$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa File: 3c5788b1-7c82-3275-9457-c61ff52b2890.roa (raw, json) Hash identifier: YrePsBLrRcxQ2B4y0wxNQDa08ErtdD5SV4qcSSM9JLY= Subject key identifier: 3A:29:8B:44:64:9D:17:96:0D:14:AC:32:E7:E1:2C:ED:CF:D6:11:A6 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584D386A480818A75A2A0E6C1BC0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 397422 IP address blocks: 208.56.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:48:08:18:a7:5a:2a:0e:6c:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=986ad47b-8aa3-47da-8b9e-b43abde5abd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:65:6f:3b:2b:94:58:e2:3f:88:97:6a:17:d4: 82:50:8e:38:bf:3b:d4:cd:02:57:ed:48:df:d6:0b: 1c:fd:ba:60:6e:2b:4b:b9:cd:0a:6c:18:72:fd:d2: bf:21:4b:e3:eb:60:cc:8e:4b:da:4f:12:da:47:15: 74:12:9e:08:a0:17:05:98:35:07:ea:b7:80:5a:16: 56:30:51:52:9e:26:6e:94:22:c7:cb:47:f6:8a:04: f2:37:6c:43:94:8b:38:98:29:9c:b0:80:dd:a0:cc: 85:72:dd:77:c1:ca:ef:ed:52:d8:75:00:79:01:bc: 32:5c:c1:a2:52:a9:04:1c:c3:1b:8d:8c:b0:ac:71: 90:6b:78:24:06:3b:c7:c3:b1:db:89:58:ea:34:2f: 37:80:1d:cf:83:b9:e4:fd:4b:3c:2d:8b:f9:83:c8: b0:ec:52:d3:40:f2:40:8f:46:c3:e6:d2:5d:7d:16: eb:ae:d0:db:44:e1:37:5f:4f:94:43:00:54:1a:29: 1e:76:a7:0e:24:3f:ff:2b:f0:fc:ed:71:30:17:04: be:18:a6:d1:12:9c:3f:ca:e4:dc:dd:2a:cb:42:44: 34:0d:14:15:80:34:28:58:da:62:25:a1:6a:37:b1: 9c:1d:b0:c5:5d:72:14:36:fa:d5:3d:5a:20:d0:c0: d0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:29:8B:44:64:9D:17:96:0D:14:AC:32:E7:E1:2C:ED:CF:D6:11:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 208.56.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:fb:21:1e:a9:05:be:c1:45:02:d2:50:9c:82:fe:34:1c:89: 88:e0:0d:18:7d:1e:e4:49:70:d2:fc:58:02:79:8d:c0:f0:5c: 1f:01:58:7b:e2:88:48:66:03:92:47:06:16:ce:9b:cd:22:82: 10:88:60:d4:46:bc:3a:45:65:f6:8e:39:df:7c:52:c9:35:c6: ed:55:9c:28:d8:04:d1:a7:03:95:6f:18:8e:94:d4:bb:9f:40: 1b:aa:50:3a:b7:07:a9:93:4b:4f:b0:b2:55:98:b8:81:f9:b3: 45:81:8a:3d:a8:e7:84:4d:d6:0b:cb:17:db:0a:50:cf:4e:ff: 4b:03:1e:8e:40:bf:a6:96:2a:a4:6a:87:5b:ee:19:6b:9c:a7: cd:bf:2d:b6:a7:c1:d3:54:14:35:19:7f:2f:05:b3:15:2b:7d: 93:15:bd:db:bb:a4:f4:c7:25:8f:74:d6:44:8a:d7:0d:c4:4b: a0:31:d5:66:17:75:51:85:70:86:f4:83:e4:a8:ce:2c:bf:13: 57:a1:4f:f4:7a:c7:50:5e:d3:66:ed:9d:ae:23:da:9b:70:78: 58:92:ac:01:dc:62:0a:79:12:7e:fd:6b:70:bc:d3:bc:5c:60: ad:01:2a:85:80:47:ff:40:dd:14:00:79:49:33:ce:69:15:0b: 66:26:66:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04akgIGKdaKg5sG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk OTg2YWQ0N2ItOGFhMy00N2RhLThiOWUtYjQzYWJkZTVhYmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGVvOyuUWOI/iJdqF9SCUI44vzvUzQJX7Ujf 1gsc/bpgbitLuc0KbBhy/dK/IUvj62DMjkvaTxLaRxV0Ep4IoBcFmDUH6reAWhZW MFFSniZulCLHy0f2igTyN2xDlIs4mCmcsIDdoMyFct13wcrv7VLYdQB5AbwyXMGi UqkEHMMbjYywrHGQa3gkBjvHw7HbiVjqNC83gB3Pg7nk/Us8LYv5g8iw7FLTQPJA j0bD5tJdfRbrrtDbROE3X0+UQwBUGikedqcOJD//K/D87XEwFwS+GKbREpw/yuTc 3SrLQkQ0DRQVgDQoWNpiJaFqN7GcHbDFXXIUNvrVPVog0MDQlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDopi0RknReWDRSsMufhLO3P1hGmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvM2M1Nzg4YjEtN2M4Mi0z Mjc1LTk0NTctYzYxZmY1MmIyODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DjuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/7IR6pBb7BRQLSUJyC/jQciYjgDRh9HuRJcNL8WAJ5jcDwXB8BWHvi iEhmA5JHBhbOm80ighCIYNRGvDpFZfaOOd98Usk1xu1VnCjYBNGnA5VvGI6U1Luf QBuqUDq3B6mTS0+wslWYuIH5s0WBij2o54RN1gvLF9sKUM9O/0sDHo5Av6aWKqRq h1vuGWucp82/LbanwdNUFDUZfy8FsxUrfZMVvdu7pPTHJY901kSK1w3ES6Ax1WYX dVGFcIb0g+Soziy/E1ehT/R6x1Be02btna4j2ptweFiSrAHcYgp5En79a3C807xc YK0BKoWAR/9A3RQAeUkzzmkVC2YmZlw= -----END CERTIFICATE-----Generated at Thu Mar 26 10:09:39 2026 by rpki-client