$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/f290cce8-3336-3ab3-b1c5-e84890c02a5b.roa File: f290cce8-3336-3ab3-b1c5-e84890c02a5b.roa (raw, json) Hash identifier: aJgDnLjIDyLKUHoeulEz+2BNavXK+ngG4efxYM0mxsw= Subject key identifier: E6:15:46:31:AF:79:F6:16:8A:98:C3:B4:97:D7:78:7B:1D:0F:2B:99 Certificate issuer: /CN=324346b5-3875-43b0-bb0d-8052274567d4 Certificate serial: 010D0C9F4328584D492A74EA408FB2AAE1FC3D80 Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/f290cce8-3336-3ab3-b1c5-e84890c02a5b.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 55 IP address blocks: 130.91.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:74:ea:40:8f:b2:aa:e1:fc:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=0084a22b-765f-45ae-b1a1-3c7db2188889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:15:6e:b0:60:bd:0f:cc:33:f0:b3:b2:89:d8: ab:14:3d:15:ef:81:fd:b2:5e:d9:60:00:21:34:a9: e0:ee:e8:39:60:cc:cb:73:5a:86:57:bd:6b:b3:99: 88:ee:3a:e6:c2:8a:c7:77:18:f9:45:fd:e3:d9:f5: be:45:bf:50:8f:54:10:74:0f:c8:e5:b3:f4:ae:63: e2:80:f8:1f:42:12:0a:ac:60:57:8b:39:67:d8:9a: 63:b2:6f:eb:f6:99:eb:80:4f:c4:6d:13:e1:e6:76: b1:be:97:aa:d0:3e:2d:28:46:f2:42:cb:8d:0c:c1: ce:3f:d5:cc:ac:07:7d:89:ba:6d:a1:59:a6:d8:f6: 8b:76:d2:f0:21:d5:44:f0:51:47:7a:ef:b9:fc:f7: 1c:e2:97:70:2d:89:78:d2:43:8a:0b:d4:0f:23:38: aa:5b:23:00:af:03:bd:1a:2d:8c:5e:4d:6c:f8:6f: b8:af:6a:85:14:a6:18:3f:97:a5:87:a1:f6:64:21: c5:ec:de:98:35:d2:1f:0b:e6:f5:d4:77:33:e5:b7: a5:f2:e0:d2:28:fe:e5:e6:e3:af:a7:a6:86:d4:5a: 56:55:df:3d:9d:75:c6:8f:82:d9:e8:3e:fa:68:c0: ae:7b:4e:e8:04:2b:dc:f3:9d:6e:51:9e:ff:36:5c: 0d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:15:46:31:AF:79:F6:16:8A:98:C3:B4:97:D7:78:7B:1D:0F:2B:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/f290cce8-3336-3ab3-b1c5-e84890c02a5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl X509v3 Authority Key Identifier: keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer sbgp-ipAddrBlock: critical IPv4: 130.91.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:a4:d3:01:b5:5c:a8:14:ac:6c:b9:6e:53:f1:4c:55:80:42: 41:b3:fd:ec:bc:1a:43:ca:15:25:26:f2:96:26:40:12:6c:a5: 52:09:eb:5f:32:b5:f1:73:ca:66:8b:40:8b:79:7f:6c:6c:e3: 4c:54:ab:82:5c:af:68:58:92:50:52:7b:11:c0:4d:09:a0:c6: 8d:44:f5:67:10:6d:78:21:d8:50:9b:81:70:54:5e:bb:af:bb: f8:be:23:3d:b7:79:d3:a9:db:d7:c0:18:b6:f8:96:e7:b8:1a: 18:5d:a2:bd:4f:67:03:0d:f1:f2:18:60:b9:1b:f4:21:8f:0b: d5:27:19:9f:2a:eb:81:67:73:4f:96:29:f1:9a:2f:5c:3c:bc: 08:f5:21:f8:d8:68:07:bb:9f:14:cb:a5:e9:94:a4:40:91:c9: d1:50:1d:be:ac:18:66:8d:59:17:a8:23:f6:9a:5a:e0:87:1f: 74:b6:8a:e4:a9:7a:51:5c:89:0b:43:f2:6e:fb:2b:4d:d6:69: 3f:2b:fd:0b:7d:1c:d9:e4:f8:94:e1:3e:33:11:43:16:8d:44: cd:a7:5b:5d:36:70:15:7c:4e:b4:c6:9a:ae:b2:66:41:e8:80: 19:f9:2c:d6:3a:bd:c4:db:9c:62:f9:af:b0:1f:a7:8e:60:27: b3:50:f9:e9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1JKnTqQI+yquH8PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0MzQ2YjUtMzg3NS00M2IwLWJiMGQtODA1MjI3NDU2 N2Q0MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk MDA4NGEyMmItNzY1Zi00NWFlLWIxYTEtM2M3ZGIyMTg4ODg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BVusGC9D8wz8LOyidirFD0V74H9sl7ZYAAh NKng7ug5YMzLc1qGV71rs5mI7jrmworHdxj5Rf3j2fW+Rb9Qj1QQdA/I5bP0rmPi gPgfQhIKrGBXizln2Jpjsm/r9pnrgE/EbRPh5naxvpeq0D4tKEbyQsuNDMHOP9XM rAd9ibptoVmm2PaLdtLwIdVE8FFHeu+5/Pcc4pdwLYl40kOKC9QPIziqWyMArwO9 Gi2MXk1s+G+4r2qFFKYYP5elh6H2ZCHF7N6YNdIfC+b11Hcz5bel8uDSKP7l5uOv p6aG1FpWVd89nXXGj4LZ6D76aMCue07oBCvc851uUZ7/NlwNRwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOYVRjGvefYWipjDtJfXeHsdDyuZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQz NDZiNS0zODc1LTQzYjAtYmIwZC04MDUyMjc0NTY3ZDQvZjI5MGNjZTgtMzMzNi0z YWIzLWIxYzUtZTg0ODkwYzAyYTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0MzQ2YjUtMzg3NS00M2IwLWJi MGQtODA1MjI3NDU2N2Q0LzMyNDM0NmI1LTM4NzUtNDNiMC1iYjBkLTgwNTIyNzQ1 NjdkNC5jcmwwHwYDVR0jBBgwFoAUSik0xZJmeenp4Av+f7bw6Cl2XiQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQzNDZiNS0zODc1LTQzYjAtYmIwZC04MDUy Mjc0NTY3ZDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAglswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAgqTTAbVcqBSsbLluU/FMVYBCQbP97LwaQ8oVJSbyliZAEmylUgnrXzK1 8XPKZotAi3l/bGzjTFSrglyvaFiSUFJ7EcBNCaDGjUT1ZxBteCHYUJuBcFReu6+7 +L4jPbd506nb18AYtviW57gaGF2ivU9nAw3x8hhguRv0IY8L1ScZnyrrgWdzT5Yp 8ZovXDy8CPUh+NhoB7ufFMul6ZSkQJHJ0VAdvqwYZo1ZF6gj9ppa4IcfdLaK5Kl6 UVyJC0PybvsrTdZpPyv9C30c2eT4lOE+MxFDFo1EzadbXTZwFXxOtMaarrJmQeiA Gfks1jq9xNucYvmvsB+njmAns1D56Q== -----END CERTIFICATE-----Generated at Fri Mar 27 01:13:32 2026 by rpki-client