$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/550a151e-c18d-35ce-90a4-5c8c0337abb6.roa File: 550a151e-c18d-35ce-90a4-5c8c0337abb6.roa (raw, json) Hash identifier: RKvdRMTtK0Ufg8zb1A7vnLOzHLCBRngh1GYvbkXz1Mw= Subject key identifier: B0:24:EB:BE:B1:14:8C:FA:5C:E6:32:98:B4:AC:74:44:E2:4A:E6:15 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584D2A74C496737B48B78A72E100 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/550a151e-c18d-35ce-90a4-5c8c0337abb6.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 398420 IP address blocks: 216.246.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:c4:96:73:7b:48:b7:8a:72:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=d8a90ce0-eb25-4f9d-938a-906a3171e5dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7d:f1:79:17:4d:06:4f:4b:ff:22:b6:65:73: 85:13:bd:f1:b8:15:c1:7b:d1:77:57:04:cf:4d:d5: 13:db:61:dc:7a:9a:c2:91:08:29:05:65:af:c8:6d: f7:39:08:a6:fb:c9:1c:f9:df:7a:73:98:58:72:91: d5:5e:d9:66:02:7c:cf:de:3a:27:de:d6:93:2b:a6: 97:75:f4:94:b8:93:29:6c:04:fd:92:c9:a2:2c:51: b2:6e:af:e2:7f:db:44:61:04:a4:97:b2:c5:60:33: 2a:fb:09:22:2f:4f:22:e2:8d:78:55:bb:4b:44:d8: 73:80:60:84:bf:3a:ee:03:75:eb:15:0c:0b:c5:06: f5:77:3b:3a:23:cc:99:e6:aa:ae:b1:f6:7f:64:68: 17:c1:e2:2d:4f:37:ac:c7:b2:87:f1:a3:8e:d2:5b: b2:ba:30:02:29:17:fd:b7:ed:89:e8:75:0e:62:fd: 5e:f2:69:3e:a5:69:29:2b:f7:e6:de:9b:d7:69:6a: ce:ef:b8:ac:20:b4:c2:62:56:79:fa:f3:a7:13:86: 20:a4:f5:cc:4f:26:71:3c:20:53:86:c1:c3:6e:af: ca:b5:aa:0c:e7:86:45:3d:62:ce:61:7f:5d:fa:fc: 79:91:f5:ff:71:85:b9:5b:79:bf:89:2e:0a:02:78: 81:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:24:EB:BE:B1:14:8C:FA:5C:E6:32:98:B4:AC:74:44:E2:4A:E6:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/550a151e-c18d-35ce-90a4-5c8c0337abb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:38:bb:12:a9:52:2e:dc:a5:00:4f:be:fd:df:fb:0a:1e:55: 32:cc:5b:01:36:74:37:3f:2d:39:5b:c6:c7:87:3d:1f:75:6f: 8c:79:ad:14:a6:cb:4d:64:6d:db:ba:55:7b:a0:ff:c1:fc:92: 70:b9:4c:34:49:cc:22:6d:6b:13:ec:19:95:76:1a:47:42:d6: d0:52:94:60:1e:7d:f2:79:60:84:9d:e4:dc:8b:d6:76:94:a2: e6:30:c1:f6:e0:2c:0e:cd:f9:84:37:e7:e6:51:33:3a:41:3b: 2c:27:48:d6:db:49:c5:7f:ce:d4:4c:76:cf:35:95:c4:eb:a9: 11:54:aa:c7:d7:cd:9f:6d:61:97:23:49:1c:9f:ce:7c:28:9c: ac:5d:2e:50:b3:e7:5d:2a:8f:d1:05:a3:3c:2f:d6:c0:a5:ae: fe:a0:ac:40:66:fe:c7:4a:a5:25:e7:b3:00:44:66:ce:5a:39: f5:06:76:00:e2:1c:d3:35:2a:09:2e:3d:74:fc:b0:06:89:1f: b0:79:17:cc:69:ca:f1:1f:d7:fa:93:b7:a5:c3:dd:c4:47:7d: 0c:a5:b7:c7:3a:e9:7c:38:19:20:4c:c7:c5:27:d3:26:58:cb: 06:dd:6f:72:28:2c:f3:61:44:02:c1:78:fe:72:3b:fd:17:83: 1c:20:74:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdMSWc3tIt4py4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ZDhhOTBjZTAtZWIyNS00ZjlkLTkzOGEtOTA2YTMxNzFlNWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H3xeRdNBk9L/yK2ZXOFE73xuBXBe9F3VwTP TdUT22HceprCkQgpBWWvyG33OQim+8kc+d96c5hYcpHVXtlmAnzP3jon3taTK6aX dfSUuJMpbAT9ksmiLFGybq/if9tEYQSkl7LFYDMq+wkiL08i4o14VbtLRNhzgGCE vzruA3XrFQwLxQb1dzs6I8yZ5qqusfZ/ZGgXweItTzesx7KH8aOO0luyujACKRf9 t+2J6HUOYv1e8mk+pWkpK/fm3pvXaWrO77isILTCYlZ5+vOnE4YgpPXMTyZxPCBT hsHDbq/KtaoM54ZFPWLOYX9d+vx5kfX/cYW5W3m/iS4KAniB+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAk676xFIz6XOYymLSsdETiSuYVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvNTUwYTE1MWUtYzE4ZC0z NWNlLTkwYTQtNWM4YzAzMzdhYmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2PbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY4uxKpUi7cpQBPvv3f+woeVTLMWwE2dDc/LTlbxseHPR91b4x5rRSm y01kbdu6VXug/8H8knC5TDRJzCJtaxPsGZV2GkdC1tBSlGAeffJ5YISd5NyL1naU ouYwwfbgLA7N+YQ35+ZRMzpBOywnSNbbScV/ztRMds81lcTrqRFUqsfXzZ9tYZcj SRyfznwonKxdLlCz510qj9EFozwv1sClrv6grEBm/sdKpSXnswBEZs5aOfUGdgDi HNM1KgkuPXT8sAaJH7B5F8xpyvEf1/qTt6XD3cRHfQylt8c66Xw4GSBMx8Un0yZY ywbdb3IoLPNhRALBeP5yO/0XgxwgdMk= -----END CERTIFICATE-----Generated at Thu Mar 26 19:25:38 2026 by rpki-client