$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/ef6521f7-3563-31b8-a2a4-173c6a9379a8.roa File: ef6521f7-3563-31b8-a2a4-173c6a9379a8.roa (raw, json) Hash identifier: XRhpR1AlfiZ6245pcLdYXp7zb6CPQIwqLNYP+iNGVwE= Subject key identifier: C5:DB:B0:67:4B:7B:92:0C:94:EC:7C:1E:F3:5D:89:49:0E:CC:8E:83 Certificate issuer: /CN=03b51393-7784-45a0-9621-168719782436 Certificate serial: 010D0C9F4328584D237A616132C6A20F79EF2298 Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/ef6521f7-3563-31b8-a2a4-173c6a9379a8.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 10384 IP address blocks: 152.87.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:61:61:32:c6:a2:0f:79:ef:22:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b51393-7784-45a0-9621-168719782436 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=4a1251e6-f546-44f7-9531-cfced561c331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:01:25:3d:95:fd:39:57:82:c7:9f:39:e3:86: 02:a7:6e:79:46:82:b6:2e:80:bd:30:c2:b4:18:8e: c0:15:9c:88:13:f9:b2:af:f5:0c:b8:5c:0c:83:73: 5b:d7:0c:81:33:ad:ef:ec:0f:2b:76:c2:ef:41:15: cc:90:d2:44:1c:9b:c4:97:3c:f8:98:c6:16:61:53: a9:c1:dc:d6:7e:ba:62:f3:1f:fa:7b:82:26:ea:de: 6b:97:34:b2:b1:e2:f4:51:fe:c1:f0:ec:43:cd:67: 53:ce:13:7b:ac:6a:bd:9a:b9:86:87:19:45:7d:91: 14:76:1e:3f:84:f1:57:93:76:3b:d5:14:f6:9b:ac: a1:ea:27:e6:f6:01:47:32:96:1a:01:45:7b:e9:17: 47:e7:7d:0a:9b:95:aa:31:32:ea:5c:df:17:37:62: 3b:67:82:b3:6f:89:d7:47:96:8b:9e:c2:30:71:21: 3e:fb:a0:e8:c2:1b:57:98:bd:95:3a:dc:66:85:a1: a7:1e:a0:3f:a8:ec:bf:61:67:92:86:bd:61:da:d2: 15:fd:d4:54:8a:38:0d:0d:9a:85:31:13:f4:d4:21: c3:cb:80:41:60:c5:22:9d:4f:7a:b0:b9:1b:b4:1f: 67:6a:88:17:e2:ac:3e:ba:f0:12:de:82:5b:e5:69: 90:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DB:B0:67:4B:7B:92:0C:94:EC:7C:1E:F3:5D:89:49:0E:CC:8E:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/ef6521f7-3563-31b8-a2a4-173c6a9379a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl X509v3 Authority Key Identifier: keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer sbgp-ipAddrBlock: critical IPv4: 152.87.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:07:ea:78:90:c7:88:48:84:e4:ec:d3:2b:da:ac:77:b3:b4: e2:51:4a:a7:ce:aa:fe:92:79:e4:f0:d8:5d:64:d0:e5:c2:8a: ba:3b:35:ea:e3:7c:f1:86:13:12:d7:c6:7e:e0:33:d9:af:f2: c4:0a:0d:36:e0:7d:ca:0d:20:b7:34:cc:9e:97:ab:b6:51:6c: 3e:59:84:02:bf:69:01:c1:e8:48:e3:31:8e:78:d1:98:97:c1: 80:0c:7f:4d:a4:dd:51:4b:2f:2c:65:b3:b8:40:91:fd:3a:2f: 8a:56:ca:79:3e:67:09:49:d4:b7:e9:ef:f7:c2:71:4e:95:91: c7:0b:21:68:ff:77:4f:33:e9:7b:17:41:b3:0d:cc:b1:4f:02: 2e:4f:18:03:35:f0:0d:96:49:d7:0d:d4:07:f5:8f:c0:a2:77: 69:dc:55:e4:21:06:a8:e0:9b:7d:be:6f:5f:cf:34:da:fa:c0: b5:6c:18:e2:58:78:51:c1:fc:82:48:d2:ae:f5:07:81:22:0f: ce:33:c1:f3:6f:70:c2:4d:4a:91:9c:bd:69:a7:d9:46:fe:04: df:25:b9:4a:b2:9b:4f:df:65:f7:cd:27:96:f4:d7:29:c1:75: 5c:0b:bc:9d:5b:e4:da:bd:ac:8a:d7:9a:ca:f0:92:fc:fa:a0: 59:e3:bf:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jemFhMsaiD3nvIpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiNTEzOTMtNzc4NC00NWEwLTk2MjEtMTY4NzE5Nzgy NDM2MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NGExMjUxZTYtZjU0Ni00NGY3LTk1MzEtY2ZjZWQ1NjFjMzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngElPZX9OVeCx58544YCp255RoK2LoC9MMK0 GI7AFZyIE/myr/UMuFwMg3Nb1wyBM63v7A8rdsLvQRXMkNJEHJvElzz4mMYWYVOp wdzWfrpi8x/6e4Im6t5rlzSyseL0Uf7B8OxDzWdTzhN7rGq9mrmGhxlFfZEUdh4/ hPFXk3Y71RT2m6yh6ifm9gFHMpYaAUV76RdH530Km5WqMTLqXN8XN2I7Z4Kzb4nX R5aLnsIwcSE++6DowhtXmL2VOtxmhaGnHqA/qOy/YWeShr1h2tIV/dRUijgNDZqF MRP01CHDy4BBYMUinU96sLkbtB9naogX4qw+uvAS3oJb5WmQ7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXbsGdLe5IMlOx8HvNdiUkOzI6DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1 MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3MTk3ODI0MzYvZWY2NTIxZjctMzU2My0z MWI4LWEyYTQtMTczYzZhOTM3OWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDNiNTEzOTMtNzc4NC00NWEwLTk2 MjEtMTY4NzE5NzgyNDM2LzAzYjUxMzkzLTc3ODQtNDVhMC05NjIxLTE2ODcxOTc4 MjQzNi5jcmwwHwYDVR0jBBgwFoAU7JlLmZuUJgV0wzFS7LnS+o4/BSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3 MTk3ODI0MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmFcDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQH6niQx4hIhOTs0yvarHeztOJRSqfOqv6SeeTw2F1k0OXCiro7Nerj fPGGExLXxn7gM9mv8sQKDTbgfcoNILc0zJ6Xq7ZRbD5ZhAK/aQHB6EjjMY540ZiX wYAMf02k3VFLLyxls7hAkf06L4pWynk+ZwlJ1Lfp7/fCcU6VkccLIWj/d08z6XsX QbMNzLFPAi5PGAM18A2WSdcN1Af1j8Cid2ncVeQhBqjgm32+b1/PNNr6wLVsGOJY eFHB/IJI0q71B4EiD84zwfNvcMJNSpGcvWmn2Ub+BN8luUqym0/fZffNJ5b01ynB dVwLvJ1b5Nq9rIrXmsrwkvz6oFnjv7g= -----END CERTIFICATE-----Generated at Fri Mar 27 02:15:03 2026 by rpki-client