$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/548211a7-ec86-3843-8027-0b84f68da757.roa File: 548211a7-ec86-3843-8027-0b84f68da757.roa (raw, json) Hash identifier: q4bZmE/nip8BBL1VGQl6/XkHGL9kfetLXHZzGfwa2Iw= Subject key identifier: B6:19:DF:72:7D:FD:C1:B7:87:99:02:C9:50:1D:E8:54:C4:00:E0:93 Certificate issuer: /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Certificate serial: 010D0C9F4328584D44FA421AF85EC14900C31920 Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/548211a7-ec86-3843-8027-0b84f68da757.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 35847 IP address blocks: 170.203.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:42:1a:f8:5e:c1:49:00:c3:19:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=1511cbd3-4f86-4bbe-86a0-5103071b3d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a2:1f:72:db:db:13:d7:37:69:41:da:bc:b6: 11:f6:c4:ec:81:61:92:8f:43:78:6c:ce:11:09:66: 01:2a:9f:1d:bf:72:68:72:85:91:60:18:97:ad:d3: 23:f9:6a:62:98:43:d3:dc:da:12:d4:8e:c8:be:55: 46:a3:87:ec:4f:db:22:93:3c:46:81:28:a4:d0:b8: 14:a0:40:31:b0:f1:c1:1f:01:09:b8:15:e7:36:0b: d1:e6:a1:52:4e:7f:d0:10:6b:3b:07:33:ef:e1:e7: d2:f8:3f:1c:3a:21:c4:2b:e9:ed:c8:2f:25:d1:d3: 53:ca:ca:6c:39:56:f8:73:84:20:a4:c1:d6:fd:33: 84:d2:e5:64:7f:e2:49:e2:0c:bf:8e:ca:2c:f6:33: 2e:f2:46:9b:bb:a4:19:2e:90:df:07:40:01:08:b5: 1b:5f:aa:68:d8:db:ed:5a:14:2a:fe:36:16:fd:62: 99:16:f8:c0:63:fe:c6:c7:ca:d0:04:e0:02:a2:fa: 52:ef:0c:54:de:d6:4d:17:4a:7f:55:28:82:ab:2a: dd:da:54:de:ad:a8:7b:99:e1:d2:d9:f2:f2:82:19: a6:71:95:56:d0:87:db:c7:a3:4d:ed:17:10:bb:49: a4:0c:1e:fb:45:4a:af:3f:c0:6a:7b:d7:be:44:85: e6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:19:DF:72:7D:FD:C1:B7:87:99:02:C9:50:1D:E8:54:C4:00:E0:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/548211a7-ec86-3843-8027-0b84f68da757.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl X509v3 Authority Key Identifier: keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer sbgp-ipAddrBlock: critical IPv4: 170.203.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:ec:2f:3e:92:18:6f:e2:fb:20:73:00:23:da:5e:59:2c:61: 02:09:fe:63:cd:6a:8f:97:15:d9:cc:d3:58:ff:25:21:40:02: 48:ae:a3:54:85:17:ce:43:4f:1c:ec:75:74:c3:78:ba:e8:f5: e0:55:b5:89:5b:dd:05:1a:5e:a3:fb:e5:b7:6f:5b:2d:ca:92: 2f:44:a7:bb:ea:08:9e:5c:d4:73:7d:43:97:44:01:20:da:4f: d2:53:90:5e:83:ab:13:c2:32:26:2e:bf:62:7b:46:89:6b:d9: a9:a4:52:56:3d:fe:49:16:08:8b:5e:7e:a8:60:27:a2:2d:49: 29:61:68:2e:38:fd:50:40:da:d4:df:bb:d0:e9:4a:67:8e:e2: 64:6b:05:46:70:f8:fa:27:f6:48:a2:90:5d:5e:b7:23:6a:10: 6f:26:53:cb:aa:2e:8b:78:49:f6:8c:58:ac:8b:da:08:a5:74: 81:fa:a5:6c:c3:87:be:34:85:7d:c9:f8:6c:77:fb:4f:b2:9b: ea:e0:c6:78:f7:76:4b:f1:12:e3:06:bf:4d:65:ec:03:5c:ab: 9d:e1:ae:5a:10:49:5c:7f:58:0f:cf:57:a3:0f:91:57:d8:37: fc:ba:04:59:03:72:53:05:e5:09:eb:99:2f:62:f3:5e:78:b5: a3:1b:8e:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+kIa+F7BSQDDGSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U0YTQ2MDktNmMyZS00N2Q4LThjNjktMWQ4MGEyY2Yz ZjExMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MTUxMWNiZDMtNGY4Ni00YmJlLTg2YTAtNTEwMzA3MWIzZDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKIfctvbE9c3aUHavLYR9sTsgWGSj0N4bM4R CWYBKp8dv3JocoWRYBiXrdMj+WpimEPT3NoS1I7IvlVGo4fsT9sikzxGgSik0LgU oEAxsPHBHwEJuBXnNgvR5qFSTn/QEGs7BzPv4efS+D8cOiHEK+ntyC8l0dNTysps OVb4c4QgpMHW/TOE0uVkf+JJ4gy/jsos9jMu8kabu6QZLpDfB0ABCLUbX6po2Nvt WhQq/jYW/WKZFvjAY/7Gx8rQBOACovpS7wxU3tZNF0p/VSiCqyrd2lTerah7meHS 2fLyghmmcZVW0Ifbx6NN7RcQu0mkDB77RUqvP8Bqe9e+RIXm2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYZ33J9/cG3h5kCyVAd6FTEAOCTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTRh NDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgwYTJjZjNmMTEvNTQ4MjExYTctZWM4Ni0z ODQzLTgwMjctMGI4NGY2OGRhNzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2U0YTQ2MDktNmMyZS00N2Q4LThj NjktMWQ4MGEyY2YzZjExL2NlNGE0NjA5LTZjMmUtNDdkOC04YzY5LTFkODBhMmNm M2YxMS5jcmwwHwYDVR0jBBgwFoAUaO+Qh8HxiFXOXjq3/4RHO8hZ6c0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTRhNDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgw YTJjZjNmMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqstgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvsLz6SGG/i+yBzACPaXlksYQIJ/mPNao+XFdnM01j/JSFAAkiuo1SF F85DTxzsdXTDeLro9eBVtYlb3QUaXqP75bdvWy3Kki9Ep7vqCJ5c1HN9Q5dEASDa T9JTkF6DqxPCMiYuv2J7Rolr2amkUlY9/kkWCItefqhgJ6ItSSlhaC44/VBA2tTf u9DpSmeO4mRrBUZw+Pon9kiikF1etyNqEG8mU8uqLot4SfaMWKyL2gildIH6pWzD h740hX3J+Gx3+0+ym+rgxnj3dkvxEuMGv01l7ANcq53hrloQSVx/WA/PV6MPkVfY N/y6BFkDclMF5QnrmS9i8154taMbjmc= -----END CERTIFICATE-----Generated at Thu Mar 26 18:15:05 2026 by rpki-client