$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ba8af2d4-74fe-3670-b870-0f37b59f2468.roa File: ba8af2d4-74fe-3670-b870-0f37b59f2468.roa (raw, json) Hash identifier: lKErF2qCqNIM0V6DAszjCDuIj6y0/YDXuGIngJMPDIA= Subject key identifier: 81:01:03:54:32:E1:8E:EB:36:C9:3C:F7:1C:EB:CC:BF:23:A0:06:C1 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584D40CB422D957ABDD912670F80 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ba8af2d4-74fe-3670-b870-0f37b59f2468.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 53533 IP address blocks: 173.196.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:42:2d:95:7a:bd:d9:12:67:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=1d31706a-d59e-4265-b251-2c2785ee27f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:25:7c:a8:3a:53:1a:ed:35:cd:14:78:4c:e1: ea:52:f2:f2:26:ed:bc:d0:f9:6b:ea:27:48:ee:50: a2:b1:c2:31:10:ec:cf:b7:be:3c:b8:02:41:09:54: e4:06:ed:9f:8b:e9:69:bd:61:85:07:fc:a9:23:ff: fa:e1:e9:08:35:46:13:80:89:94:ba:53:02:03:41: be:a6:3d:9b:03:19:ce:f1:95:ef:80:47:e6:09:a3: d8:fa:5d:ed:df:be:7a:2b:e6:d2:8b:8e:b0:3e:f0: 3d:2f:18:42:6a:a0:a7:ba:13:3e:57:e2:d2:6e:83: 88:4e:4a:84:d3:20:2e:4e:58:65:f5:d7:10:32:ec: e6:e9:05:68:38:a3:62:25:39:81:8a:63:a0:6c:24: f6:b9:97:61:ad:3a:0e:e0:79:5c:9f:c2:36:f4:65: cb:a1:44:a3:a9:80:08:49:2f:e8:04:1e:c4:25:51: b4:e6:85:8d:dc:09:d8:c5:db:80:e0:85:e9:9e:0a: f5:33:0a:81:17:95:50:eb:cd:ae:71:c0:4e:c0:34: 7e:64:35:00:95:a4:cf:cb:73:85:49:4d:72:9d:7f: 20:0e:a6:4c:51:1c:0f:7b:d9:45:79:75:3a:91:c7: 4f:b7:33:b4:0c:21:01:94:36:1e:0d:a6:aa:41:d0: 95:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:01:03:54:32:E1:8E:EB:36:C9:3C:F7:1C:EB:CC:BF:23:A0:06:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ba8af2d4-74fe-3670-b870-0f37b59f2468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 173.196.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:88:8b:c4:a2:72:41:12:59:d2:83:6b:e1:99:b1:ca:de:8d: 3d:5b:81:35:b2:38:53:df:d1:cd:6a:f8:50:e8:88:a6:c5:44: 11:5f:4c:39:36:c3:0a:c1:a6:c1:8f:ce:61:d8:f3:d4:01:3b: 58:02:c9:9c:28:33:49:21:2b:9c:7e:27:46:f3:00:9d:4f:20: c6:30:c3:f8:83:d2:3c:5f:22:97:11:34:35:f7:b3:90:5e:f2: 31:aa:f4:58:40:4f:bd:f1:74:b6:f2:11:76:f8:82:18:ea:ed: 0a:90:97:2c:b0:dc:43:da:94:61:91:c9:ec:c7:81:f2:b8:5b: 8b:33:e5:51:ec:ca:d1:76:69:f8:d3:b6:a8:73:57:78:21:ca: fd:4d:73:01:3c:ba:bd:d1:05:e5:63:47:76:e7:26:f4:53:ec: 46:38:15:ae:ed:12:cc:e9:8b:9b:c2:22:b9:c3:f0:ed:45:58: f7:68:5c:31:5c:21:0e:9b:77:b6:f1:4a:ae:e5:bd:bd:0f:6c: e7:21:8b:e7:a8:bc:f7:f1:3f:9a:9f:4f:6b:d0:68:f2:4f:22: 2b:ea:b3:7e:20:b4:af:84:17:be:b3:6b:84:4d:10:2c:e0:70: 91:ad:8e:b7:19:6f:ec:82:a5:db:e6:ce:d3:5f:8f:fc:d3:f1: 3f:b4:a7:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay0ItlXq92RJnD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk MWQzMTcwNmEtZDU5ZS00MjY1LWIyNTEtMmMyNzg1ZWUyN2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSV8qDpTGu01zRR4TOHqUvLyJu280Plr6idI 7lCiscIxEOzPt748uAJBCVTkBu2fi+lpvWGFB/ypI//64ekINUYTgImUulMCA0G+ pj2bAxnO8ZXvgEfmCaPY+l3t3756K+bSi46wPvA9LxhCaqCnuhM+V+LSboOITkqE 0yAuTlhl9dcQMuzm6QVoOKNiJTmBimOgbCT2uZdhrToO4Hlcn8I29GXLoUSjqYAI SS/oBB7EJVG05oWN3AnYxduA4IXpngr1MwqBF5VQ682uccBOwDR+ZDUAlaTPy3OF SU1ynX8gDqZMURwPe9lFeXU6kcdPtzO0DCEBlDYeDaaqQdCV5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEBA1Qy4Y7rNsk89xzrzL8joAbBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYmE4YWYyZDQtNzRmZS0z NjcwLWI4NzAtMGYzN2I1OWYyNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcQ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2Ii8SickESWdKDa+GZscrejT1bgTWyOFPf0c1q+FDoiKbFRBFfTDk2 wwrBpsGPzmHY89QBO1gCyZwoM0khK5x+J0bzAJ1PIMYww/iD0jxfIpcRNDX3s5Be 8jGq9FhAT73xdLbyEXb4ghjq7QqQlyyw3EPalGGRyezHgfK4W4sz5VHsytF2afjT tqhzV3ghyv1NcwE8ur3RBeVjR3bnJvRT7EY4Fa7tEszpi5vCIrnD8O1FWPdoXDFc IQ6bd7bxSq7lvb0PbOchi+eovPfxP5qfT2vQaPJPIivqs34gtK+EF76za4RNECzg cJGtjrcZb+yCpdvmztNfj/zT8T+0p44= -----END CERTIFICATE-----Generated at Thu Mar 26 19:31:54 2026 by rpki-client