$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/46e5f02a-6c64-3546-b9b3-d0df60c70801.roa File: 46e5f02a-6c64-3546-b9b3-d0df60c70801.roa (raw, json) Hash identifier: MI8xVNTzjR+K3QD9njyO9AIh4LjCI5JG8knIVnKJxl0= Subject key identifier: 7C:FF:80:D7:E8:12:AE:CB:53:8A:73:3C:0F:C1:7E:83:68:D7:ED:0D Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584D55BA3A7A1EB2F979AEE6FB80 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/46e5f02a-6c64-3546-b9b3-d0df60c70801.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 25649 IP address blocks: 162.33.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:3a:7a:1e:b2:f9:79:ae:e6:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=20fc95e2-753d-4d49-88c6-ffb971a4db6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c8:7f:34:6f:9e:35:69:6f:1a:30:7d:67:58: 3d:5c:92:77:18:14:b5:7e:8c:ca:53:b8:a8:b9:ac: 75:9d:63:e7:50:a3:69:3b:93:30:76:a9:ea:57:7b: 4a:85:62:a3:0c:82:84:54:38:95:03:f9:17:f5:96: c8:9a:a9:77:ab:9a:ad:74:3b:fb:fe:d6:da:d0:9b: 0c:f1:60:07:57:ea:d6:9b:a9:a8:cf:f7:5a:1d:ba: f4:58:ed:d4:cf:25:01:14:89:da:95:e0:a5:51:77: 3e:ee:a6:0b:63:14:e4:8c:92:2c:2d:a5:a2:21:a5: 25:4a:36:3a:cc:9b:3d:7a:d5:25:fb:ed:27:78:49: 75:73:f6:c3:85:11:23:b4:d6:56:ad:0b:c5:f3:39: 8b:58:14:d2:be:be:31:ea:1e:2d:17:1b:d0:e8:b8: 73:f6:d5:7f:05:7f:5c:7a:2e:c9:e0:5b:69:0f:b6: d8:de:07:5b:dc:30:4d:c4:10:53:c5:98:6a:4e:10: 63:60:49:bc:91:7b:09:52:f4:4b:c8:0a:9a:18:b6: 94:27:03:c9:27:0b:49:d9:f8:95:f8:a8:ae:f1:5b: aa:a1:ca:d4:ca:ce:c2:04:07:a3:ae:3f:45:83:85: 9f:8f:7e:96:20:f8:9e:d5:95:0a:35:dc:65:2b:3a: d3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FF:80:D7:E8:12:AE:CB:53:8A:73:3C:0F:C1:7E:83:68:D7:ED:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/46e5f02a-6c64-3546-b9b3-d0df60c70801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 162.33.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c3:35:db:ff:4f:bd:b1:41:67:9d:42:85:ce:f3:ba:64:99: 4b:3c:24:f7:b5:65:be:0c:39:a9:ec:db:81:dc:ca:bc:b1:27: 16:98:53:6f:6f:73:be:45:f5:17:40:b5:05:39:34:a6:61:91: 04:d0:6b:4c:2f:28:36:84:df:0f:67:d9:6f:fc:20:09:c6:b6: 04:8c:1c:ec:00:06:f4:2a:65:f2:f8:93:d0:88:4d:88:3a:37: ea:64:08:74:bb:08:83:b4:88:c3:0e:f7:f7:b4:fd:f6:d2:c4: c0:f7:42:8e:52:a1:51:0d:67:02:6c:31:c4:5a:bf:ac:e6:9c: 5c:61:91:d4:3e:b7:c7:1e:6f:24:c1:43:fc:45:ff:5b:6d:e0: 48:8a:d9:b1:f6:88:db:1f:cf:7e:3b:1c:ba:fc:48:6b:0d:cc: 5c:17:ce:48:f0:38:a8:62:39:ca:76:cd:90:ae:bd:9d:42:b5: a4:2c:a2:c7:f7:08:92:2d:87:16:a6:a5:2c:3b:c1:17:1f:5a: c1:d6:13:19:41:b2:fa:e7:b8:aa:c4:3d:43:fb:3f:d3:fa:42: 28:34:d0:0a:d1:e8:29:20:40:1f:b2:53:7c:96:43:36:4f:44: 9d:d0:b6:9d:50:6b:4e:af:f8:75:ed:d2:4b:95:8e:00:1a:42: d8:2f:07:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vujp6HrL5ea7m+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MjBmYzk1ZTItNzUzZC00ZDQ5LTg4YzYtZmZiOTcxYTRkYjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsh/NG+eNWlvGjB9Z1g9XJJ3GBS1fozKU7io uax1nWPnUKNpO5MwdqnqV3tKhWKjDIKEVDiVA/kX9ZbImql3q5qtdDv7/tba0JsM 8WAHV+rWm6moz/daHbr0WO3UzyUBFInaleClUXc+7qYLYxTkjJIsLaWiIaUlSjY6 zJs9etUl++0neEl1c/bDhREjtNZWrQvF8zmLWBTSvr4x6h4tFxvQ6Lhz9tV/BX9c ei7J4FtpD7bY3gdb3DBNxBBTxZhqThBjYEm8kXsJUvRLyAqaGLaUJwPJJwtJ2fiV +Kiu8VuqocrUys7CBAejrj9Fg4Wfj36WIPie1ZUKNdxlKzrTsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHz/gNfoEq7LU4pzPA/BfoNo1+0NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvNDZlNWYwMmEtNmM2NC0z NTQ2LWI5YjMtZDBkZjYwYzcwODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoiHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDDNdv/T72xQWedQoXO87pkmUs8JPe1Zb4MOans24HcyryxJxaYU29v c75F9RdAtQU5NKZhkQTQa0wvKDaE3w9n2W/8IAnGtgSMHOwABvQqZfL4k9CITYg6 N+pkCHS7CIO0iMMO9/e0/fbSxMD3Qo5SoVENZwJsMcRav6zmnFxhkdQ+t8cebyTB Q/xF/1tt4EiK2bH2iNsfz347HLr8SGsNzFwXzkjwOKhiOcp2zZCuvZ1CtaQsosf3 CJIthxampSw7wRcfWsHWExlBsvrnuKrEPUP7P9P6Qig00ArR6CkgQB+yU3yWQzZP RJ3Qtp1Qa06v+HXt0kuVjgAaQtgvB88= -----END CERTIFICATE-----Generated at Mon Mar 30 08:34:19 2026 by rpki-client