$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/3d458b10-00d8-3f00-a0c7-2fc6c9de3114.roa File: 3d458b10-00d8-3f00-a0c7-2fc6c9de3114.roa (raw, json) Hash identifier: 4p81xawU3koFf8o1wp50wWoG5RQvdYO7/blzxvsNmVI= Subject key identifier: 57:0A:72:81:46:36:A3:BD:89:0E:A3:0A:2C:18:41:AD:DE:F5:A0:53 Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F4328584D27AA2C96B5508E46F38E5F40 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/3d458b10-00d8-3f00-a0c7-2fc6c9de3114.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 33322 IP address blocks: 204.16.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:2c:96:b5:50:8e:46:f3:8e:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=46bc24ad-a6c5-4b6f-83e3-368529206be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4f:29:15:cc:d8:0a:f5:5e:30:13:fb:66:91: 7d:43:62:d2:93:d1:b0:32:d0:0c:15:86:54:91:1f: e7:f8:e3:0f:05:15:5a:e8:74:df:f7:23:dc:83:e2: 7e:c0:2b:ca:66:c7:f4:c5:b6:26:68:6f:6f:f9:e0: c4:87:c8:d4:a5:26:a7:d1:3e:5b:40:bd:0f:91:4b: e5:b4:f2:d0:f0:67:9a:7c:25:fe:a8:1a:33:a0:a8: 78:79:13:36:0a:38:1e:74:55:28:82:35:dd:35:6e: 43:8b:72:a3:b4:7c:c0:0d:d6:3a:25:81:e9:21:19: 29:ee:95:22:e5:87:c3:cb:ee:91:1a:35:a2:aa:27: 3d:8a:7c:c9:2c:b7:2b:9b:8b:1e:0b:70:36:37:38: da:dc:d8:d3:82:2a:62:06:8e:1b:9b:77:bd:fe:e3: 57:a4:8e:6b:8f:e8:9e:ec:6e:d8:cb:93:0a:a7:b3: 0b:6d:92:4d:7c:28:9d:9d:64:31:a0:5a:c0:4d:46: d8:af:74:2b:85:e9:25:e2:8f:ed:f1:da:8a:4e:d7: 5b:65:d5:b8:59:35:78:82:f7:a7:5e:3e:b7:59:e2: 5e:c1:dd:1d:6b:04:f3:84:dd:32:5c:47:bf:11:4e: dc:52:ba:78:6a:5b:41:3e:d7:7a:08:a5:09:68:79: 36:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0A:72:81:46:36:A3:BD:89:0E:A3:0A:2C:18:41:AD:DE:F5:A0:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/3d458b10-00d8-3f00-a0c7-2fc6c9de3114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 204.16.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:a5:42:d3:8f:44:1d:15:c0:8f:74:9a:54:a7:52:8b:32:ff: ca:c7:6f:c3:95:67:8b:67:52:19:53:2c:7f:b1:12:76:2d:d6: 5a:f5:4c:5d:eb:91:17:90:97:85:d5:a3:aa:f9:b3:01:da:31: ba:72:a3:cb:31:72:70:b8:df:73:e3:14:31:b3:f7:8f:b9:1b: 36:36:5a:d3:52:eb:d9:55:19:a5:51:d2:54:96:b1:fe:2b:ae: d9:b5:dd:e9:d4:3e:c4:dc:70:bb:8f:eb:8a:13:09:52:c5:59: b1:69:a1:4c:ae:aa:f2:08:ca:f0:be:a2:b2:02:c5:df:e9:c0: 9a:2f:49:82:34:58:28:6b:89:77:4f:02:f3:31:df:53:ae:10: a2:b3:0b:03:3a:1e:a0:b0:ec:17:80:40:4a:5f:4a:6a:89:dc: 1d:34:b4:14:28:38:9b:d2:d1:1f:41:87:e6:e5:6b:f5:04:f9: e8:12:79:70:bc:9d:0c:b6:f9:23:0f:c2:5d:24:e7:6c:3f:19: 7b:f1:4e:27:2e:2c:14:e4:06:4c:6c:28:5a:75:ab:b3:21:1b: 02:6d:a4:4c:a3:fe:1f:8c:08:1f:3c:26:97:26:3f:c4:b1:74: 2a:5d:62:f8:af:63:28:0a:8e:29:75:fa:b7:e1:51:54:74:ce: 4c:a2:02:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqiyWtVCORvOOX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NDZiYzI0YWQtYTZjNS00YjZmLTgzZTMtMzY4NTI5MjA2YmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU8pFczYCvVeMBP7ZpF9Q2LSk9GwMtAMFYZU kR/n+OMPBRVa6HTf9yPcg+J+wCvKZsf0xbYmaG9v+eDEh8jUpSan0T5bQL0PkUvl tPLQ8GeafCX+qBozoKh4eRM2CjgedFUogjXdNW5Di3KjtHzADdY6JYHpIRkp7pUi 5YfDy+6RGjWiqic9inzJLLcrm4seC3A2Nzja3NjTgipiBo4bm3e9/uNXpI5rj+ie 7G7Yy5MKp7MLbZJNfCidnWQxoFrATUbYr3Qrhekl4o/t8dqKTtdbZdW4WTV4gven Xj63WeJewd0dawTzhN0yXEe/EU7cUrp4altBPtd6CKUJaHk2AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcKcoFGNqO9iQ6jCiwYQa3e9aBTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvM2Q0NThiMTAtMDBkOC0z ZjAwLWEwYzctMmZjNmM5ZGUzMTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzBDUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHalQtOPRB0VwI90mlSnUosy/8rHb8OVZ4tnUhlTLH+xEnYt1lr1TF3r kReQl4XVo6r5swHaMbpyo8sxcnC433PjFDGz94+5GzY2WtNS69lVGaVR0lSWsf4r rtm13enUPsTccLuP64oTCVLFWbFpoUyuqvIIyvC+orICxd/pwJovSYI0WChriXdP AvMx31OuEKKzCwM6HqCw7BeAQEpfSmqJ3B00tBQoOJvS0R9Bh+bla/UE+egSeXC8 nQy2+SMPwl0k52w/GXvxTicuLBTkBkxsKFp1q7MhGwJtpEyj/h+MCB88JpcmP8Sx dCpdYvivYygKjil1+rfhUVR0zkyiAoo= -----END CERTIFICATE-----Generated at Thu Mar 26 16:02:55 2026 by rpki-client