$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5819b85c-1290-392c-af04-a578ef8c63f4.roa File: 5819b85c-1290-392c-af04-a578ef8c63f4.roa (raw, json) Hash identifier: wDHGUc6lVCJYQWp0eH1y3+UV2KUgcgSTkk59/SR9UeQ= Subject key identifier: 4A:2C:7C:8F:65:5E:25:CD:FC:F4:90:FC:4B:D4:2F:28:30:C8:42:96 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584D2A74E20B124828854E57A9C0 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5819b85c-1290-392c-af04-a578ef8c63f4.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 16433 IP address blocks: 162.43.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:e2:0b:12:48:28:85:4e:57:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=cfe222e3-2f98-4ff4-a077-43ce44545532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d4:c7:1c:0b:a0:98:cc:12:48:b5:52:b3:99: a0:a9:ee:b2:7c:f4:21:91:b1:5f:7b:0c:06:5a:05: 18:6c:91:19:52:27:84:6d:9d:00:37:a1:cd:92:a2: 75:85:c8:84:a9:fd:54:59:8f:53:30:ac:53:c2:39: 94:f0:43:7c:e7:d7:4d:1a:cb:ad:0e:5b:0d:bd:ef: 7e:b8:73:a0:a3:aa:03:f2:9a:ec:81:78:ae:fd:cc: be:78:bd:0a:07:6a:30:34:ee:aa:78:3e:05:c9:76: 08:20:bd:c2:ee:65:0d:46:de:a4:86:a8:17:b1:29: 5f:30:36:98:92:e8:7d:e2:16:c5:06:30:8a:b3:f0: 54:bf:35:0c:da:23:c0:fc:fc:98:0f:5c:9a:8a:4c: 7d:55:58:72:dc:52:3e:87:13:00:28:2a:59:80:32: 98:be:1d:48:fc:07:fb:43:74:f0:89:06:92:dd:70: db:bb:10:21:e5:97:c9:02:44:ec:01:45:61:23:f2: 06:2c:8e:4e:7e:11:c0:52:93:fc:eb:e9:b1:1e:20: 33:c6:ff:f9:18:65:85:dc:31:df:eb:18:93:a8:13: 20:e2:81:2d:d9:05:17:fb:ba:94:d8:36:d5:21:80: d7:35:83:45:11:28:83:6d:84:6c:53:4c:40:4d:1e: 82:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2C:7C:8F:65:5E:25:CD:FC:F4:90:FC:4B:D4:2F:28:30:C8:42:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5819b85c-1290-392c-af04-a578ef8c63f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 162.43.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:e9:17:44:7c:39:34:bf:f0:61:24:8c:78:c9:2f:18:ed:27: fb:51:5a:69:96:0c:41:5a:7f:c8:99:01:27:8a:60:37:2b:fb: 87:2f:08:77:98:e4:68:ad:c6:8f:90:b1:1c:1f:36:d1:03:b4: c2:14:58:2c:e5:95:7e:5b:10:df:46:4f:44:3f:4b:97:6e:76: 4e:62:4f:2f:ae:05:2b:d1:ce:c6:19:b1:6f:e7:67:9c:a3:d5: e9:a9:94:88:0e:18:b9:d9:d9:77:bb:e8:62:a6:73:9f:4f:5e: 31:5e:e9:8d:6e:ca:2a:b0:19:d3:85:2f:ff:20:26:dc:e4:47: 98:b3:04:62:dd:76:87:c8:89:eb:80:5f:4b:69:87:f3:b0:68: d9:ca:b7:b7:b7:e2:02:b9:6f:9b:ef:79:34:27:7b:d6:4d:10: 3e:c9:61:63:15:34:bc:ca:c0:a5:a7:70:c1:34:45:6c:fc:53: ce:62:ec:a8:55:47:67:2f:2e:2c:23:74:96:0a:86:0c:7c:ff: ca:1b:b5:f2:a7:40:14:22:5b:23:be:59:ad:02:4a:68:4e:2e: 41:34:83:d6:11:0a:3c:37:50:02:13:b3:13:7e:f8:42:ef:07: c1:4d:6a:45:16:a0:1a:00:af:e0:48:ee:be:a9:fd:06:90:2c: 6b:e1:a6:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOILEkgohU5XqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk Y2ZlMjIyZTMtMmY5OC00ZmY0LWEwNzctNDNjZTQ0NTQ1NTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tTHHAugmMwSSLVSs5mgqe6yfPQhkbFfewwG WgUYbJEZUieEbZ0AN6HNkqJ1hciEqf1UWY9TMKxTwjmU8EN859dNGsutDlsNve9+ uHOgo6oD8prsgXiu/cy+eL0KB2owNO6qeD4FyXYIIL3C7mUNRt6khqgXsSlfMDaY kuh94hbFBjCKs/BUvzUM2iPA/PyYD1yaikx9VVhy3FI+hxMAKCpZgDKYvh1I/Af7 Q3TwiQaS3XDbuxAh5ZfJAkTsAUVhI/IGLI5OfhHAUpP86+mxHiAzxv/5GGWF3DHf 6xiTqBMg4oEt2QUX+7qU2DbVIYDXNYNFESiDbYRsU0xATR6CPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEosfI9lXiXN/PSQ/EvULygwyEKWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNTgxOWI4NWMtMTI5MC0z OTJjLWFmMDQtYTU3OGVmOGM2M2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoivQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXpF0R8OTS/8GEkjHjJLxjtJ/tRWmmWDEFaf8iZASeKYDcr+4cvCHeY 5Gitxo+QsRwfNtEDtMIUWCzllX5bEN9GT0Q/S5dudk5iTy+uBSvRzsYZsW/nZ5yj 1emplIgOGLnZ2Xe76GKmc59PXjFe6Y1uyiqwGdOFL/8gJtzkR5izBGLddofIieuA X0tph/OwaNnKt7e34gK5b5vveTQne9ZNED7JYWMVNLzKwKWncME0RWz8U85i7KhV R2cvLiwjdJYKhgx8/8obtfKnQBQiWyO+Wa0CSmhOLkE0g9YRCjw3UAITsxN++ELv B8FNakUWoBoAr+BI7r6p/QaQLGvhpuY= -----END CERTIFICATE-----Generated at Thu Mar 26 16:36:58 2026 by rpki-client