$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f2bf5543-269c-3fbb-bb59-b3484366fb78.roa File: f2bf5543-269c-3fbb-bb59-b3484366fb78.roa (raw, json) Hash identifier: fDMXoUESiH9+7bkX8VEH1Prucfc4BSsgQvfopvWkVMI= Subject key identifier: A0:B3:DE:88:60:AA:2C:9B:A2:CD:48:6F:F2:DE:95:E7:3D:90:55:9D Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584D2A74C485A29C9689E7CE0C00 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f2bf5543-269c-3fbb-bb59-b3484366fb78.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 398420 IP address blocks: 208.89.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:c4:85:a2:9c:96:89:e7:ce:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=0ce82f16-8e21-46af-a80f-9bfbe668f725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9d:ef:b0:a4:91:c2:44:de:93:2c:71:43:bf: 4b:d5:70:2e:50:fd:87:ea:13:a3:d4:66:67:7b:61: ef:0d:c1:7a:b3:87:23:d8:d4:a1:c4:25:a3:8e:cf: ed:8b:ac:88:4f:f8:0a:43:35:e9:65:af:4f:a1:22: 58:ea:19:8e:ba:26:7b:44:6c:d8:56:33:c0:7f:51: 2d:d1:85:67:f3:2e:57:26:72:51:4b:e8:02:a3:35: 0f:1f:af:c9:c8:70:e7:1b:ee:6e:8d:b9:19:11:a7: 93:af:bc:4c:c8:1d:ea:77:04:f8:97:66:44:4d:d4: f4:4a:d5:d0:3f:fc:12:09:ba:2a:92:bc:53:28:29: 44:9d:63:c6:b3:f1:20:a0:45:10:b3:f0:e9:0f:12: 78:b7:80:c1:75:4a:8d:b8:92:ee:0a:77:9f:b4:10: 0c:65:a7:06:c6:ad:ec:38:8d:e0:49:3e:eb:95:68: 27:16:ff:c3:23:81:8a:de:ae:52:1f:82:fa:2b:1e: 9f:e6:3d:4a:76:6b:e6:32:47:c7:5e:be:ae:55:b2: 36:59:de:4a:64:34:2c:32:79:bb:45:67:cf:53:b3: 00:a9:48:54:98:aa:5d:0f:2c:a3:bd:49:c3:e9:06: 90:00:da:6a:0e:8e:af:d1:41:55:43:05:02:ad:e5: e1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B3:DE:88:60:AA:2C:9B:A2:CD:48:6F:F2:DE:95:E7:3D:90:55:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f2bf5543-269c-3fbb-bb59-b3484366fb78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 208.89.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:db:76:45:04:65:3f:36:2f:3a:24:e5:35:97:f0:cf:dc:e3: d7:f7:5f:58:00:ad:fd:63:50:66:72:17:b1:da:ad:71:4c:a7: 23:a8:da:01:4f:ce:80:40:85:e6:39:1d:fc:3c:84:25:80:20: ed:a7:1d:7d:10:ab:dc:57:bc:42:21:3f:76:0f:48:3d:ce:8b: e9:85:cb:97:6b:c8:7d:c7:c6:9e:81:4f:f1:b7:35:15:82:29: be:d7:90:05:90:a6:de:48:45:a4:85:d9:c8:8a:c4:fb:c9:5c: cb:3e:a2:0d:6b:c8:fb:28:db:4f:ce:5e:7e:ce:48:4b:79:e9: 87:43:2e:1e:e9:93:86:4b:6f:ce:34:ba:5b:1b:7d:66:50:bf: b2:e9:6a:f1:3b:68:49:e4:0c:d1:a1:17:80:c2:5f:5b:56:9b: bf:6d:e4:6f:13:bc:20:d6:a9:18:4e:d6:d4:dd:e0:e8:3c:4f: 1b:bf:82:fa:15:7b:85:57:3e:96:cc:37:c4:84:67:4e:97:50: 25:29:4d:02:3e:df:02:e0:29:ec:f1:67:f3:00:d5:4c:70:9e: 21:09:47:66:45:9c:aa:55:da:48:f5:0c:45:db:4a:6b:6d:35: 50:5d:c2:1e:60:e5:d3:0b:66:77:80:53:02:86:83:98:0c:c8: eb:69:03:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdMSFopyWiefODAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk MGNlODJmMTYtOGUyMS00NmFmLWE4MGYtOWJmYmU2NjhmNzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7J3vsKSRwkTekyxxQ79L1XAuUP2H6hOj1GZn e2HvDcF6s4cj2NShxCWjjs/ti6yIT/gKQzXpZa9PoSJY6hmOuiZ7RGzYVjPAf1Et 0YVn8y5XJnJRS+gCozUPH6/JyHDnG+5ujbkZEaeTr7xMyB3qdwT4l2ZETdT0StXQ P/wSCboqkrxTKClEnWPGs/EgoEUQs/DpDxJ4t4DBdUqNuJLuCneftBAMZacGxq3s OI3gST7rlWgnFv/DI4GK3q5SH4L6Kx6f5j1KdmvmMkfHXr6uVbI2Wd5KZDQsMnm7 RWfPU7MAqUhUmKpdDyyjvUnD6QaQANpqDo6v0UFVQwUCreXhQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCz3ohgqiybos1Ib/Lelec9kFWdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvZjJiZjU1NDMtMjY5Yy0z ZmJiLWJiNTktYjM0ODQzNjZmYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Fk0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzbdkUEZT82Lzok5TWX8M/c49f3X1gArf1jUGZyF7HarXFMpyOo2gFP zoBAheY5Hfw8hCWAIO2nHX0Qq9xXvEIhP3YPSD3Oi+mFy5dryH3Hxp6BT/G3NRWC Kb7XkAWQpt5IRaSF2ciKxPvJXMs+og1ryPso20/OXn7OSEt56YdDLh7pk4ZLb840 ulsbfWZQv7LpavE7aEnkDNGhF4DCX1tWm79t5G8TvCDWqRhO1tTd4Og8Txu/gvoV e4VXPpbMN8SEZ06XUCUpTQI+3wLgKezxZ/MA1UxwniEJR2ZFnKpV2kj1DEXbSmtt NVBdwh5g5dMLZneAUwKGg5gMyOtpA3k= -----END CERTIFICATE-----Generated at Thu Mar 26 19:14:13 2026 by rpki-client