$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dcccaaf2-6f73-4480-9c37-cb464a4369b1/9d11d288-98e6-3e33-982f-0fbedd1e45d6.roa File: 9d11d288-98e6-3e33-982f-0fbedd1e45d6.roa (raw, json) Hash identifier: QuLGhyo/vAsSz0y/Vff/dQH+e8uwjUFEDAbc/j5x9ig= Subject key identifier: C2:12:3F:0D:93:66:97:52:12:D1:F1:11:C3:C3:53:09:BD:E2:3A:A7 Certificate issuer: /CN=dcccaaf2-6f73-4480-9c37-cb464a4369b1 Certificate serial: 010D0C9F4328584D0CC1E44EEDC922FF0C7A6000 Authority key identifier: 0A:6D:BB:48:A3:ED:05:1B:2A:6D:55:CB:76:10:0D:57:50:CF:75:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dcccaaf2-6f73-4480-9c37-cb464a4369b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dcccaaf2-6f73-4480-9c37-cb464a4369b1/9d11d288-98e6-3e33-982f-0fbedd1e45d6.roa Signing time: Tue 03 Mar 2026 21:41:57 +0000 ROA not before: Tue 03 Mar 2026 21:41:57 +0000 ROA not after: Mon 01 Jun 2026 20:41:57 +0000 asID: 396984 IP address blocks: 216.120.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dcccaaf2-6f73-4480-9c37-cb464a4369b1/dcccaaf2-6f73-4480-9c37-cb464a4369b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dcccaaf2-6f73-4480-9c37-cb464a4369b1/dcccaaf2-6f73-4480-9c37-cb464a4369b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dcccaaf2-6f73-4480-9c37-cb464a4369b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:c1:e4:4e:ed:c9:22:ff:0c:7a:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcccaaf2-6f73-4480-9c37-cb464a4369b1 Validity Not Before: Mar 3 21:41:57 2026 GMT Not After : Jun 1 20:41:57 2026 GMT Subject: CN=30ae3147-eae4-44dd-ac4f-3c46e7398e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:73:80:d9:09:9a:7c:bc:72:8e:7d:5e:92:cb: 4f:15:76:e8:14:b6:d8:b4:6f:9a:ab:1d:e8:51:1d: ba:33:76:0b:26:6e:53:e3:31:32:55:bc:f6:6a:d4: d9:70:9d:c7:78:4a:eb:a7:8b:cb:23:6b:9a:e5:42: 2d:e6:6e:2f:cd:ac:2a:ac:38:25:63:b5:46:aa:eb: c4:91:2e:74:53:ea:53:0d:56:75:d8:63:51:34:07: 62:87:bb:48:b3:46:9e:bc:e4:fa:8f:68:5a:58:5e: 88:1f:7a:4a:c8:02:b9:98:c5:bd:a6:21:6b:d8:ec: a5:d2:75:50:b2:0f:08:61:2c:1f:0e:30:55:5a:32: 0e:64:0f:14:27:f3:0b:14:58:e6:c1:90:0e:62:76: bb:42:04:55:1d:e1:49:5b:54:fe:f2:1a:a1:a7:36: 44:7b:89:ce:e5:d0:93:9e:92:bb:ac:ab:e2:c0:1c: 9f:9a:bf:7e:8c:1a:37:6a:68:a0:69:7e:23:f7:79: 50:1c:d2:c2:70:0e:82:5c:2c:21:80:b4:1a:f0:84: 81:f5:ef:a7:58:1d:92:f7:96:77:a0:d4:12:30:70: 81:93:93:d0:a8:82:86:31:96:50:1d:df:17:fe:56: f0:3c:99:06:f4:99:db:fe:7a:36:20:06:16:fc:bb: 68:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:12:3F:0D:93:66:97:52:12:D1:F1:11:C3:C3:53:09:BD:E2:3A:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dcccaaf2-6f73-4480-9c37-cb464a4369b1/9d11d288-98e6-3e33-982f-0fbedd1e45d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dcccaaf2-6f73-4480-9c37-cb464a4369b1/dcccaaf2-6f73-4480-9c37-cb464a4369b1.crl X509v3 Authority Key Identifier: keyid:0A:6D:BB:48:A3:ED:05:1B:2A:6D:55:CB:76:10:0D:57:50:CF:75:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dcccaaf2-6f73-4480-9c37-cb464a4369b1.cer sbgp-ipAddrBlock: critical IPv4: 216.120.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:ca:34:fd:f9:f4:8a:7f:03:bf:34:53:33:93:1d:e7:dd:6c: d9:f1:b2:36:cd:65:60:30:89:8a:a7:79:f4:bf:a5:f6:3b:2d: 18:27:61:70:a5:77:0e:0f:72:41:d0:55:00:d0:07:af:d6:d6: 12:d5:9a:2d:17:d4:a8:dc:58:b3:0c:fc:9e:7a:aa:7c:bd:49: 8e:e7:c4:2a:8f:87:60:ce:83:69:73:fb:a4:10:71:25:63:7d: 68:0b:ee:3a:3e:af:79:f4:83:ec:81:e8:85:57:4b:4e:7d:d8: 81:aa:e7:05:ac:e5:6e:f3:b2:02:cc:2d:0b:79:12:f8:42:3e: 2f:b8:89:7e:05:77:cb:e7:a9:e1:dd:d3:ab:9a:c6:f6:8a:8e: 85:3c:63:51:a0:b2:19:cd:eb:39:32:d3:01:e5:a0:b1:5a:80: 17:19:5b:69:e0:c5:08:f3:b3:06:c0:0d:04:a3:e9:a8:50:14: 21:da:e3:73:34:76:4a:1d:e0:88:05:57:9b:0e:fb:5d:33:88: 00:8a:33:dd:1f:02:a9:38:dc:41:46:7b:0e:ee:93:80:b3:ae: 0a:1d:b9:3a:31:ae:d3:a3:6d:b3:79:b2:85:93:ce:aa:9d:11: 39:fa:46:8e:e8:c7:83:9c:d5:b3:44:08:ff:87:7a:a7:eb:2b: 1a:d3:cf:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0MweRO7cki/wx6YAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNjY2FhZjItNmY3My00NDgwLTljMzctY2I0NjRhNDM2 OWIxMB4XDTI2MDMwMzIxNDE1N1oXDTI2MDYwMTIwNDE1N1owLzEtMCsGA1UEAxMk MzBhZTMxNDctZWFlNC00NGRkLWFjNGYtM2M0NmU3Mzk4ZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3OA2QmafLxyjn1ekstPFXboFLbYtG+aqx3o UR26M3YLJm5T4zEyVbz2atTZcJ3HeErrp4vLI2ua5UIt5m4vzawqrDglY7VGquvE kS50U+pTDVZ12GNRNAdih7tIs0aevOT6j2haWF6IH3pKyAK5mMW9piFr2Oyl0nVQ sg8IYSwfDjBVWjIOZA8UJ/MLFFjmwZAOYna7QgRVHeFJW1T+8hqhpzZEe4nO5dCT npK7rKviwByfmr9+jBo3amigaX4j93lQHNLCcA6CXCwhgLQa8ISB9e+nWB2S95Z3 oNQSMHCBk5PQqIKGMZZQHd8X/lbwPJkG9Jnb/no2IAYW/LtoqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMISPw2TZpdSEtHxEcPDUwm94jqnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kY2Nj YWFmMi02ZjczLTQ0ODAtOWMzNy1jYjQ2NGE0MzY5YjEvOWQxMWQyODgtOThlNi0z ZTMzLTk4MmYtMGZiZWRkMWU0NWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZGNjY2FhZjItNmY3My00NDgwLTlj MzctY2I0NjRhNDM2OWIxL2RjY2NhYWYyLTZmNzMtNDQ4MC05YzM3LWNiNDY0YTQz NjliMS5jcmwwHwYDVR0jBBgwFoAUCm27SKPtBRsqbVXLdhANV1DPdYMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kY2NjYWFmMi02ZjczLTQ0ODAtOWMzNy1jYjQ2 NGE0MzY5YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HiJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXKNP359Ip/A780UzOTHefdbNnxsjbNZWAwiYqnefS/pfY7LRgnYXCl dw4PckHQVQDQB6/W1hLVmi0X1KjcWLMM/J56qny9SY7nxCqPh2DOg2lz+6QQcSVj fWgL7jo+r3n0g+yB6IVXS0592IGq5wWs5W7zsgLMLQt5EvhCPi+4iX4Fd8vnqeHd 06uaxvaKjoU8Y1GgshnN6zky0wHloLFagBcZW2ngxQjzswbADQSj6ahQFCHa43M0 dkod4IgFV5sO+10ziACKM90fAqk43EFGew7uk4CzrgoduToxrtOjbbN5soWTzqqd ETn6Ro7ox4Oc1bNECP+HeqfrKxrTz60= -----END CERTIFICATE-----Generated at Thu Mar 26 01:47:28 2026 by rpki-client