$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/efbf1b4a-1b31-39fd-bfd0-286df57229b2.roa File: efbf1b4a-1b31-39fd-bfd0-286df57229b2.roa (raw, json) Hash identifier: ajUT0Q9Yp+8hbiBEIw7GvqArA6aDwKizrGUBJ5S3lH4= Subject key identifier: 75:B1:74:77:2A:70:6A:5E:2B:7C:CE:F2:37:13:23:E5:2D:EC:37:B4 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584D1F4A1348724C8D8BAC628E00 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/efbf1b4a-1b31-39fd-bfd0-286df57229b2.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 200017 IP address blocks: 138.84.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:13:48:72:4c:8d:8b:ac:62:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=3adb3894-458f-480c-af59-7675bdfb8355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:20:ad:81:12:9e:5f:d8:62:e6:ea:bd:85:e0: ee:c7:fc:ad:6a:c5:58:fc:b0:81:af:a6:ec:0e:85: 2c:04:13:2b:3a:b5:22:25:f0:35:b7:cf:a0:49:f5: b0:2a:fa:31:99:35:23:6a:58:0a:cd:02:7d:b1:47: 38:c3:6d:ec:9e:8a:8e:ad:40:f3:e0:20:e0:ed:a8: 6a:c6:b6:a9:da:d3:c1:c2:75:46:18:aa:ce:d9:b2: 98:ac:8c:ab:47:a9:e9:7e:c7:f7:56:a3:e7:62:1d: 24:a3:1f:ef:7d:16:f1:39:46:3c:13:a8:00:da:ce: d1:b1:d7:87:8e:be:6d:7f:fd:ad:58:49:4d:e4:7a: 99:d9:83:8d:af:58:3e:37:2b:0b:a5:f0:8a:46:3a: 86:1c:67:5d:f9:8d:e1:44:21:a3:91:e6:41:93:6a: 62:71:bb:d1:2b:42:70:c7:19:36:76:27:8f:df:e2: 4a:e5:7b:3c:3b:24:ec:cd:40:40:3a:3a:3c:88:1a: f6:90:18:6d:8f:ea:ca:14:83:36:bf:21:1b:6a:9f: 8d:3d:fd:65:55:48:33:37:2a:54:99:51:06:7f:50: 52:1c:3e:1e:d5:98:d3:78:f0:af:4c:eb:1e:2b:cd: f6:58:fd:fc:6e:6d:71:d3:6c:68:97:3e:ae:48:36: c4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B1:74:77:2A:70:6A:5E:2B:7C:CE:F2:37:13:23:E5:2D:EC:37:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/efbf1b4a-1b31-39fd-bfd0-286df57229b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 138.84.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:de:0e:0d:31:05:d8:47:9d:0f:9c:14:43:f0:13:d5:bf:0f: 53:6d:1a:76:84:71:03:8e:a8:78:c1:05:80:c1:50:07:89:d4: 65:93:67:80:22:5a:2a:a8:e4:64:55:61:54:16:ab:44:0a:bb: dd:d0:ad:6d:6e:7f:94:fc:3e:2e:8e:ad:52:07:89:2d:3f:f7: 37:cf:42:40:db:59:73:0f:f1:ee:e4:7c:35:b5:f3:93:04:2c: 14:41:49:a5:3c:50:7e:a7:87:aa:3d:94:e2:4d:6d:e3:b3:4b: 7f:93:a3:dd:ab:a1:3a:62:af:fb:19:c9:7c:05:ff:eb:d4:9a: 76:bf:a5:e0:d4:19:74:a7:fe:9b:4f:af:fc:57:d0:f7:a0:de: a3:c9:df:58:66:65:c2:ef:ef:ba:0f:76:f8:af:04:15:a1:2c: 78:77:a2:a3:88:ff:b6:04:99:26:ec:83:43:77:47:14:6f:1e: ee:79:fa:99:37:f8:fc:0d:24:3a:66:a6:c5:78:97:c3:3a:c3: 54:f6:8e:90:c2:d4:a3:2e:e3:f7:51:96:11:c3:15:86:4c:d8: b6:d6:73:8d:ac:58:0b:30:d1:0c:20:14:4c:fe:21:93:a5:d7: 31:46:d1:9f:b8:fb:ed:f4:36:d7:0c:35:f5:38:0c:1a:5e:32: 5b:3f:c2:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fShNIckyNi6xijgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk M2FkYjM4OTQtNDU4Zi00ODBjLWFmNTktNzY3NWJkZmI4MzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryCtgRKeX9hi5uq9heDux/ytasVY/LCBr6bs DoUsBBMrOrUiJfA1t8+gSfWwKvoxmTUjalgKzQJ9sUc4w23snoqOrUDz4CDg7ahq xrap2tPBwnVGGKrO2bKYrIyrR6npfsf3VqPnYh0kox/vfRbxOUY8E6gA2s7RsdeH jr5tf/2tWElN5HqZ2YONr1g+NysLpfCKRjqGHGdd+Y3hRCGjkeZBk2picbvRK0Jw xxk2dieP3+JK5Xs8OyTszUBAOjo8iBr2kBhtj+rKFIM2vyEbap+NPf1lVUgzNypU mVEGf1BSHD4e1ZjTePCvTOseK832WP38bm1x02xolz6uSDbEWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWxdHcqcGpeK3zO8jcTI+Ut7De0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvZWZiZjFiNGEtMWIzMS0z OWZkLWJmZDAtMjg2ZGY1NzIyOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAilTLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3eDg0xBdhHnQ+cFEPwE9W/D1NtGnaEcQOOqHjBBYDBUAeJ1GWTZ4Ai Wiqo5GRVYVQWq0QKu93QrW1uf5T8Pi6OrVIHiS0/9zfPQkDbWXMP8e7kfDW185ME LBRBSaU8UH6nh6o9lOJNbeOzS3+To92roTpir/sZyXwF/+vUmna/peDUGXSn/ptP r/xX0Peg3qPJ31hmZcLv77oPdvivBBWhLHh3oqOI/7YEmSbsg0N3RxRvHu55+pk3 +PwNJDpmpsV4l8M6w1T2jpDC1KMu4/dRlhHDFYZM2LbWc42sWAsw0QwgFEz+IZOl 1zFG0Z+4++30NtcMNfU4DBpeMls/wos= -----END CERTIFICATE-----Generated at Thu Mar 26 11:17:13 2026 by rpki-client