$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/b6e14efa-29c2-321e-91ea-20c36382b1b0.roa File: b6e14efa-29c2-321e-91ea-20c36382b1b0.roa (raw, json) Hash identifier: Zcp9X9f0TmsLhkbDelIg7YVdGNjrgM9U9Ug7YkWO+VI= Subject key identifier: B4:68:E0:6B:21:F5:5C:32:57:51:6C:77:01:1C:A2:17:CE:71:8A:BB Certificate issuer: /CN=9a696f17-cb36-4b2b-be82-47f0c467096d Certificate serial: 010D0C9F4328584D492A6BD7535E2D575028DBC0 Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/b6e14efa-29c2-321e-91ea-20c36382b1b0.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 46632 IP address blocks: 216.238.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:6b:d7:53:5e:2d:57:50:28:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=8a6d4c79-f9c5-493b-a2d6-7096ce7a1054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:36:f6:d2:52:03:8b:8e:1d:74:a5:52:ab:58: 3b:b2:e4:d6:40:07:de:55:9d:fa:20:1d:20:05:91: 2f:ed:da:c3:76:8e:c8:f8:20:7a:c0:c9:80:5e:fd: 60:f1:d3:1f:26:df:7d:76:03:bb:19:b8:1a:52:f1: ab:80:7c:9a:36:15:26:11:52:fa:37:de:21:8d:81: e4:c8:37:50:3f:d3:10:3e:6c:27:b6:85:37:fc:d6: 29:db:76:b8:f4:b2:c0:f7:47:20:1e:ce:46:08:f5: 98:e8:82:97:ee:53:2a:02:3f:bb:61:45:e9:17:58: 64:b7:58:ba:da:c4:31:1d:88:28:6d:07:07:4c:b8: 91:83:f3:12:79:ac:1d:28:e3:af:57:24:01:71:da: 35:ad:21:9b:69:d4:31:15:77:0d:d6:b2:a6:49:ae: 42:11:cd:e7:5d:08:2c:09:6d:d5:e6:22:51:51:27: a2:b9:c1:31:77:9b:a4:e0:b9:31:3b:3a:be:e3:fb: 4c:66:8e:7c:c4:7b:4f:c9:3e:02:d5:23:9e:22:e6: 98:10:9e:bd:7c:a9:fc:47:e9:78:21:33:ea:ec:da: 2c:3a:2a:c6:3b:3c:45:4e:27:1d:df:95:38:b3:a5: 64:da:92:44:be:7d:19:a8:ff:6b:d5:58:7d:e9:0f: ab:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:68:E0:6B:21:F5:5C:32:57:51:6C:77:01:1C:A2:17:CE:71:8A:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/b6e14efa-29c2-321e-91ea-20c36382b1b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl X509v3 Authority Key Identifier: keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer sbgp-ipAddrBlock: critical IPv4: 216.238.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:cf:e6:1e:68:49:17:0a:ad:f2:1a:f0:e2:3e:51:4f:8d:52: 37:0c:8a:05:45:0b:c7:43:40:07:f2:3e:97:f0:08:4c:23:ae: a5:02:9f:ee:d1:e0:0f:f3:97:0a:05:76:3f:07:6f:cf:08:4e: 8e:e7:6c:79:23:37:0d:94:71:42:d8:84:43:d5:dd:55:64:c1: 95:be:e9:08:4f:b5:b8:7e:3e:a3:2c:6a:0b:13:7a:20:64:41: 83:c9:62:3b:8d:64:a3:37:5d:7f:b3:52:5d:89:3a:90:89:c9: d4:05:6b:02:f1:61:df:ee:87:33:45:8e:b1:d5:85:ac:8a:00: bb:bc:b4:fd:27:98:6d:18:7e:db:9d:cc:3a:2f:60:f0:34:f3: 23:47:70:e3:60:09:e1:13:8c:18:02:b7:75:e7:1e:56:6d:1a: ce:7e:3d:18:bf:ca:d0:43:83:57:1b:14:ec:83:9f:a4:3f:ba: 88:dd:46:b1:75:47:fa:3f:85:f5:21:a5:ac:c4:e2:43:3f:4e: e9:c5:a1:db:19:94:ce:55:a1:da:0b:55:e6:ec:cd:79:11:17: c9:03:dc:ff:6f:43:ec:f5:d3:d5:a9:2a:27:dd:92:88:8e:c8: 51:89:7b:52:97:a2:58:3c:fc:bb:25:28:d8:0a:b9:41:c9:4d: e1:e2:cb:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKmvXU14tV1Ao28AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE2OTZmMTctY2IzNi00YjJiLWJlODItNDdmMGM0Njcw OTZkMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk OGE2ZDRjNzktZjljNS00OTNiLWEyZDYtNzA5NmNlN2ExMDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDb20lIDi44ddKVSq1g7suTWQAfeVZ36IB0g BZEv7drDdo7I+CB6wMmAXv1g8dMfJt99dgO7GbgaUvGrgHyaNhUmEVL6N94hjYHk yDdQP9MQPmwntoU3/NYp23a49LLA90cgHs5GCPWY6IKX7lMqAj+7YUXpF1hkt1i6 2sQxHYgobQcHTLiRg/MSeawdKOOvVyQBcdo1rSGbadQxFXcN1rKmSa5CEc3nXQgs CW3V5iJRUSeiucExd5uk4LkxOzq+4/tMZo58xHtPyT4C1SOeIuaYEJ69fKn8R+l4 ITPq7NosOirGOzxFTicd35U4s6Vk2pJEvn0ZqP9r1Vh96Q+rnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRo4Gsh9VwyV1FsdwEcohfOcYq7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5 NmYxNy1jYjM2LTRiMmItYmU4Mi00N2YwYzQ2NzA5NmQvYjZlMTRlZmEtMjljMi0z MjFlLTkxZWEtMjBjMzYzODJiMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWE2OTZmMTctY2IzNi00YjJiLWJl ODItNDdmMGM0NjcwOTZkLzlhNjk2ZjE3LWNiMzYtNGIyYi1iZTgyLTQ3ZjBjNDY3 MDk2ZC5jcmwwHwYDVR0jBBgwFoAUOGVDxKSXi/HM12fBUAL+77zUroAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5NmYxNy1jYjM2LTRiMmItYmU4Mi00N2Yw YzQ2NzA5NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2O4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALP5h5oSRcKrfIa8OI+UU+NUjcMigVFC8dDQAfyPpfwCEwjrqUCn+7R 4A/zlwoFdj8Hb88ITo7nbHkjNw2UcULYhEPV3VVkwZW+6QhPtbh+PqMsagsTeiBk QYPJYjuNZKM3XX+zUl2JOpCJydQFawLxYd/uhzNFjrHVhayKALu8tP0nmG0Yftud zDovYPA08yNHcONgCeETjBgCt3XnHlZtGs5+PRi/ytBDg1cbFOyDn6Q/uojdRrF1 R/o/hfUhpazE4kM/TunFodsZlM5VodoLVebszXkRF8kD3P9vQ+z109WpKifdkoiO yFGJe1KXolg8/LslKNgKuUHJTeHiy7c= -----END CERTIFICATE-----Generated at Thu Mar 26 16:28:51 2026 by rpki-client