$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/e40632ac-4b18-359c-a110-1eb7ea5ed57c.roa File: e40632ac-4b18-359c-a110-1eb7ea5ed57c.roa (raw, json) Hash identifier: xmBeXneLOp8+LTiHJxwdHs8qv/XSeKYODJTTJXd6TFw= Subject key identifier: F2:8D:5A:8D:F0:04:FE:82:CB:14:32:9C:C7:55:C7:00:07:6F:10:7A Certificate issuer: /CN=1b03e342-d588-4239-8704-6688d01760d9 Certificate serial: 010D0C9F4328584D1F4A43DF7DD07844F8173EA0 Authority key identifier: 13:70:79:43:A1:A9:52:02:4A:34:06:B3:D2:FA:8C:ED:8F:E2:91:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/e40632ac-4b18-359c-a110-1eb7ea5ed57c.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 397031 IP address blocks: 204.235.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:43:df:7d:d0:78:44:f8:17:3e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b03e342-d588-4239-8704-6688d01760d9 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=87e2776f-2fb0-4898-b2d5-7d30f7eb731e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:db:b3:cc:ef:c9:82:f1:18:80:3a:b6:d2:5b: 86:87:04:89:a6:7e:00:ba:df:03:40:90:00:d1:a6: 0d:64:31:5e:19:05:49:b4:46:2a:a7:92:fe:f5:3d: 20:79:5a:2c:bf:96:9d:d9:2e:2b:a7:df:c9:e5:d0: b9:c4:e4:2e:53:15:bd:01:37:a1:ce:50:89:b2:49: 9b:f5:b5:f2:4c:02:74:0f:fb:20:53:16:e3:6a:93: 9f:0a:5d:28:fb:dd:ac:1c:11:0b:f4:63:ea:87:2c: 0a:09:9e:29:b0:ff:94:64:b8:d0:16:03:25:08:e2: 15:06:e0:48:e1:bd:4e:62:3f:aa:26:77:93:e8:2f: b4:cd:84:62:ac:80:8f:5e:47:18:11:9f:71:5c:0d: 9c:d0:c7:a3:73:48:18:7a:3d:46:be:82:5f:2c:cd: cb:01:9c:0c:48:d7:e4:c1:d2:32:e1:ff:a1:f9:c3: 70:27:47:d3:7c:30:b1:3d:bf:79:04:3c:ac:d0:43: 0f:03:07:a6:70:b6:cb:89:eb:ec:cb:f3:b7:51:3e: 9e:ff:9d:f9:ca:7d:12:56:74:db:76:23:ae:5e:1e: cc:90:4f:c6:16:e7:67:1f:90:cb:09:ba:1b:6c:0c: f9:44:9f:79:eb:fb:d3:2c:ab:da:a1:37:d5:14:e5: 7b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8D:5A:8D:F0:04:FE:82:CB:14:32:9C:C7:55:C7:00:07:6F:10:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/e40632ac-4b18-359c-a110-1eb7ea5ed57c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.crl X509v3 Authority Key Identifier: keyid:13:70:79:43:A1:A9:52:02:4A:34:06:B3:D2:FA:8C:ED:8F:E2:91:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer sbgp-ipAddrBlock: critical IPv4: 204.235.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:39:b4:f7:01:2e:b8:fa:7a:a5:c8:1a:5f:80:54:8f:d4:60: e4:5c:35:ab:cd:a6:42:04:ed:52:90:22:fc:00:55:0f:3a:c7: 91:1c:ec:a7:c8:c2:d4:a0:fd:2b:d8:5c:e6:b7:5f:82:a6:3f: 52:6e:14:c8:43:da:e3:2b:95:5d:02:58:7a:be:92:c1:6e:3a: 14:d4:13:06:12:d5:05:02:1c:d8:cc:ba:e8:f8:83:76:24:4c: 09:6f:f4:d7:9a:fb:ea:9f:cd:ec:a9:e5:fc:82:e9:30:c4:04: bb:5f:a2:32:e0:2c:61:85:ff:39:f5:89:dd:a5:87:a2:ce:f7: 28:f3:10:16:bf:e6:e5:c0:da:f6:0a:c4:83:d1:a2:32:b3:e8: 9e:70:fd:5b:fa:d3:31:19:e1:cf:83:41:66:95:bb:e3:93:09: 2d:d8:b5:3f:ff:d1:4e:9e:9c:f9:5b:a9:df:96:db:78:45:12: fd:81:e5:87:e4:4d:1a:51:19:99:76:89:ef:5d:ee:72:44:7c: 0b:cb:c0:93:3c:c9:42:ca:f1:dd:b1:fb:b9:25:8a:d7:34:59: 5c:2a:01:77:9c:e2:db:77:58:05:86:a3:58:44:b3:f9:e5:cd: a1:51:f3:c5:e5:48:17:7b:2d:4d:de:cf:24:0f:ff:67:13:e1: 8b:71:27:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSkPffdB4RPgXPqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWIwM2UzNDItZDU4OC00MjM5LTg3MDQtNjY4OGQwMTc2 MGQ5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ODdlMjc3NmYtMmZiMC00ODk4LWIyZDUtN2QzMGY3ZWI3MzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptuzzO/JgvEYgDq20luGhwSJpn4Aut8DQJAA 0aYNZDFeGQVJtEYqp5L+9T0geVosv5ad2S4rp9/J5dC5xOQuUxW9ATehzlCJskmb 9bXyTAJ0D/sgUxbjapOfCl0o+92sHBEL9GPqhywKCZ4psP+UZLjQFgMlCOIVBuBI 4b1OYj+qJneT6C+0zYRirICPXkcYEZ9xXA2c0Mejc0gYej1GvoJfLM3LAZwMSNfk wdIy4f+h+cNwJ0fTfDCxPb95BDys0EMPAwemcLbLievsy/O3UT6e/535yn0SVnTb diOuXh7MkE/GFudnH5DLCbobbAz5RJ956/vTLKvaoTfVFOV7ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKNWo3wBP6CyxQynMdVxwAHbxB6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xYjAz ZTM0Mi1kNTg4LTQyMzktODcwNC02Njg4ZDAxNzYwZDkvZTQwNjMyYWMtNGIxOC0z NTljLWExMTAtMWViN2VhNWVkNTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWIwM2UzNDItZDU4OC00MjM5LTg3 MDQtNjY4OGQwMTc2MGQ5LzFiMDNlMzQyLWQ1ODgtNDIzOS04NzA0LTY2ODhkMDE3 NjBkOS5jcmwwHwYDVR0jBBgwFoAUE3B5Q6GpUgJKNAaz0vqM7Y/ikSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xYjAzZTM0Mi1kNTg4LTQyMzktODcwNC02Njg4 ZDAxNzYwZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzOv4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACo5tPcBLrj6eqXIGl+AVI/UYORcNavNpkIE7VKQIvwAVQ86x5Ec7KfI wtSg/SvYXOa3X4KmP1JuFMhD2uMrlV0CWHq+ksFuOhTUEwYS1QUCHNjMuuj4g3Yk TAlv9Nea++qfzeyp5fyC6TDEBLtfojLgLGGF/zn1id2lh6LO9yjzEBa/5uXA2vYK xIPRojKz6J5w/Vv60zEZ4c+DQWaVu+OTCS3YtT//0U6enPlbqd+W23hFEv2B5Yfk TRpRGZl2ie9d7nJEfAvLwJM8yULK8d2x+7klitc0WVwqAXec4tt3WAWGo1hEs/nl zaFR88XlSBd7LU3ezyQP/2cT4YtxJ7U= -----END CERTIFICATE-----Generated at Thu Mar 26 22:13:02 2026 by rpki-client