$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2b935f54-a6b7-3f61-8adb-bce43ad4b075.roa File: 2b935f54-a6b7-3f61-8adb-bce43ad4b075.roa (raw, json) Hash identifier: Dh43DbCAj+c1Rx7/iIDcaQ+x2wA2gK3snDrrX2opl/o= Subject key identifier: 0D:7B:3E:CF:FB:88:9E:BE:48:E5:FF:0B:EC:E4:83:2D:91:47:73:EF Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584D3DFFBACAE9C25298F7A76D50 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2b935f54-a6b7-3f61-8adb-bce43ad4b075.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 33363 IP address blocks: 97.69.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:ba:ca:e9:c2:52:98:f7:a7:6d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=bd836c29-bb24-4494-af17-5e95865d3497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f5:b8:e0:3e:53:76:1f:7d:5d:c2:42:41:43: 7e:e0:61:18:cc:75:c5:21:92:29:a4:ee:08:26:18: 50:4a:cf:e8:9b:8f:f7:87:80:4b:e2:7e:41:bb:94: 58:50:6b:fd:4e:83:21:78:c0:9c:ec:7f:8a:ed:59: e0:4e:de:bf:7a:29:28:f2:94:27:f7:55:75:fa:88: 87:7f:24:66:56:43:6b:f1:2b:cc:11:db:68:b3:52: ed:c9:c4:e8:88:0f:4e:80:da:38:02:b3:5d:90:b0: 33:5f:70:26:69:21:4c:ee:0e:8c:0d:bf:26:14:8b: 60:34:12:7a:46:2b:43:8e:be:37:10:34:31:64:62: ac:87:63:60:31:ed:c0:6e:2d:28:d7:46:25:7f:16: d0:3c:c0:ee:74:3d:81:0b:38:d0:20:17:71:ed:49: 7b:c6:26:84:69:17:29:cf:80:53:19:9a:59:85:5e: 72:6c:5d:db:d8:00:71:ed:38:df:1a:b5:c2:31:68: 6b:02:ee:a1:f9:7b:0a:5e:88:1c:20:79:1b:f9:55: ef:71:ea:48:a1:60:4e:16:de:0d:b6:a7:74:01:bf: 61:bf:4c:04:00:6f:02:27:93:fa:9b:65:02:82:53: 8b:61:6a:6e:0c:d5:41:3e:2a:b1:bb:01:47:81:99: 30:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7B:3E:CF:FB:88:9E:BE:48:E5:FF:0B:EC:E4:83:2D:91:47:73:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2b935f54-a6b7-3f61-8adb-bce43ad4b075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 97.69.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:82:8e:60:62:9f:a5:50:f7:7f:2e:0e:f2:78:bf:2c:e5:e4: 98:5c:52:65:de:03:bb:02:1d:fd:5b:d8:a0:4f:e9:e3:b0:3c: 4d:9e:ab:7f:8b:bf:71:92:12:21:ac:bf:d6:74:45:97:52:af: cf:9f:4e:25:fa:5a:3f:37:61:e2:3a:91:0c:52:3a:67:e3:7b: 9b:c9:23:f5:3b:7b:02:fc:28:cc:73:c3:51:c9:6a:b8:5c:a1: c0:a8:bc:f7:53:a0:0c:48:d1:00:47:9a:0c:cc:e0:cf:3c:45: 0a:f1:a2:cc:a7:5b:1d:92:fb:b7:97:dd:50:0b:ef:e6:a3:20: 36:64:af:43:63:e7:35:65:3d:54:11:01:93:35:08:b3:8d:24: f5:d6:da:45:37:20:28:35:57:f2:b8:06:09:de:00:62:4b:a0: fa:34:16:06:13:b7:fc:b8:ca:84:98:1b:63:e9:8f:c1:c9:a4: 34:c0:3a:89:a4:c8:da:ff:47:84:d1:a6:25:d5:15:07:81:6f: 1e:01:c3:f2:78:f0:19:20:31:c0:0c:c4:2d:a3:91:46:96:de: 4c:f4:1e:c0:c5:ee:d5:f7:db:61:60:e3:18:69:77:5c:3f:d0: 97:77:2c:aa:06:62:2d:6e:38:05:1e:c1:ea:f0:31:d3:2f:4c: ef:d9:6e:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7rK6cJSmPenbVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YmQ4MzZjMjktYmIyNC00NDk0LWFmMTctNWU5NTg2NWQzNDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPW44D5Tdh99XcJCQUN+4GEYzHXFIZIppO4I JhhQSs/om4/3h4BL4n5Bu5RYUGv9ToMheMCc7H+K7VngTt6/eiko8pQn91V1+oiH fyRmVkNr8SvMEdtos1LtycToiA9OgNo4ArNdkLAzX3AmaSFM7g6MDb8mFItgNBJ6 RitDjr43EDQxZGKsh2NgMe3Abi0o10YlfxbQPMDudD2BCzjQIBdx7Ul7xiaEaRcp z4BTGZpZhV5ybF3b2ABx7TjfGrXCMWhrAu6h+XsKXogcIHkb+VXvcepIoWBOFt4N tqd0Ab9hv0wEAG8CJ5P6m2UCglOLYWpuDNVBPiqxuwFHgZkwPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA17Ps/7iJ6+SOX/C+zkgy2RR3PvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMmI5MzVmNTQtYTZiNy0z ZjYxLThhZGItYmNlNDNhZDRiMDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYUXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWCjmBin6VQ938uDvJ4vyzl5JhcUmXeA7sCHf1b2KBP6eOwPE2eq3+L v3GSEiGsv9Z0RZdSr8+fTiX6Wj83YeI6kQxSOmfje5vJI/U7ewL8KMxzw1HJarhc ocCovPdToAxI0QBHmgzM4M88RQrxosynWx2S+7eX3VAL7+ajIDZkr0Nj5zVlPVQR AZM1CLONJPXW2kU3ICg1V/K4BgneAGJLoPo0FgYTt/y4yoSYG2Ppj8HJpDTAOomk yNr/R4TRpiXVFQeBbx4Bw/J48BkgMcAMxC2jkUaW3kz0HsDF7tX322Fg4xhpd1w/ 0Jd3LKoGYi1uOAUewerwMdMvTO/ZbsA= -----END CERTIFICATE-----Generated at Thu Mar 26 13:39:56 2026 by rpki-client