$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa File: ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa (raw, json) Hash identifier: 2KhGHQMqQ8IDwZRbhVFQgxSI0aitWJLuFGGXsRTeBMo= Subject key identifier: 1B:16:4C:75:E6:68:E5:D2:5C:33:CD:31:F5:D8:20:C6:B6:B3:D5:56 Certificate issuer: /CN=2fd92816-1579-4d40-9111-f86331c3fd8f Certificate serial: 010D0C9F4328584D3DFFAAC19C132595A87A8200 Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 14977 IP address blocks: 137.88.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:aa:c1:9c:13:25:95:a8:7a:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=a5e0bbdd-0d84-4c18-9ece-3368acc7dcab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d4:d7:eb:c6:a8:08:f6:18:77:7e:19:c3:9e: 5c:07:87:b8:43:63:06:fc:65:a5:3b:d0:61:50:a1: a6:f3:6b:70:91:37:91:20:57:fe:73:0e:3e:35:a1: 7b:9c:5b:f2:78:40:72:5b:b8:5c:e6:27:be:e4:22: 03:11:71:6a:a4:c8:d8:25:5d:af:a5:e3:c9:9f:e7: 99:02:56:5d:56:b8:ab:d2:d8:d9:2c:b3:4e:0a:ed: e3:f9:fd:15:35:5f:3f:88:d3:c1:a5:4a:7b:23:37: 12:95:0c:0b:43:aa:c7:ea:2e:96:94:4b:59:d9:9a: dc:c3:7a:1d:69:00:4f:63:05:08:0a:80:37:52:7b: 8b:0c:df:ac:25:54:f8:21:6e:b3:fc:49:8d:fd:8b: b2:01:57:4c:1f:b0:62:e3:8a:4d:75:14:4f:b3:ba: c6:95:64:92:50:e7:8a:2f:9c:0d:f8:e4:d9:8c:e7: 5c:09:ea:c7:70:49:0a:24:b5:56:d6:a2:db:88:67: ed:6e:39:63:0e:c4:16:52:81:e5:d8:d4:00:8f:b2: 85:53:d4:9e:9e:bb:b4:1c:00:3f:1d:bc:81:c1:d9: f4:03:3a:c8:5f:3f:ab:10:df:02:77:10:68:55:b9: 63:0d:c2:f8:84:42:70:3d:a8:f6:6d:e4:e4:d6:46: 7a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:16:4C:75:E6:68:E5:D2:5C:33:CD:31:F5:D8:20:C6:B6:B3:D5:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl X509v3 Authority Key Identifier: keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer sbgp-ipAddrBlock: critical IPv4: 137.88.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:41:2d:69:f4:f3:fb:b8:27:bc:33:7e:57:26:ac:69:6d:3c: d1:19:58:f1:f0:cc:07:44:53:b3:2b:0b:17:1d:95:1c:9c:2f: a6:54:ad:4e:aa:d5:71:b7:37:62:a4:32:93:a1:b2:af:4a:e8: 3b:13:d3:c7:e5:73:c8:e5:6d:8c:8f:c9:5f:01:cb:ba:72:4c: ea:ad:d9:2d:14:56:38:2b:22:15:a9:7e:9b:29:9f:66:48:02: 91:77:9a:ea:e1:8d:b1:c4:4a:91:4f:32:ee:c3:c8:e3:1b:67: fc:0b:90:75:c9:6f:2a:20:26:3c:26:b9:b0:cc:bc:38:2e:85: e0:e5:26:aa:ee:ea:dc:aa:9d:8a:ad:c8:36:71:32:34:4b:95: 48:f4:01:0f:9c:3f:7d:7f:66:f8:27:87:9c:f1:65:c6:de:29: 28:b1:e8:54:ac:9f:1c:97:6d:13:e4:3b:0c:08:c4:b5:8f:e8: 62:d4:85:3b:79:31:81:95:ca:8c:e5:13:e4:35:56:a0:1c:bf: 90:6e:9e:1a:55:d7:f1:2a:da:58:74:89:41:26:1b:b2:06:f8: d5:21:c5:ed:f2:e1:d2:37:fe:8c:50:45:0e:c7:5c:41:d6:69: 60:df:07:dc:f1:67:0c:3e:e8:fd:4c:e6:ee:c1:02:6a:9f:8e: 0d:92:b3:fa -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE09/6rBnBMllah6ggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZkOTI4MTYtMTU3OS00ZDQwLTkxMTEtZjg2MzMxYzNm ZDhmMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YTVlMGJiZGQtMGQ4NC00YzE4LTllY2UtMzM2OGFjYzdkY2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntTX68aoCPYYd34Zw55cB4e4Q2MG/GWlO9Bh UKGm82twkTeRIFf+cw4+NaF7nFvyeEByW7hc5ie+5CIDEXFqpMjYJV2vpePJn+eZ AlZdVrir0tjZLLNOCu3j+f0VNV8/iNPBpUp7IzcSlQwLQ6rH6i6WlEtZ2Zrcw3od aQBPYwUICoA3UnuLDN+sJVT4IW6z/EmN/YuyAVdMH7Bi44pNdRRPs7rGlWSSUOeK L5wN+OTZjOdcCerHcEkKJLVW1qLbiGftbjljDsQWUoHl2NQAj7KFU9Senru0HAA/ HbyBwdn0AzrIXz+rEN8CdxBoVbljDcL4hEJwPaj2beTk1kZ68wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBsWTHXmaOXSXDPNMfXYIMa2s9VWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5 MjgxNi0xNTc5LTRkNDAtOTExMS1mODYzMzFjM2ZkOGYvY2U2OGE4OWItYTU0YS0z NDZmLWE5YTItZDhkNmIyYzc5OTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmZkOTI4MTYtMTU3OS00ZDQwLTkx MTEtZjg2MzMxYzNmZDhmLzJmZDkyODE2LTE1NzktNGQ0MC05MTExLWY4NjMzMWMz ZmQ4Zi5jcmwwHwYDVR0jBBgwFoAUt6qI9fIKuBQY0nfTo1Gl7/5Il/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5MjgxNi0xNTc5LTRkNDAtOTExMS1mODYz MzFjM2ZkOGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiVgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAfUEtafTz+7gnvDN+VyasaW080RlY8fDMB0RTsysLFx2VHJwvplStTqrV cbc3YqQyk6Gyr0roOxPTx+VzyOVtjI/JXwHLunJM6q3ZLRRWOCsiFal+mymfZkgC kXea6uGNscRKkU8y7sPI4xtn/AuQdclvKiAmPCa5sMy8OC6F4OUmqu7q3Kqdiq3I NnEyNEuVSPQBD5w/fX9m+CeHnPFlxt4pKLHoVKyfHJdtE+Q7DAjEtY/oYtSFO3kx gZXKjOUT5DVWoBy/kG6eGlXX8SraWHSJQSYbsgb41SHF7fLh0jf+jFBFDsdcQdZp YN8H3PFnDD7o/Uzm7sECap+ODZKz+g== -----END CERTIFICATE-----Generated at Thu Mar 26 13:56:59 2026 by rpki-client