$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/680d15e7-a36c-3758-9cb4-c1ea5f325659.roa File: 680d15e7-a36c-3758-9cb4-c1ea5f325659.roa (raw, json) Hash identifier: blFWC+Wo8Ppp+enkadpR0reh7cEsjNADTClbe5LDv58= Subject key identifier: 4C:43:86:2E:10:54:52:24:33:20:E9:A6:FE:B6:D0:B1:55:D7:87:14 Certificate issuer: /CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901 Certificate serial: 010D0C9F4328584D2D3F7E86F4AD765DA0749F5C Authority key identifier: 3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/680d15e7-a36c-3758-9cb4-c1ea5f325659.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 63178 IP address blocks: 216.229.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:7e:86:f4:ad:76:5d:a0:74:9f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=6df01cf0-4675-43f7-bf25-817f9cd8bc9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:36:87:08:ba:55:b0:f5:8e:21:1b:09:91:00: 2d:e0:38:d3:df:a2:9b:a9:b8:3d:af:82:77:68:67: bd:fa:84:e9:89:91:ae:b3:df:2b:f0:a0:35:6c:8d: fe:eb:d1:1f:30:69:4b:f1:38:d2:cc:da:fa:e8:ad: 08:25:af:f1:c9:e6:21:e2:0e:0b:d0:c0:43:a9:57: 48:5d:f3:b4:d3:3f:06:26:54:21:60:d8:99:d7:de: 7a:02:6a:ff:32:21:f5:44:2d:ef:64:7e:c6:21:79: 5b:27:8a:96:02:a9:9c:08:55:ec:3e:4e:9f:a0:ac: 95:7c:c4:17:17:5e:23:f6:3e:ff:b7:e4:36:a6:7e: dc:5c:a3:02:13:43:47:fc:7b:53:b3:a3:30:38:4c: 19:84:70:96:07:e4:2f:62:03:dc:40:32:da:64:e0: ef:15:bb:f6:0d:26:8e:16:cf:91:86:d8:8c:c0:44: ee:6c:c2:30:91:13:45:19:60:b8:8f:48:26:d5:e6: 46:1c:72:d1:4d:d1:a0:c3:39:46:e7:09:5d:aa:43: 9e:1c:e0:64:5f:aa:a3:84:92:ef:51:35:07:12:6a: 9b:77:b3:6d:63:52:bd:f2:86:85:d2:c3:73:9b:f7: cd:98:ae:67:96:97:ee:78:5e:58:a5:ef:d6:ca:fd: bc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:43:86:2E:10:54:52:24:33:20:E9:A6:FE:B6:D0:B1:55:D7:87:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/680d15e7-a36c-3758-9cb4-c1ea5f325659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.crl X509v3 Authority Key Identifier: keyid:3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer sbgp-ipAddrBlock: critical IPv4: 216.229.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:72:4f:7d:12:4b:f9:eb:c6:97:a4:4c:9a:eb:da:65:85:8b: 3e:17:67:53:c0:0b:a5:8e:08:dc:10:f3:79:97:cc:55:1f:05: 82:16:88:a0:6b:2f:8e:0d:c3:4d:e0:b7:bd:04:d8:fe:99:dc: 4b:eb:33:5c:ed:2f:57:43:97:30:55:0f:ba:01:04:35:41:df: 88:87:79:7f:a1:1a:1e:8b:3a:f2:ba:c5:0e:4d:48:d9:76:3d: cb:c7:2a:41:a0:a7:a1:9a:fb:64:29:0f:c9:42:1b:85:4a:70: 83:fb:cf:ce:44:23:0c:15:c7:45:5d:2c:1f:d9:5d:cf:90:49: ef:7f:61:33:28:16:f2:19:f8:73:62:52:76:ab:34:f5:6a:23: 6d:73:4b:5a:30:49:5c:53:bb:22:4e:a3:8c:e2:9b:b9:5a:ea: 83:56:64:9f:60:a3:fb:c5:11:1f:62:43:4a:6e:29:2d:88:fb: a8:6b:a9:89:5c:ac:f9:82:4b:95:be:88:4f:17:d7:26:15:10: f4:a5:92:84:e8:a8:c2:cc:5b:43:3f:91:b6:1d:f5:e9:c6:4c: 45:25:74:fc:33:63:e3:09:ca:32:5f:b1:df:f0:24:36:61:92: 1d:8b:26:c3:0d:10:ec:7e:b8:eb:0b:84:46:0e:e3:bb:99:c7: db:f4:8e:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP36G9K12XaB0n1wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVjNGVhYWItYTkyNy00MWM4LWI5NGQtZDVkYzdiYTNk OTAxMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk NmRmMDFjZjAtNDY3NS00M2Y3LWJmMjUtODE3ZjljZDhiYzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTaHCLpVsPWOIRsJkQAt4DjT36Kbqbg9r4J3 aGe9+oTpiZGus98r8KA1bI3+69EfMGlL8TjSzNr66K0IJa/xyeYh4g4L0MBDqVdI XfO00z8GJlQhYNiZ1956Amr/MiH1RC3vZH7GIXlbJ4qWAqmcCFXsPk6foKyVfMQX F14j9j7/t+Q2pn7cXKMCE0NH/HtTs6MwOEwZhHCWB+QvYgPcQDLaZODvFbv2DSaO Fs+RhtiMwETubMIwkRNFGWC4j0gm1eZGHHLRTdGgwzlG5wldqkOeHOBkX6qjhJLv UTUHEmqbd7NtY1K98oaF0sNzm/fNmK5nlpfueF5Ype/Wyv28tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExDhi4QVFIkMyDppv620LFV14cUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81ZWM0 ZWFhYi1hOTI3LTQxYzgtYjk0ZC1kNWRjN2JhM2Q5MDEvNjgwZDE1ZTctYTM2Yy0z NzU4LTljYjQtYzFlYTVmMzI1NjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWVjNGVhYWItYTkyNy00MWM4LWI5 NGQtZDVkYzdiYTNkOTAxLzVlYzRlYWFiLWE5MjctNDFjOC1iOTRkLWQ1ZGM3YmEz ZDkwMS5jcmwwHwYDVR0jBBgwFoAUPLew0jKWKIjnlbiMEySNE53NbQUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81ZWM0ZWFhYi1hOTI3LTQxYzgtYjk0ZC1kNWRj N2JhM2Q5MDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2OV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhyT30SS/nrxpekTJrr2mWFiz4XZ1PAC6WOCNwQ83mXzFUfBYIWiKBr L44Nw03gt70E2P6Z3EvrM1ztL1dDlzBVD7oBBDVB34iHeX+hGh6LOvK6xQ5NSNl2 PcvHKkGgp6Ga+2QpD8lCG4VKcIP7z85EIwwVx0VdLB/ZXc+QSe9/YTMoFvIZ+HNi UnarNPVqI21zS1owSVxTuyJOo4zim7la6oNWZJ9go/vFER9iQ0puKS2I+6hrqYlc rPmCS5W+iE8X1yYVEPSlkoToqMLMW0M/kbYd9enGTEUldPwzY+MJyjJfsd/wJDZh kh2LJsMNEOx+uOsLhEYO47uZx9v0jus= -----END CERTIFICATE-----Generated at Thu Mar 26 18:48:11 2026 by rpki-client