$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/7a500706-91a1-37b0-a16e-a02ac9aa38ac.roa File: 7a500706-91a1-37b0-a16e-a02ac9aa38ac.roa (raw, json) Hash identifier: kkywwYq5EQ5dvMRff/2gJCQiu21MezHlRiiK4xjGXrA= Subject key identifier: 38:8A:06:96:55:35:07:0F:2A:F1:2B:C9:0E:5E:26:6E:24:71:40:83 Certificate issuer: /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Certificate serial: 010D0C9F4328584D492A60CA9FC169688D8DAAF0 Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/7a500706-91a1-37b0-a16e-a02ac9aa38ac.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 139267 IP address blocks: 173.243.224.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:60:ca:9f:c1:69:68:8d:8d:aa:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=cb1f03a6-f846-451e-8102-c4820e98acba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cc:c4:78:ce:be:e8:ff:86:fc:c0:a7:83:3f: 9f:33:08:8d:29:79:47:61:71:59:f1:ec:ee:53:2b: eb:29:e4:51:42:fe:35:40:c5:df:60:2a:1b:48:16: a7:59:0a:15:b7:66:d0:87:0a:dc:01:28:87:0c:86: f7:95:22:03:73:ea:eb:a8:96:ca:9b:de:71:13:5e: 7b:fb:79:26:ef:0b:0f:d1:c7:84:11:51:68:19:fd: 6b:59:68:7d:42:15:aa:80:67:b1:6d:fc:5a:98:19: 89:fc:5c:5f:58:40:52:ef:a8:d8:4c:bb:46:ed:49: b0:70:a2:11:8d:84:60:19:8a:87:1c:03:49:57:46: ae:c6:e8:9c:cf:98:11:18:8e:7e:4e:8b:37:f5:33: 10:3c:32:4f:e1:fd:fb:df:a3:1d:78:0f:02:41:5d: 8f:20:86:c4:b0:1d:94:75:25:cd:22:3c:0d:32:65: c4:f2:17:a8:1f:5d:70:ad:9d:50:be:6a:8c:80:37: be:ad:96:56:d3:79:56:05:da:bd:37:1d:69:00:7c: 72:ab:af:1d:89:d7:fd:d8:12:0e:6e:16:f2:26:40: f8:7d:7f:e3:38:36:f3:b7:e5:98:5e:88:11:d9:26: c9:25:16:c8:1f:3e:af:e8:ff:49:af:99:f7:49:53: 5c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8A:06:96:55:35:07:0F:2A:F1:2B:C9:0E:5E:26:6E:24:71:40:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/7a500706-91a1-37b0-a16e-a02ac9aa38ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl X509v3 Authority Key Identifier: keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer sbgp-ipAddrBlock: critical IPv4: 173.243.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:bd:29:59:e2:ce:a1:a8:87:46:7b:39:05:bf:eb:d5:99:ee: 05:d3:54:ea:e1:35:a7:a5:ea:7f:61:b8:82:e4:bc:44:db:a6: 63:a8:14:ee:ab:a5:74:a6:d2:b4:45:4d:37:41:9c:12:ec:b9: c8:7b:99:4b:f2:96:ad:a3:34:61:93:d8:e1:b3:50:89:58:b4: 91:f4:11:44:f7:df:63:dc:3b:eb:d1:ab:5a:b0:fc:70:44:0b: dd:ca:d2:24:17:ae:ea:59:5e:0a:46:78:22:01:24:3f:15:73: 88:fe:17:17:77:48:ac:76:55:db:94:ee:dd:fd:b6:81:f0:23: 0d:c3:1a:c9:ca:55:da:dc:62:d3:22:33:d0:00:c3:b1:12:f6: c2:7b:4f:bf:b1:d8:0a:47:ba:a4:2a:b0:32:0c:07:9d:5f:45: d3:c3:9d:8f:6f:0d:7f:ae:0d:32:cc:13:be:36:b1:42:19:7b: 8a:66:60:cb:81:23:5d:b8:e2:85:cd:f0:4e:d3:f3:42:98:44: 21:be:85:39:34:c9:67:33:ed:cb:9f:e5:03:21:80:81:b1:dc: 18:05:76:e6:2c:bf:3b:b7:5e:d1:f6:b7:3e:18:4a:7a:03:2d: 23:1c:f1:8d:8f:a2:70:fb:cc:30:71:84:ed:b5:8a:ae:cb:cd: ce:2c:86:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKmDKn8FpaI2NqvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWYzZWM5MzgtN2I0NS00YzQ3LTkxZDItOWY3ZDE4NDEx NTE5MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk Y2IxZjAzYTYtZjg0Ni00NTFlLTgxMDItYzQ4MjBlOThhY2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiczEeM6+6P+G/MCngz+fMwiNKXlHYXFZ8ezu UyvrKeRRQv41QMXfYCobSBanWQoVt2bQhwrcASiHDIb3lSIDc+rrqJbKm95xE157 +3km7wsP0ceEEVFoGf1rWWh9QhWqgGexbfxamBmJ/FxfWEBS76jYTLtG7UmwcKIR jYRgGYqHHANJV0auxuicz5gRGI5+Tos39TMQPDJP4f3736MdeA8CQV2PIIbEsB2U dSXNIjwNMmXE8heoH11wrZ1QvmqMgDe+rZZW03lWBdq9Nx1pAHxyq68didf92BIO bhbyJkD4fX/jODbzt+WYXogR2SbJJRbIHz6v6P9Jr5n3SVNcIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiKBpZVNQcPKvEryQ5eJm4kcUCDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNl YzkzOC03YjQ1LTRjNDctOTFkMi05ZjdkMTg0MTE1MTkvN2E1MDA3MDYtOTFhMS0z N2IwLWExNmUtYTAyYWM5YWEzOGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWYzZWM5MzgtN2I0NS00YzQ3LTkx ZDItOWY3ZDE4NDExNTE5L2VmM2VjOTM4LTdiNDUtNGM0Ny05MWQyLTlmN2QxODQx MTUxOS5jcmwwHwYDVR0jBBgwFoAUkanyxG7l5rwGtdG4Yq1QTfPopywwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNlYzkzOC03YjQ1LTRjNDctOTFkMi05Zjdk MTg0MTE1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrfPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIy9KVnizqGoh0Z7OQW/69WZ7gXTVOrhNael6n9huILkvETbpmOoFO6r pXSm0rRFTTdBnBLsuch7mUvylq2jNGGT2OGzUIlYtJH0EUT332PcO+vRq1qw/HBE C93K0iQXrupZXgpGeCIBJD8Vc4j+Fxd3SKx2VduU7t39toHwIw3DGsnKVdrcYtMi M9AAw7ES9sJ7T7+x2ApHuqQqsDIMB51fRdPDnY9vDX+uDTLME742sUIZe4pmYMuB I1244oXN8E7T80KYRCG+hTk0yWcz7cuf5QMhgIGx3BgFduYsvzu3XtH2tz4YSnoD LSMc8Y2PonD7zDBxhO21iq7Lzc4shhA= -----END CERTIFICATE-----Generated at Thu Mar 26 16:44:05 2026 by rpki-client