$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/922a7eaf-3ba3-3b30-befa-8bbedfef05e5.roa File: 922a7eaf-3ba3-3b30-befa-8bbedfef05e5.roa (raw, json) Hash identifier: N2WRbpO9fr3T/IMiWlLUfCRkRhbYvMYFJiuN5IEriwU= Subject key identifier: CB:AA:BD:BE:F5:CA:DE:63:B5:B1:0D:2B:76:65:2A:6A:79:A4:4C:66 Certificate issuer: /CN=2fd92816-1579-4d40-9111-f86331c3fd8f Certificate serial: 010D0C9F4328584D3DFFAACF22470CA70F91CC90 Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/922a7eaf-3ba3-3b30-befa-8bbedfef05e5.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 14977 IP address blocks: 137.89.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:aa:cf:22:47:0c:a7:0f:91:cc:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=3a09e2de-d61f-4362-b91a-92e4ddaafd3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:22:84:28:72:21:a7:fc:da:81:d8:f9:3e:0c: b0:87:74:2e:20:26:6d:55:1d:e9:ee:5b:2f:11:6e: e2:13:26:b6:61:0d:ca:02:58:8a:58:a4:9c:3a:0e: 15:34:bd:80:6d:d3:dd:2b:40:1c:15:eb:47:9e:55: 7f:b0:46:a9:81:90:73:97:62:a8:e4:a2:cc:b8:5d: 38:5d:67:8f:1c:04:bc:b3:c9:3d:17:a7:01:d3:34: 38:21:65:10:42:6d:85:cc:ae:dd:94:ca:f6:c5:7f: 21:a8:6f:40:94:4b:da:19:d1:6b:d5:b4:5b:fc:95: 33:ee:56:3f:84:1b:18:00:f7:a1:09:33:d7:24:c8: 1f:ba:8e:03:8b:ae:43:a2:bf:a4:69:b9:35:e8:f7: 39:0b:b5:97:e6:4a:e3:b5:45:35:ac:80:9c:c0:67: b0:56:bd:32:62:47:69:e2:97:1f:28:4c:17:0b:71: 18:cf:82:c2:34:3d:1e:8c:df:aa:f1:34:08:83:1c: dc:ea:31:17:d5:8d:ee:8f:e2:a4:1a:f0:44:ef:0a: 9f:5e:66:7e:f7:d4:51:46:78:c5:58:28:dd:fe:57: a7:8d:8a:df:2e:81:1b:67:d4:81:5b:c9:57:10:86: 3c:f0:be:28:01:fb:d1:22:f5:c2:07:80:19:f7:02: 38:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AA:BD:BE:F5:CA:DE:63:B5:B1:0D:2B:76:65:2A:6A:79:A4:4C:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/922a7eaf-3ba3-3b30-befa-8bbedfef05e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl X509v3 Authority Key Identifier: keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer sbgp-ipAddrBlock: critical IPv4: 137.89.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f8:3b:ff:5e:64:8b:39:eb:5f:0a:92:7e:80:b9:4d:c5:56: f3:29:24:89:87:75:72:a8:cd:5a:d9:eb:72:3c:fd:9b:fd:19: af:2e:44:d0:ef:18:83:b3:8c:08:63:4e:81:7e:50:71:0a:17: f5:34:98:2e:45:61:7b:a5:56:37:08:6e:99:59:50:ac:1c:1a: 4c:50:84:52:df:67:87:38:d4:af:5d:dc:35:ba:42:e8:21:a6: f1:91:4d:11:e2:71:24:68:b1:36:5d:16:be:d4:98:82:8b:ae: 11:96:14:06:0b:7a:11:8c:c6:f0:79:48:f4:9c:a7:b4:e4:b3: e5:f9:70:2f:2f:7d:2f:b4:89:4f:b5:9c:2c:47:86:9e:9c:60: 76:86:6e:13:f7:da:f2:5b:98:e2:07:74:83:cf:3c:ae:8f:53: 2e:61:ab:b8:4b:1a:ff:72:1a:ed:4a:65:7e:3f:b9:af:f3:a9: 12:a6:ea:19:a4:cb:f6:2e:8c:8a:b5:1b:34:5d:b0:47:d8:14: 66:0d:a9:83:dc:22:5f:13:dc:7c:a4:da:3d:41:75:6d:9f:2d: 6d:c5:11:52:cf:3d:78:ec:2d:b6:1b:ca:bd:75:ea:a2:d5:ea: 2d:1e:36:a7:78:57:74:07:b1:37:e7:81:29:c6:06:ff:4d:ab: 13:12:c2:a8 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE09/6rPIkcMpw+RzJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZkOTI4MTYtMTU3OS00ZDQwLTkxMTEtZjg2MzMxYzNm ZDhmMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk M2EwOWUyZGUtZDYxZi00MzYyLWI5MWEtOTJlNGRkYWFmZDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCKEKHIhp/zagdj5Pgywh3QuICZtVR3p7lsv EW7iEya2YQ3KAliKWKScOg4VNL2AbdPdK0AcFetHnlV/sEapgZBzl2Ko5KLMuF04 XWePHAS8s8k9F6cB0zQ4IWUQQm2FzK7dlMr2xX8hqG9AlEvaGdFr1bRb/JUz7lY/ hBsYAPehCTPXJMgfuo4Di65Dor+kabk16Pc5C7WX5krjtUU1rICcwGewVr0yYkdp 4pcfKEwXC3EYz4LCND0ejN+q8TQIgxzc6jEX1Y3uj+KkGvBE7wqfXmZ+99RRRnjF WCjd/lenjYrfLoEbZ9SBW8lXEIY88L4oAfvRIvXCB4AZ9wI4lQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMuqvb71yt5jtbENK3ZlKmp5pExmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5 MjgxNi0xNTc5LTRkNDAtOTExMS1mODYzMzFjM2ZkOGYvOTIyYTdlYWYtM2JhMy0z YjMwLWJlZmEtOGJiZWRmZWYwNWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmZkOTI4MTYtMTU3OS00ZDQwLTkx MTEtZjg2MzMxYzNmZDhmLzJmZDkyODE2LTE1NzktNGQ0MC05MTExLWY4NjMzMWMz ZmQ4Zi5jcmwwHwYDVR0jBBgwFoAUt6qI9fIKuBQY0nfTo1Gl7/5Il/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5MjgxNi0xNTc5LTRkNDAtOTExMS1mODYz MzFjM2ZkOGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiVkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAjPg7/15kiznrXwqSfoC5TcVW8ykkiYd1cqjNWtnrcjz9m/0Zry5E0O8Y g7OMCGNOgX5QcQoX9TSYLkVhe6VWNwhumVlQrBwaTFCEUt9nhzjUr13cNbpC6CGm 8ZFNEeJxJGixNl0WvtSYgouuEZYUBgt6EYzG8HlI9JyntOSz5flwLy99L7SJT7Wc LEeGnpxgdoZuE/fa8luY4gd0g888ro9TLmGruEsa/3Ia7Uplfj+5r/OpEqbqGaTL 9i6MirUbNF2wR9gUZg2pg9wiXxPcfKTaPUF1bZ8tbcURUs89eOwtthvKvXXqotXq LR42p3hXdAexN+eBKcYG/02rExLCqA== -----END CERTIFICATE-----Generated at Thu Mar 26 13:52:29 2026 by rpki-client