$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/48314f3e-e2ad-3d66-a359-8ccfd8d258e2.roa File: 48314f3e-e2ad-3d66-a359-8ccfd8d258e2.roa (raw, json) Hash identifier: +o+nTKyGSWHtboUrxwp3oQ6W+s6bAlGAK45E3kg/LeY= Subject key identifier: E9:A1:A0:64:79:A3:B7:26:C5:4E:DC:D3:8C:79:DF:C8:FF:09:90:00 Certificate issuer: /CN=3ab06b10-1d03-4fa9-b22c-bb98590313d3 Certificate serial: 010D0C9F4328584D15A268E8A3B70924E2DF1CC0 Authority key identifier: 33:D9:DA:BC:31:08:D5:AA:CF:ED:B1:BB:45:09:22:0F:00:1C:C5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/48314f3e-e2ad-3d66-a359-8ccfd8d258e2.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 25222 IP address blocks: 68.67.0.0/22 maxlen: 24 173.243.96.0/22 maxlen: 24 173.243.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:68:e8:a3:b7:09:24:e2:df:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab06b10-1d03-4fa9-b22c-bb98590313d3 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=cdb9c055-6f94-44a5-91d5-77cfecd2f506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5c:9b:69:b5:9f:37:fd:23:c7:b2:53:e2:be: e1:81:54:78:51:eb:e8:53:4c:75:a8:39:28:ed:21: 3c:45:75:25:58:46:f2:51:54:05:d6:81:4b:b4:d8: 19:bc:10:93:19:29:69:91:22:45:86:80:04:c9:c2: 9a:6b:00:24:7b:00:37:da:b7:1f:21:fa:40:fa:2f: 46:ca:4b:18:b7:2b:f2:a8:80:58:0b:5a:cf:5a:2e: cd:e1:43:96:ee:99:d9:fc:68:95:b8:fa:88:ac:2f: db:fb:64:50:ad:28:4f:be:d3:91:01:a5:1e:3a:24: b9:2f:36:54:e2:6a:eb:e2:65:a3:a0:69:5c:1b:3e: ad:45:3b:f7:99:f6:aa:4d:82:25:4e:de:9b:40:0d: aa:c9:eb:8b:c2:8d:51:4a:68:e3:ac:b5:1d:2f:f1: 64:71:ca:c8:49:4d:d5:27:38:ac:62:b1:f9:a2:92: 0e:18:1e:97:45:cc:28:9c:73:3c:c0:09:be:0a:9f: ca:d0:27:34:72:f3:fc:85:e2:d1:bf:d9:79:2a:50: 2c:49:e2:f3:81:f9:c2:79:91:b9:a2:43:4d:36:88: 7a:f4:3a:77:98:a9:b6:d1:2b:47:7d:66:df:ed:5c: cf:bb:4d:e4:0b:c4:f1:42:51:99:3f:30:92:52:41: 74:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A1:A0:64:79:A3:B7:26:C5:4E:DC:D3:8C:79:DF:C8:FF:09:90:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/48314f3e-e2ad-3d66-a359-8ccfd8d258e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl X509v3 Authority Key Identifier: keyid:33:D9:DA:BC:31:08:D5:AA:CF:ED:B1:BB:45:09:22:0F:00:1C:C5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer sbgp-ipAddrBlock: critical IPv4: 68.67.0.0/22 173.243.96.0/22 173.243.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:af:bf:95:07:91:af:c7:29:2c:4d:cb:e2:17:1c:1c:66:c0: 43:67:3b:7a:6d:46:97:d9:e2:cd:99:e1:ba:bd:5c:9b:cf:fc: fc:9c:ea:cf:52:03:18:94:df:ca:e3:36:4d:b1:34:a7:4e:c1: 8b:24:8b:1c:71:5e:7e:60:a8:ed:b5:ed:f2:ff:48:e9:2f:17: de:77:89:cd:fa:5c:69:2e:30:c1:2f:0c:bd:8c:13:05:84:cb: 1a:24:f9:2f:7e:00:28:ac:cf:bd:9c:01:2a:0e:c1:12:27:6e: 75:88:e5:d5:58:c2:6f:8e:ba:e7:39:3b:23:11:ff:5c:0e:ae: 35:6e:39:be:b3:9f:ee:37:31:24:aa:b6:9a:7a:b3:51:62:5f: 86:2b:7f:1d:96:86:6a:96:06:cb:05:4b:51:27:78:1d:be:91: 8d:16:ef:b8:08:1d:f8:0f:66:98:a0:b1:bb:ac:2e:07:c0:55: 37:08:b7:b4:aa:87:07:01:8c:b0:c1:d1:75:5e:49:39:7e:80: f8:32:bf:53:bc:40:26:f6:75:8a:41:0a:a2:52:33:8a:ad:8b: 04:fe:4a:b5:54:7d:bd:f5:06:ce:6e:28:1e:07:4b:ec:2d:8f: 59:02:04:87:be:d0:b0:a7:86:d1:7b:09:ae:5e:ad:08:94:ff: a0:28:c2:bf -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE0Vomjoo7cJJOLfHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiMDZiMTAtMWQwMy00ZmE5LWIyMmMtYmI5ODU5MDMx M2QzMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk Y2RiOWMwNTUtNmY5NC00NGE1LTkxZDUtNzdjZmVjZDJmNTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglybabWfN/0jx7JT4r7hgVR4UevoU0x1qDko 7SE8RXUlWEbyUVQF1oFLtNgZvBCTGSlpkSJFhoAEycKaawAkewA32rcfIfpA+i9G yksYtyvyqIBYC1rPWi7N4UOW7pnZ/GiVuPqIrC/b+2RQrShPvtORAaUeOiS5LzZU 4mrr4mWjoGlcGz6tRTv3mfaqTYIlTt6bQA2qyeuLwo1RSmjjrLUdL/FkccrISU3V JzisYrH5opIOGB6XRcwonHM8wAm+Cp/K0Cc0cvP8heLRv9l5KlAsSeLzgfnCeZG5 okNNNoh69Dp3mKm20StHfWbf7VzPu03kC8TxQlGZPzCSUkF0cwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFOmhoGR5o7cmxU7c04x538j/CZAAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYWIw NmIxMC0xZDAzLTRmYTktYjIyYy1iYjk4NTkwMzEzZDMvNDgzMTRmM2UtZTJhZC0z ZDY2LWEzNTktOGNjZmQ4ZDI1OGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2FiMDZiMTAtMWQwMy00ZmE5LWIy MmMtYmI5ODU5MDMxM2QzLzNhYjA2YjEwLTFkMDMtNGZhOS1iMjJjLWJiOTg1OTAz MTNkMy5jcmwwHwYDVR0jBBgwFoAUM9navDEI1arP7bG7RQkiDwAcxU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYWIwNmIxMC0xZDAzLTRmYTktYjIyYy1iYjk4 NTkwMzEzZDMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCREMAAwQC rfNgAwQBrfNqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAMSvv5UHka/HKSxNy+IXHBxmwENnO3ptRpfZ4s2Z 4bq9XJvP/Pyc6s9SAxiU38rjNk2xNKdOwYskixxxXn5gqO217fL/SOkvF953ic36 XGkuMMEvDL2MEwWEyxok+S9+ACisz72cASoOwRInbnWI5dVYwm+Ouuc5OyMR/1wO rjVuOb6zn+43MSSqtpp6s1FiX4Yrfx2WhmqWBssFS1EneB2+kY0W77gIHfgPZpig sbusLgfAVTcIt7SqhwcBjLDB0XVeSTl+gPgyv1O8QCb2dYpBCqJSM4qtiwT+SrVU fb31Bs5uKB4HS+wtj1kCBIe+0LCnhtF7Ca5erQiU/6Aowr8= -----END CERTIFICATE-----Generated at Thu Mar 26 05:35:51 2026 by rpki-client