$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/960d1492-7f25-3def-9ed8-654f7a8a0c6c.roa File: 960d1492-7f25-3def-9ed8-654f7a8a0c6c.roa (raw, json) Hash identifier: U268c+AZ+3+9kiYWUaLumUB3H+9LrkNSdKswI3dwpCs= Subject key identifier: E8:80:64:E6:79:2F:56:3D:CE:90:CD:BC:54:A8:CD:80:32:EB:96:50 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584D497BDB27577D05B638A7ED80 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/960d1492-7f25-3def-9ed8-654f7a8a0c6c.roa Signing time: Wed 25 Mar 2026 15:45:08 +0000 ROA not before: Wed 25 Mar 2026 15:45:08 +0000 ROA not after: Tue 23 Jun 2026 15:45:08 +0000 asID: 200506 IP address blocks: 173.213.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:7b:db:27:57:7d:05:b6:38:a7:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Mar 25 15:45:08 2026 GMT Not After : Jun 23 15:45:08 2026 GMT Subject: CN=24f9dec4-8353-444d-9aed-0929a73c40c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:17:ed:cd:e8:39:5e:db:01:ef:9d:02:1f:e2: ea:bf:29:44:4d:6a:ca:87:13:84:71:28:0e:6b:1c: 2f:1f:77:af:80:90:e7:79:32:f2:19:6f:25:49:52: e2:04:43:01:60:5c:b5:30:48:d6:1d:26:a9:ab:f1: 90:3f:4b:8e:14:00:53:ef:71:2f:1f:a2:c6:48:e7: 14:74:11:d7:9b:c8:22:26:4d:3f:9b:4c:fd:f5:03: 89:8d:e3:12:33:c3:9f:1c:5f:9b:fa:50:cb:98:1a: 3f:c3:e5:60:5f:54:41:5f:8c:02:88:30:dd:3a:4e: c0:a4:06:b8:a9:48:37:90:94:08:51:a1:bb:f6:11: 41:ba:1b:9d:6f:1f:b7:f9:6e:8a:c5:27:9f:4e:48: 3b:23:9b:7a:df:76:b2:c0:00:42:ec:c7:9e:f9:12: 1a:5e:bb:15:d3:56:c7:48:f6:b9:e4:2f:f7:53:a8: 70:74:d3:a5:36:67:77:2f:06:0a:e0:25:fe:b2:d6: 2e:60:28:7c:41:22:1c:f6:13:2f:86:69:d0:eb:1a: da:8b:44:fb:8a:4c:43:7d:9d:4d:db:56:bd:d2:16: e1:86:01:4d:3d:6f:c9:bc:f1:e0:41:38:8a:d2:c8: ba:11:d4:9c:51:5c:8f:9f:2d:81:1f:ba:df:97:e8: 77:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:80:64:E6:79:2F:56:3D:CE:90:CD:BC:54:A8:CD:80:32:EB:96:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/960d1492-7f25-3def-9ed8-654f7a8a0c6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.213.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:cf:da:40:2a:dc:01:9d:53:d1:2b:d3:0e:aa:14:cc:57:d2: d9:47:f8:30:52:e6:60:cb:49:2d:b0:ae:69:9f:18:32:81:e3: 87:64:3d:9d:77:51:33:41:ce:ea:26:41:dd:d7:d9:99:56:42: 31:09:ef:95:9a:06:d3:f6:f6:fe:e4:c1:32:fc:41:c3:b0:03: 1c:3d:88:d3:72:6a:29:64:b2:50:74:8a:6e:7a:d0:d7:2e:71: 38:82:ec:e3:5d:4e:8a:33:c7:95:4d:96:9b:e7:23:6c:47:1a: 1a:a8:5d:31:a7:5f:5a:44:33:03:3c:b5:3d:79:15:5d:f3:ad: 9b:b6:62:fd:84:9e:f3:95:ca:15:df:f9:cc:de:63:87:e0:40: 60:cf:73:db:9a:59:c1:6b:13:da:90:18:75:6c:9d:a3:6b:ae: 3d:c7:41:68:e9:c3:e8:83:d9:67:3e:3f:0f:cb:6f:36:f5:e5: 0a:b3:02:2c:a8:10:9a:b3:b1:9a:5d:dd:18:27:f3:4d:fd:5c: 3a:e0:22:47:6f:70:a2:3e:ae:e4:05:20:84:24:cb:e3:4d:56: 3b:9d:54:f5:2e:d0:fd:4c:08:14:6a:a5:0c:1b:d1:81:0a:dc: 79:0b:66:3e:fd:14:4d:f4:1b:25:28:20:ef:08:be:58:94:ea: f2:f5:db:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Je9snV30Ftjin7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDMyNTE1NDUwOFoXDTI2MDYyMzE1NDUwOFowLzEtMCsGA1UEAxMk MjRmOWRlYzQtODM1My00NDRkLTlhZWQtMDkyOWE3M2M0MGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxftzeg5XtsB750CH+LqvylETWrKhxOEcSgO axwvH3evgJDneTLyGW8lSVLiBEMBYFy1MEjWHSapq/GQP0uOFABT73EvH6LGSOcU dBHXm8giJk0/m0z99QOJjeMSM8OfHF+b+lDLmBo/w+VgX1RBX4wCiDDdOk7ApAa4 qUg3kJQIUaG79hFBuhudbx+3+W6KxSefTkg7I5t633aywABC7Mee+RIaXrsV01bH SPa55C/3U6hwdNOlNmd3LwYK4CX+stYuYCh8QSIc9hMvhmnQ6xrai0T7ikxDfZ1N 21a90hbhhgFNPW/JvPHgQTiK0si6EdScUVyPny2BH7rfl+h3+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiAZOZ5L1Y9zpDNvFSozYAy65ZQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOTYwZDE0OTItN2YyNS0z ZGVmLTllZDgtNjU0ZjdhOGEwYzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdVVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbP2kAq3AGdU9Er0w6qFMxX0tlH+DBS5mDLSS2wrmmfGDKB44dkPZ13 UTNBzuomQd3X2ZlWQjEJ75WaBtP29v7kwTL8QcOwAxw9iNNyailkslB0im560Ncu cTiC7ONdToozx5VNlpvnI2xHGhqoXTGnX1pEMwM8tT15FV3zrZu2Yv2EnvOVyhXf +czeY4fgQGDPc9uaWcFrE9qQGHVsnaNrrj3HQWjpw+iD2Wc+Pw/Lbzb15QqzAiyo EJqzsZpd3Rgn8039XDrgIkdvcKI+ruQFIIQky+NNVjudVPUu0P1MCBRqpQwb0YEK 3HkLZj79FE30GyUoIO8IvliU6vL12/g= -----END CERTIFICATE-----Generated at Thu Mar 26 17:05:11 2026 by rpki-client