$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa File: 0baf61e0-eead-323c-b72c-efaab2756610.roa (raw, json) Hash identifier: 50uvwwhB2xZhf0Yn7IVHXZrD5kW2HbDYIjMOOWzxZRA= Subject key identifier: 66:4C:B5:C0:53:F9:F8:81:21:5D:AF:29:E8:3E:D6:42:18:5E:F3:75 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584D2644B8E3D6754AD52F358980 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 16433 IP address blocks: 216.20.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:b8:e3:d6:75:4a:d5:2f:35:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=53ec0bb9-bebf-4053-89c9-1e5fcedc30a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ee:6a:a5:c3:1c:f7:ac:86:f4:e1:59:88:a7: ec:85:19:14:e2:95:cd:ac:45:a2:5f:c4:8e:1e:5a: 4f:a2:5d:d5:90:e0:de:93:2e:ae:e3:7a:73:7a:f8: 4a:5b:86:65:d7:f3:4e:93:82:b0:25:17:e0:92:49: 7e:6f:00:eb:b0:a4:7e:ca:f1:6a:51:e5:d3:67:29: 5f:fd:c1:05:fa:90:2d:b1:05:5b:70:04:8d:9f:c8: 1a:af:6f:28:dc:64:db:f8:9f:2b:9d:0b:c9:f1:96: 52:d9:de:e6:29:18:43:80:ef:46:ba:3c:4f:b3:07: 59:27:a4:90:b0:d3:d7:5c:12:c0:1a:35:7e:9d:cb: d9:81:56:d5:b6:29:71:8b:69:f4:2a:c2:5b:ca:d6: f1:41:f0:99:f1:de:f6:85:6c:88:78:af:b6:61:38: 75:6c:34:a2:cf:39:50:10:f8:02:fd:53:26:72:d3: be:6f:16:ae:d8:ec:ac:43:b0:e2:84:12:43:46:96: 7d:77:b9:fd:d6:e5:54:1d:df:2c:3a:4e:8b:05:1a: ca:fe:0d:30:7a:49:e1:61:d1:52:e5:de:d6:09:b9: 8f:8f:8b:46:7a:66:b9:54:2e:07:c6:cd:55:02:06: f8:48:2b:c1:bc:76:5c:9f:64:73:2a:f3:ca:8e:ba: 3d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4C:B5:C0:53:F9:F8:81:21:5D:AF:29:E8:3E:D6:42:18:5E:F3:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 216.20.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a7:28:74:61:36:71:62:b8:1f:3a:1e:14:5e:29:dd:95:63: f4:65:4f:8d:75:23:80:68:ac:aa:69:e9:55:da:09:86:49:dc: c1:3a:d0:a9:c6:c7:ac:0f:fd:b6:d5:17:c2:6e:93:2c:08:83: 67:5d:a4:76:2b:c8:a1:9e:50:3f:a7:74:30:e2:f5:e1:7b:bc: 15:60:c6:5c:d6:ec:1c:11:47:41:b8:89:07:a6:0a:6f:3b:71: 1c:40:0b:f3:2b:d5:22:e0:92:2e:62:45:b0:cc:dd:a5:f9:fd: 60:be:5f:05:44:23:27:4a:4a:fb:da:25:a1:f4:b9:21:10:5a: d3:53:c6:0b:0d:54:94:76:22:bb:01:88:b8:51:18:2d:ea:2f: 79:b0:9f:6e:f1:a7:62:39:ed:4a:44:d5:ca:69:86:34:99:1f: fe:62:b7:d5:d7:47:58:23:20:7f:7c:19:0f:8d:4d:70:c9:31: 69:97:c9:24:1d:16:ab:97:e4:a9:e2:3b:3a:e4:6b:f0:7f:28: 6e:e0:ad:63:15:79:22:51:33:ca:e2:0c:b2:dd:7d:7e:11:62: 6a:84:22:fc:dc:2e:2f:6f:49:36:a2:60:11:82:3f:b2:35:61: eb:7f:9a:0b:6c:eb:2d:21:ad:aa:f6:b3:7e:1f:5e:7f:24:df: 10:4b:cc:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRLjj1nVK1S81iYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk NTNlYzBiYjktYmViZi00MDUzLTg5YzktMWU1ZmNlZGMzMGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou5qpcMc96yG9OFZiKfshRkU4pXNrEWiX8SO HlpPol3VkODeky6u43pzevhKW4Zl1/NOk4KwJRfgkkl+bwDrsKR+yvFqUeXTZylf /cEF+pAtsQVbcASNn8gar28o3GTb+J8rnQvJ8ZZS2d7mKRhDgO9GujxPswdZJ6SQ sNPXXBLAGjV+ncvZgVbVtilxi2n0KsJbytbxQfCZ8d72hWyIeK+2YTh1bDSizzlQ EPgC/VMmctO+bxau2OysQ7DihBJDRpZ9d7n91uVUHd8sOk6LBRrK/g0weknhYdFS 5d7WCbmPj4tGema5VC4Hxs1VAgb4SCvBvHZcn2RzKvPKjro9cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZMtcBT+fiBIV2vKeg+1kIYXvN1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMGJhZjYxZTAtZWVhZC0z MjNjLWI3MmMtZWZhYWIyNzU2NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKnKHRhNnFiuB86HhReKd2VY/RlT411I4BorKpp6VXaCYZJ3ME60KnG x6wP/bbVF8JukywIg2ddpHYryKGeUD+ndDDi9eF7vBVgxlzW7BwRR0G4iQemCm87 cRxAC/Mr1SLgki5iRbDM3aX5/WC+XwVEIydKSvvaJaH0uSEQWtNTxgsNVJR2IrsB iLhRGC3qL3mwn27xp2I57UpE1cpphjSZH/5it9XXR1gjIH98GQ+NTXDJMWmXySQd FquX5KniOzrka/B/KG7grWMVeSJRM8riDLLdfX4RYmqEIvzcLi9vSTaiYBGCP7I1 Yet/mgts6y0hrar2s34fXn8k3xBLzJ0= -----END CERTIFICATE-----Generated at Thu Mar 26 12:41:51 2026 by rpki-client