$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a2f7fe8-996d-3862-9d84-52f78959e38b.roa File: 5a2f7fe8-996d-3862-9d84-52f78959e38b.roa (raw, json) Hash identifier: X3JPo3X7kYg5pe2jno9znx/FepnoaP5ylDQITbkfRok= Subject key identifier: 96:CC:C6:B9:3A:28:00:20:73:CC:DD:39:72:3B:9B:F0:23:49:7D:42 Certificate issuer: /CN=5a060f48-6584-4864-ba80-2bac55c51550 Certificate serial: 010D0C9F4328584D1F4A41C0E00AF6CBB19D8F80 Authority key identifier: 3F:17:D2:5D:8E:77:76:32:3A:86:89:09:DD:A4:67:8D:E7:4C:EF:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a2f7fe8-996d-3862-9d84-52f78959e38b.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 40861 IP address blocks: 216.168.18.0/24 maxlen: 24 216.168.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:41:c0:e0:0a:f6:cb:b1:9d:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a060f48-6584-4864-ba80-2bac55c51550 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=c84b1c91-c24f-455a-b980-f8841e3dd6c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cf:c8:5c:18:b2:18:58:75:bf:a1:76:32:38: 3a:f6:46:4b:c2:88:65:8a:4f:fa:14:d0:7c:ed:23: 62:84:55:04:41:0c:75:0b:54:6b:c1:8d:ba:54:e6: 31:30:b7:8b:1d:34:3c:1e:2c:fc:8c:78:ed:0d:56: 05:5e:17:a0:11:06:29:de:ed:9e:10:b4:9a:da:12: ff:a2:01:07:95:ed:cc:3c:11:74:e8:50:e5:bc:88: f1:31:8f:1b:e2:8c:3c:84:e7:7d:45:60:cc:19:be: 64:a1:01:d3:a6:6d:c4:81:e2:f0:8a:c3:79:ce:ec: 50:56:1b:cc:1f:2e:86:f1:67:b8:86:ef:01:f2:a9: 7c:98:95:d9:a2:2f:bf:48:c1:42:cd:8f:51:86:4b: 02:6c:32:52:73:7b:1e:b4:be:80:38:a0:03:11:88: de:43:c5:99:43:04:ec:6c:b5:b4:56:42:8a:53:fc: 12:78:14:b6:05:98:f4:1b:c0:80:6c:17:25:58:cd: eb:3d:00:1a:fd:bc:05:e1:77:72:83:35:fe:f6:ae: 4d:12:7c:10:5c:0f:f3:61:12:5b:12:65:0a:95:af: 25:b5:63:b3:5e:44:72:33:fd:72:c1:64:e4:7e:bb: de:fb:9f:9a:ab:a0:ea:da:5c:a7:9f:e1:7d:56:e4: 8d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CC:C6:B9:3A:28:00:20:73:CC:DD:39:72:3B:9B:F0:23:49:7D:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a2f7fe8-996d-3862-9d84-52f78959e38b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.crl X509v3 Authority Key Identifier: keyid:3F:17:D2:5D:8E:77:76:32:3A:86:89:09:DD:A4:67:8D:E7:4C:EF:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer sbgp-ipAddrBlock: critical IPv4: 216.168.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:12:4c:e0:0d:80:c6:31:17:db:2d:0f:35:e6:d1:59:40:15: 13:3a:73:8b:d6:a0:02:a9:4c:c9:28:33:94:67:59:2b:6b:0a: 89:a3:76:19:d7:38:ed:62:24:ce:0c:8b:4d:67:05:86:06:31: 1f:97:bd:9a:91:a8:9d:bf:ce:ae:33:6d:c4:16:28:10:60:76: 19:8b:50:b9:8d:4f:78:c2:f2:2f:da:14:a6:0d:00:0a:a6:eb: f3:80:22:48:73:01:d5:68:c3:76:c5:23:f6:3a:53:2e:cc:68: 83:f0:83:22:0c:f7:75:11:da:23:d5:da:9f:95:8d:b5:0d:f5: a3:40:28:fb:0b:87:e8:f5:78:1f:ad:a3:2b:43:e0:25:ef:e6: 9b:b9:e6:dc:64:84:a7:dc:29:5e:fb:ab:65:59:64:ac:3f:9a: 63:f2:0d:32:e0:0f:85:bd:84:71:0e:a3:54:c2:16:10:da:0d: 84:2b:02:26:a2:d9:66:c1:57:22:6a:f1:f2:ec:ae:45:be:5f: c1:72:1e:92:80:f7:1e:88:b5:d7:8c:33:25:01:34:4e:0b:51: 24:83:38:93:e6:aa:37:d7:35:03:2d:e3:4f:5b:95:41:b8:b4: 4e:42:b0:d0:55:ba:77:d2:bb:cd:86:8f:25:ae:4c:d7:a0:93: 9e:1c:5e:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSkHA4Ar2y7Gdj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWEwNjBmNDgtNjU4NC00ODY0LWJhODAtMmJhYzU1YzUx NTUwMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk Yzg0YjFjOTEtYzI0Zi00NTVhLWI5ODAtZjg4NDFlM2RkNmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic/IXBiyGFh1v6F2Mjg69kZLwohlik/6FNB8 7SNihFUEQQx1C1RrwY26VOYxMLeLHTQ8Hiz8jHjtDVYFXhegEQYp3u2eELSa2hL/ ogEHle3MPBF06FDlvIjxMY8b4ow8hOd9RWDMGb5koQHTpm3EgeLwisN5zuxQVhvM Hy6G8We4hu8B8ql8mJXZoi+/SMFCzY9RhksCbDJSc3setL6AOKADEYjeQ8WZQwTs bLW0VkKKU/wSeBS2BZj0G8CAbBclWM3rPQAa/bwF4XdygzX+9q5NEnwQXA/zYRJb EmUKla8ltWOzXkRyM/1ywWTkfrve+5+aq6Dq2lynn+F9VuSNGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbMxrk6KAAgc8zdOXI7m/AjSX1CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81YTA2 MGY0OC02NTg0LTQ4NjQtYmE4MC0yYmFjNTVjNTE1NTAvNWEyZjdmZTgtOTk2ZC0z ODYyLTlkODQtNTJmNzg5NTllMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWEwNjBmNDgtNjU4NC00ODY0LWJh ODAtMmJhYzU1YzUxNTUwLzVhMDYwZjQ4LTY1ODQtNDg2NC1iYTgwLTJiYWM1NWM1 MTU1MC5jcmwwHwYDVR0jBBgwFoAUPxfSXY53djI6hokJ3aRnjedM7wwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81YTA2MGY0OC02NTg0LTQ4NjQtYmE4MC0yYmFj NTVjNTE1NTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KgSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0STOANgMYxF9stDzXm0VlAFRM6c4vWoAKpTMkoM5RnWStrComjdhnX OO1iJM4Mi01nBYYGMR+XvZqRqJ2/zq4zbcQWKBBgdhmLULmNT3jC8i/aFKYNAAqm 6/OAIkhzAdVow3bFI/Y6Uy7MaIPwgyIM93UR2iPV2p+VjbUN9aNAKPsLh+j1eB+t oytD4CXv5pu55txkhKfcKV77q2VZZKw/mmPyDTLgD4W9hHEOo1TCFhDaDYQrAiai 2WbBVyJq8fLsrkW+X8FyHpKA9x6ItdeMMyUBNE4LUSSDOJPmqjfXNQMt409blUG4 tE5CsNBVunfSu82GjyWuTNegk54cXv0= -----END CERTIFICATE-----Generated at Thu Mar 26 16:32:20 2026 by rpki-client