$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8833246e-b4d3-3227-9a27-5ac70001ee6c.roa File: 8833246e-b4d3-3227-9a27-5ac70001ee6c.roa (raw, json) Hash identifier: +LnxWZ9eyZLKy6UAwDz41eWeb1y06zF0oQNom/l2i+8= Subject key identifier: A9:CA:2C:48:C3:F5:98:81:13:13:EE:20:3E:9E:CD:C8:2B:62:63:3F Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F4328584D24E036E2AD2A1D194D27B0D0 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8833246e-b4d3-3227-9a27-5ac70001ee6c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 36492 IP address blocks: 172.102.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:36:e2:ad:2a:1d:19:4d:27:b0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=73f3a7d6-79cb-485d-8d1c-d74fa34dda6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1d:05:d3:6d:ea:99:3f:94:78:c5:31:d6:52: ce:f7:7a:05:fe:b4:b0:2f:83:77:cf:c9:c4:94:3e: e3:32:bb:20:c9:94:ed:d7:09:13:42:9b:5d:c5:d1: b0:06:ff:af:61:c6:1f:82:79:52:c2:67:fe:98:18: 8c:05:1f:72:78:b9:40:cb:70:e5:62:bb:17:f3:26: bf:6a:29:33:86:a7:d2:c7:a2:39:0b:89:8a:71:55: 3f:07:83:00:cd:e6:a7:b4:24:ce:31:e3:74:4c:6d: 59:58:ef:dc:72:10:7c:bd:0b:ba:2e:ef:68:27:76: df:c2:fc:c2:c7:61:8a:77:05:e7:6f:30:eb:35:30: f5:2f:30:25:09:9d:48:00:c4:35:43:fa:83:42:37: 79:a6:01:bb:40:d7:9d:3f:35:49:96:b1:bc:33:05: 2f:ec:41:dd:a3:00:e9:6e:20:2c:9d:64:fc:64:a0: ef:1d:fb:5e:e1:ab:bc:8d:b9:4b:1f:4c:d7:25:9f: 4f:07:b0:6d:aa:c1:ba:89:0b:ce:8f:26:df:6a:75: e6:ab:09:50:e6:ce:46:92:8f:be:79:5a:1a:e6:47: 89:17:5a:d8:ef:9a:05:81:0e:a5:b5:d2:65:0a:de: a7:03:5e:3e:f0:30:ad:36:62:fa:cb:55:40:2f:c8: 9d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CA:2C:48:C3:F5:98:81:13:13:EE:20:3E:9E:CD:C8:2B:62:63:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8833246e-b4d3-3227-9a27-5ac70001ee6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 172.102.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:a1:c9:1a:22:d3:63:20:20:be:44:61:89:bf:f4:9f:5e:47: ea:99:03:20:c9:4e:c9:c4:d0:e5:f8:9a:51:00:21:42:29:ef: c3:77:8a:4d:e5:23:83:8a:2a:c0:01:20:1f:60:e0:af:42:7a: bc:c9:75:13:8c:ab:e1:ba:74:01:4b:d5:22:2e:4c:b9:e4:f1: 3c:f6:b9:39:87:25:50:a2:25:da:7e:6a:6f:73:da:d6:4e:5a: ef:64:21:9b:f3:3c:0a:74:34:0a:ac:56:83:b8:24:99:ad:01: 03:5d:85:70:f1:3a:00:cb:90:0a:6d:f5:73:58:6b:73:34:59: fe:54:fe:c6:78:88:be:b5:f1:e5:1f:f2:3b:4e:c6:21:e6:e1: 0d:04:d5:79:2d:6c:d3:a9:21:3f:9e:09:35:e0:1c:65:b6:1c: 2d:2c:0e:a6:16:2b:f2:56:ff:9b:a6:6b:6e:ea:11:23:8b:43: 36:82:76:58:80:34:36:45:de:d7:4e:02:57:e9:d4:04:b0:3e: e0:c5:82:fc:ea:fe:ac:01:0b:da:2f:87:ee:e8:2f:29:f1:0d: e4:95:63:07:ce:19:3d:fe:60:e8:32:49:e8:52:44:bc:86:2d: d9:e5:17:d1:9e:79:0f:c9:f8:fd:59:0b:6a:78:70:4d:91:c0: e9:c4:4d:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4DbirSodGU0nsNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NzNmM2E3ZDYtNzljYi00ODVkLThkMWMtZDc0ZmEzNGRkYTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1R0F023qmT+UeMUx1lLO93oF/rSwL4N3z8nE lD7jMrsgyZTt1wkTQptdxdGwBv+vYcYfgnlSwmf+mBiMBR9yeLlAy3DlYrsX8ya/ aikzhqfSx6I5C4mKcVU/B4MAzeantCTOMeN0TG1ZWO/cchB8vQu6Lu9oJ3bfwvzC x2GKdwXnbzDrNTD1LzAlCZ1IAMQ1Q/qDQjd5pgG7QNedPzVJlrG8MwUv7EHdowDp biAsnWT8ZKDvHfte4au8jblLH0zXJZ9PB7BtqsG6iQvOjybfanXmqwlQ5s5Gko++ eVoa5keJF1rY75oFgQ6ltdJlCt6nA14+8DCtNmL6y1VAL8idWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnKLEjD9ZiBExPuID6ezcgrYmM/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvODgzMzI0NmUtYjRkMy0z MjI3LTlhMjctNWFjNzAwMDFlZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGYNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6hyRoi02MgIL5EYYm/9J9eR+qZAyDJTsnE0OX4mlEAIUIp78N3ik3l I4OKKsABIB9g4K9CerzJdROMq+G6dAFL1SIuTLnk8Tz2uTmHJVCiJdp+am9z2tZO Wu9kIZvzPAp0NAqsVoO4JJmtAQNdhXDxOgDLkApt9XNYa3M0Wf5U/sZ4iL618eUf 8jtOxiHm4Q0E1XktbNOpIT+eCTXgHGW2HC0sDqYWK/JW/5uma27qESOLQzaCdliA NDZF3tdOAlfp1ASwPuDFgvzq/qwBC9ovh+7oLynxDeSVYwfOGT3+YOgySehSRLyG LdnlF9GeeQ/J+P1ZC2p4cE2RwOnETR0= -----END CERTIFICATE-----Generated at Thu Mar 26 18:56:18 2026 by rpki-client