$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5505acd3-fe07-34ce-bc2f-6ac3c60e9a38.roa File: 5505acd3-fe07-34ce-bc2f-6ac3c60e9a38.roa (raw, json) Hash identifier: ILDkCbcquEzJ2KEX91cl0DOyIGP5ZdvKMW7mZPRqSKs= Subject key identifier: C4:91:2B:D0:D6:C2:F9:90:76:A3:16:9C:F1:7A:81:D0:2D:14:A8:A5 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584D2A74E219B89F41DDB4B53880 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5505acd3-fe07-34ce-bc2f-6ac3c60e9a38.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 16433 IP address blocks: 162.251.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:e2:19:b8:9f:41:dd:b4:b5:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=be8296c2-2d24-4a67-b469-c9f855c2c4c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e6:67:78:4f:87:e4:c0:cb:84:7f:e7:80:8b: da:c9:70:ea:19:4f:2f:16:5f:69:55:c8:10:6c:4b: a3:84:db:b2:29:cd:06:47:fa:22:c1:2e:11:91:f2: ef:f9:a9:11:50:be:dc:88:64:4d:9f:df:99:e9:0e: 5e:70:09:08:81:ee:c2:03:11:26:42:b9:a5:bd:cf: 7d:16:d9:5f:1b:43:a3:57:0b:dc:75:4f:06:37:ff: a4:0d:a4:85:79:0f:17:cc:60:2b:1b:66:0e:13:fc: 24:54:51:98:9a:62:67:cd:46:16:c6:39:8c:ed:01: b1:13:b1:95:b0:eb:ed:2d:dd:c8:39:d3:8d:eb:3d: 48:45:0a:48:38:b3:b2:cd:e2:9d:e5:e1:95:2b:15: 28:75:82:a2:69:83:e5:47:40:33:48:a3:2b:de:eb: 4b:e0:1c:93:83:c0:05:aa:75:38:99:ce:84:56:ad: 5f:24:dc:40:21:0d:4a:d0:36:63:c1:1a:e1:15:ac: c6:74:f8:d6:96:76:6c:f1:5e:8a:2f:8b:4a:a6:28: 15:0a:51:16:e3:a8:05:ce:26:06:23:4c:a0:f6:82: 86:e0:9e:0e:b0:2d:1f:c4:17:d0:05:50:da:52:4c: 0a:c6:0e:ec:45:cd:15:67:19:06:1d:0c:45:72:19: 4c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:91:2B:D0:D6:C2:F9:90:76:A3:16:9C:F1:7A:81:D0:2D:14:A8:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5505acd3-fe07-34ce-bc2f-6ac3c60e9a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 162.251.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:f6:0f:54:50:70:cc:fd:15:49:11:27:5c:5d:a0:63:be:49: f5:02:7e:d0:c0:7a:83:1c:08:6f:45:0b:0f:7b:2c:4d:33:9d: ff:7c:77:a5:c3:49:f3:9a:a4:50:8c:ca:bc:14:2c:50:24:98: 35:d6:b8:29:6d:90:e6:64:cf:da:e7:b0:42:b5:76:d4:c1:a7: 18:5c:20:53:c3:f1:4f:0c:8a:46:26:90:3a:58:36:6c:70:cf: c9:99:13:a5:55:df:92:85:a0:16:6a:21:f6:19:56:33:e9:84: 7a:fc:61:03:22:58:82:7a:41:54:ba:54:5f:11:37:02:6f:e5: 71:9e:93:a9:26:2b:e7:b6:ad:96:0c:09:ad:a1:de:02:08:2b: ff:35:b5:8a:86:6b:df:6a:6b:bc:51:e6:7e:e5:b1:15:b0:f1: 0e:e0:6d:89:5d:64:f2:19:3e:a0:a1:25:4d:97:73:ad:76:b4: 44:34:18:69:89:79:2f:bf:a2:8b:29:e4:aa:63:c0:7b:36:62: 94:4e:5c:75:57:55:a2:84:a2:f1:09:73:30:85:a2:be:18:e2: 84:de:24:c9:59:de:4c:c3:0e:a5:32:97:24:f1:b6:9d:fa:d3: 85:04:bb:9d:c3:9e:19:2a:c6:e1:55:df:6a:bb:83:c6:f6:e7: 64:f7:ec:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOIZuJ9B3bS1OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk YmU4Mjk2YzItMmQyNC00YTY3LWI0NjktYzlmODU1YzJjNGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOZneE+H5MDLhH/ngIvayXDqGU8vFl9pVcgQ bEujhNuyKc0GR/oiwS4RkfLv+akRUL7ciGRNn9+Z6Q5ecAkIge7CAxEmQrmlvc99 FtlfG0OjVwvcdU8GN/+kDaSFeQ8XzGArG2YOE/wkVFGYmmJnzUYWxjmM7QGxE7GV sOvtLd3IOdON6z1IRQpIOLOyzeKd5eGVKxUodYKiaYPlR0AzSKMr3utL4ByTg8AF qnU4mc6EVq1fJNxAIQ1K0DZjwRrhFazGdPjWlnZs8V6KL4tKpigVClEW46gFziYG I0yg9oKG4J4OsC0fxBfQBVDaUkwKxg7sRc0VZxkGHQxFchlMiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSRK9DWwvmQdqMWnPF6gdAtFKilMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNTUwNWFjZDMtZmUwNy0z NGNlLWJjMmYtNmFjM2M2MGU5YTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA72D1RQcMz9FUkRJ1xdoGO+SfUCftDAeoMcCG9FCw97LE0znf98d6XD SfOapFCMyrwULFAkmDXWuCltkOZkz9rnsEK1dtTBpxhcIFPD8U8MikYmkDpYNmxw z8mZE6VV35KFoBZqIfYZVjPphHr8YQMiWIJ6QVS6VF8RNwJv5XGek6kmK+e2rZYM Ca2h3gIIK/81tYqGa99qa7xR5n7lsRWw8Q7gbYldZPIZPqChJU2Xc612tEQ0GGmJ eS+/oosp5KpjwHs2YpROXHVXVaKEovEJczCFor4Y4oTeJMlZ3kzDDqUylyTxtp36 04UEu53DnhkqxuFV32q7g8b252T37Mw= -----END CERTIFICATE-----Generated at Thu Mar 26 12:57:37 2026 by rpki-client