$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2c35905f-57c3-4d9b-b8e3-408f1d9da372/f6afba23-c4aa-384e-939c-895bf77592ae.roa File: f6afba23-c4aa-384e-939c-895bf77592ae.roa (raw, json) Hash identifier: LZUQK3UHIjVvkYXt0KoLPsKUS61xHlNLiwZ2CUddAWs= Subject key identifier: AA:31:BC:CE:83:72:20:41:18:BF:04:BF:EF:5B:67:96:A6:B6:44:A5 Certificate issuer: /CN=2c35905f-57c3-4d9b-b8e3-408f1d9da372 Certificate serial: 010D0C9F4328584D1B19F321A7B8581BBBCE8A40 Authority key identifier: 95:33:A3:43:3E:CD:56:59:E5:BF:82:F6:DB:22:4A:91:4D:A6:CA:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2c35905f-57c3-4d9b-b8e3-408f1d9da372.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2c35905f-57c3-4d9b-b8e3-408f1d9da372/f6afba23-c4aa-384e-939c-895bf77592ae.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 11038 IP address blocks: 69.57.164.0/22 maxlen: 24 69.57.168.0/22 maxlen: 24 74.112.52.0/22 maxlen: 24 162.253.48.0/23 maxlen: 24 162.253.50.0/24 maxlen: 24 199.30.248.0/21 maxlen: 24 208.71.160.0/22 maxlen: 24 208.83.56.0/22 maxlen: 24 2604:b6c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2c35905f-57c3-4d9b-b8e3-408f1d9da372/2c35905f-57c3-4d9b-b8e3-408f1d9da372.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2c35905f-57c3-4d9b-b8e3-408f1d9da372/2c35905f-57c3-4d9b-b8e3-408f1d9da372.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2c35905f-57c3-4d9b-b8e3-408f1d9da372.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:f3:21:a7:b8:58:1b:bb:ce:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c35905f-57c3-4d9b-b8e3-408f1d9da372 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=2d960560-b12c-4cc4-bd5e-28d81e9ed031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0a:08:68:9b:b5:1d:2e:04:3a:2f:fb:28:a2: 71:57:1e:b9:11:2c:b8:23:de:a4:9b:9e:53:95:b1: 66:08:f7:e0:1e:12:36:be:41:87:2a:be:5f:5b:48: da:93:d2:ea:37:d1:96:03:6e:7a:3f:96:c6:cb:2c: 9c:92:8c:76:5e:eb:09:24:ae:2f:38:29:03:4d:34: 8d:16:ab:d0:36:32:5e:c8:ef:94:e8:fb:02:a8:c1: 28:cd:1b:d6:a5:bc:10:0c:73:00:f6:0e:fe:86:c4: a3:ad:89:ef:64:bc:c6:0c:82:5a:de:10:1f:08:01: 8e:b8:91:45:67:cf:ed:41:7a:d5:53:2a:13:e4:e4: ea:2e:c9:d4:6a:03:20:c8:79:cf:6f:4b:de:f7:31: 52:e4:aa:f0:07:bf:0c:7f:35:f2:63:66:b2:32:1f: 89:78:4c:36:df:8c:a0:12:3f:94:87:92:c6:77:ca: cb:c3:d2:07:c6:5d:c4:c2:cd:0a:21:e4:5e:6d:9e: ef:69:0b:0f:d4:7a:34:31:72:96:8c:97:f3:b8:13: e7:14:a6:8a:9f:26:9e:0a:3d:e6:48:ab:a3:72:f1: e0:34:f2:88:26:a4:1a:ce:65:76:f1:ef:b1:37:4c: 57:d0:40:bc:01:6f:58:3d:37:2e:8a:df:e3:e5:7e: a4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:31:BC:CE:83:72:20:41:18:BF:04:BF:EF:5B:67:96:A6:B6:44:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2c35905f-57c3-4d9b-b8e3-408f1d9da372/f6afba23-c4aa-384e-939c-895bf77592ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2c35905f-57c3-4d9b-b8e3-408f1d9da372/2c35905f-57c3-4d9b-b8e3-408f1d9da372.crl X509v3 Authority Key Identifier: keyid:95:33:A3:43:3E:CD:56:59:E5:BF:82:F6:DB:22:4A:91:4D:A6:CA:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2c35905f-57c3-4d9b-b8e3-408f1d9da372.cer sbgp-ipAddrBlock: critical IPv4: 69.57.164.0-69.57.171.255 74.112.52.0/22 162.253.48.0-162.253.50.255 199.30.248.0/21 208.71.160.0/22 208.83.56.0/22 IPv6: 2604:b6c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:f4:d7:00:c1:d3:93:a1:e1:57:ef:9f:eb:78:6f:1b:17:4e: 29:f7:ca:23:64:57:b6:1c:35:a7:3f:34:d9:fd:be:2a:04:b6: 50:6c:65:b0:42:0e:bc:30:e2:1d:89:9a:3a:ae:70:29:c2:b2: 6a:8c:46:1c:1a:f5:d6:90:8d:d4:2b:f4:04:b6:af:c3:7c:d9: 7b:81:00:6b:cf:8e:7b:80:21:2b:1d:aa:e1:6e:91:fe:21:5c: 57:00:80:08:16:d6:66:80:c8:77:8e:60:5a:96:af:91:c7:24: 19:6b:d3:09:ea:e4:43:b3:c7:2d:67:18:a4:e5:75:9e:f8:4a: 55:52:6d:ec:17:25:85:c6:7f:6b:fe:9c:6e:85:ac:6d:56:55: 63:aa:dc:cc:0c:08:16:c2:36:ce:ca:1f:be:25:46:5b:87:97: 4f:d5:4c:c3:52:4e:12:b9:cd:4a:54:59:76:09:3f:b1:8e:a4: 56:50:a8:e1:84:88:8f:f1:3e:29:3e:6d:4e:6a:1b:58:9a:f3: 5d:d8:df:5b:3c:6d:31:53:53:0e:81:0d:fc:d7:59:54:b3:7f: 86:4b:2e:0f:46:c7:08:5a:3f:a7:26:d8:d0:f6:d2:d2:00:5f: 0d:b5:e1:75:0a:0e:1e:ff:6e:16:97:e5:5b:1c:0e:3b:bc:30: 5c:5f:f6:71 -----BEGIN CERTIFICATE----- MIIGgDCCBWigAwIBAgIUAQ0Mn0MoWE0bGfMhp7hYG7vOikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmMzNTkwNWYtNTdjMy00ZDliLWI4ZTMtNDA4ZjFkOWRh MzcyMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MmQ5NjA1NjAtYjEyYy00Y2M0LWJkNWUtMjhkODFlOWVkMDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigoIaJu1HS4EOi/7KKJxVx65ESy4I96km55T lbFmCPfgHhI2vkGHKr5fW0jak9LqN9GWA256P5bGyyyckox2XusJJK4vOCkDTTSN FqvQNjJeyO+U6PsCqMEozRvWpbwQDHMA9g7+hsSjrYnvZLzGDIJa3hAfCAGOuJFF Z8/tQXrVUyoT5OTqLsnUagMgyHnPb0ve9zFS5KrwB78MfzXyY2ayMh+JeEw234yg Ej+Uh5LGd8rLw9IHxl3Ews0KIeRebZ7vaQsP1Ho0MXKWjJfzuBPnFKaKnyaeCj3m SKujcvHgNPKIJqQazmV28e+xN0xX0EC8AW9YPTcuit/j5X6kjQIDAQABo4IDkjCC A44wHQYDVR0OBBYEFKoxvM6DciBBGL8Ev+9bZ5amtkSlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYzM1 OTA1Zi01N2MzLTRkOWItYjhlMy00MDhmMWQ5ZGEzNzIvZjZhZmJhMjMtYzRhYS0z ODRlLTkzOWMtODk1YmY3NzU5MmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmMzNTkwNWYtNTdjMy00ZDliLWI4 ZTMtNDA4ZjFkOWRhMzcyLzJjMzU5MDVmLTU3YzMtNGQ5Yi1iOGUzLTQwOGYxZDlk YTM3Mi5jcmwwHwYDVR0jBBgwFoAUlTOjQz7NVlnlv4L22yJKkU2myvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYzM1OTA1Zi01N2MzLTRkOWItYjhlMy00MDhm MWQ5ZGEzNzIuY2VyMFwGCCsGAQUFBwEHAQH/BE0wSzA6BAIAATA0MAwDBAJFOaQD BAJFOagDBAJKcDQwDAMEBKL9MAMEAKL9MgMEA8ce+AMEAtBHoAMEAtBTODANBAIA AjAHAwUAJgS2wDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBV9NcAwdOToeFX75/reG8bF04p98ojZFe2HDWn PzTZ/b4qBLZQbGWwQg68MOIdiZo6rnApwrJqjEYcGvXWkI3UK/QEtq/DfNl7gQBr z457gCErHarhbpH+IVxXAIAIFtZmgMh3jmBalq+RxyQZa9MJ6uRDs8ctZxik5XWe +EpVUm3sFyWFxn9r/pxuhaxtVlVjqtzMDAgWwjbOyh++JUZbh5dP1UzDUk4Suc1K VFl2CT+xjqRWUKjhhIiP8T4pPm1OahtYmvNd2N9bPG0xU1MOgQ3811lUs3+GSy4P RscIWj+nJtjQ9tLSAF8NteF1Cg4e/24Wl+VbHA47vDBcX/Zx -----END CERTIFICATE-----Generated at Thu Mar 26 16:21:41 2026 by rpki-client