 7e:52:8a:68:6c:47:8b:7d:4d:8a:92:ee:11:97:60: d2:c6:4a:b4:9d:9c:ab:f9:31:27:08:60:c5:cf:64: 96:63:7c:a8:22:39:3e:85:b7:e8:8b:0f:52:8e:09: ef:7d:33:8a:7e:6b:c6:54:d1:33:eb:4f:c0:0c:ba: d1:15:df:44:d8:c2:1d:55:ae:88:fd:ba:ca:f9:30: 95:8a:49:d0:6a:b3:47:53:3d:96:6f:21:c5:4d:53: 1d:14:75:c2:bf:89:b6:58:7f:de:a0:b9:70:01:27: 85:a3:b9:0c:45:44:bd:a6:f6:17:c2:a2:85:60:6d: 4a:ba:3b:81:fe:91:80:61:f0:20:e1:66:b4:9b:1a: 4b:96:97:29:32:82:7e:e6:24:e1:5b:24:9b:df:71: 31:48:b2:96:df:23:ed:80:c9:9f:2b:dd:22:a9:38: ab:29:37:63:60:03:11:37:39:ba:14:26:50:46:a2: 92:45:82:eb:e7:d8:2c:2b:d8:3c:09:6b:38:fe:82: f2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DD:DB:93:B1:9E:CD:1D:74:4D:3C:CE:B9:4B:D0:D7:4C:88:36:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/d3cdd8b8-a5e2-3355-9c49-e239e28e4e87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.crl X509v3 Authority Key Identifier: keyid:B3:3C:FA:77:C0:A6:7D:0A:F6:F9:19:8E:41:82:EE:A9:3B:6B:D2:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.cer sbgp-ipAddrBlock: critical IPv4: 64.253.128.0/19 98.143.80.0/20 162.245.56.0/22 192.189.36.0/22 199.182.220.0/22 208.65.232.0/22 208.118.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:40:16:d9:1c:aa:bb:5e:dc:40:78:e8:b2:40:58:60:99:75: db:57:34:e7:ed:80:b0:d5:04:cd:95:1c:88:81:78:5e:f7:f1: e5:c4:75:a0:c0:6f:fb:5b:d3:fa:ed:20:17:d8:82:19:41:72: 94:05:83:0d:9e:ae:b1:41:66:13:d1:03:6c:9f:ce:60:9a:05: 7e:b3:d1:b7:cc:01:35:a0:0d:69:3d:e7:00:47:cd:d6:aa:8c: 21:9b:2f:b2:0a:a9:0c:77:50:66:b2:33:50:55:18:f5:e7:a6: 43:ff:c9:62:f4:e0:88:b2:b4:f7:82:ed:6d:c0:2e:d2:37:68: 13:99:26:8f:8e:36:d0:54:d8:bc:3b:b2:ed:20:cf:a0:b1:ff: 42:20:b4:df:fa:ce:9d:a4:f0:38:4c:2a:e6:9e:ae:45:05:94: eb:d5:55:eb:15:ec:8f:c8:a5:9c:5d:ee:dc:1c:22:87:33:c7: 3b:6b:13:6f:39:a7:35:64:45:1c:61:35:9f:88:3d:1d:12:e9: c9:02:f0:43:13:54:71:9e:a3:24:f2:ed:cd:ef:db:a6:a7:02: 58:9a:b6:7d:ed:ff:cf:5e:6c:6e:d4:d3:c3:d1:af:b2:05:bc: 2d:af:0b:4c:ca:38:8b:5f:f7:4c:1f:f3:e7:6f:29:b3:7c:43: 3a:3d:a5:de -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWE1Ayk9gPw6lLsiy/aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY3ODZlNWItNGFmZi00OWY0LTgxZTEtMWRjYThhMWRm ZGMwMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NWJlOTM0YTQtNDBjZS00YjVmLTllOWYtMGQ0YzQ2ZGY2MTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypvTn5ksiPGm3fE65J5otsx/vxgz3GEkFwBd VfpttHo5PxEJOjvBgHJd6+JS6R4ZD/F4+E5RoayOlhp+UopobEeLfU2Kku4Rl2DS xkq0nZyr+TEnCGDFz2SWY3yoIjk+hbfoiw9SjgnvfTOKfmvGVNEz60/ADLrRFd9E 2MIdVa6I/brK+TCViknQarNHUz2WbyHFTVMdFHXCv4m2WH/eoLlwASeFo7kMRUS9 pvYXwqKFYG1KujuB/pGAYfAg4Wa0mxpLlpcpMoJ+5iThWySb33ExSLKW3yPtgMmf K90iqTirKTdjYAMRNzm6FCZQRqKSRYLr59gsK9g8CWs4/oLyEQIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFH7d25Oxns0ddE08zrlL0NdMiDZLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNjc4 NmU1Yi00YWZmLTQ5ZjQtODFlMS0xZGNhOGExZGZkYzAvZDNjZGQ4YjgtYTVlMi0z MzU1LTljNDktZTIzOWUyOGU0ZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTY3ODZlNWItNGFmZi00OWY0LTgx ZTEtMWRjYThhMWRmZGMwL2E2Nzg2ZTViLTRhZmYtNDlmNC04MWUxLTFkY2E4YTFk ZmRjMC5jcmwwHwYDVR0jBBgwFoAUszz6d8CmfQr2+RmOQYLuqTtr0q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNjc4NmU1Yi00YWZmLTQ5ZjQtODFlMS0xZGNh OGExZGZkYzAuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQFQP2AAwQE Yo9QAwQCovU4AwQCwL0kAwQCx7bcAwQC0EHoAwQE0HaAMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABpAFtkc qrte3EB46LJAWGCZddtXNOftgLDVBM2VHIiBeF738eXEdaDAb/tb0/rtIBfYghlB cpQFgw2errFBZhPRA2yfzmCaBX6z0bfMATWgDWk95wBHzdaqjCGbL7IKqQx3UGay M1BVGPXnpkP/yWL04IiytPeC7W3ALtI3aBOZJo+ONtBU2Lw7su0gz6Cx/0IgtN/6 zp2k8DhMKuaerkUFlOvVVesV7I/IpZxd7twcIoczxztrE285pzVkRRxhNZ+IPR0S 6ckC8EMTVHGeoyTy7c3v26anAliatn3t/89ebG7U08PRr7IFvC2vC0zKOItf90wf 8+dvKbN8Qzo9pd4= -----END CERTIFICATE-----Generated at Sat Mar 28 12:07:37 2026 by rpki-client