$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/2d8ff043-0fe8-3c18-900d-798f7801a2f4.roa File: 2d8ff043-0fe8-3c18-900d-798f7801a2f4.roa (raw, json) Hash identifier: jleRkrBq2xFevQEiEcalV3zr2iBlIp3h0WBF7rGsB+U= Subject key identifier: 04:64:DB:A7:40:EC:B9:A3:09:8C:84:0A:06:A4:71:02:2C:D4:81:56 Certificate issuer: /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4 Certificate serial: 010D0C9F4328584D27AA2BF38D42D9550E54AA00 Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/2d8ff043-0fe8-3c18-900d-798f7801a2f4.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 3280 IP address blocks: 174.136.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:2b:f3:8d:42:d9:55:0e:54:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=3083f55a-c811-403a-8505-c30b61e55a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c7:f1:18:22:cd:b8:21:93:22:a8:fa:c0:82: 38:73:2b:2a:eb:1a:5c:77:35:ca:5d:18:8b:01:be: 63:57:88:e7:a7:c9:1f:17:d6:e1:64:f5:58:6f:2e: 62:0a:e2:6b:c3:be:3e:58:ca:36:d0:80:02:52:16: 3c:66:8e:54:e1:9a:a7:8c:c1:38:a7:84:a9:47:97: 1a:cd:7b:75:5b:29:ce:f5:ce:5c:ac:25:ee:91:f5: 84:1a:e7:c0:70:57:ea:63:ba:05:2b:b1:6e:c2:46: d9:0b:77:25:87:b5:e9:db:88:ad:f3:ef:3d:fd:fe: 5c:99:40:5c:8f:1b:89:e0:21:8a:5a:90:3f:d3:a3: 7c:6e:49:93:ac:35:93:59:b5:fc:7e:4c:6a:35:47: da:04:40:51:61:eb:16:28:b8:ea:2a:88:be:8c:2a: 35:7b:cd:cc:74:19:49:4a:7a:3d:b8:d6:d9:39:70: 2b:2c:4d:43:e1:b0:07:22:e2:36:79:c1:d6:02:f6: eb:33:5e:44:6a:65:6b:b6:af:21:03:e2:d6:c5:45: 28:ab:93:64:0d:6e:93:88:2b:2e:f9:a5:31:61:ad: 4f:d6:3b:44:e2:2b:9d:17:36:57:cf:89:fc:a2:10: 15:d0:cf:74:7e:36:72:19:58:18:d5:5a:bf:51:2f: 02:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:64:DB:A7:40:EC:B9:A3:09:8C:84:0A:06:A4:71:02:2C:D4:81:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/2d8ff043-0fe8-3c18-900d-798f7801a2f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl X509v3 Authority Key Identifier: keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer sbgp-ipAddrBlock: critical IPv4: 174.136.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:a0:45:df:91:06:4b:b5:30:d0:10:b7:87:74:23:62:1a:5a: 89:85:37:df:8b:b7:e1:e4:20:da:30:da:94:af:90:15:25:ef: 86:fe:b6:52:f6:be:8a:b5:78:21:d2:70:cc:81:a7:95:62:f5: 43:18:d4:96:6d:c2:e3:6f:a7:db:45:cb:84:ad:4f:cf:67:49: 97:11:e0:31:bd:a0:52:83:51:74:4d:aa:90:52:a2:22:3a:5f: 92:b5:f8:76:b7:04:64:5f:75:6b:fd:c5:85:6a:c9:33:27:b3: b4:41:e9:01:15:71:6c:68:d5:08:11:c3:8b:9c:a1:12:13:9b: 2c:3b:d7:14:18:4d:d2:07:32:e3:1d:ac:ce:54:c6:31:54:93: 73:46:cc:8c:45:a8:47:54:27:27:36:32:e5:ad:8a:6d:13:6e: dd:57:4c:00:e2:84:0d:31:71:79:af:7e:2f:4f:85:56:1f:37: d5:9b:07:1b:10:27:89:96:3e:f6:e7:9c:6f:22:46:1c:0c:08: 9d:59:0c:9b:41:0c:4b:d0:a4:ce:6d:64:b0:ee:8f:d3:e4:01: 6b:81:57:0b:fd:33:3e:0a:e3:75:e1:21:2c:bc:42:51:11:90: c0:84:f7:f8:24:2c:9b:2a:25:89:3e:89:4f:78:f8:2e:fc:a5: 89:64:25:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqivzjULZVQ5UqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhmODUzNGYtNTdjZC00NWJhLWJmYTQtY2U2MDg0MjQ2 M2E0MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MzA4M2Y1NWEtYzgxMS00MDNhLTg1MDUtYzMwYjYxZTU1YTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsfxGCLNuCGTIqj6wII4cysq6xpcdzXKXRiL Ab5jV4jnp8kfF9bhZPVYby5iCuJrw74+WMo20IACUhY8Zo5U4ZqnjME4p4SpR5ca zXt1WynO9c5crCXukfWEGufAcFfqY7oFK7FuwkbZC3clh7Xp24it8+89/f5cmUBc jxuJ4CGKWpA/06N8bkmTrDWTWbX8fkxqNUfaBEBRYesWKLjqKoi+jCo1e83MdBlJ Sno9uNbZOXArLE1D4bAHIuI2ecHWAvbrM15EamVrtq8hA+LWxUUoq5NkDW6TiCsu +aUxYa1P1jtE4iudFzZXz4n8ohAV0M90fjZyGVgY1Vq/US8CcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARk26dA7LmjCYyECgakcQIs1IFWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4 NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYwODQyNDYzYTQvMmQ4ZmYwNDMtMGZlOC0z YzE4LTkwMGQtNzk4Zjc4MDFhMmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDhmODUzNGYtNTdjZC00NWJhLWJm YTQtY2U2MDg0MjQ2M2E0LzQ4Zjg1MzRmLTU3Y2QtNDViYS1iZmE0LWNlNjA4NDI0 NjNhNC5jcmwwHwYDVR0jBBgwFoAU6FPdCXJVOiBqm33uUEZSal9iZggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYw ODQyNDYzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArojJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWgRd+RBku1MNAQt4d0I2IaWomFN9+Lt+HkINow2pSvkBUl74b+tlL2 voq1eCHScMyBp5Vi9UMY1JZtwuNvp9tFy4StT89nSZcR4DG9oFKDUXRNqpBSoiI6 X5K1+Ha3BGRfdWv9xYVqyTMns7RB6QEVcWxo1QgRw4ucoRITmyw71xQYTdIHMuMd rM5UxjFUk3NGzIxFqEdUJyc2MuWtim0Tbt1XTADihA0xcXmvfi9PhVYfN9WbBxsQ J4mWPvbnnG8iRhwMCJ1ZDJtBDEvQpM5tZLDuj9PkAWuBVwv9Mz4K43XhISy8QlER kMCE9/gkLJsqJYk+iU94+C78pYlkJWA= -----END CERTIFICATE-----Generated at Thu Mar 26 13:08:13 2026 by rpki-client