$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa File: 0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa (raw, json) Hash identifier: m2yJzHUhz/mUA+Y9lA5hBEDhnr723SBIgXPBLRX3hkw= Subject key identifier: D0:53:72:82:09:32:52:2A:3C:40:8D:A9:63:DD:1F:4E:AE:4C:89:C3 Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F4328584D24DFA2B7530E526B2555FD00 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 33322 IP address blocks: 72.1.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:a2:b7:53:0e:52:6b:25:55:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f188979c-a4ac-4e8a-8c34-0ed34cbff758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d3:5d:a4:a3:3b:a5:63:d3:d9:ee:70:aa:ec: 79:21:2c:28:03:10:fb:a1:3c:f7:dc:80:7b:54:c9: e9:77:a8:84:0a:7f:04:cc:7f:cc:e4:47:10:c1:ae: 9b:f5:1e:b4:bd:14:34:97:2b:f1:12:f1:a7:ce:90: a9:3a:21:16:72:3d:75:92:88:1b:01:55:46:81:fe: 8f:e2:b5:3b:d3:51:e8:a4:07:2e:a6:35:2e:bf:c9: 63:80:3b:ed:65:1b:9e:6d:43:9e:53:1f:90:82:51: 74:13:94:21:68:52:b0:20:20:7e:00:0e:1c:26:1e: ca:2a:2e:c7:a3:b0:f4:ec:21:5d:da:22:c3:a1:ff: 7f:3b:86:4e:ad:33:33:a8:c3:de:c7:97:9a:fe:20: 54:aa:46:19:b8:77:09:0b:ab:64:fb:41:e6:14:2f: df:0e:37:4b:76:40:6e:17:87:8b:61:52:ca:88:2e: 8f:aa:6b:80:4c:27:09:54:4e:97:b4:2c:cd:d7:d7: bf:de:92:90:c2:28:0c:00:58:47:97:26:42:ee:98: 95:d6:c4:38:31:0b:d4:dc:10:05:ee:db:d5:ef:24: 71:92:44:73:8d:ba:d2:21:37:8f:82:f2:f1:c2:a9: 4b:82:22:17:74:33:e1:af:a5:1e:89:0d:89:e3:4d: e3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:53:72:82:09:32:52:2A:3C:40:8D:A9:63:DD:1F:4E:AE:4C:89:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 72.1.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:16:33:a4:72:9f:5e:ea:ee:22:91:b2:b4:92:85:e3:d0:1a: ed:05:96:9d:27:59:7d:49:99:25:c7:8f:32:0e:a4:83:ba:cc: b9:09:31:82:87:0d:8d:bd:38:a3:0c:fa:5d:79:fb:6f:3f:8b: 57:3c:88:ea:29:2b:d4:78:96:60:66:8d:77:7f:c8:60:0b:24: 4d:e6:45:b6:dc:bf:43:3d:00:b9:2e:df:58:36:c3:6f:0d:5c: 19:b5:02:a9:94:97:6f:aa:ba:af:a8:28:e9:86:80:ce:79:d7: be:1d:1b:31:13:93:9e:2f:f0:f4:7a:49:25:14:fd:00:87:43: ac:fa:cf:f8:1f:98:d9:60:4e:e3:09:f3:e4:99:91:64:a1:04: 94:13:3e:d4:12:0b:72:ce:fb:71:66:2c:05:fe:73:d9:39:42: 72:fd:61:8f:e5:76:64:04:68:15:c8:37:d7:07:93:b9:bf:bb: 9f:88:bb:fb:49:e8:ee:98:62:bb:c9:a7:b9:10:18:95:55:20: dc:03:e6:35:f8:66:3a:32:24:d4:36:fb:32:c3:f1:37:75:a8: 3b:b9:48:b7:eb:97:ca:08:46:7e:e1:ee:9a:8d:51:aa:62:e6: 59:0c:53:9b:41:be:2f:16:97:33:fb:2b:2a:00:43:bd:bd:6f: 23:13:b6:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k36K3Uw5SayVV/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjE4ODk3OWMtYTRhYy00ZThhLThjMzQtMGVkMzRjYmZmNzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdNdpKM7pWPT2e5wqux5ISwoAxD7oTz33IB7 VMnpd6iECn8EzH/M5EcQwa6b9R60vRQ0lyvxEvGnzpCpOiEWcj11kogbAVVGgf6P 4rU701HopAcupjUuv8ljgDvtZRuebUOeUx+QglF0E5QhaFKwICB+AA4cJh7KKi7H o7D07CFd2iLDof9/O4ZOrTMzqMPex5ea/iBUqkYZuHcJC6tk+0HmFC/fDjdLdkBu F4eLYVLKiC6PqmuATCcJVE6XtCzN19e/3pKQwigMAFhHlyZC7piV1sQ4MQvU3BAF 7tvV7yRxkkRzjbrSITePgvLxwqlLgiIXdDPhr6UeiQ2J403j+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBTcoIJMlIqPECNqWPdH06uTInDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvMGRlOGE5ZWMtYmZjNC0z ZTgwLWI4ZmEtNjdkNzhiNWIxODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcWM6Ryn17q7iKRsrSShePQGu0Flp0nWX1JmSXHjzIOpIO6zLkJMYKH DY29OKMM+l15+28/i1c8iOopK9R4lmBmjXd/yGALJE3mRbbcv0M9ALku31g2w28N XBm1AqmUl2+quq+oKOmGgM55174dGzETk54v8PR6SSUU/QCHQ6z6z/gfmNlgTuMJ 8+SZkWShBJQTPtQSC3LO+3FmLAX+c9k5QnL9YY/ldmQEaBXIN9cHk7m/u5+Iu/tJ 6O6YYrvJp7kQGJVVINwD5jX4ZjoyJNQ2+zLD8Td1qDu5SLfrl8oIRn7h7pqNUapi 5lkMU5tBvi8WlzP7KyoAQ729byMTtjM= -----END CERTIFICATE-----Generated at Thu Mar 26 10:06:38 2026 by rpki-client