$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1d611970-d8e1-342b-b267-17fa1197a3ad.roa File: 1d611970-d8e1-342b-b267-17fa1197a3ad.roa (raw, json) Hash identifier: uDD479FQpq9pUFaWO7XLswoBEeqqUKX1qpKAKUeJHRU= Subject key identifier: F1:9D:AD:81:7C:CA:0C:88:6A:DA:B3:E9:99:FA:6C:B5:40:21:CA:0D Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F4328584D24E0F7FF9A15A7CFAF63B040 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1d611970-d8e1-342b-b267-17fa1197a3ad.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 36492 IP address blocks: 172.102.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:f7:ff:9a:15:a7:cf:af:63:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ba4565ac-273b-4f17-b023-c8324661666c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7a:32:66:c2:ea:02:ec:d9:70:4b:83:f8:24: f1:8a:b9:22:d9:b6:c3:ff:47:67:36:72:fb:61:3e: 84:ed:bb:7b:70:2e:e3:b1:ce:a3:2e:ef:93:9f:86: 70:09:8e:67:34:e8:7b:c7:05:f2:65:68:d1:c8:2d: bd:0b:c5:b9:8d:93:83:7a:48:15:c8:a5:f8:77:09: 01:d8:60:24:fe:6b:61:67:ed:f4:c6:d5:db:e3:79: 21:32:dd:85:aa:1c:f8:69:61:e2:cd:cc:51:5e:67: b1:3b:b1:45:eb:21:c6:f4:fd:72:29:91:d6:76:2c: 3d:3f:b6:c4:72:68:b2:c4:7c:03:e2:b9:7e:6c:24: fc:42:7f:1a:e9:5d:5a:55:93:35:2f:91:55:2d:1f: 56:06:a0:af:81:5c:d8:bb:35:07:c6:3f:a8:eb:66: 46:77:94:85:0e:0b:21:42:01:e2:43:c8:6a:05:e2: f2:f5:39:15:c0:e3:d4:45:4a:7d:a9:4b:b2:38:80: 4f:b7:d9:5c:16:c2:48:42:7c:b8:7a:80:3a:dd:6e: fe:88:0b:84:ea:96:41:18:e2:59:42:b4:ab:50:3f: 4d:55:ca:03:74:06:c3:93:56:00:c9:3c:3f:92:c1: 1c:23:13:05:f9:db:ad:80:9c:3c:4e:b0:50:80:09: a4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:9D:AD:81:7C:CA:0C:88:6A:DA:B3:E9:99:FA:6C:B5:40:21:CA:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1d611970-d8e1-342b-b267-17fa1197a3ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 172.102.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:42:59:21:fd:17:65:b9:41:f0:e4:18:c1:aa:ea:82:54:3d: 93:2d:76:19:35:99:d2:48:cb:65:c2:b3:1c:38:04:b0:8c:52: 1b:39:5d:90:5c:82:50:75:6f:af:bf:59:a8:b6:ef:08:46:2c: 90:ea:72:8f:aa:a6:73:81:40:08:25:6a:13:78:20:9e:aa:35: 62:cb:5e:f0:d0:98:1b:cd:ef:cd:48:13:56:66:8e:c7:01:a0: 49:b5:72:6a:d7:0d:9b:a2:c4:f5:8e:23:01:49:44:6e:57:9d: a8:a4:27:bf:94:54:3c:4d:1d:98:d2:ae:da:19:62:46:41:91: 1e:11:49:91:34:30:50:59:49:30:15:44:6e:df:1a:ee:cf:9a: 2b:b0:c2:ca:8e:86:98:e8:80:89:99:d8:e5:3a:08:94:bc:88: ce:74:7b:7b:20:93:a5:87:cc:54:4d:a9:0b:fb:df:27:db:cb: ef:3f:ad:d2:0c:6b:a5:d0:a5:14:df:38:db:69:2d:13:18:c9: e4:91:83:9a:3a:1a:9f:0d:fd:02:74:2e:cc:6d:68:7e:f7:c9: a1:3f:46:60:3a:0d:1b:01:3e:a8:82:e5:76:f2:60:f7:31:7d: f3:a4:95:05:5d:5f:03:86:73:aa:df:86:25:fa:a5:48:19:00: 21:09:da:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Pf/mhWnz69jsEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YmE0NTY1YWMtMjczYi00ZjE3LWIwMjMtYzgzMjQ2NjE2NjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3oyZsLqAuzZcEuD+CTxirki2bbD/0dnNnL7 YT6E7bt7cC7jsc6jLu+Tn4ZwCY5nNOh7xwXyZWjRyC29C8W5jZODekgVyKX4dwkB 2GAk/mthZ+30xtXb43khMt2Fqhz4aWHizcxRXmexO7FF6yHG9P1yKZHWdiw9P7bE cmiyxHwD4rl+bCT8Qn8a6V1aVZM1L5FVLR9WBqCvgVzYuzUHxj+o62ZGd5SFDgsh QgHiQ8hqBeLy9TkVwOPURUp9qUuyOIBPt9lcFsJIQny4eoA63W7+iAuE6pZBGOJZ QrSrUD9NVcoDdAbDk1YAyTw/ksEcIxMF+dutgJw8TrBQgAmkXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGdrYF8ygyIatqz6Zn6bLVAIcoNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvMWQ2MTE5NzAtZDhlMS0z NDJiLWIyNjctMTdmYTExOTdhM2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhCWSH9F2W5QfDkGMGq6oJUPZMtdhk1mdJIy2XCsxw4BLCMUhs5XZBc glB1b6+/Wai27whGLJDqco+qpnOBQAglahN4IJ6qNWLLXvDQmBvN781IE1ZmjscB oEm1cmrXDZuixPWOIwFJRG5XnaikJ7+UVDxNHZjSrtoZYkZBkR4RSZE0MFBZSTAV RG7fGu7PmiuwwsqOhpjogImZ2OU6CJS8iM50e3sgk6WHzFRNqQv73yfby+8/rdIM a6XQpRTfONtpLRMYyeSRg5o6Gp8N/QJ0LsxtaH73yaE/RmA6DRsBPqiC5XbyYPcx ffOklQVdXwOGc6rfhiX6pUgZACEJ2lU= -----END CERTIFICATE-----Generated at Thu Mar 26 15:43:52 2026 by rpki-client