$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/661e319d-f202-3bc1-bec8-797d7d57a136.roa File: 661e319d-f202-3bc1-bec8-797d7d57a136.roa (raw, json) Hash identifier: gH501WMpC8ilX2TYezIjSD5/fvyOITHUVh7DRFGT870= Subject key identifier: 48:DC:F0:6D:16:DE:AA:F3:B6:FD:E7:94:63:67:06:E1:47:87:D7:2B Certificate issuer: /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Certificate serial: 010D0C9F4328584D492A60B2CA23EDE11B559C40 Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/661e319d-f202-3bc1-bec8-797d7d57a136.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 62707 IP address blocks: 173.243.224.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:60:b2:ca:23:ed:e1:1b:55:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=685b6426-7cd7-4dc9-934a-91a4119ac65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:34:81:62:fc:69:a4:50:fa:7b:a8:86:78:b8: 67:17:dc:d1:b9:63:69:d6:fa:8c:08:cc:93:33:06: 1b:cf:fe:af:a3:35:54:aa:11:94:77:f8:37:9f:a5: 4b:51:4e:13:73:94:32:fe:57:14:db:50:b2:59:2f: e2:ed:c3:e8:2d:a8:ea:8e:43:e1:8c:78:98:11:e2: 78:47:9b:35:1d:57:37:92:e7:78:b9:d4:fc:d1:b2: 5d:d7:30:00:88:b2:0c:92:ba:44:cb:ab:c3:21:75: 7e:57:40:39:5e:32:aa:21:d3:fd:f1:d6:f0:e3:46: 2d:87:14:cc:35:76:c3:49:51:60:8c:04:a8:16:a9: 6d:2b:7a:4d:a9:3c:97:c1:a3:20:f5:8a:03:9a:1e: 59:d7:67:69:83:3a:44:66:e6:c1:d5:4f:19:2a:a8: 9b:ce:80:07:f9:14:e7:28:ea:8b:cf:96:5c:ef:18: 94:ef:45:4a:53:83:3f:68:c7:f1:be:5f:fa:a4:83: 54:0e:27:7c:56:80:f6:17:9e:67:8c:b7:e5:79:15: 2a:3a:0a:93:88:bb:e3:f3:8d:82:83:d5:63:64:7f: f7:59:5b:2c:34:8c:8d:ed:a8:f0:ea:39:01:23:b4: ce:52:27:c4:04:33:73:66:dd:a0:cb:71:b4:cd:9a: ec:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DC:F0:6D:16:DE:AA:F3:B6:FD:E7:94:63:67:06:E1:47:87:D7:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/661e319d-f202-3bc1-bec8-797d7d57a136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl X509v3 Authority Key Identifier: keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer sbgp-ipAddrBlock: critical IPv4: 173.243.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ee:a4:76:6c:31:b2:71:15:8a:cd:da:ed:8e:97:cd:ab:b6: 76:4b:1f:09:53:d6:70:87:c8:1b:08:2a:a8:a2:fa:58:7c:0c: 4e:7e:e2:51:f0:ec:51:09:cf:84:03:09:e8:96:17:24:2d:c2: c8:4d:d2:55:2a:b1:97:40:85:8e:36:ec:bf:1f:66:78:a6:e7: 4f:4a:43:1a:33:99:31:fd:76:33:c6:60:38:70:da:74:d4:f6: 3e:cf:d7:4b:6f:ff:cf:cf:8c:99:6b:b6:3b:37:51:8a:f5:c4: 13:d1:74:d6:26:2f:63:c3:b2:a6:c6:52:52:da:e2:06:a7:d2: 16:e3:f6:ad:2a:ad:bd:a3:b4:2d:53:67:95:2d:1f:37:25:6b: 77:18:bf:3e:ab:c2:cd:17:09:fb:be:99:77:31:5a:52:ba:6b: 25:67:05:c9:cf:88:c7:66:8c:f4:f6:61:9a:52:9f:4a:36:6c: a4:46:ff:11:e2:8d:2c:6c:9f:50:19:39:d1:34:d4:b7:15:d3: 13:f7:73:b6:be:fc:c5:4d:56:bf:83:4c:56:62:b2:30:3d:0f: 8f:62:3f:6b:00:aa:07:1b:24:56:95:73:65:01:fb:f3:92:06: 72:4a:84:9a:d9:fe:cb:9c:13:41:52:9e:b8:52:d6:5e:59:73: 90:df:16:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKmCyyiPt4RtVnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWYzZWM5MzgtN2I0NS00YzQ3LTkxZDItOWY3ZDE4NDEx NTE5MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk Njg1YjY0MjYtN2NkNy00ZGM5LTkzNGEtOTFhNDExOWFjNjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjSBYvxppFD6e6iGeLhnF9zRuWNp1vqMCMyT MwYbz/6vozVUqhGUd/g3n6VLUU4Tc5Qy/lcU21CyWS/i7cPoLajqjkPhjHiYEeJ4 R5s1HVc3kud4udT80bJd1zAAiLIMkrpEy6vDIXV+V0A5XjKqIdP98dbw40YthxTM NXbDSVFgjASoFqltK3pNqTyXwaMg9YoDmh5Z12dpgzpEZubB1U8ZKqibzoAH+RTn KOqLz5Zc7xiU70VKU4M/aMfxvl/6pINUDid8VoD2F55njLfleRUqOgqTiLvj842C g9VjZH/3WVssNIyN7ajw6jkBI7TOUifEBDNzZt2gy3G0zZrstQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjc8G0W3qrztv3nlGNnBuFHh9crMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNl YzkzOC03YjQ1LTRjNDctOTFkMi05ZjdkMTg0MTE1MTkvNjYxZTMxOWQtZjIwMi0z YmMxLWJlYzgtNzk3ZDdkNTdhMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWYzZWM5MzgtN2I0NS00YzQ3LTkx ZDItOWY3ZDE4NDExNTE5L2VmM2VjOTM4LTdiNDUtNGM0Ny05MWQyLTlmN2QxODQx MTUxOS5jcmwwHwYDVR0jBBgwFoAUkanyxG7l5rwGtdG4Yq1QTfPopywwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNlYzkzOC03YjQ1LTRjNDctOTFkMi05Zjdk MTg0MTE1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrfPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnupHZsMbJxFYrN2u2Ol82rtnZLHwlT1nCHyBsIKqii+lh8DE5+4lHw 7FEJz4QDCeiWFyQtwshN0lUqsZdAhY427L8fZnim509KQxozmTH9djPGYDhw2nTU 9j7P10tv/8/PjJlrtjs3UYr1xBPRdNYmL2PDsqbGUlLa4gan0hbj9q0qrb2jtC1T Z5UtHzcla3cYvz6rws0XCfu+mXcxWlK6ayVnBcnPiMdmjPT2YZpSn0o2bKRG/xHi jSxsn1AZOdE01LcV0xP3c7a+/MVNVr+DTFZisjA9D49iP2sAqgcbJFaVc2UB+/OS BnJKhJrZ/sucE0FSnrhS1l5Zc5DfFtc= -----END CERTIFICATE-----Generated at Thu Mar 26 20:10:53 2026 by rpki-client