$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/be73bf96-e5bd-337c-93e4-4955acaa2e68.roa File: be73bf96-e5bd-337c-93e4-4955acaa2e68.roa (raw, json) Hash identifier: AVqpluj5mB0nqsC2PNgVsV23WqPlutW1N2MuDD14xfY= Subject key identifier: 08:76:30:98:AD:44:F5:F5:CF:BF:6A:45:A1:71:A0:5C:31:1A:67:91 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584D2BDA2078E59B3E041131BA00 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/be73bf96-e5bd-337c-93e4-4955acaa2e68.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 11090 IP address blocks: 216.137.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:20:78:e5:9b:3e:04:11:31:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=e1b0436b-e91a-4163-bcb8-f95a902a38d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cf:7e:1c:d9:a2:4d:83:4f:95:d5:f7:bd:4c: fa:2d:d4:e7:cd:b9:a9:f0:e7:ef:3d:c2:0d:9e:e9: fc:d5:67:f9:3d:41:63:cb:63:ce:a7:48:82:3e:16: 1a:64:01:2a:74:59:04:c9:8e:d6:be:0f:a5:c2:ea: 83:26:99:dc:f7:c2:42:74:ad:4c:cb:02:40:96:2a: a0:62:6c:47:d5:f8:0f:b7:17:9b:d1:c1:0c:94:79: be:1f:4b:57:71:b3:fc:72:94:1d:ba:91:32:6f:46: 9f:f6:17:08:48:98:16:0d:16:0a:ce:3f:65:f4:5e: 7d:2d:9f:1c:1d:c6:85:5d:67:d3:35:cf:42:ba:9c: e3:ac:95:ab:77:62:06:df:bb:82:28:03:d5:5e:b3: 1c:42:0e:f4:e0:e1:82:6a:b9:ab:da:d0:b9:65:7d: c7:66:28:b1:04:7c:63:2b:d7:ed:b6:04:34:f1:18: 38:7a:17:e0:a9:23:a1:95:d6:25:fe:76:c7:b5:23: 2b:43:d7:9b:2d:6e:73:37:02:39:d2:4c:78:92:f6: 12:ae:3f:c6:57:36:a5:11:a8:4d:d3:e1:cd:07:73: 4a:b7:f5:86:ef:b5:7d:08:89:a6:87:f7:8c:5d:ec: 58:e4:28:bc:15:16:9e:39:9b:6e:eb:27:58:b8:dd: 8d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:76:30:98:AD:44:F5:F5:CF:BF:6A:45:A1:71:A0:5C:31:1A:67:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/be73bf96-e5bd-337c-93e4-4955acaa2e68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:e6:30:d6:53:67:58:4f:18:7e:50:57:fa:50:91:fe:91:a8: f0:78:58:c2:ca:7c:06:16:cd:f1:f3:1f:24:d3:57:9a:78:a3: 4a:1e:e8:bb:24:a5:87:96:a5:62:6a:f7:25:52:78:80:b8:f5: 55:38:75:cc:76:14:1d:b2:e4:30:d0:8f:c1:24:c1:c2:ad:96: 41:f1:a3:b6:2e:04:98:97:aa:d6:52:e2:af:1b:37:c5:ab:3b: d0:be:d4:ad:8f:1c:e0:2a:9a:8b:e9:45:cf:f7:3f:52:ab:d4: 09:9b:6a:e0:72:6e:c6:20:63:ba:06:aa:09:3c:ce:db:58:c2: d2:66:20:48:a3:72:93:da:b7:4b:ef:a8:da:2c:5b:cf:a4:a5: 7b:26:11:92:a6:0f:d6:3d:fb:c4:a2:7b:fe:27:5a:6e:3e:55: 1b:e6:d4:2f:b2:fb:ce:1e:bb:1b:ba:24:60:4a:87:d9:47:5f: a1:3b:4c:a5:a0:7a:e4:f4:fe:3a:2f:ea:d4:cb:75:04:2b:99: 43:82:7c:78:98:da:9b:eb:ae:11:e7:94:81:11:f3:da:1d:6e: a6:c3:bb:f8:48:48:26:f3:97:94:ec:81:d8:7c:ec:6a:b0:ca: 82:c8:a8:3c:ee:bf:72:64:ae:8c:de:86:b9:a5:2f:52:de:41: b2:09:67:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2iB45Zs+BBExugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZTFiMDQzNmItZTkxYS00MTYzLWJjYjgtZjk1YTkwMmEzOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2M9+HNmiTYNPldX3vUz6LdTnzbmp8OfvPcIN nun81Wf5PUFjy2POp0iCPhYaZAEqdFkEyY7Wvg+lwuqDJpnc98JCdK1MywJAliqg YmxH1fgPtxeb0cEMlHm+H0tXcbP8cpQdupEyb0af9hcISJgWDRYKzj9l9F59LZ8c HcaFXWfTNc9CupzjrJWrd2IG37uCKAPVXrMcQg704OGCarmr2tC5ZX3HZiixBHxj K9fttgQ08Rg4ehfgqSOhldYl/nbHtSMrQ9ebLW5zNwI50kx4kvYSrj/GVzalEahN 0+HNB3NKt/WG77V9CImmh/eMXexY5Ci8FRaeOZtu6ydYuN2NoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAh2MJitRPX1z79qRaFxoFwxGmeRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYmU3M2JmOTYtZTViZC0z MzdjLTkzZTQtNDk1NWFjYWEyZTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2InKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPmMNZTZ1hPGH5QV/pQkf6RqPB4WMLKfAYWzfHzHyTTV5p4o0oe6Lsk pYeWpWJq9yVSeIC49VU4dcx2FB2y5DDQj8EkwcKtlkHxo7YuBJiXqtZS4q8bN8Wr O9C+1K2PHOAqmovpRc/3P1Kr1AmbauBybsYgY7oGqgk8zttYwtJmIEijcpPat0vv qNosW8+kpXsmEZKmD9Y9+8Sie/4nWm4+VRvm1C+y+84euxu6JGBKh9lHX6E7TKWg euT0/jov6tTLdQQrmUOCfHiY2pvrrhHnlIER89odbqbDu/hISCbzl5Tsgdh87Gqw yoLIqDzuv3JkrozehrmlL1LeQbIJZ54= -----END CERTIFICATE-----Generated at Thu Mar 26 14:23:14 2026 by rpki-client