$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/c3549815-27d5-353e-87f6-2ad7769f7dea.roa File: c3549815-27d5-353e-87f6-2ad7769f7dea.roa (raw, json) Hash identifier: ZB+GhHUoBU1JcahwCZ0lmCa3D/mPmS8vzgUOaw7nCsI= Subject key identifier: 88:48:F2:0E:D7:A1:F4:23:AA:B5:CA:64:E1:7F:16:00:98:40:2F:24 Certificate issuer: /CN=b3b07b0c-a30d-4cac-9123-4d459839ea53 Certificate serial: 010D0C9F4328584D3DFFB0816D08083DCE5D5F80 Authority key identifier: 59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/c3549815-27d5-353e-87f6-2ad7769f7dea.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 16509 IP address blocks: 165.1.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b0:81:6d:08:08:3d:ce:5d:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b07b0c-a30d-4cac-9123-4d459839ea53 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=64f50d13-a817-49f6-8456-3221eb2ebe5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:05:e4:2b:07:28:50:ed:1f:75:39:24:7c:ac: 87:2a:ca:f1:d6:9b:68:a0:95:02:b1:4a:1c:9d:42: 9c:90:7c:11:43:1e:6d:b9:bf:2b:b1:08:59:d9:03: 3d:20:9a:df:f4:dc:76:cf:9e:5b:94:43:70:8b:3d: bc:5d:fa:e7:a9:b0:05:b7:34:b8:64:ef:81:63:bb: 42:5d:77:ea:42:45:06:03:0b:d3:5c:6b:8e:54:51: 17:d2:d3:4c:66:04:54:87:b4:7b:a7:5e:cd:4c:b1: dc:6c:ab:01:0c:a1:d0:79:92:06:c6:d2:97:53:d4: 92:59:72:f7:45:0b:47:05:f8:64:8e:91:21:21:e4: 90:3c:a6:34:75:d4:ac:f8:4b:6f:33:03:aa:28:b4: de:fa:e8:cb:48:d2:4e:b1:7b:a5:86:b0:b4:72:0d: ef:ae:75:cf:e5:16:88:d9:90:d0:b2:1e:32:b7:f6: 67:16:1d:68:aa:11:2c:8a:c0:41:df:58:9f:80:90: 5e:4a:de:c3:f9:57:66:1b:0d:e4:cc:3b:68:13:f9: ee:40:2c:75:d8:8d:a2:d4:65:69:b9:09:97:80:33: e5:84:37:fa:9d:77:e9:de:50:ab:c6:95:1f:6e:c8: 2c:eb:da:fa:75:a7:11:a8:ee:09:79:0f:73:0d:b8: 14:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:48:F2:0E:D7:A1:F4:23:AA:B5:CA:64:E1:7F:16:00:98:40:2F:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/c3549815-27d5-353e-87f6-2ad7769f7dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl X509v3 Authority Key Identifier: keyid:59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer sbgp-ipAddrBlock: critical IPv4: 165.1.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:71:b3:54:ec:aa:32:0b:c5:e5:1e:fd:8a:81:de:43:76:2f: 2c:6a:2d:eb:18:87:fd:0b:e8:26:16:ee:78:26:20:88:45:57: 07:39:29:1a:64:c0:d2:c0:32:4c:44:cc:04:ec:21:cc:0b:a8: 3e:61:68:44:c1:2a:37:62:e5:a3:95:ba:e6:d6:8c:d9:bd:d0: a1:b7:ef:1c:a3:34:97:1b:d4:44:98:24:3b:5a:72:21:39:43: 42:14:f8:86:ea:ab:2d:0a:7a:dc:48:dc:76:8e:7a:dc:5e:e2: 07:e0:35:6e:5f:31:92:8f:ef:c9:31:5b:4e:28:e8:7a:3e:72: dd:a3:60:bd:e1:f3:d5:78:4f:18:40:37:1a:ff:c0:56:d4:3e: 6e:da:5d:33:b5:51:22:92:81:b2:fc:5e:d6:79:26:e8:b8:d9: 16:93:c4:3c:af:39:3f:90:1c:eb:d9:81:ac:c5:d5:3e:a2:fe: 98:ac:a1:6e:d6:73:af:2f:f2:51:85:5d:ee:05:cc:a6:a3:34: 32:b7:ee:fa:e5:9f:40:4d:b7:4c:11:58:1c:73:64:bc:4f:55: c8:d3:36:04:b0:15:20:76:b9:c8:23:e7:fa:e9:d6:86:3d:9d: 9f:93:98:a6:ba:dd:00:aa:73:c6:09:0b:2d:a4:20:e3:5f:59: 44:48:ef:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7CBbQgIPc5dX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjNiMDdiMGMtYTMwZC00Y2FjLTkxMjMtNGQ0NTk4Mzll YTUzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NjRmNTBkMTMtYTgxNy00OWY2LTg0NTYtMzIyMWViMmViZTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggXkKwcoUO0fdTkkfKyHKsrx1ptooJUCsUoc nUKckHwRQx5tub8rsQhZ2QM9IJrf9Nx2z55blENwiz28XfrnqbAFtzS4ZO+BY7tC XXfqQkUGAwvTXGuOVFEX0tNMZgRUh7R7p17NTLHcbKsBDKHQeZIGxtKXU9SSWXL3 RQtHBfhkjpEhIeSQPKY0ddSs+EtvMwOqKLTe+ujLSNJOsXulhrC0cg3vrnXP5RaI 2ZDQsh4yt/ZnFh1oqhEsisBB31ifgJBeSt7D+VdmGw3kzDtoE/nuQCx12I2i1GVp uQmXgDPlhDf6nXfp3lCrxpUfbsgs69r6dacRqO4JeQ9zDbgUAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhI8g7XofQjqrXKZOF/FgCYQC8kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iM2Iw N2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1OTgzOWVhNTMvYzM1NDk4MTUtMjdkNS0z NTNlLTg3ZjYtMmFkNzc2OWY3ZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjNiMDdiMGMtYTMwZC00Y2FjLTkx MjMtNGQ0NTk4MzllYTUzL2IzYjA3YjBjLWEzMGQtNGNhYy05MTIzLTRkNDU5ODM5 ZWE1My5jcmwwHwYDVR0jBBgwFoAUWSTnNMDpGiu4drcJNh98f3c3It8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iM2IwN2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1 OTgzOWVhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpQEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRxs1TsqjILxeUe/YqB3kN2LyxqLesYh/0L6CYW7ngmIIhFVwc5KRpk wNLAMkxEzATsIcwLqD5haETBKjdi5aOVuubWjNm90KG37xyjNJcb1ESYJDtaciE5 Q0IU+Ibqqy0KetxI3HaOetxe4gfgNW5fMZKP78kxW04o6Ho+ct2jYL3h89V4TxhA Nxr/wFbUPm7aXTO1USKSgbL8XtZ5Jui42RaTxDyvOT+QHOvZgazF1T6i/pisoW7W c68v8lGFXe4FzKajNDK37vrln0BNt0wRWBxzZLxPVcjTNgSwFSB2ucgj5/rp1oY9 nZ+TmKa63QCqc8YJCy2kIONfWURI7/o= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:07 2026 by rpki-client