$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a3e5e8e1-aea7-3688-8270-bc1d775cb3b1.roa File: a3e5e8e1-aea7-3688-8270-bc1d775cb3b1.roa (raw, json) Hash identifier: jHOp6c/vUhOOl4rLFRWo2GEA+QExBy/WjrrRBBM/j9g= Subject key identifier: 22:3C:A3:8C:54:D4:9E:B0:BD:63:EE:EB:0F:1F:72:D3:D4:CE:51:88 Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Certificate serial: 010D0C9F4328584D40CA38CF9DB86FB821D30800 Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a3e5e8e1-aea7-3688-8270-bc1d775cb3b1.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 203 IP address blocks: 170.188.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:38:cf:9d:b8:6f:b8:21:d3:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=15a7eab8-05d1-4832-a2da-3dc7b65bc140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c7:58:fb:c6:77:96:6f:3b:b9:a8:94:1f:7c: 80:cb:77:a4:ed:51:c4:61:f2:64:49:22:c1:99:f0: 4d:d1:d3:3d:5e:66:95:75:bc:64:2d:47:1b:7c:a7: 0e:90:f7:ed:c3:00:a9:f6:b2:99:54:ff:4e:51:cc: 7f:da:0e:e5:e9:09:88:56:4c:fe:d3:a5:db:9f:40: d4:3a:3c:4c:3a:ca:00:db:f1:08:55:ae:73:f4:20: 7e:f9:58:c9:24:47:fc:88:18:21:98:e3:74:e8:63: c2:7c:3b:b5:0a:bf:5f:bb:23:6f:1d:e2:f8:b1:1f: 20:a2:d3:1b:78:d4:58:85:96:da:47:87:67:0e:d6: 7f:58:28:5b:dd:28:a0:5a:30:ae:b5:c7:19:4d:4b: 23:eb:d6:61:6b:a6:9e:a1:98:84:c1:0d:9c:91:a1: 83:31:3d:42:57:ca:46:de:b4:a0:ad:83:95:c7:f4: b3:dc:24:ba:5c:43:41:79:c4:ba:f8:74:e1:11:cf: 9e:21:1a:be:37:e0:e2:28:24:63:19:0d:f5:17:6c: 0a:d5:35:c1:de:b9:be:cb:ec:7b:14:5f:bf:da:4c: ef:02:ff:3c:5f:84:fc:3c:38:e2:d0:68:f1:44:b6: 69:75:f3:a5:ba:b8:cd:ef:4a:03:27:33:84:60:96: b2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3C:A3:8C:54:D4:9E:B0:BD:63:EE:EB:0F:1F:72:D3:D4:CE:51:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a3e5e8e1-aea7-3688-8270-bc1d775cb3b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl X509v3 Authority Key Identifier: keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer sbgp-ipAddrBlock: critical IPv4: 170.188.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:f0:f0:35:3f:87:71:21:b4:e8:85:b6:24:8a:0f:4b:59:e3: 97:69:c4:19:63:83:42:08:4b:e8:51:50:ca:a2:a0:3c:7d:83: 23:15:50:2f:3c:2a:01:8c:e5:6a:31:bd:76:51:8c:92:bd:e8: 38:98:f4:5d:73:f6:c2:68:c8:ad:09:34:6b:8d:13:bf:cd:27: a9:6a:d1:d2:c9:82:90:3a:46:9b:42:5f:4f:4f:94:14:de:48: c6:2c:71:f7:9d:1d:95:13:95:e3:b3:9d:fc:eb:57:89:ff:29: fc:94:43:62:a7:a9:de:48:13:1c:e5:fd:af:85:21:88:b7:60: 72:5e:7f:31:3c:66:4b:cb:db:05:7e:83:cf:cf:8e:1c:37:0c: 45:20:55:36:e2:c7:e5:83:f5:4d:71:90:04:50:04:a0:8d:5f: 54:c6:65:3f:04:29:ae:e9:4a:2f:08:94:b4:53:af:7b:f5:72: 1f:f2:cb:35:71:89:cf:73:2c:fe:88:d8:ab:c4:01:bc:77:87: 9c:c7:a1:8c:72:c0:8f:61:37:25:3a:9c:0a:72:34:e6:35:2e: 31:37:ca:c2:81:eb:11:f3:4a:fd:db:ae:67:61:6b:62:a2:a9: 44:db:15:3c:45:29:25:f6:e3:75:88:d9:cb:8c:bb:ec:d0:45: b8:65:26:ec -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1AyjjPnbhvuCHTCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NTEyMmUtZjJmZi00MzQ5LThlN2ItZDYwNGVlMjU3 N2YxMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk MTVhN2VhYjgtMDVkMS00ODMyLWEyZGEtM2RjN2I2NWJjMTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18dY+8Z3lm87uaiUH3yAy3ek7VHEYfJkSSLB mfBN0dM9XmaVdbxkLUcbfKcOkPftwwCp9rKZVP9OUcx/2g7l6QmIVkz+06Xbn0DU OjxMOsoA2/EIVa5z9CB++VjJJEf8iBghmON06GPCfDu1Cr9fuyNvHeL4sR8gotMb eNRYhZbaR4dnDtZ/WChb3SigWjCutccZTUsj69Zha6aeoZiEwQ2ckaGDMT1CV8pG 3rSgrYOVx/Sz3CS6XENBecS6+HThEc+eIRq+N+DiKCRjGQ31F2wK1TXB3rm+y+x7 FF+/2kzvAv88X4T8PDji0GjxRLZpdfOlurjN70oDJzOEYJayMQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCI8o4xU1J6wvWPu6w8fctPUzlGIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iOTg1 MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUyNTc3ZjEvYTNlNWU4ZTEtYWVhNy0z Njg4LTgyNzAtYmMxZDc3NWNiM2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjk4NTEyMmUtZjJmZi00MzQ5LThl N2ItZDYwNGVlMjU3N2YxL2I5ODUxMjJlLWYyZmYtNDM0OS04ZTdiLWQ2MDRlZTI1 NzdmMS5jcmwwHwYDVR0jBBgwFoAUMkPnPPcbBd82CkZOMRZRS4dhJtswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iOTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0 ZWUyNTc3ZjEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqrwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAhvDwNT+HcSG06IW2JIoPS1njl2nEGWODQghL6FFQyqKgPH2DIxVQLzwq AYzlajG9dlGMkr3oOJj0XXP2wmjIrQk0a40Tv80nqWrR0smCkDpGm0JfT0+UFN5I xixx950dlROV47Od/OtXif8p/JRDYqep3kgTHOX9r4UhiLdgcl5/MTxmS8vbBX6D z8+OHDcMRSBVNuLH5YP1TXGQBFAEoI1fVMZlPwQprulKLwiUtFOve/VyH/LLNXGJ z3Ms/ojYq8QBvHeHnMehjHLAj2E3JTqcCnI05jUuMTfKwoHrEfNK/duuZ2FrYqKp RNsVPEUpJfbjdYjZy4y77NBFuGUm7A== -----END CERTIFICATE-----Generated at Thu Mar 26 15:24:02 2026 by rpki-client