$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/89eaad9a-c679-3b5d-800a-328d1b3617b9.roa File: 89eaad9a-c679-3b5d-800a-328d1b3617b9.roa (raw, json) Hash identifier: He/xeKiU3D5k6XZkB8zCtjKuFgQqDd62A+7HE/YFazs= Subject key identifier: 07:74:8A:A0:4A:BE:67:1E:FC:22:2F:8C:97:3F:5F:5D:F9:80:F0:16 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584D1F2FB2C1EA3B42A4FD889868 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/89eaad9a-c679-3b5d-800a-328d1b3617b9.roa Signing time: Tue 10 Mar 2026 12:07:44 +0000 ROA not before: Tue 10 Mar 2026 12:07:44 +0000 ROA not after: Mon 08 Jun 2026 12:07:44 +0000 asID: 11232 IP address blocks: 161.199.184.0/22 maxlen: 22 208.118.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:2f:b2:c1:ea:3b:42:a4:fd:88:98:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Mar 10 12:07:44 2026 GMT Not After : Jun 8 12:07:44 2026 GMT Subject: CN=08f3d805-ab08-49d3-91b1-60c3dd2aae5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b1:1b:37:24:9c:88:24:7b:78:b2:7d:d5:63: 92:e6:d2:b0:bf:a8:eb:bd:67:8c:95:96:e1:8a:32: d0:89:16:1b:12:3d:20:b8:b9:f7:3b:a7:a3:0d:c9: 5b:77:b9:56:64:d6:0c:85:22:35:a5:c0:fe:b9:ce: d1:e3:c0:9a:f8:ee:69:36:07:40:54:fa:85:cd:35: a8:51:a0:0b:b4:e9:ec:61:5d:97:a6:a6:00:13:0b: 99:56:7e:78:f0:f3:4b:5e:24:ad:2f:5b:f9:a5:d8: 3e:ba:ba:20:f7:d1:a1:1c:18:0c:ae:08:ee:c2:90: d1:0b:02:35:3c:7e:e1:34:86:92:e8:da:37:35:a8: c5:5f:bf:e2:9c:a2:54:96:47:88:b6:98:ba:ff:93: 17:d2:e2:d4:f3:62:69:f3:22:e1:f3:93:bf:ea:24: 8b:d4:2b:ca:56:a2:ef:01:f3:cb:80:9c:7a:58:82: 31:4b:af:75:06:61:88:be:18:36:e4:33:2e:d9:a6: d4:50:06:a5:95:25:b8:a8:45:ca:d2:c6:76:15:63: 61:72:68:c7:5e:fb:41:ca:ca:1b:0b:08:c1:25:21: 28:61:63:0b:95:4e:d5:87:e7:72:f3:c5:5e:3a:96: 18:f1:bf:a3:0a:6e:e1:5a:0d:cd:7b:43:fa:48:56: 37:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:74:8A:A0:4A:BE:67:1E:FC:22:2F:8C:97:3F:5F:5D:F9:80:F0:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/89eaad9a-c679-3b5d-800a-328d1b3617b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 161.199.184.0/22 208.118.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:06:6d:fa:d4:3c:32:ab:61:2e:63:db:43:ae:d4:34:0a:7f: 00:6c:b8:a2:b7:ff:b9:c5:1f:1b:a9:2d:97:7b:5c:b0:1b:2b: 9a:9e:5f:19:84:ba:36:00:34:9b:12:21:cc:b3:de:24:4d:9b: 6d:21:18:c2:11:15:c8:e7:2b:b5:d7:3b:03:de:3e:df:27:79: 4e:a6:2d:c4:23:f0:64:35:f1:7e:0b:b0:9c:77:ed:f7:2e:14: b5:4c:b9:a7:36:a0:6a:33:cb:77:c5:da:9b:02:d9:47:b6:19: ef:6e:98:75:d3:b6:6c:b3:84:af:84:10:bd:47:1c:01:5e:71: cb:6f:84:2b:f2:33:c6:7c:71:9c:c4:db:de:54:ea:9a:65:70: ff:a5:91:c6:52:5c:2b:ce:ed:c5:c8:f6:9c:a2:22:86:30:30: 57:f5:83:31:78:d3:44:16:33:f5:47:39:e1:b0:74:50:a5:cb: d4:06:d4:bb:60:bf:7c:68:25:02:f4:96:ef:77:e5:b3:1a:22: e9:af:a3:a4:59:5c:47:41:6d:f6:42:29:fb:81:f1:35:a0:ee: b3:07:ee:93:df:dd:3c:27:66:56:dc:07:c9:ac:82:1b:ed:29: b9:49:5a:38:c7:d0:a7:3d:53:69:32:b9:9b:ff:5f:6d:3e:c4: f7:68:86:7b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0fL7LB6jtCpP2ImGgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI2MDMxMDEyMDc0NFoXDTI2MDYwODEyMDc0NFowLzEtMCsGA1UEAxMk MDhmM2Q4MDUtYWIwOC00OWQzLTkxYjEtNjBjM2RkMmFhZTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7EbNySciCR7eLJ91WOS5tKwv6jrvWeMlZbh ijLQiRYbEj0guLn3O6ejDclbd7lWZNYMhSI1pcD+uc7R48Ca+O5pNgdAVPqFzTWo UaALtOnsYV2XpqYAEwuZVn548PNLXiStL1v5pdg+urog99GhHBgMrgjuwpDRCwI1 PH7hNIaS6No3NajFX7/inKJUlkeItpi6/5MX0uLU82Jp8yLh85O/6iSL1CvKVqLv AfPLgJx6WIIxS691BmGIvhg25DMu2abUUAallSW4qEXK0sZ2FWNhcmjHXvtBysob CwjBJSEoYWMLlU7Vh+dy88VeOpYY8b+jCm7hWg3Ne0P6SFY3ZQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAd0iqBKvmce/CIvjJc/X135gPAWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvODllYWFkOWEtYzY3OS0z YjVkLTgwMGEtMzI4ZDFiMzYxN2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCoce4AwQE 0HaQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABgGbfrUPDKrYS5j20Ou1DQKfwBsuKK3/7nFHxupLZd7XLAb K5qeXxmEujYANJsSIcyz3iRNm20hGMIRFcjnK7XXOwPePt8neU6mLcQj8GQ18X4L sJx37fcuFLVMuac2oGozy3fF2psC2Ue2Ge9umHXTtmyzhK+EEL1HHAFecctvhCvy M8Z8cZzE295U6pplcP+lkcZSXCvO7cXI9pyiIoYwMFf1gzF400QWM/VHOeGwdFCl y9QG1Ltgv3xoJQL0lu935bMaIumvo6RZXEdBbfZCKfuB8TWg7rMH7pPf3TwnZlbc B8msghvtKblJWjjH0Kc9U2kyuZv/X20+xPdohns= -----END CERTIFICATE-----Generated at Thu Mar 26 00:09:52 2026 by rpki-client