$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/0a1c3907-f7d7-3691-8044-6f13e6d1cfbe.roa File: 0a1c3907-f7d7-3691-8044-6f13e6d1cfbe.roa (raw, json) Hash identifier: BgA9Y/F0wAXCJE7FlpECstogskOeCalMzOffkLuOtcg= Subject key identifier: 92:B1:F5:B7:77:64:2B:D4:68:B8:6B:64:17:C3:00:CC:0B:A3:4F:E3 Certificate issuer: /CN=ee796558-82d6-41a5-b8ec-5dfdbd89d5d7 Certificate serial: 010D0C9F4328584D15A2691FECBA38B10A9E6060 Authority key identifier: 5C:A3:ED:89:EB:E7:96:FF:87:08:32:46:85:60:7A:6C:A1:46:1D:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/0a1c3907-f7d7-3691-8044-6f13e6d1cfbe.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 25222 IP address blocks: 192.40.224.0/22 maxlen: 24 216.86.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:69:1f:ec:ba:38:b1:0a:9e:60:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee796558-82d6-41a5-b8ec-5dfdbd89d5d7 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=d2c2ba73-62af-4aff-a68b-e8f6300a4e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ca:d3:f7:84:b5:80:a8:36:80:1e:96:0e:f3: cd:46:ed:3d:06:04:a9:70:d2:b0:86:1d:5b:f9:57: 0a:1f:97:68:c9:35:18:6e:ef:5b:61:bc:43:3b:e8: 4f:36:06:64:0a:b0:2e:e3:0e:cf:e1:f8:47:aa:5e: 21:4d:0d:27:1f:76:0e:ac:51:21:98:a6:b6:e4:3a: 6f:8f:95:88:57:54:66:74:ff:54:0c:55:05:d5:a2: f8:66:4c:b6:c7:76:d8:d9:7b:51:02:a9:cf:93:a4: 8d:8e:5f:69:b7:f2:e4:0e:cf:bf:50:47:47:6e:af: fb:d4:28:8a:c5:f2:4a:8b:e5:c1:52:ea:21:f4:a6: 7f:83:43:9e:c8:a0:ae:8c:04:4c:f2:08:08:6e:c9: 55:9e:90:74:64:f2:85:8d:3c:f7:a3:5f:c8:24:78: 76:80:8f:f4:d1:e5:ab:16:53:8c:de:6f:e2:8d:cd: 8d:6f:b0:09:e0:c9:94:30:6a:aa:21:ef:fa:cb:fd: 8e:9b:5f:6d:fb:b6:5c:c3:e7:4d:55:ee:56:39:68: bd:0c:b2:c1:e1:8c:2f:b9:c5:b6:20:50:fc:7f:19: 97:28:89:36:c6:83:6c:a2:ef:39:53:f6:22:3d:87: b4:1e:52:6a:fe:c0:9e:aa:6b:bd:90:de:aa:14:a0: 67:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B1:F5:B7:77:64:2B:D4:68:B8:6B:64:17:C3:00:CC:0B:A3:4F:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/0a1c3907-f7d7-3691-8044-6f13e6d1cfbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.crl X509v3 Authority Key Identifier: keyid:5C:A3:ED:89:EB:E7:96:FF:87:08:32:46:85:60:7A:6C:A1:46:1D:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.cer sbgp-ipAddrBlock: critical IPv4: 192.40.224.0/22 216.86.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:7c:58:83:9c:7d:f1:b8:4c:23:a3:f7:75:fc:77:d9:99:ae: 61:3c:4f:6b:0c:a9:d3:71:e5:b4:36:c3:36:26:f8:e9:be:6f: 59:44:38:01:80:fc:7c:a8:73:b8:71:e6:a9:95:e8:c5:4a:af: 52:8a:39:b9:80:55:42:92:48:e5:62:9c:9e:80:a0:d1:66:f1: f4:40:33:1c:ee:b9:fd:65:a2:4d:4c:32:3a:18:1b:f2:15:63: e7:e5:1f:63:ad:12:3a:ad:16:1e:4f:60:14:e6:70:07:3c:19: 90:98:d3:d6:b2:04:11:91:ad:17:a8:95:f1:78:64:e0:b2:31: 0a:11:80:ca:bb:9c:9f:f5:21:ac:67:75:a4:10:7e:e0:08:79: cc:63:95:27:9c:ec:33:91:96:06:79:49:e6:26:1e:28:fa:c5: c6:2e:e0:7a:c2:82:19:92:d9:f1:4d:70:f9:56:3f:8e:cf:67: 70:ce:6b:0e:3c:7a:57:da:e8:a4:e3:38:74:b5:24:95:21:d2: 36:d5:88:7b:4e:66:71:dc:0b:7d:eb:e5:30:8e:31:25:29:90: 96:06:74:e3:a0:55:fe:85:b0:05:33:a3:d2:9b:e8:4e:71:54: 6e:7c:c2:40:f0:35:3a:61:20:bd:c5:31:fb:31:a2:6a:47:16: 18:10:a1:c2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0Vomkf7Lo4sQqeYGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU3OTY1NTgtODJkNi00MWE1LWI4ZWMtNWRmZGJkODlk NWQ3MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk ZDJjMmJhNzMtNjJhZi00YWZmLWE2OGItZThmNjMwMGE0ZTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMrT94S1gKg2gB6WDvPNRu09BgSpcNKwhh1b +VcKH5doyTUYbu9bYbxDO+hPNgZkCrAu4w7P4fhHql4hTQ0nH3YOrFEhmKa25Dpv j5WIV1RmdP9UDFUF1aL4Zky2x3bY2XtRAqnPk6SNjl9pt/LkDs+/UEdHbq/71CiK xfJKi+XBUuoh9KZ/g0OeyKCujARM8ggIbslVnpB0ZPKFjTz3o1/IJHh2gI/00eWr FlOM3m/ijc2Nb7AJ4MmUMGqqIe/6y/2Om19t+7Zcw+dNVe5WOWi9DLLB4YwvucW2 IFD8fxmXKIk2xoNsou85U/YiPYe0HlJq/sCeqmu9kN6qFKBnHwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJKx9bd3ZCvUaLhrZBfDAMwLo0/jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZTc5 NjU1OC04MmQ2LTQxYTUtYjhlYy01ZGZkYmQ4OWQ1ZDcvMGExYzM5MDctZjdkNy0z NjkxLTgwNDQtNmYxM2U2ZDFjZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWU3OTY1NTgtODJkNi00MWE1LWI4 ZWMtNWRmZGJkODlkNWQ3L2VlNzk2NTU4LTgyZDYtNDFhNS1iOGVjLTVkZmRiZDg5 ZDVkNy5jcmwwHwYDVR0jBBgwFoAUXKPtievnlv+HCDJGhWB6bKFGHdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lZTc5NjU1OC04MmQ2LTQxYTUtYjhlYy01ZGZk YmQ4OWQ1ZDcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwCjgAwQE 2FbwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEV8WIOcffG4TCOj93X8d9mZrmE8T2sMqdNx5bQ2wzYm+Om+ b1lEOAGA/Hyoc7hx5qmV6MVKr1KKObmAVUKSSOVinJ6AoNFm8fRAMxzuuf1lok1M MjoYG/IVY+flH2OtEjqtFh5PYBTmcAc8GZCY09ayBBGRrReolfF4ZOCyMQoRgMq7 nJ/1IaxndaQQfuAIecxjlSec7DORlgZ5SeYmHij6xcYu4HrCghmS2fFNcPlWP47P Z3DOaw48elfa6KTjOHS1JJUh0jbViHtOZnHcC33r5TCOMSUpkJYGdOOgVf6FsAUz o9Kb6E5xVG58wkDwNTphIL3FMfsxompHFhgQocI= -----END CERTIFICATE-----Generated at Thu Mar 26 19:34:14 2026 by rpki-client