$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/7effcfd6-71db-3402-9537-a1125bf61d60.roa File: 7effcfd6-71db-3402-9537-a1125bf61d60.roa (raw, json) Hash identifier: LlUqw+aWSSPyk4WFx+jCQ/PbPdBTtivUR5x+gp8Xhm4= Subject key identifier: 1D:0B:80:A0:6D:88:F0:6F:31:3A:B9:EC:0F:77:A0:FB:DF:BD:72:11 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584D2A74E749537104F8ED4A1380 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/7effcfd6-71db-3402-9537-a1125bf61d60.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 55293 IP address blocks: 69.48.168.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:e7:49:53:71:04:f8:ed:4a:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=3da4f459-d340-49b8-8173-a08856ebe984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b8:20:8c:d7:af:6c:8b:56:82:ec:54:e7:9b: 0c:6b:7b:32:c6:29:46:2d:54:bd:85:ce:a9:c3:93: 46:71:b2:04:61:a1:48:e7:9b:f9:39:4a:e5:65:29: ea:46:66:1d:51:61:8f:db:07:da:a3:bb:48:ec:e3: db:f4:08:63:9c:33:95:10:94:50:16:8a:2d:90:66: 22:6e:02:9c:2e:99:0d:0a:de:2a:6e:51:2f:52:26: 3e:85:00:67:ed:37:43:91:3a:36:da:3f:b4:fa:eb: 52:9b:7e:32:55:8d:20:52:f4:9f:f4:2a:3d:c3:b2: 23:58:96:7c:7a:9f:f3:bd:39:1e:6d:14:59:7a:68: 85:c5:99:5e:8a:9a:34:23:b4:d5:37:31:74:ac:31: 52:bb:8c:81:24:3c:22:cf:cf:c1:50:4d:9b:55:3c: ba:a9:2f:81:86:65:5d:11:07:d8:67:89:ce:15:02: b2:b7:97:e9:a4:e1:9a:5c:98:28:e5:2e:85:db:8f: 91:2f:4f:6b:40:98:71:d4:21:88:48:5b:db:6c:04: cf:c9:9e:c0:d6:4a:74:f3:13:f6:49:65:d5:42:6a: 35:04:cf:38:93:63:f7:1e:e2:dc:cd:43:9b:14:a1: 96:41:69:ac:14:d9:be:17:ae:73:3f:c7:08:a1:b3: fb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0B:80:A0:6D:88:F0:6F:31:3A:B9:EC:0F:77:A0:FB:DF:BD:72:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/7effcfd6-71db-3402-9537-a1125bf61d60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 69.48.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:f3:f5:f8:7b:d6:58:6e:9f:08:2d:a4:f5:2b:1a:6f:dc:bc: 28:a1:bd:41:8d:ab:b3:05:b4:c2:77:92:19:b1:30:fe:4f:bd: 14:6b:47:9a:a9:98:46:e4:b2:aa:9a:a8:a9:cb:48:ed:0c:08: 2d:45:af:ba:96:cc:6a:97:77:44:a7:d1:a7:79:e3:d7:e2:2f: 75:2e:8c:25:1b:f4:56:ea:cc:76:1c:88:5f:be:92:55:a5:04: ae:67:db:13:22:3d:b0:25:24:9c:fd:4b:c9:ef:db:db:5c:61: eb:23:0d:9f:f5:f4:7f:a2:9a:4c:d6:be:1a:5e:06:f7:35:dc: 12:bf:9b:7d:b7:65:ae:cd:f2:15:c5:aa:bd:2d:75:ce:6f:bb: 9a:b3:27:97:88:0c:64:bf:1a:bb:e1:ab:c7:be:23:75:df:5c: 6c:91:57:fa:a4:bc:6d:ae:ba:53:2b:3d:f0:ae:f4:71:26:24: d1:d3:fe:18:d7:89:c8:81:71:62:27:28:07:dd:8a:ac:a7:e8: 24:a6:5f:f3:f3:2d:24:2d:74:3d:03:d6:f8:9b:11:c2:2a:ea: 78:9a:f7:c5:75:a9:62:74:ed:5b:18:d7:54:10:9e:38:ef:31: 4c:73:15:f0:a7:38:c3:4e:47:08:c4:aa:a3:8c:5b:21:1d:b3: f8:fa:ad:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOdJU3EE+O1KE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk M2RhNGY0NTktZDM0MC00OWI4LTgxNzMtYTA4ODU2ZWJlOTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbggjNevbItWguxU55sMa3syxilGLVS9hc6p w5NGcbIEYaFI55v5OUrlZSnqRmYdUWGP2wfao7tI7OPb9AhjnDOVEJRQFootkGYi bgKcLpkNCt4qblEvUiY+hQBn7TdDkTo22j+0+utSm34yVY0gUvSf9Co9w7IjWJZ8 ep/zvTkebRRZemiFxZleipo0I7TVNzF0rDFSu4yBJDwiz8/BUE2bVTy6qS+BhmVd EQfYZ4nOFQKyt5fppOGaXJgo5S6F24+RL09rQJhx1CGISFvbbATPyZ7A1kp08xP2 SWXVQmo1BM84k2P3HuLczUObFKGWQWmsFNm+F65zP8cIobP7QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0LgKBtiPBvMTq57A93oPvfvXIRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvN2VmZmNmZDYtNzFkYi0z NDAyLTk1MzctYTExMjViZjYxZDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRTCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/z9fh71lhunwgtpPUrGm/cvCihvUGNq7MFtMJ3khmxMP5PvRRrR5qp mEbksqqaqKnLSO0MCC1Fr7qWzGqXd0Sn0ad549fiL3UujCUb9FbqzHYciF++klWl BK5n2xMiPbAlJJz9S8nv29tcYesjDZ/19H+imkzWvhpeBvc13BK/m323Za7N8hXF qr0tdc5vu5qzJ5eIDGS/Grvhq8e+I3XfXGyRV/qkvG2uulMrPfCu9HEmJNHT/hjX iciBcWInKAfdiqyn6CSmX/PzLSQtdD0D1vibEcIq6nia98V1qWJ07VsY11QQnjjv MUxzFfCnOMNORwjEqqOMWyEds/j6rec= -----END CERTIFICATE-----Generated at Thu Mar 26 12:26:16 2026 by rpki-client