$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ffdf3816-c1ad-378b-8900-97d4ff595436.roa File: ffdf3816-c1ad-378b-8900-97d4ff595436.roa (raw, json) Hash identifier: 7B8k2iJfXkOkYHSMxqsPdgvtS9iJFcRK7ZZ/G2hXbkQ= Subject key identifier: A1:65:04:AE:C9:9D:69:F7:7E:15:CD:97:D1:32:1E:C5:BC:EB:65:1F Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584D343A1DD0276B2DC6597AD1C0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ffdf3816-c1ad-378b-8900-97d4ff595436.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 55246 IP address blocks: 216.110.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:1d:d0:27:6b:2d:c6:59:7a:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=22eb46fd-0232-44a1-9d71-6db45965f5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e1:94:c1:5b:c1:1a:d1:39:65:d4:64:2b:8c: 38:78:6b:f5:57:29:99:c4:f4:c0:33:a4:9a:c6:3c: 87:f7:46:ec:9f:43:96:8d:76:e4:c3:c4:e3:f7:88: 8d:39:13:2d:8a:b8:8e:ca:12:3a:8a:2f:24:54:32: 9e:97:ee:de:b5:c1:a7:85:cb:be:3e:d8:37:fa:83: db:08:1e:fe:2a:fe:f2:54:dd:db:db:8f:06:a8:52: c9:eb:b7:56:35:e3:ab:cb:ee:67:d8:07:90:4b:72: 8b:13:65:9b:f9:7e:1e:39:20:20:bf:87:8f:f4:a2: 4d:a8:54:d4:ea:55:cb:87:e2:e9:f1:a9:4e:1b:ad: b0:3a:0e:f3:92:43:ed:d3:ec:73:50:e8:08:41:a1: 59:80:0d:f2:b1:19:28:3a:3e:e8:9c:29:c2:a8:f1: a1:ac:4c:d3:80:ac:75:08:97:1b:70:8d:8c:28:96: 06:a7:4a:d2:f7:9d:2a:ef:b4:d3:d5:b7:3a:d7:56: 9b:34:58:63:8f:55:f9:8d:db:5d:7d:6c:fe:4c:a3: 81:e6:42:86:a5:5f:ca:9f:1e:f5:e0:b7:9a:82:62: c5:5a:ba:a0:54:f8:c2:2c:9c:eb:2e:08:09:6a:7b: 4d:3e:1a:c9:15:c2:59:d7:2a:26:ba:ab:5e:f1:49: a0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:65:04:AE:C9:9D:69:F7:7E:15:CD:97:D1:32:1E:C5:BC:EB:65:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ffdf3816-c1ad-378b-8900-97d4ff595436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 216.110.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:37:45:b7:ee:e7:df:7d:9b:f7:64:45:62:f0:95:1d:df:91: 26:9d:8f:e3:e2:2f:f6:85:26:ef:8b:c9:ba:54:2d:6a:21:31: 19:b9:24:a5:46:9d:ad:cd:62:6a:f3:0c:f9:41:b3:75:60:c2: cf:2b:28:b7:44:bb:25:5e:49:de:99:2b:60:08:08:f8:b3:26: 8d:59:3c:19:9f:85:4f:db:8f:c9:c7:6c:64:7d:b2:ff:95:cf: c3:43:d0:57:06:f1:03:9b:43:70:99:7d:98:55:01:50:56:91: b2:ad:87:a9:43:73:ac:1f:e7:6d:0d:00:15:ad:7b:26:46:e3: 99:ba:72:8c:2e:48:68:32:60:13:7a:42:16:94:65:b7:53:ad: 83:99:17:5b:0a:d8:10:62:ba:6d:1b:95:4b:e8:40:26:2f:aa: 7c:9a:c3:e9:5a:c9:ba:3d:0f:f6:94:6e:1c:0d:45:fb:32:36: 16:52:db:2a:36:53:16:02:23:6c:96:c0:d8:05:44:a2:1e:81: be:89:85:ff:dc:38:90:a0:49:88:68:78:65:c2:aa:ef:b0:db: 7d:85:61:75:f1:3c:6e:47:f5:94:5e:0b:8d:3a:f0:21:99:68: aa:10:7f:31:24:e7:19:45:ea:98:c0:89:ec:cb:29:8e:9f:c4: b8:ce:6f:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00Oh3QJ2stxll60cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk MjJlYjQ2ZmQtMDIzMi00NGExLTlkNzEtNmRiNDU5NjVmNWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveGUwVvBGtE5ZdRkK4w4eGv1VymZxPTAM6Sa xjyH90bsn0OWjXbkw8Tj94iNORMtiriOyhI6ii8kVDKel+7etcGnhcu+Ptg3+oPb CB7+Kv7yVN3b248GqFLJ67dWNeOry+5n2AeQS3KLE2Wb+X4eOSAgv4eP9KJNqFTU 6lXLh+Lp8alOG62wOg7zkkPt0+xzUOgIQaFZgA3ysRkoOj7onCnCqPGhrEzTgKx1 CJcbcI2MKJYGp0rS950q77TT1bc611abNFhjj1X5jdtdfWz+TKOB5kKGpV/Knx71 4LeagmLFWrqgVPjCLJzrLggJantNPhrJFcJZ1yomuqte8UmgZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFlBK7JnWn3fhXNl9EyHsW862UfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZmZkZjM4MTYtYzFhZC0z NzhiLTg5MDAtOTdkNGZmNTk1NDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2G7KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD83Rbfu5999m/dkRWLwlR3fkSadj+PiL/aFJu+LybpULWohMRm5JKVG na3NYmrzDPlBs3Vgws8rKLdEuyVeSd6ZK2AICPizJo1ZPBmfhU/bj8nHbGR9sv+V z8ND0FcG8QObQ3CZfZhVAVBWkbKth6lDc6wf520NABWteyZG45m6cowuSGgyYBN6 QhaUZbdTrYOZF1sK2BBium0blUvoQCYvqnyaw+laybo9D/aUbhwNRfsyNhZS2yo2 UxYCI2yWwNgFRKIegb6Jhf/cOJCgSYhoeGXCqu+w232FYXXxPG5H9ZReC4068CGZ aKoQfzEk5xlF6pjAiezLKY6fxLjOb+A= -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:50 2026 by rpki-client