$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/70cfbeaa-2556-34d4-9e62-5c84f81d2077.roa File: 70cfbeaa-2556-34d4-9e62-5c84f81d2077.roa (raw, json) Hash identifier: u5iVPnQ2IslW09cZ20y7oUG/Z6WVjYo0UUbxs6IRieQ= Subject key identifier: 49:3A:02:78:A3:B7:4D:AD:4F:5E:BB:08:96:2B:37:24:53:B2:BA:E7 Certificate issuer: /CN=e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c Certificate serial: 010D0C9F4328584D237A68E9FE29945D29429376 Authority key identifier: 8E:35:F3:58:9D:35:14:02:BD:CB:48:EB:63:39:B8:8F:F5:C2:67:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/70cfbeaa-2556-34d4-9e62-5c84f81d2077.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 401427 IP address blocks: 216.152.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:68:e9:fe:29:94:5d:29:42:93:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=f93b2e46-0af3-474e-a102-a3df06e52e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1a:f8:cc:3e:50:b7:f1:f9:d1:d9:4a:2f:84: 08:de:7f:d7:45:57:f5:14:68:26:28:78:11:a4:88: 11:e9:5c:08:d2:8b:56:37:3c:af:3c:90:8c:97:88: 17:e1:c5:80:09:b6:a3:3a:c5:25:1f:67:c7:bc:de: 2a:e1:dd:7a:a9:08:a3:4a:a3:b2:60:c3:ff:2f:ce: 0b:a2:58:ab:d8:3c:75:0f:f4:cc:be:28:77:0f:68: f5:6a:e8:e8:61:2d:5b:4b:b4:4a:ab:2e:c2:67:0c: 6d:d5:fd:89:ca:5f:dc:12:3c:b4:c5:3a:89:d8:cc: e6:a8:6f:a5:13:78:04:06:63:86:30:e6:49:b5:56: 18:62:aa:0c:82:d2:b9:fb:ab:14:40:f7:82:70:b1: 9e:0e:2d:6b:52:cb:ab:44:56:fd:5c:81:7a:62:be: 96:52:8b:fd:5b:86:70:c3:d5:f2:96:66:50:ad:01: 0d:f3:d4:a1:e4:70:4b:33:cb:ea:f7:6b:94:55:d2: 3b:89:5d:5f:ba:d8:0d:c6:f1:df:1a:59:95:9e:c8: 48:39:92:10:45:5e:04:bb:ba:24:e9:02:df:4f:5f: 8e:d1:ab:96:44:d9:8f:a2:31:ee:68:60:50:6b:a3: b7:56:9d:ec:58:c2:9b:c1:ec:6c:54:3c:a7:e4:2b: 9c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3A:02:78:A3:B7:4D:AD:4F:5E:BB:08:96:2B:37:24:53:B2:BA:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/70cfbeaa-2556-34d4-9e62-5c84f81d2077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.crl X509v3 Authority Key Identifier: keyid:8E:35:F3:58:9D:35:14:02:BD:CB:48:EB:63:39:B8:8F:F5:C2:67:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer sbgp-ipAddrBlock: critical IPv4: 216.152.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:f9:4c:62:16:78:c6:11:0b:c6:14:b2:ef:8c:88:e2:73:1b: 7f:71:16:a6:86:45:21:25:1d:0d:c6:78:e4:ea:cd:d7:45:58: e8:a7:72:d7:ac:fa:e2:c1:24:19:47:2d:77:62:33:d6:f6:f3: 03:cd:44:6c:bc:b9:b8:cb:46:6b:d4:8a:43:fb:35:dc:81:4d: bb:ba:bb:f7:dc:9c:47:c5:2a:4a:08:86:9d:c3:55:9e:25:64: f6:b3:7b:04:e5:1f:62:95:29:fd:61:2a:bf:b5:4d:9c:27:fc: 4b:2b:ce:77:c7:dc:14:32:72:bd:bc:41:d8:0e:0e:d6:12:77: 98:d1:48:7b:45:f0:33:c2:c0:30:6b:6f:cd:37:36:af:18:7f: 02:da:f8:e4:f4:69:df:30:0e:39:c8:bb:ab:27:86:b9:ab:28: 59:76:39:bd:a1:b6:43:43:3e:27:08:14:89:6b:e8:d0:1e:69: ca:ec:fb:8f:58:b8:66:27:2c:96:62:e5:81:11:68:8b:bf:12: 8f:2e:8b:f4:01:c2:61:b7:0b:fd:c0:15:61:c7:11:97:de:91: e5:96:cd:db:9b:07:3d:0e:d8:36:cc:fc:5f:e3:96:37:a6:b1: 35:6c:b3:71:3c:7e:07:79:8d:ab:3f:51:29:03:8f:97:1a:ca: 93:23:69:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jemjp/imUXSlCk3YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNlNWY4ZjgtN2Q2Zi00ZDQzLWExY2EtNDc3ZWM5MGE1 YTNjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZjkzYjJlNDYtMGFmMy00NzRlLWExMDItYTNkZjA2ZTUyZTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhr4zD5Qt/H50dlKL4QI3n/XRVf1FGgmKHgR pIgR6VwI0otWNzyvPJCMl4gX4cWACbajOsUlH2fHvN4q4d16qQijSqOyYMP/L84L olir2Dx1D/TMvih3D2j1aujoYS1bS7RKqy7CZwxt1f2Jyl/cEjy0xTqJ2MzmqG+l E3gEBmOGMOZJtVYYYqoMgtK5+6sUQPeCcLGeDi1rUsurRFb9XIF6Yr6WUov9W4Zw w9XylmZQrQEN89Sh5HBLM8vq92uUVdI7iV1futgNxvHfGlmVnshIOZIQRV4Eu7ok 6QLfT1+O0auWRNmPojHuaGBQa6O3Vp3sWMKbwexsVDyn5Cuc9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEk6Anijt02tT167CJYrNyRTsrrnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lM2U1 ZjhmOC03ZDZmLTRkNDMtYTFjYS00NzdlYzkwYTVhM2MvNzBjZmJlYWEtMjU1Ni0z NGQ0LTllNjItNWM4NGY4MWQyMDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTNlNWY4ZjgtN2Q2Zi00ZDQzLWEx Y2EtNDc3ZWM5MGE1YTNjL2UzZTVmOGY4LTdkNmYtNGQ0My1hMWNhLTQ3N2VjOTBh NWEzYy5jcmwwHwYDVR0jBBgwFoAUjjXzWJ01FAK9y0jrYzm4j/XCZ8swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lM2U1ZjhmOC03ZDZmLTRkNDMtYTFjYS00Nzdl YzkwYTVhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JhyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADD5TGIWeMYRC8YUsu+MiOJzG39xFqaGRSElHQ3GeOTqzddFWOinctes +uLBJBlHLXdiM9b28wPNRGy8ubjLRmvUikP7NdyBTbu6u/fcnEfFKkoIhp3DVZ4l ZPazewTlH2KVKf1hKr+1TZwn/EsrznfH3BQycr28QdgODtYSd5jRSHtF8DPCwDBr b803Nq8YfwLa+OT0ad8wDjnIu6snhrmrKFl2Ob2htkNDPicIFIlr6NAeacrs+49Y uGYnLJZi5YERaIu/Eo8ui/QBwmG3C/3AFWHHEZfekeWWzdubBz0O2DbM/F/jljem sTVss3E8fgd5jas/USkDj5caypMjaaU= -----END CERTIFICATE-----Generated at Thu Mar 26 13:32:51 2026 by rpki-client