$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/650bd1fe-bb28-3c2c-b0d9-d92b2e3b6280.roa File: 650bd1fe-bb28-3c2c-b0d9-d92b2e3b6280.roa (raw, json) Hash identifier: RMtN9eQ5CxYks+7edHmw7K14T8+tKjOhBT52eneVf80= Subject key identifier: DC:24:05:77:E8:B8:1D:5A:6F:CD:3B:0E:EE:4E:AA:16:EB:D6:22:50 Certificate issuer: /CN=ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0 Certificate serial: 010D0C9F4328584D316F6796FEDC9BE39657F740 Authority key identifier: 52:7A:49:74:BA:82:82:68:ED:97:35:DC:BE:AB:72:D6:94:92:F6:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/650bd1fe-bb28-3c2c-b0d9-d92b2e3b6280.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 0 IP address blocks: 170.212.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:67:96:fe:dc:9b:e3:96:57:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0 Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=2bb8c713-7f23-4adc-abc6-e03d112e338d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:64:c7:2c:ab:fa:a6:c8:f7:a5:bf:e5:58:2f: 56:4e:3f:7e:96:db:6d:32:e8:58:11:6d:52:50:fb: 56:be:62:27:1b:ab:b2:d0:f6:a8:f9:6d:4a:e4:d8: b4:85:15:33:75:3d:dc:58:e6:6d:4a:19:4c:68:b0: ab:90:61:5e:78:65:b7:60:6d:fa:96:6d:16:91:15: 15:a5:e4:cb:eb:a3:34:4a:12:f0:96:cc:f4:ae:31: 97:c4:a2:57:80:c4:8d:7c:dd:26:d7:92:9f:af:2f: b8:c7:c8:3d:23:bb:0c:50:cf:2d:0d:bf:88:b4:6d: c2:00:dc:55:4a:f3:e1:20:94:39:92:89:da:63:6e: a0:c4:3f:a3:03:81:36:0e:3b:7b:b9:22:79:33:cb: c4:df:42:78:31:6d:d9:69:1b:6d:61:3c:f0:d0:e0: 76:b3:05:6e:05:03:bb:06:b2:5f:4d:76:7e:0b:3e: 6d:3f:d5:4f:d6:38:5b:2f:af:9c:01:fb:3c:a7:b7: b8:55:a1:74:5d:97:54:62:a8:25:b3:4a:96:3d:6e: 72:15:49:46:9e:4d:65:1b:e7:35:fc:10:a9:bb:3b: 4e:e6:ec:94:bc:20:97:29:f5:27:79:3f:27:0f:1c: 9a:07:9b:bd:d5:ce:e6:22:b3:e1:53:bd:6a:29:75: 73:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:24:05:77:E8:B8:1D:5A:6F:CD:3B:0E:EE:4E:AA:16:EB:D6:22:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/650bd1fe-bb28-3c2c-b0d9-d92b2e3b6280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.crl X509v3 Authority Key Identifier: keyid:52:7A:49:74:BA:82:82:68:ED:97:35:DC:BE:AB:72:D6:94:92:F6:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.cer sbgp-ipAddrBlock: critical IPv4: 170.212.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:84:53:12:41:0f:a6:63:e1:88:dc:71:4b:78:65:f1:07:77: ad:fa:e7:29:4a:81:0b:4c:45:59:ce:1e:97:33:30:51:74:61: 3a:d6:32:51:45:90:0a:ab:e7:1d:0d:39:f4:13:5d:59:45:c0: 65:10:18:aa:a2:4e:b2:c8:59:34:19:41:bf:48:1c:45:3e:74: 0e:7f:3d:b8:3f:78:39:35:8d:6f:d3:3e:2a:7b:e7:2a:34:a4: 97:39:37:29:ae:55:cb:40:ee:1a:da:ec:19:7b:a9:0f:6d:ed: a6:6c:b4:65:3a:21:72:be:dd:de:c2:e0:83:b9:d7:fa:a8:2c: e2:9d:6a:cb:95:bc:f4:59:5d:57:61:0e:6b:ac:2d:a5:c6:5a: 1b:d4:12:bc:49:fe:2a:a4:24:78:6f:d2:bb:5b:3e:23:89:f6: 44:5b:ee:a0:b1:a3:a0:1c:64:9b:d5:f0:4c:22:03:a5:ba:96: 45:85:b4:f7:cb:18:3e:00:14:75:d2:fd:b2:fe:72:68:02:12: 00:0e:76:bb:d5:74:33:62:51:71:0c:1e:ad:d4:81:01:54:1d: 69:57:b9:fe:69:98:fb:e6:fc:78:3d:b6:a7:5b:d2:0f:fc:55: 9e:f1:ff:9d:dc:7a:31:56:f5:2e:fc:11:06:cb:84:f3:b2:25: c8:4d:fc:78 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0xb2eW/tyb45ZX90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE0YTUyZDYtNDZhNC00MmI1LWI5ZWEtZDQ0ZjViYTY4 ZGYwMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk MmJiOGM3MTMtN2YyMy00YWRjLWFiYzYtZTAzZDExMmUzMzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2THLKv6psj3pb/lWC9WTj9+ltttMuhYEW1S UPtWvmInG6uy0Pao+W1K5Ni0hRUzdT3cWOZtShlMaLCrkGFeeGW3YG36lm0WkRUV peTL66M0ShLwlsz0rjGXxKJXgMSNfN0m15Kfry+4x8g9I7sMUM8tDb+ItG3CANxV SvPhIJQ5konaY26gxD+jA4E2Djt7uSJ5M8vE30J4MW3ZaRttYTzw0OB2swVuBQO7 BrJfTXZ+Cz5tP9VP1jhbL6+cAfs8p7e4VaF0XZdUYqgls0qWPW5yFUlGnk1lG+c1 /BCpuztO5uyUvCCXKfUneT8nDxyaB5u91c7mIrPhU71qKXVziQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNwkBXfouB1ab807Du5Oqhbr1iJQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lYTRh NTJkNi00NmE0LTQyYjUtYjllYS1kNDRmNWJhNjhkZjAvNjUwYmQxZmUtYmIyOC0z YzJjLWIwZDktZDkyYjJlM2I2MjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZWE0YTUyZDYtNDZhNC00MmI1LWI5 ZWEtZDQ0ZjViYTY4ZGYwL2VhNGE1MmQ2LTQ2YTQtNDJiNS1iOWVhLWQ0NGY1YmE2 OGRmMC5jcmwwHwYDVR0jBBgwFoAUUnpJdLqCgmjtlzXcvqty1pSS9jQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lYTRhNTJkNi00NmE0LTQyYjUtYjllYS1kNDRm NWJhNjhkZjAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqtQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAaYRTEkEPpmPhiNxxS3hl8Qd3rfrnKUqBC0xFWc4elzMwUXRhOtYyUUWQ CqvnHQ059BNdWUXAZRAYqqJOsshZNBlBv0gcRT50Dn89uD94OTWNb9M+KnvnKjSk lzk3Ka5Vy0DuGtrsGXupD23tpmy0ZTohcr7d3sLgg7nX+qgs4p1qy5W89FldV2EO a6wtpcZaG9QSvEn+KqQkeG/Su1s+I4n2RFvuoLGjoBxkm9XwTCIDpbqWRYW098sY PgAUddL9sv5yaAISAA52u9V0M2JRcQwerdSBAVQdaVe5/mmY++b8eD22p1vSD/xV nvH/ndx6MVb1LvwRBsuE87IlyE38eA== -----END CERTIFICATE-----Generated at Thu Mar 26 12:22:37 2026 by rpki-client