$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bc61a7d8-be3a-3bb1-bdcf-d5857e723488.roa File: bc61a7d8-be3a-3bb1-bdcf-d5857e723488.roa (raw, json) Hash identifier: wjKzVz5Mh/R4jWKefqxwjsWhvGEsc5Kscm2I+13gCJQ= Subject key identifier: CB:4C:07:EF:F6:EE:B5:B1:58:86:27:9B:4E:FD:A4:0E:EE:F5:30:A2 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584D40CA77E55A7A714CB984EB40 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bc61a7d8-be3a-3bb1-bdcf-d5857e723488.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 10838 IP address blocks: 173.197.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:77:e5:5a:7a:71:4c:b9:84:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=78d5e6c2-f217-4799-8cac-f302ee536b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ec:da:0d:bf:ac:de:19:42:30:a8:cc:36:c8: 01:57:b3:28:81:96:99:90:d4:09:8c:bb:1e:bc:1b: 25:ab:9d:96:e9:40:09:e1:b5:e6:8b:f6:f4:54:27: 75:3d:7c:21:b0:97:a5:56:fa:35:77:ad:7e:f1:23: 3e:70:b4:91:27:7b:34:f9:0f:a3:f5:ab:05:5c:2a: 65:81:bb:9f:8d:54:02:b0:d1:00:55:2f:df:fd:97: b3:68:2d:ce:35:07:d0:4f:3c:fe:bb:45:b2:e6:7d: fc:5f:b1:b3:26:c3:c7:62:a6:31:d5:44:97:27:ff: f8:c1:b8:8a:b6:83:2e:47:39:5f:0e:cd:45:5d:7c: 80:45:2a:68:ca:38:13:4d:3c:8e:6e:0d:73:57:a8: 8a:08:ad:0f:8c:a0:52:a2:38:af:5a:4c:25:0b:fb: 03:3d:4e:74:21:7e:71:63:2d:00:ad:d1:72:02:34: 92:b3:81:68:b4:fa:c4:53:5c:e5:6b:1a:8b:d6:59: 33:69:0e:29:cc:93:b1:19:22:29:8c:dd:47:8a:e5: 05:64:52:b0:77:45:4e:f3:5f:08:f0:c9:71:88:fd: 0a:35:93:4f:6d:b0:0b:98:df:af:6e:ca:5f:a4:49: e5:c2:85:94:f2:08:e9:f3:5c:d6:bf:5c:7f:3d:f1: 8d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4C:07:EF:F6:EE:B5:B1:58:86:27:9B:4E:FD:A4:0E:EE:F5:30:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bc61a7d8-be3a-3bb1-bdcf-d5857e723488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 173.197.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:7f:ce:86:cf:5a:46:50:4e:44:c0:5c:d9:2a:eb:9b:a1:eb: 51:bd:b4:bd:81:55:70:56:fd:9e:50:51:27:46:46:75:d5:82: a2:b0:91:a9:7b:a4:7a:13:cc:7f:70:ce:2d:fe:85:13:9a:bb: 46:ee:f3:4f:40:e9:6b:f8:2b:a0:f0:76:fd:08:d2:4c:c4:1d: 99:db:7e:4d:d3:63:e4:77:00:71:4f:d5:0a:ba:91:32:8b:62: e4:1b:51:67:56:33:c9:2d:12:91:eb:f1:ab:f3:10:c0:f6:02: c4:21:06:d7:a5:05:d8:ce:a3:10:75:86:01:29:de:e9:ba:d6: ec:3a:91:79:92:5b:60:e4:77:68:38:a0:19:12:d9:0a:cb:d2: dc:96:03:bc:71:38:80:f6:8e:9a:6f:aa:10:01:91:70:80:76: 7f:6b:6c:ef:7d:ec:3a:c3:2d:a1:10:23:2f:02:83:e1:94:9a: a6:26:d6:cf:d3:c9:f8:4b:9d:4c:c3:8c:7a:c6:54:6f:0a:a7: fb:e0:84:5b:7b:27:de:8e:bc:b9:cb:d4:48:cb:56:56:8e:0a: 5f:ac:21:35:e1:74:f9:a1:4a:d1:fd:3b:9d:a4:42:22:5b:3f: 57:7e:98:e3:4d:30:a9:0e:89:e0:2f:4e:61:92:b5:bd:1c:7b: e3:7d:37:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AynflWnpxTLmE60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NzhkNWU2YzItZjIxNy00Nzk5LThjYWMtZjMwMmVlNTM2YjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwezaDb+s3hlCMKjMNsgBV7MogZaZkNQJjLse vBslq52W6UAJ4bXmi/b0VCd1PXwhsJelVvo1d61+8SM+cLSRJ3s0+Q+j9asFXCpl gbufjVQCsNEAVS/f/ZezaC3ONQfQTzz+u0Wy5n38X7GzJsPHYqYx1USXJ//4wbiK toMuRzlfDs1FXXyARSpoyjgTTTyObg1zV6iKCK0PjKBSojivWkwlC/sDPU50IX5x Yy0ArdFyAjSSs4FotPrEU1zlaxqL1lkzaQ4pzJOxGSIpjN1HiuUFZFKwd0VO818I 8MlxiP0KNZNPbbALmN+vbspfpEnlwoWU8gjp81zWv1x/PfGNrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtMB+/27rWxWIYnm079pA7u9TCiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYmM2MWE3ZDgtYmUzYS0z YmIxLWJkY2YtZDU4NTdlNzIzNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrcXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5/zobPWkZQTkTAXNkq65uh61G9tL2BVXBW/Z5QUSdGRnXVgqKwkal7 pHoTzH9wzi3+hROau0bu809A6Wv4K6Dwdv0I0kzEHZnbfk3TY+R3AHFP1Qq6kTKL YuQbUWdWM8ktEpHr8avzEMD2AsQhBtelBdjOoxB1hgEp3um61uw6kXmSW2Dkd2g4 oBkS2QrL0tyWA7xxOID2jppvqhABkXCAdn9rbO997DrDLaEQIy8Cg+GUmqYm1s/T yfhLnUzDjHrGVG8Kp/vghFt7J96OvLnL1EjLVlaOCl+sITXhdPmhStH9O52kQiJb P1d+mONNMKkOieAvTmGStb0ce+N9Ny4= -----END CERTIFICATE-----Generated at Thu Mar 26 12:47:09 2026 by rpki-client