$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/0d21ef0d-eada-37df-ba95-470d970f6b7c.roa File: 0d21ef0d-eada-37df-ba95-470d970f6b7c.roa (raw, json) Hash identifier: hkVPsbsKfMQqU1WWLfj4IFgxK+C1GqQ1oPp+Nrk3bCc= Subject key identifier: EA:B9:27:8B:CF:91:FA:1B:7D:A7:70:F7:E0:DB:46:FC:71:81:F8:39 Certificate issuer: /CN=b3b07b0c-a30d-4cac-9123-4d459839ea53 Certificate serial: 010D0C9F4328584D3DFFB0A30A9730655040F080 Authority key identifier: 59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/0d21ef0d-eada-37df-ba95-470d970f6b7c.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 16509 IP address blocks: 165.1.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b0:a3:0a:97:30:65:50:40:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b07b0c-a30d-4cac-9123-4d459839ea53 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=e03e5fe0-a551-46cd-9660-d71722d2ef0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:af:d9:81:26:35:8e:82:d3:54:29:08:be:02: d5:e5:79:0c:e5:c0:89:ff:f6:5d:fc:68:8a:88:d7: 96:80:96:fa:0d:49:5c:68:99:18:f7:35:46:11:4c: 02:73:65:b9:91:17:8e:94:3e:cf:02:36:2b:ab:4e: 5e:79:74:ec:c3:64:54:89:da:91:fd:e6:da:8d:65: 55:7e:c4:86:3a:20:8c:34:d3:b9:f1:07:a2:70:87: b9:8c:5b:c4:19:c3:de:21:a4:8f:f2:4f:f0:09:5c: de:65:51:33:f7:45:4f:44:69:c5:d3:5a:5e:0b:39: ca:cd:39:37:bd:20:a5:d2:61:5e:67:02:22:1e:19: e6:69:4e:ca:82:e3:14:bd:9e:c8:f4:6a:7c:34:98: 2c:78:fe:9b:86:32:66:97:93:92:45:2e:a3:0c:6d: 1d:bd:bc:cc:79:64:c5:6a:3b:a0:eb:90:e6:bb:e7: b0:8a:d0:de:d7:4b:02:c1:d1:3f:0d:6c:75:81:89: bb:41:31:51:2c:ab:de:71:7f:1b:37:b1:93:56:92: 0a:4a:aa:3c:77:a9:3f:4b:c7:f9:1e:6d:23:fe:cb: 03:10:76:80:ee:a2:e1:af:be:e0:4c:d8:db:c1:0a: 4f:3a:25:28:03:53:8d:4d:2b:2a:50:6d:b0:96:4b: 9f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B9:27:8B:CF:91:FA:1B:7D:A7:70:F7:E0:DB:46:FC:71:81:F8:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/0d21ef0d-eada-37df-ba95-470d970f6b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl X509v3 Authority Key Identifier: keyid:59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer sbgp-ipAddrBlock: critical IPv4: 165.1.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:39:60:c6:3e:6a:64:a3:76:e9:de:97:6c:32:6e:d1:e9:c8: 48:04:cc:bb:c4:bd:31:f7:bc:2e:4f:a4:04:61:37:44:52:48: a0:cc:fa:0a:af:00:34:63:f1:31:31:bc:5f:8e:0a:3d:5d:18: ad:27:37:37:64:70:32:c6:a8:64:97:b2:6b:36:d4:32:40:43: 86:92:73:ea:d4:7b:8b:db:94:7e:4f:64:71:cd:d0:91:26:d2: e0:91:d0:5e:3e:17:45:28:cb:37:c7:b1:15:72:d0:a2:2b:96: 1b:ba:d8:c3:94:ff:f9:52:dd:a4:b1:55:b3:a0:08:c0:f1:ec: b3:58:03:2a:b1:bc:d1:ca:c1:63:7d:2c:33:55:72:ef:70:14: cc:8a:38:62:b3:4d:7c:33:65:e8:12:ee:e1:b3:f0:61:d7:43: 1a:d1:e8:62:55:52:17:35:ae:f7:a6:4f:e1:41:08:f0:22:b8: 46:32:00:19:fe:d5:6b:24:98:0a:ee:1b:0c:41:a6:6a:6f:60: 95:a8:cf:31:6a:c9:d3:f2:6e:cc:0d:73:62:4a:7b:ac:ef:e7: fe:27:bb:e7:4a:ff:82:5c:bd:bf:48:ce:33:6b:14:4b:20:b5: 7e:6f:da:70:94:c9:11:66:fb:53:9d:72:d9:c3:d6:d9:03:81: e2:76:86:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7CjCpcwZVBA8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjNiMDdiMGMtYTMwZC00Y2FjLTkxMjMtNGQ0NTk4Mzll YTUzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZTAzZTVmZTAtYTU1MS00NmNkLTk2NjAtZDcxNzIyZDJlZjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6/ZgSY1joLTVCkIvgLV5XkM5cCJ//Zd/GiK iNeWgJb6DUlcaJkY9zVGEUwCc2W5kReOlD7PAjYrq05eeXTsw2RUidqR/ebajWVV fsSGOiCMNNO58QeicIe5jFvEGcPeIaSP8k/wCVzeZVEz90VPRGnF01peCznKzTk3 vSCl0mFeZwIiHhnmaU7KguMUvZ7I9Gp8NJgseP6bhjJml5OSRS6jDG0dvbzMeWTF ajug65Dmu+ewitDe10sCwdE/DWx1gYm7QTFRLKvecX8bN7GTVpIKSqo8d6k/S8f5 Hm0j/ssDEHaA7qLhr77gTNjbwQpPOiUoA1ONTSsqUG2wlkufPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOq5J4vPkfobfadw9+DbRvxxgfg5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iM2Iw N2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1OTgzOWVhNTMvMGQyMWVmMGQtZWFkYS0z N2RmLWJhOTUtNDcwZDk3MGY2YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjNiMDdiMGMtYTMwZC00Y2FjLTkx MjMtNGQ0NTk4MzllYTUzL2IzYjA3YjBjLWEzMGQtNGNhYy05MTIzLTRkNDU5ODM5 ZWE1My5jcmwwHwYDVR0jBBgwFoAUWSTnNMDpGiu4drcJNh98f3c3It8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iM2IwN2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1 OTgzOWVhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpQEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAo5YMY+amSjdunel2wybtHpyEgEzLvEvTH3vC5PpARhN0RSSKDM+gqv ADRj8TExvF+OCj1dGK0nNzdkcDLGqGSXsms21DJAQ4aSc+rUe4vblH5PZHHN0JEm 0uCR0F4+F0UoyzfHsRVy0KIrlhu62MOU//lS3aSxVbOgCMDx7LNYAyqxvNHKwWN9 LDNVcu9wFMyKOGKzTXwzZegS7uGz8GHXQxrR6GJVUhc1rvemT+FBCPAiuEYyABn+ 1WskmAruGwxBpmpvYJWozzFqydPybswNc2JKe6zv5/4nu+dK/4Jcvb9IzjNrFEsg tX5v2nCUyRFm+1OdctnD1tkDgeJ2hqg= -----END CERTIFICATE-----Generated at Thu Mar 26 03:32:47 2026 by rpki-client