$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bf37f4a1-54de-3bb9-977d-b5775b253a42.roa File: bf37f4a1-54de-3bb9-977d-b5775b253a42.roa (raw, json) Hash identifier: C+5LrX0i4bIGeq9FPaDekR6GmGKNDqGQkhzNjBnZTls= Subject key identifier: AD:7C:D5:53:B0:5E:4D:DF:83:B9:A5:D8:A3:91:FC:C2:13:70:4B:1A Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584D143D4CA038BCB05BE1BB4700 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bf37f4a1-54de-3bb9-977d-b5775b253a42.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 19886 IP address blocks: 171.162.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:4c:a0:38:bc:b0:5b:e1:bb:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=8a52064d-5de5-44ad-b6e1-eb2702f5e574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:09:bf:8b:82:24:87:65:0f:9f:33:a4:59:6c: 34:52:dd:47:f7:b5:f4:1d:be:36:da:65:9a:6d:d6: 7b:95:88:f5:f1:b8:0a:09:5b:84:5a:68:10:58:da: 3b:e7:14:8b:f6:80:41:d7:00:bc:7c:e5:eb:a3:39: 65:3a:cb:b5:9f:be:b5:b4:c1:94:7f:39:1d:4f:ff: 90:1f:15:b7:bf:86:ad:89:14:4d:99:27:3c:31:a1: 7a:11:42:d4:9b:34:ec:9c:ba:74:39:d5:d3:59:fd: da:89:41:70:40:ff:e4:2f:00:9e:58:11:8d:25:2d: ab:97:3c:fe:ad:7e:fe:c5:8a:74:c4:fc:38:b2:5c: 4d:60:90:8b:5f:51:ec:f4:00:87:d8:8a:90:b8:29: d5:d5:1f:56:75:5e:1b:b8:44:1e:1e:6e:20:5a:51: db:5f:29:01:4b:80:8a:1b:c5:be:0a:62:c7:9f:59: a3:e0:1c:e7:31:04:55:05:06:8a:d4:a6:ec:16:56: 4f:c2:2f:d8:a7:37:a7:9a:ff:7a:98:81:5a:e2:79: 82:f5:4e:e6:55:13:5d:69:eb:32:3b:ec:ba:04:e2: a6:f1:eb:30:1c:77:32:b5:53:54:3f:98:5a:f7:21: ae:bd:57:92:39:ce:6b:6f:03:5a:23:0e:5d:0b:8a: 21:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7C:D5:53:B0:5E:4D:DF:83:B9:A5:D8:A3:91:FC:C2:13:70:4B:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bf37f4a1-54de-3bb9-977d-b5775b253a42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:94:98:bd:e5:8e:bc:7f:91:de:34:03:f3:f2:b8:5b:0e:f5: 80:9b:3e:9a:bc:f4:17:15:7c:d3:ca:f3:8e:bd:2f:27:6a:bb: 59:8b:3f:98:3c:a5:b7:a9:5d:cb:24:81:b8:68:ca:a8:e5:9b: ff:d8:f3:8a:55:00:dc:84:75:71:69:d5:de:7e:67:09:4c:ef: 7d:94:e4:51:5b:83:a3:36:02:a9:e1:af:a5:fb:bc:df:ad:2e: 9e:3b:2e:69:c6:22:d5:48:8f:d9:18:26:32:89:ed:99:3e:a3: 16:41:b1:6a:21:5b:38:05:67:83:58:18:e4:85:a2:91:06:c6: e3:51:07:44:25:75:54:e1:5c:c3:79:7d:a4:d2:85:a8:b0:66: ff:31:59:5d:ec:b3:52:98:0d:f3:ba:a7:c4:d1:6a:d2:75:91: 74:18:76:53:87:6b:02:1c:4c:20:9e:52:20:e4:be:c5:5d:54: de:b6:e5:b4:9f:0a:74:cd:11:e7:2b:7c:92:6a:d0:58:23:01: 58:0b:6e:eb:96:82:73:f9:b6:31:bf:89:5e:86:00:03:e8:e9: 98:6d:7a:32:ff:01:b8:ee:21:89:7c:00:a6:ce:5f:f6:c8:2b: a4:be:f4:0a:ef:30:ba:ab:94:62:73:6e:7b:4f:bc:a0:cf:d0: 3a:4c:0e:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUygOLywW+G7RwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk OGE1MjA2NGQtNWRlNS00NGFkLWI2ZTEtZWIyNzAyZjVlNTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQm/i4Ikh2UPnzOkWWw0Ut1H97X0Hb422mWa bdZ7lYj18bgKCVuEWmgQWNo75xSL9oBB1wC8fOXrozllOsu1n761tMGUfzkdT/+Q HxW3v4atiRRNmSc8MaF6EULUmzTsnLp0OdXTWf3aiUFwQP/kLwCeWBGNJS2rlzz+ rX7+xYp0xPw4slxNYJCLX1Hs9ACH2IqQuCnV1R9WdV4buEQeHm4gWlHbXykBS4CK G8W+CmLHn1mj4BznMQRVBQaK1KbsFlZPwi/Ypzenmv96mIFa4nmC9U7mVRNdaesy O+y6BOKm8eswHHcytVNUP5ha9yGuvVeSOc5rbwNaIw5dC4oh4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK181VOwXk3fg7ml2KOR/MITcEsaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvYmYzN2Y0YTEtNTRkZS0z YmI5LTk3N2QtYjU3NzViMjUzYTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6LkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmUmL3ljrx/kd40A/PyuFsO9YCbPpq89BcVfNPK8469Lydqu1mLP5g8 pbepXcskgbhoyqjlm//Y84pVANyEdXFp1d5+ZwlM732U5FFbg6M2Aqnhr6X7vN+t Lp47LmnGItVIj9kYJjKJ7Zk+oxZBsWohWzgFZ4NYGOSFopEGxuNRB0QldVThXMN5 faTShaiwZv8xWV3ss1KYDfO6p8TRatJ1kXQYdlOHawIcTCCeUiDkvsVdVN625bSf CnTNEecrfJJq0FgjAVgLbuuWgnP5tjG/iV6GAAPo6ZhtejL/AbjuIYl8AKbOX/bI K6S+9ArvMLqrlGJzbntPvKDP0DpMDmE= -----END CERTIFICATE-----Generated at Thu Mar 26 09:55:59 2026 by rpki-client