$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/b3556d71-daa7-3542-9d2c-911cecebd485.roa File: b3556d71-daa7-3542-9d2c-911cecebd485.roa (raw, json) Hash identifier: q89X8YXwGnK4Sejw2lI1MRUcmKi6msdqP8KwHDHZibQ= Subject key identifier: 39:E2:90:09:0C:4F:60:D0:BC:D0:BB:C2:51:F5:45:11:92:2C:F2:90 Certificate issuer: /CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b Certificate serial: 010D0C9F4328584D19B4DE7FDB16DAC11042F080 Authority key identifier: C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/b3556d71-daa7-3542-9d2c-911cecebd485.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 0 IP address blocks: 158.247.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:de:7f:db:16:da:c1:10:42:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=a607c703-1ac9-4e09-8395-01cc5738f2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:eb:9f:e4:ea:67:21:00:c8:aa:aa:5c:1b:1e: ca:5c:f1:2b:17:24:a8:3d:32:f2:c8:ec:96:6e:a7: ed:83:cf:53:f1:d7:42:47:3b:67:e8:8a:6d:bd:0b: 11:78:d8:f8:f2:a6:78:fc:e1:5e:c5:2c:3b:53:15: 84:84:b9:eb:56:aa:73:47:9a:fa:44:5d:1f:1e:80: 00:e6:37:ef:1b:b6:cb:2c:1d:fa:65:06:ea:44:43: 18:24:ba:f2:d6:35:6d:de:e9:ff:03:db:2c:51:0e: fc:9c:90:2f:9a:b1:3d:b1:0c:5e:c8:b7:58:c2:64: 0a:1f:09:ff:8c:6d:9e:bc:5e:3f:c6:58:93:fc:5c: 11:32:c0:91:78:7f:23:f8:dc:7c:59:44:80:45:c1: e9:e3:7e:2e:37:02:83:f1:92:6d:2b:94:f0:e8:b5: 3e:48:d7:ad:62:52:ef:3e:15:e6:87:7c:63:d8:8f: 91:7b:2c:f2:56:dd:8a:e1:88:35:1d:04:60:26:f1: 05:fe:67:fb:6b:e5:6c:fd:2f:0d:ce:ee:44:f4:b9: 0a:ec:04:ed:6a:6e:f7:d1:a0:95:8f:f9:63:f8:93: 6a:53:7c:38:6a:fb:aa:4b:e3:d7:9b:be:b6:d1:97: 6d:7c:81:33:f9:d8:07:77:37:43:b0:9b:db:54:62: 2b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E2:90:09:0C:4F:60:D0:BC:D0:BB:C2:51:F5:45:11:92:2C:F2:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/b3556d71-daa7-3542-9d2c-911cecebd485.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl X509v3 Authority Key Identifier: keyid:C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer sbgp-ipAddrBlock: critical IPv4: 158.247.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:a3:3b:37:42:ba:71:6f:89:23:97:18:5c:3b:cd:d6:b0:7f: 53:6a:4d:be:a9:b3:5e:f9:bc:e7:ad:e0:81:d4:cc:66:87:14: 15:9b:d1:50:84:41:15:34:fd:f2:1e:c9:57:aa:57:96:45:e5: 04:40:20:35:7e:a8:c2:ed:0b:79:24:aa:66:50:0e:90:80:b3: d8:cb:07:32:b5:60:e2:73:13:b9:14:d1:77:07:6d:44:bc:4b: 37:b3:11:91:93:5e:26:09:fe:bd:26:39:f7:05:4f:e6:78:75: ea:9a:d6:2e:0e:63:24:85:06:23:f9:9b:40:0d:bf:85:ab:51: 0e:1c:f8:9c:5b:9d:86:04:5e:05:52:b7:e6:6b:62:08:ef:16: 70:40:91:ed:34:a1:14:57:7b:51:a4:f7:80:66:21:9f:4b:4f: f0:d7:29:4e:b8:91:3b:fb:79:cc:da:3a:08:a2:d2:0d:50:67: f2:3b:33:88:da:24:7e:77:02:ab:a1:b3:eb:b4:ac:af:8e:82: 12:e8:f1:90:cf:d5:6b:72:d6:5a:cd:12:83:e7:46:ba:23:7a: 39:0a:6c:d0:3d:97:23:4a:c6:91:ff:a2:9e:51:92:67:9a:cb: 4a:ac:1d:6c:5a:2f:da:83:38:85:fa:ce:b3:af:25:c2:17:3c: a1:bb:e0:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtN5/2xbawRBC8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJkYWEyMTctZjAwZi00NmM1LWExMDItZTVmZjJhY2Ix MDViMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk YTYwN2M3MDMtMWFjOS00ZTA5LTgzOTUtMDFjYzU3MzhmMmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOuf5OpnIQDIqqpcGx7KXPErFySoPTLyyOyW bqftg89T8ddCRztn6IptvQsReNj48qZ4/OFexSw7UxWEhLnrVqpzR5r6RF0fHoAA 5jfvG7bLLB36ZQbqREMYJLry1jVt3un/A9ssUQ78nJAvmrE9sQxeyLdYwmQKHwn/ jG2evF4/xliT/FwRMsCReH8j+Nx8WUSARcHp434uNwKD8ZJtK5Tw6LU+SNetYlLv PhXmh3xj2I+ReyzyVt2K4Yg1HQRgJvEF/mf7a+Vs/S8Nzu5E9LkK7ATtam730aCV j/lj+JNqU3w4avuqS+PXm7620ZdtfIEz+dgHdzdDsJvbVGIrjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnikAkMT2DQvNC7wlH1RRGSLPKQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yYmRh YTIxNy1mMDBmLTQ2YzUtYTEwMi1lNWZmMmFjYjEwNWIvYjM1NTZkNzEtZGFhNy0z NTQyLTlkMmMtOTExY2VjZWJkNDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmJkYWEyMTctZjAwZi00NmM1LWEx MDItZTVmZjJhY2IxMDViLzJiZGFhMjE3LWYwMGYtNDZjNS1hMTAyLWU1ZmYyYWNi MTA1Yi5jcmwwHwYDVR0jBBgwFoAUwIjTWY7ATOSXd4i3N52Puz3pHqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yYmRhYTIxNy1mMDBmLTQ2YzUtYTEwMi1lNWZm MmFjYjEwNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnvcwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2jOzdCunFviSOXGFw7zdawf1NqTb6ps175vOet4IHUzGaHFBWb0VCE QRU0/fIeyVeqV5ZF5QRAIDV+qMLtC3kkqmZQDpCAs9jLBzK1YOJzE7kU0XcHbUS8 SzezEZGTXiYJ/r0mOfcFT+Z4deqa1i4OYySFBiP5m0ANv4WrUQ4c+JxbnYYEXgVS t+ZrYgjvFnBAke00oRRXe1Gk94BmIZ9LT/DXKU64kTv7eczaOgii0g1QZ/I7M4ja JH53Aquhs+u0rK+OghLo8ZDP1Wty1lrNEoPnRrojejkKbNA9lyNKxpH/op5Rkmea y0qsHWxaL9qDOIX6zrOvJcIXPKG74MY= -----END CERTIFICATE-----Generated at Thu Mar 26 10:50:36 2026 by rpki-client