$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/3f7bee39-45f4-3a96-8a85-6f2d52c559b3.roa File: 3f7bee39-45f4-3a96-8a85-6f2d52c559b3.roa (raw, json) Hash identifier: 7grVrHUBnd91x/1KuHwyEqvlDgGCA0EoJ/bVqO/YIxk= Subject key identifier: 4B:30:45:68:BC:C4:33:E2:4C:B9:62:54:4E:CC:8D:12:CB:17:A5:D0 Certificate issuer: /CN=0eb0be5e-7cff-4077-992b-f867365a59c5 Certificate serial: 010D0C9F4328584D0EA7B7848379143C96A04F80 Authority key identifier: 29:22:5A:D1:E9:EA:64:4E:31:84:59:5F:A4:A1:9F:38:B2:51:07:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/3f7bee39-45f4-3a96-8a85-6f2d52c559b3.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 15753 IP address blocks: 129.230.252.0/23 maxlen: 24 129.230.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/0eb0be5e-7cff-4077-992b-f867365a59c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/0eb0be5e-7cff-4077-992b-f867365a59c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:b7:84:83:79:14:3c:96:a0:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eb0be5e-7cff-4077-992b-f867365a59c5 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=cb354944-4eef-4cf7-9ff9-8b1d2cbf704b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f6:ac:9b:df:a9:0a:17:4d:0f:06:c5:0b:07: 2c:13:17:cd:f0:51:67:50:d0:36:d4:37:85:d3:86: 82:a7:2c:cf:c9:34:cf:8f:cd:76:c1:4f:90:db:63: 68:db:6c:d7:57:a4:44:f8:12:1e:49:72:15:0c:f4: c6:dc:e7:b3:35:97:34:d8:83:75:a4:8e:a4:3c:bb: 3e:83:e9:cd:6e:a0:fb:3e:03:c1:b3:8a:85:ed:5e: de:f7:6f:92:85:d3:64:0d:7a:cb:44:a9:e2:7a:24: 41:e8:40:ad:85:ac:50:d7:f1:98:eb:3c:b1:81:cd: 3c:13:a0:b6:e8:32:74:d4:f2:b7:11:f6:65:9e:d2: 07:7f:52:a4:ed:ba:6b:30:5e:cd:b2:60:c0:f2:d0: a7:98:f5:83:10:bc:cf:c4:97:1c:9a:16:9a:63:b6: 1e:87:c9:1a:4a:33:c8:61:f8:af:ce:d9:34:e2:18: 65:58:34:39:69:af:77:66:bd:ba:65:a7:38:a9:20: f4:34:89:6f:6d:d1:a3:fc:21:0d:7b:10:3d:03:1f: 75:39:b7:e2:0f:c0:81:67:de:6d:51:8a:8c:3a:51: 3d:9d:0c:90:40:14:4a:64:26:55:02:6a:8e:8c:49: 6c:a9:ff:02:9c:73:72:8c:2d:02:9f:b3:2d:7e:80: 4a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:30:45:68:BC:C4:33:E2:4C:B9:62:54:4E:CC:8D:12:CB:17:A5:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/3f7bee39-45f4-3a96-8a85-6f2d52c559b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/0eb0be5e-7cff-4077-992b-f867365a59c5.crl X509v3 Authority Key Identifier: keyid:29:22:5A:D1:E9:EA:64:4E:31:84:59:5F:A4:A1:9F:38:B2:51:07:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5.cer sbgp-ipAddrBlock: critical IPv4: 129.230.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c4:d8:8e:84:0f:74:08:a5:0b:02:63:2f:53:20:0c:0a:c3: 55:03:ff:24:81:ec:5f:e2:60:ef:2f:58:6c:4c:7c:c4:a5:33: ac:b5:b9:e4:3a:60:90:9e:b1:88:aa:8b:e6:d4:9a:c7:c0:a1: 95:cb:26:47:92:18:ef:ae:6a:75:86:78:ee:e0:e3:1f:ef:ed: 33:9a:4f:f9:5a:77:97:93:30:57:52:ef:14:02:03:b9:b0:c2: 70:d2:d5:a2:ed:87:c3:b9:94:aa:94:2c:bf:f6:dd:f2:f2:dc: 30:bc:c7:d6:89:7b:88:27:6e:f9:67:96:14:65:de:36:14:8a: e1:4e:35:c3:e8:35:74:55:d6:d2:7e:a7:f3:47:d1:41:7a:fd: c3:cd:da:78:c9:77:89:68:04:73:8d:34:ee:b0:d4:f0:dd:93: e8:ff:35:6a:db:a5:b7:58:de:fc:3f:67:14:f4:3a:26:12:7c: 40:3b:db:1c:88:2b:3b:0f:39:19:28:1f:c6:fe:28:a6:92:b0: b2:68:eb:5e:5a:64:65:52:07:76:3f:09:1f:d7:31:b3:cd:1b: 19:10:65:07:82:e8:5d:b9:a8:cd:bc:2d:10:dc:37:57:5f:0c: 95:cc:7d:5b:1d:93:a6:10:1b:bd:1a:97:b1:b2:61:5b:eb:f0: bf:72:4c:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op7eEg3kUPJagT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGViMGJlNWUtN2NmZi00MDc3LTk5MmItZjg2NzM2NWE1 OWM1MB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk Y2IzNTQ5NDQtNGVlZi00Y2Y3LTlmZjktOGIxZDJjYmY3MDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPasm9+pChdNDwbFCwcsExfN8FFnUNA21DeF 04aCpyzPyTTPj812wU+Q22No22zXV6RE+BIeSXIVDPTG3OezNZc02IN1pI6kPLs+ g+nNbqD7PgPBs4qF7V7e92+ShdNkDXrLRKnieiRB6ECthaxQ1/GY6zyxgc08E6C2 6DJ01PK3EfZlntIHf1Kk7bprMF7NsmDA8tCnmPWDELzPxJccmhaaY7Yeh8kaSjPI Yfivztk04hhlWDQ5aa93Zr26Zac4qSD0NIlvbdGj/CENexA9Ax91ObfiD8CBZ95t UYqMOlE9nQyQQBRKZCZVAmqOjElsqf8CnHNyjC0Cn7MtfoBKqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEswRWi8xDPiTLliVE7MjRLLF6XQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wZWIw YmU1ZS03Y2ZmLTQwNzctOTkyYi1mODY3MzY1YTU5YzUvM2Y3YmVlMzktNDVmNC0z YTk2LThhODUtNmYyZDUyYzU1OWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGViMGJlNWUtN2NmZi00MDc3LTk5 MmItZjg2NzM2NWE1OWM1LzBlYjBiZTVlLTdjZmYtNDA3Ny05OTJiLWY4NjczNjVh NTljNS5jcmwwHwYDVR0jBBgwFoAUKSJa0enqZE4xhFlfpKGfOLJRBzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8wZWIwYmU1ZS03Y2ZmLTQwNzctOTkyYi1mODY3 MzY1YTU5YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgeb8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDE2I6ED3QIpQsCYy9TIAwKw1UD/ySB7F/iYO8vWGxMfMSlM6y1ueQ6 YJCesYiqi+bUmsfAoZXLJkeSGO+uanWGeO7g4x/v7TOaT/lad5eTMFdS7xQCA7mw wnDS1aLth8O5lKqULL/23fLy3DC8x9aJe4gnbvlnlhRl3jYUiuFONcPoNXRV1tJ+ p/NH0UF6/cPN2njJd4loBHONNO6w1PDdk+j/NWrbpbdY3vw/ZxT0OiYSfEA72xyI KzsPORkoH8b+KKaSsLJo615aZGVSB3Y/CR/XMbPNGxkQZQeC6F25qM28LRDcN1df DJXMfVsdk6YQG70al7GyYVvr8L9yTKw= -----END CERTIFICATE-----Generated at Fri Mar 27 09:15:50 2026 by rpki-client