$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0a40b2d2-fd24-3cac-a580-3ef2300515e0.roa File: 0a40b2d2-fd24-3cac-a580-3ef2300515e0.roa (raw, json) Hash identifier: fpjfGH1tiLOD8JWStXmL38lWEdunyrRoyStCT+XGg/A= Subject key identifier: 61:D6:A9:B1:57:CC:04:82:1B:2F:87:FE:C6:A0:8F:37:22:17:36:77 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584D492A52C4D89D46B72A25AA80 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0a40b2d2-fd24-3cac-a580-3ef2300515e0.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 46261 IP address blocks: 172.102.192.0/24 maxlen: 24 172.102.193.0/24 maxlen: 24 172.102.195.0/24 maxlen: 24 172.102.197.0/24 maxlen: 24 172.102.198.0/24 maxlen: 24 172.102.199.0/24 maxlen: 24 172.102.202.0/24 maxlen: 24 172.102.204.0/24 maxlen: 24 172.102.208.0/24 maxlen: 24 172.102.214.0/24 maxlen: 24 172.102.217.0/24 maxlen: 24 172.102.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:52:c4:d8:9d:46:b7:2a:25:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=2c99752b-c509-48c7-ba59-fbfd7c8ac666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6b:f7:8d:47:9d:c5:06:14:bd:01:41:a4:cc: 68:36:73:ab:b5:10:b3:35:0a:ad:37:d6:a4:47:31: 12:ae:40:04:96:ee:b4:fd:56:42:e0:af:fd:1c:47: 6b:e1:df:04:95:99:ea:e2:67:a2:76:c8:3a:08:99: 9a:b8:ea:ed:94:90:87:2a:0e:ea:ee:8e:48:d9:f1: 1b:a4:0c:a0:85:8b:47:05:02:ef:a1:9f:b6:5c:38: 2d:7c:bd:03:4d:a9:10:d8:29:5c:a6:70:5b:dc:c5: 8d:42:cc:53:86:70:f1:68:5e:11:25:2d:d2:80:07: b2:4b:9d:6e:0b:db:51:c6:3f:3d:78:54:3a:f8:84: bc:10:82:0c:41:3b:f2:c5:57:55:d7:58:cb:f2:8b: a3:eb:f4:1f:68:61:45:47:7a:43:bf:fc:f5:56:0b: 7f:98:27:f3:01:56:b5:39:c8:5d:75:6e:54:93:e7: 13:85:a6:7a:ef:82:db:19:7c:b9:98:47:4c:d1:e9: ec:32:07:59:67:17:1f:e6:cb:e5:33:e7:f0:83:77: 22:84:70:04:7a:7a:52:ec:56:74:0e:7e:21:7c:52: db:ce:da:b9:30:36:1c:fe:bd:7d:ac:ed:e6:3e:e1: bd:0d:27:44:e4:8f:26:8e:ee:da:a8:7b:77:30:99: 2b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D6:A9:B1:57:CC:04:82:1B:2F:87:FE:C6:A0:8F:37:22:17:36:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0a40b2d2-fd24-3cac-a580-3ef2300515e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.192.0/23 172.102.195.0/24 172.102.197.0-172.102.199.255 172.102.202.0/24 172.102.204.0/24 172.102.208.0/24 172.102.214.0/24 172.102.217.0/24 172.102.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:1f:a6:73:34:7e:30:60:0a:02:66:a3:d0:00:9c:64:da:95: 51:63:b2:4d:80:5b:ce:27:03:6d:e9:c5:11:38:a8:12:d6:b3: b3:78:84:78:3f:62:d4:20:46:b9:63:d0:b7:e8:cb:b9:46:8f: 93:e7:81:d9:fa:61:6e:1e:04:88:c9:53:ae:10:83:77:05:76: 7b:6e:13:ea:83:11:5f:e6:62:08:1d:f8:87:6c:bd:75:84:6d: 92:c5:10:cd:f7:79:b3:e1:ba:5f:06:06:b8:b7:c3:9c:51:7e: f8:b5:d6:6b:2d:43:b4:32:e6:79:ed:7b:6b:15:0d:d1:8a:37: da:81:07:0c:d9:d2:eb:35:cc:2f:7f:1e:43:cb:27:e4:cf:f2: 90:3c:c2:98:4b:f7:64:be:62:6e:dc:4c:97:fe:e0:51:1e:6c: 31:37:af:32:ba:d0:dd:59:cc:7e:d9:95:c3:85:38:1d:8d:41: 65:4c:e6:d4:cb:00:60:06:0c:94:98:6b:33:a3:8e:5b:5e:88: 15:cf:a7:4c:5a:31:0a:54:2e:43:1f:6e:42:2c:90:e1:2c:5e: de:13:46:7f:33:d8:ed:fc:b2:b3:30:69:f3:c6:91:ff:d3:0d: ac:66:5d:9d:19:04:7a:07:7a:02:f7:f4:74:aa:a5:cd:c4:5b: 36:2c:d2:d3 -----BEGIN CERTIFICATE----- MIIGezCCBWOgAwIBAgIUAQ0Mn0MoWE1JKlLE2J1GtyolqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk MmM5OTc1MmItYzUwOS00OGM3LWJhNTktZmJmZDdjOGFjNjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmv3jUedxQYUvQFBpMxoNnOrtRCzNQqtN9ak RzESrkAElu60/VZC4K/9HEdr4d8ElZnq4meidsg6CJmauOrtlJCHKg7q7o5I2fEb pAyghYtHBQLvoZ+2XDgtfL0DTakQ2ClcpnBb3MWNQsxThnDxaF4RJS3SgAeyS51u C9tRxj89eFQ6+IS8EIIMQTvyxVdV11jL8ouj6/QfaGFFR3pDv/z1Vgt/mCfzAVa1 OchddW5Uk+cThaZ674LbGXy5mEdM0ensMgdZZxcf5svlM+fwg3cihHAEenpS7FZ0 Dn4hfFLbztq5MDYc/r19rO3mPuG9DSdE5I8mju7aqHt3MJkrPQIDAQABo4IDjTCC A4kwHQYDVR0OBBYEFGHWqbFXzASCGy+H/sagjzciFzZ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvMGE0MGIyZDItZmQyNC0z Y2FjLWE1ODAtM2VmMjMwMDUxNWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQBrGbAAwQA rGbDMAwDBACsZsUDBAOsZsADBACsZsoDBACsZswDBACsZtADBACsZtYDBACsZtkD BACsZtwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEACR+mczR+MGAKAmaj0ACcZNqVUWOyTYBbzicDbenFETio Etazs3iEeD9i1CBGuWPQt+jLuUaPk+eB2fphbh4EiMlTrhCDdwV2e24T6oMRX+Zi CB34h2y9dYRtksUQzfd5s+G6XwYGuLfDnFF++LXWay1DtDLmee17axUN0Yo32oEH DNnS6zXML38eQ8sn5M/ykDzCmEv3ZL5ibtxMl/7gUR5sMTevMrrQ3VnMftmVw4U4 HY1BZUzm1MsAYAYMlJhrM6OOW16IFc+nTFoxClQuQx9uQiyQ4Sxe3hNGfzPY7fyy szBp88aR/9MNrGZdnRkEegd6Avf0dKqlzcRbNizS0w== -----END CERTIFICATE-----Generated at Thu Mar 26 15:30:20 2026 by rpki-client