$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9a980a6a-941e-34a1-9ffa-edd653116330.roa File: 9a980a6a-941e-34a1-9ffa-edd653116330.roa (raw, json) Hash identifier: DKMGMd1UxazBhmv5NeJJoADT3NzVO9woET5CKfFo75o= Subject key identifier: C3:71:76:AE:42:00:6E:0B:67:A5:92:E7:5B:CC:76:75:DB:A5:D1:E0 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584D2BDA2043C97E6ACD631BE300 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9a980a6a-941e-34a1-9ffa-edd653116330.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 11090 IP address blocks: 216.137.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:20:43:c9:7e:6a:cd:63:1b:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=f3bcf379-2a82-48ce-8c38-caf7c62dbac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d5:d2:7d:fc:d8:7f:79:fa:fa:85:4f:7b:20: b6:b8:43:af:2c:c9:82:5f:73:7a:e3:d1:57:c6:93: 83:b3:4d:24:52:f9:d3:d0:fe:d7:41:01:51:24:ea: 7c:07:4f:dd:13:77:eb:ec:84:0d:c0:99:e6:59:76: 20:71:c3:40:c9:63:83:a1:e3:a1:b6:35:ee:d4:5d: d2:2e:ff:24:58:9e:18:8a:21:e6:82:40:23:74:c3: 18:0d:e5:78:4c:9d:c9:f2:d2:80:2a:dd:f2:b1:16: a1:08:53:95:ac:98:14:8d:d0:55:36:33:8e:b9:ad: 7f:ff:6a:4e:ed:d8:be:d2:55:d1:01:9a:18:ad:d0: fd:c4:69:e6:5b:3d:5b:04:3b:e7:74:a4:f6:84:3b: 31:09:30:77:46:b5:82:92:b8:0a:b7:30:1e:2c:38: 4a:31:cc:a5:93:ba:a3:2c:44:ae:c1:b3:9c:9d:fc: 9d:d6:22:ce:fa:67:58:57:f8:7e:4e:82:55:89:e3: a2:6e:51:42:58:46:7a:53:88:06:4f:66:be:80:ce: 7b:64:89:97:7d:ba:12:54:34:20:2b:2d:9f:6a:c0: 9a:bf:ac:f1:f9:a4:9b:e2:2a:61:43:36:50:f8:b3: 9a:96:18:95:62:fa:ed:9a:aa:99:a4:f6:14:9b:54: 1c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:71:76:AE:42:00:6E:0B:67:A5:92:E7:5B:CC:76:75:DB:A5:D1:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9a980a6a-941e-34a1-9ffa-edd653116330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:48:fb:ea:f3:a0:7f:3c:1e:31:a8:68:31:e7:53:41:6b:52: 57:f1:bb:bb:86:00:5f:9a:6b:60:90:de:48:e6:67:76:4c:1b: 41:52:8e:44:69:3e:8c:cc:0d:23:a2:80:b3:bd:e8:43:c2:e8: 2b:99:a4:07:01:02:86:c2:ff:c8:b5:58:5d:ed:fb:22:dd:9c: 57:77:ce:c6:c2:23:11:7e:39:40:b7:5e:b1:a7:58:9b:80:a4: 92:cd:b5:12:d8:92:2b:0a:ec:34:95:72:75:e0:bf:b6:5e:28: d8:d2:e8:ef:dd:a1:52:e1:b8:15:71:b5:0e:8e:1a:5c:e5:c1: 95:8c:b8:cf:cd:b8:a5:4d:10:32:55:d9:2b:0d:ce:e1:94:b4: eb:09:85:a2:11:a9:94:73:f1:83:8b:52:f7:96:7b:07:8e:ae: 93:3e:64:aa:bc:f3:99:d5:d5:96:09:a8:b2:8b:de:42:50:ca: 3f:b5:3a:f4:1e:67:d8:3b:eb:30:30:e5:64:88:a4:30:d6:7e: b0:11:f1:60:9a:4f:14:82:ba:db:b2:17:a3:db:2e:aa:26:91: 69:44:b7:c8:b6:78:7f:1a:d7:89:20:ac:6a:4d:b0:50:9a:74: 8b:d3:9d:ac:a4:4b:db:69:a2:1e:98:2c:dc:3b:6b:41:7e:36: 69:ea:ca:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2iBDyX5qzWMb4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZjNiY2YzNzktMmE4Mi00OGNlLThjMzgtY2FmN2M2MmRiYWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndXSffzYf3n6+oVPeyC2uEOvLMmCX3N649FX xpODs00kUvnT0P7XQQFRJOp8B0/dE3fr7IQNwJnmWXYgccNAyWODoeOhtjXu1F3S Lv8kWJ4YiiHmgkAjdMMYDeV4TJ3J8tKAKt3ysRahCFOVrJgUjdBVNjOOua1//2pO 7di+0lXRAZoYrdD9xGnmWz1bBDvndKT2hDsxCTB3RrWCkrgKtzAeLDhKMcylk7qj LESuwbOcnfyd1iLO+mdYV/h+ToJVieOiblFCWEZ6U4gGT2a+gM57ZImXfboSVDQg Ky2fasCav6zx+aSb4iphQzZQ+LOalhiVYvrtmqqZpPYUm1QcIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNxdq5CAG4LZ6WS51vMdnXbpdHgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvOWE5ODBhNmEtOTQxZS0z NGExLTlmZmEtZWRkNjUzMTE2MzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2InYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpI++rzoH88HjGoaDHnU0FrUlfxu7uGAF+aa2CQ3kjmZ3ZMG0FSjkRp PozMDSOigLO96EPC6CuZpAcBAobC/8i1WF3t+yLdnFd3zsbCIxF+OUC3XrGnWJuA pJLNtRLYkisK7DSVcnXgv7ZeKNjS6O/doVLhuBVxtQ6OGlzlwZWMuM/NuKVNEDJV 2SsNzuGUtOsJhaIRqZRz8YOLUveWeweOrpM+ZKq885nV1ZYJqLKL3kJQyj+1OvQe Z9g76zAw5WSIpDDWfrAR8WCaTxSCutuyF6PbLqomkWlEt8i2eH8a14kgrGpNsFCa dIvTnaykS9tpoh6YLNw7a0F+Nmnqyq4= -----END CERTIFICATE-----Generated at Thu Mar 26 11:35:38 2026 by rpki-client