$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/ef00fbf4-d006-3623-97d4-7a5ca8c5c8e1.roa File: ef00fbf4-d006-3623-97d4-7a5ca8c5c8e1.roa (raw, json) Hash identifier: nUptd6U9OegUDV2GEs770lMFu/DidHxJsGdQBXTiNCA= Subject key identifier: 21:B0:FF:9A:61:9E:D7:D3:CC:F7:F3:E8:40:BA:42:0E:A9:01:F6:F3 Certificate issuer: /CN=db3852ba-10a2-4ef3-a92e-5bb8970f2b66 Certificate serial: 010D0C9F4328584D422F7CEE126A6BAC02067180 Authority key identifier: 0A:B9:F7:D3:A2:3D:3B:A8:BE:E8:1B:71:20:B4:E2:D1:F8:D0:EB:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/ef00fbf4-d006-3623-97d4-7a5ca8c5c8e1.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 46582 IP address blocks: 198.175.172.0/24 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:7c:ee:12:6a:6b:ac:02:06:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db3852ba-10a2-4ef3-a92e-5bb8970f2b66 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=bbb10a17-9e4d-4899-9516-25b1bdf511dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5e:51:5c:06:5e:ed:80:80:6a:2d:de:b6:22: ec:11:d0:45:97:42:e6:48:71:12:8c:dd:59:48:e5: 40:56:73:d0:7b:1b:1e:3d:c5:a7:e5:bd:30:25:37: a1:a8:30:13:6f:56:d8:51:16:ae:ab:b1:81:e7:5a: 0b:67:a3:5e:fc:f5:7e:e1:42:1b:51:55:f7:a3:75: bc:e1:ac:ed:39:b5:83:1f:66:34:73:fe:62:16:89: 08:15:42:ab:b3:61:bf:db:11:eb:2f:6e:c6:1c:f9: 26:c2:86:04:e6:b3:d0:88:d0:3b:4b:96:34:d8:5d: 84:d5:21:21:f6:2d:f8:39:76:ca:1a:12:c8:80:c1: 49:63:9e:1c:4e:20:aa:55:98:04:0c:70:11:b7:28: 17:c9:19:23:ae:8e:7a:88:af:b6:e6:6e:4c:c6:1c: b4:08:68:40:35:b6:89:3b:0b:c4:92:e2:e0:ce:6b: 26:27:f5:51:b2:7e:65:cd:d9:0f:b8:cf:51:9a:7a: ee:d6:82:5a:27:06:ca:e0:e9:33:ec:97:c8:40:ad: f1:0b:85:ae:bf:e2:3a:59:6b:5b:a5:de:53:ab:ea: 06:da:72:8a:cf:66:ff:37:63:68:e6:ba:d7:87:81: 77:4c:d3:40:82:7c:38:ea:43:79:18:f1:03:30:c4: aa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B0:FF:9A:61:9E:D7:D3:CC:F7:F3:E8:40:BA:42:0E:A9:01:F6:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/ef00fbf4-d006-3623-97d4-7a5ca8c5c8e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.crl X509v3 Authority Key Identifier: keyid:0A:B9:F7:D3:A2:3D:3B:A8:BE:E8:1B:71:20:B4:E2:D1:F8:D0:EB:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.cer sbgp-ipAddrBlock: critical IPv4: 198.175.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:d2:73:45:07:27:26:e9:d6:a8:8c:9f:39:ea:74:12:22:a5: 40:0f:91:ad:2f:d0:8e:18:d3:a8:f0:ff:30:d9:bb:8a:a9:2d: 48:78:b5:95:3f:95:42:9b:2e:d2:5e:b5:fa:8c:e5:54:93:c3: 69:50:ec:c2:e8:1e:db:36:2b:8d:ef:bc:6a:39:e4:f0:8d:d3: ce:56:12:6d:45:32:2e:1f:ad:89:6a:5b:55:f5:e5:40:8a:50: 43:1e:a4:30:22:25:b3:7d:7c:0a:f0:d4:c0:58:3b:0d:af:60: e1:d4:7e:2e:b7:d8:e1:95:d4:fa:1c:8a:df:20:d2:4e:ed:9e: 76:d5:64:ba:f9:a2:60:1b:80:5d:1f:cc:0c:22:c4:24:63:84: 2d:8b:5f:41:45:67:b7:a1:5e:39:c0:68:1d:ea:e0:aa:93:80: 32:56:9a:5d:aa:c9:54:1d:fe:5f:8e:7f:89:17:f6:4f:15:b2: 40:04:d9:d5:e9:14:86:7d:1c:38:98:64:62:2c:2e:ff:22:4c: 27:22:33:f9:75:0c:c8:ab:f0:97:dc:4f:99:b3:bb:e3:5e:5a: 07:29:ae:6c:db:be:a2:1d:41:e5:0b:1f:8e:f8:d5:6c:be:26: 13:72:0f:e1:88:2f:e1:33:6d:8c:60:80:4d:b4:03:28:4a:c2: 40:64:6c:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL3zuEmprrAIGcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIzODUyYmEtMTBhMi00ZWYzLWE5MmUtNWJiODk3MGYy YjY2MB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk YmJiMTBhMTctOWU0ZC00ODk5LTk1MTYtMjViMWJkZjUxMWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl5RXAZe7YCAai3etiLsEdBFl0LmSHESjN1Z SOVAVnPQexsePcWn5b0wJTehqDATb1bYURauq7GB51oLZ6Ne/PV+4UIbUVX3o3W8 4aztObWDH2Y0c/5iFokIFUKrs2G/2xHrL27GHPkmwoYE5rPQiNA7S5Y02F2E1SEh 9i34OXbKGhLIgMFJY54cTiCqVZgEDHARtygXyRkjro56iK+25m5Mxhy0CGhANbaJ OwvEkuLgzmsmJ/VRsn5lzdkPuM9Rmnru1oJaJwbK4Okz7JfIQK3xC4Wuv+I6WWtb pd5Tq+oG2nKKz2b/N2No5rrXh4F3TNNAgnw46kN5GPEDMMSqtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGw/5phntfTzPfz6EC6Qg6pAfbzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kYjM4 NTJiYS0xMGEyLTRlZjMtYTkyZS01YmI4OTcwZjJiNjYvZWYwMGZiZjQtZDAwNi0z NjIzLTk3ZDQtN2E1Y2E4YzVjOGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGIzODUyYmEtMTBhMi00ZWYzLWE5 MmUtNWJiODk3MGYyYjY2L2RiMzg1MmJhLTEwYTItNGVmMy1hOTJlLTViYjg5NzBm MmI2Ni5jcmwwHwYDVR0jBBgwFoAUCrn306I9O6i+6BtxILTi0fjQ68kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kYjM4NTJiYS0xMGEyLTRlZjMtYTkyZS01YmI4 OTcwZjJiNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxq+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7Sc0UHJybp1qiMnznqdBIipUAPka0v0I4Y06jw/zDZu4qpLUh4tZU/ lUKbLtJetfqM5VSTw2lQ7MLoHts2K43vvGo55PCN085WEm1FMi4frYlqW1X15UCK UEMepDAiJbN9fArw1MBYOw2vYOHUfi632OGV1Pocit8g0k7tnnbVZLr5omAbgF0f zAwixCRjhC2LX0FFZ7ehXjnAaB3q4KqTgDJWml2qyVQd/l+Of4kX9k8VskAE2dXp FIZ9HDiYZGIsLv8iTCciM/l1DMir8JfcT5mzu+NeWgcprmzbvqIdQeULH4741Wy+ JhNyD+GIL+EzbYxggE20AyhKwkBkbJQ= -----END CERTIFICATE-----Generated at Thu Mar 26 14:22:53 2026 by rpki-client