$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/fdaf960b-7588-3d3e-a098-f4a2091ad060.roa File: fdaf960b-7588-3d3e-a098-f4a2091ad060.roa (raw, json) Hash identifier: JwcEA1gxzHA7G6D2ztZxqIKmaF4n66xrNk5ZgO5Vztw= Subject key identifier: 94:89:F5:42:41:3D:DC:90:CB:60:8A:79:71:BC:B8:A8:7C:07:4B:A1 Certificate issuer: /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105 Certificate serial: 010D0C9F4328584D0BDD02A30C998F9E2F54C800 Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/fdaf960b-7588-3d3e-a098-f4a2091ad060.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 14618 IP address blocks: 150.9.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:02:a3:0c:99:8f:9e:2f:54:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105 Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=34afae6e-e32f-4b0d-997a-6cccbea43e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ce:20:84:c1:29:6a:e2:f7:6f:d8:f0:5f:63: 95:71:0a:a1:85:bd:49:a5:28:26:b5:5a:0a:e6:c3: eb:a2:60:b7:47:70:c1:57:08:49:9a:8d:9c:28:ac: b2:12:06:d2:0f:b3:02:16:14:c3:81:80:61:33:bd: eb:61:38:19:f0:7b:93:8d:50:8d:24:95:d3:4e:0f: d9:3e:32:14:2c:27:c1:fa:e5:ac:25:9f:6a:fa:0a: db:f8:34:5c:78:c8:be:68:19:42:cf:35:a5:af:5a: de:51:69:ab:0c:c9:c0:38:40:a3:34:53:4e:c4:eb: f2:41:96:d9:48:67:92:c8:26:08:e6:dd:e2:34:b8: 2e:c5:d4:e0:fe:42:6f:81:f9:63:44:9a:aa:63:df: b7:7b:fd:fe:3c:aa:70:74:66:66:76:44:c3:0b:00: 97:39:db:e8:1b:3a:3b:5a:d1:50:86:86:27:a9:98: 5e:41:c6:2a:92:82:a2:b4:97:00:a9:4c:d4:36:3a: 35:dd:7d:5c:b9:c4:5a:59:15:62:f9:32:75:4c:8c: 42:de:ed:e4:74:5e:e0:ff:6d:7a:7a:1f:05:bd:7e: 3c:07:44:21:a3:da:88:74:b8:31:76:61:2d:90:57: f3:ef:e9:ef:1d:17:ec:7d:c6:10:55:d8:15:b5:29: 13:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:89:F5:42:41:3D:DC:90:CB:60:8A:79:71:BC:B8:A8:7C:07:4B:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/fdaf960b-7588-3d3e-a098-f4a2091ad060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl X509v3 Authority Key Identifier: keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer sbgp-ipAddrBlock: critical IPv4: 150.9.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:fa:bb:3d:9f:73:e5:6a:47:21:6a:a4:06:ea:3d:82:c9:48: 44:6f:2c:e0:d3:c0:d4:d5:a5:c8:51:d2:74:aa:e1:82:12:06: 51:cd:d1:4d:f6:8f:4e:83:a4:9d:f7:f2:09:b7:20:ce:68:47: b3:ab:84:a1:f0:2b:5c:06:10:13:9b:4e:ec:0f:37:46:51:29: e5:a8:38:76:0d:e5:bf:63:a6:62:a1:2e:f7:4c:5f:f6:a8:03: eb:06:b7:5a:15:20:e1:f7:d3:94:57:4d:c2:c8:17:f8:55:dc: bc:aa:a9:57:7a:36:58:c8:02:85:0b:64:c8:02:36:ef:77:47: 4f:d9:f4:ea:5b:f4:ea:28:c3:ef:36:e9:d6:16:e0:8a:54:3d: a5:7a:23:d1:60:19:7a:e9:f7:0f:83:ba:c7:3c:60:b8:0d:d7: 17:f0:4a:ac:33:87:05:84:58:9b:66:19:73:28:40:db:9d:25: 5d:1f:0a:7a:c3:06:2d:68:66:1a:2b:1d:35:e0:7e:d0:27:40: e1:85:85:4b:82:5c:28:70:32:73:af:36:4a:8c:e6:ac:28:28: 4f:c6:b8:77:ce:5d:dd:e8:ed:7d:ed:f4:e2:0c:e2:6a:e7:a0: 2c:dd:88:1e:d1:5c:96:5c:29:45:0a:78:0b:0b:9b:d0:00:53: c3:41:35:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L3QKjDJmPni9UyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRiYmYzZmQtY2Y2ZS00ZGU3LTgxMjYtZDZlNDE4MjRk MTA1MB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk MzRhZmFlNmUtZTMyZi00YjBkLTk5N2EtNmNjY2JlYTQzZTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi84ghMEpauL3b9jwX2OVcQqhhb1JpSgmtVoK 5sPromC3R3DBVwhJmo2cKKyyEgbSD7MCFhTDgYBhM73rYTgZ8HuTjVCNJJXTTg/Z PjIULCfB+uWsJZ9q+grb+DRceMi+aBlCzzWlr1reUWmrDMnAOECjNFNOxOvyQZbZ SGeSyCYI5t3iNLguxdTg/kJvgfljRJqqY9+3e/3+PKpwdGZmdkTDCwCXOdvoGzo7 WtFQhoYnqZheQcYqkoKitJcAqUzUNjo13X1cucRaWRVi+TJ1TIxC3u3kdF7g/216 eh8FvX48B0Qho9qIdLgxdmEtkFfz7+nvHRfsfcYQVdgVtSkTWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSJ9UJBPdyQy2CKeXG8uKh8B0uhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wZGJi ZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0MTgyNGQxMDUvZmRhZjk2MGItNzU4OC0z ZDNlLWEwOTgtZjRhMjA5MWFkMDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGRiYmYzZmQtY2Y2ZS00ZGU3LTgx MjYtZDZlNDE4MjRkMTA1LzBkYmJmM2ZkLWNmNmUtNGRlNy04MTI2LWQ2ZTQxODI0 ZDEwNS5jcmwwHwYDVR0jBBgwFoAU6KeEIaxny2FbEjdjVeQkOnpskgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wZGJiZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0 MTgyNGQxMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlgnZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABn6uz2fc+VqRyFqpAbqPYLJSERvLODTwNTVpchR0nSq4YISBlHN0U32 j06DpJ338gm3IM5oR7OrhKHwK1wGEBObTuwPN0ZRKeWoOHYN5b9jpmKhLvdMX/ao A+sGt1oVIOH305RXTcLIF/hV3LyqqVd6NljIAoULZMgCNu93R0/Z9Opb9Ooow+82 6dYW4IpUPaV6I9FgGXrp9w+Dusc8YLgN1xfwSqwzhwWEWJtmGXMoQNudJV0fCnrD Bi1oZhorHTXgftAnQOGFhUuCXChwMnOvNkqM5qwoKE/GuHfOXd3o7X3t9OIM4mrn oCzdiB7RXJZcKUUKeAsLm9AAU8NBNcQ= -----END CERTIFICATE-----Generated at Thu Mar 26 02:05:00 2026 by rpki-client