$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/91a7be32-bce2-39d0-bcf0-6b212251eea4.roa File: 91a7be32-bce2-39d0-bcf0-6b212251eea4.roa (raw, json) Hash identifier: J/B/3wQSREDC2otcwkGWiUDf2K3VqPDh/trII7W/jCU= Subject key identifier: EB:11:D3:D9:19:FD:8A:EC:31:37:4A:7B:05:8F:C8:79:1A:E9:16:7D Certificate issuer: /CN=f3280fa0-3649-4902-978e-e7711edc5a33 Certificate serial: 010D0C9F4328584D3DFFB00172528D396FBBCCD4 Authority key identifier: 2A:80:58:FA:DD:8F:82:3B:72:AA:03:08:B1:0B:6A:BD:4F:D2:73:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/91a7be32-bce2-39d0-bcf0-6b212251eea4.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 20473 IP address blocks: 141.195.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b0:01:72:52:8d:39:6f:bb:cc:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3280fa0-3649-4902-978e-e7711edc5a33 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=7d8fc258-e38f-4d51-9f71-f423175d07cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f0:33:2e:c4:2a:40:c9:8c:36:dc:8e:d7:83: 78:8f:3b:57:66:8f:a2:0c:1f:8a:20:0e:1a:e2:0b: d7:db:1f:a7:e5:ec:c6:e4:db:e3:90:ef:4f:7b:11: aa:e4:7c:03:5b:97:de:d7:1c:bf:57:ae:4e:64:8e: 09:d0:6f:74:78:8e:be:9a:28:18:da:61:83:f7:f8: ee:51:44:06:59:09:60:c2:03:df:8e:55:7d:97:99: b6:92:9d:b1:ed:af:77:84:73:c5:14:c6:9a:4a:07: d6:70:35:31:ca:ea:0f:f7:9b:7b:9d:f0:7f:27:c7: 9f:b4:3b:ca:20:ab:dc:11:d8:5c:2a:50:3e:3b:8a: ad:ec:16:c5:39:a3:33:f9:d9:97:12:32:46:bb:20: 87:c3:60:4e:1c:11:13:08:f6:1a:0f:51:69:03:0f: b2:51:f8:3f:74:f1:0f:3a:89:d5:64:f8:92:b9:73: d7:8e:11:c8:6f:3e:58:9e:8e:9d:8f:1d:6c:14:1d: cc:82:ac:8b:ef:af:2d:51:7b:84:42:b2:23:37:75: cf:cf:37:f5:70:ac:52:0c:dc:c9:8b:23:e6:c9:1a: f6:20:d0:f4:00:97:c4:3f:ec:64:90:f4:f0:2a:c6: 5c:40:5f:59:ad:32:d9:b1:b1:41:c3:4d:41:45:19: 8a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:11:D3:D9:19:FD:8A:EC:31:37:4A:7B:05:8F:C8:79:1A:E9:16:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/91a7be32-bce2-39d0-bcf0-6b212251eea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.crl X509v3 Authority Key Identifier: keyid:2A:80:58:FA:DD:8F:82:3B:72:AA:03:08:B1:0B:6A:BD:4F:D2:73:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33.cer sbgp-ipAddrBlock: critical IPv4: 141.195.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:e3:c4:ce:b2:a1:d1:5d:7b:34:f4:67:ea:92:33:b2:12:4a: 94:07:6f:08:29:45:d2:80:0c:98:0a:ad:94:9f:eb:64:99:60: 25:c6:5a:48:10:1c:0a:dd:68:4a:cc:6d:b1:65:51:9a:65:41: 6c:d4:5d:aa:bf:4f:e1:8c:ec:26:93:29:63:24:8f:06:d5:33: 00:c8:f9:8c:14:2a:d4:66:91:f2:7d:96:b7:d1:37:83:5a:96: db:18:b9:f2:1d:3b:86:df:a8:1d:74:9d:41:69:21:84:f7:58: 34:1b:01:43:c2:c5:89:d6:aa:54:d1:f5:22:01:b4:f5:35:b9: 53:ae:10:a4:04:cc:93:47:8b:15:db:b4:f5:72:ad:d4:56:f0: 92:b5:8b:0c:66:a3:3d:81:39:9c:aa:87:b7:f5:e1:e2:c4:fa: b0:57:66:20:6e:d9:7d:6d:58:1f:fb:f9:e5:3b:83:3c:99:51: 81:e6:c7:fc:46:d0:af:ef:b1:94:8c:bc:05:e2:4c:48:ae:6e: f4:dc:db:95:75:b0:f1:c0:e8:8f:1e:2f:6f:7f:4f:29:2a:64: ef:6d:f4:78:a5:64:b6:74:9a:f5:7a:89:ef:4a:3c:06:d4:0b: d0:96:fd:60:80:39:e1:11:ff:59:e5:91:d8:7d:5a:c0:a6:3c: 1f:ce:cc:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7ABclKNOW+7zNQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyODBmYTAtMzY0OS00OTAyLTk3OGUtZTc3MTFlZGM1 YTMzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk N2Q4ZmMyNTgtZTM4Zi00ZDUxLTlmNzEtZjQyMzE3NWQwN2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/AzLsQqQMmMNtyO14N4jztXZo+iDB+KIA4a 4gvX2x+n5ezG5NvjkO9PexGq5HwDW5fe1xy/V65OZI4J0G90eI6+migY2mGD9/ju UUQGWQlgwgPfjlV9l5m2kp2x7a93hHPFFMaaSgfWcDUxyuoP95t7nfB/J8eftDvK IKvcEdhcKlA+O4qt7BbFOaMz+dmXEjJGuyCHw2BOHBETCPYaD1FpAw+yUfg/dPEP OonVZPiSuXPXjhHIbz5Yno6djx1sFB3MgqyL768tUXuEQrIjN3XPzzf1cKxSDNzJ iyPmyRr2IND0AJfEP+xkkPTwKsZcQF9ZrTLZsbFBw01BRRmKkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsR09kZ/YrsMTdKewWPyHka6RZ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mMzI4 MGZhMC0zNjQ5LTQ5MDItOTc4ZS1lNzcxMWVkYzVhMzMvOTFhN2JlMzItYmNlMi0z OWQwLWJjZjAtNmIyMTIyNTFlZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjMyODBmYTAtMzY0OS00OTAyLTk3 OGUtZTc3MTFlZGM1YTMzL2YzMjgwZmEwLTM2NDktNDkwMi05NzhlLWU3NzExZWRj NWEzMy5jcmwwHwYDVR0jBBgwFoAUKoBY+t2PgjtyqgMIsQtqvU/ScyYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mMzI4MGZhMC0zNjQ5LTQ5MDItOTc4ZS1lNzcx MWVkYzVhMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjcNkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMzjxM6yodFdezT0Z+qSM7ISSpQHbwgpRdKADJgKrZSf62SZYCXGWkgQ HArdaErMbbFlUZplQWzUXaq/T+GM7CaTKWMkjwbVMwDI+YwUKtRmkfJ9lrfRN4Na ltsYufIdO4bfqB10nUFpIYT3WDQbAUPCxYnWqlTR9SIBtPU1uVOuEKQEzJNHixXb tPVyrdRW8JK1iwxmoz2BOZyqh7f14eLE+rBXZiBu2X1tWB/7+eU7gzyZUYHmx/xG 0K/vsZSMvAXiTEiubvTc25V1sPHA6I8eL29/TykqZO9t9HilZLZ0mvV6ie9KPAbU C9CW/WCAOeER/1nlkdh9WsCmPB/OzKc= -----END CERTIFICATE-----Generated at Thu Mar 26 16:20:40 2026 by rpki-client