$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/32310430-1564-34ba-a911-45325d8fda20.roa File: 32310430-1564-34ba-a911-45325d8fda20.roa (raw, json) Hash identifier: OW0Wy/ZXjbHZtp/6rlPoIlRTb4Ih+LJIsdWL43QVeEY= Subject key identifier: 01:02:20:8B:0C:20:39:92:DC:CE:C9:5D:72:FC:0F:A4:4E:55:15:63 Certificate issuer: /CN=6988a68c-ec5c-4d72-9ee1-27118af98380 Certificate serial: 010D0C9F4328584D3DFFB60FDF23AE56D6D09100 Authority key identifier: 53:74:2B:1E:7F:79:D2:1A:D0:29:48:45:9A:93:5C:BA:54:EE:73:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/32310430-1564-34ba-a911-45325d8fda20.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 29953 IP address blocks: 69.41.192.0/20 maxlen: 24 97.107.48.0/20 maxlen: 24 2605:1100::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/6988a68c-ec5c-4d72-9ee1-27118af98380.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/6988a68c-ec5c-4d72-9ee1-27118af98380.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b6:0f:df:23:ae:56:d6:d0:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6988a68c-ec5c-4d72-9ee1-27118af98380 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=ea8f841d-2167-4aed-8bb6-f14a4acb441c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d1:6e:bf:a7:13:9c:f1:26:9d:b9:45:d5:b0: f7:24:55:c7:6f:c1:70:71:d0:81:a8:b8:d2:ec:7c: e4:fe:42:31:b2:57:8c:84:1d:1f:04:f7:98:20:d7: a1:54:76:d8:52:88:28:0a:bf:e0:95:fd:b0:fb:45: a8:80:ee:6d:a3:76:29:e6:a5:21:aa:af:e5:92:5b: 10:c1:c1:a0:f0:da:27:ad:6f:71:75:8d:9a:f1:2c: 50:98:ea:3f:b5:43:d1:87:c8:69:6f:33:26:cb:f2: 82:9c:f5:18:a1:78:cd:23:c0:c9:af:22:6c:c8:e1: 27:f7:ae:b9:1f:a8:15:d0:94:e2:ef:0d:be:df:42: 23:2d:7f:0f:f3:28:c2:36:92:06:6e:23:d7:c0:40: e9:24:18:91:6d:73:d7:86:5d:0f:d8:47:3c:52:3e: 84:97:a4:b6:01:07:ca:e9:87:5f:25:cd:84:78:a7: f8:37:51:3f:4a:c5:a4:63:58:a0:18:1d:db:92:6d: 0e:cf:c6:8f:2b:a1:27:b4:30:33:cc:f1:c9:79:60: bb:01:1a:5b:0d:e6:c5:b0:91:9b:d0:29:14:71:f9: 97:86:6d:7e:27:fc:74:df:1e:82:42:b6:cc:69:4d: e4:c5:49:41:10:ec:83:45:c6:c6:62:bb:a3:d1:6b: 82:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:02:20:8B:0C:20:39:92:DC:CE:C9:5D:72:FC:0F:A4:4E:55:15:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/32310430-1564-34ba-a911-45325d8fda20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/6988a68c-ec5c-4d72-9ee1-27118af98380.crl X509v3 Authority Key Identifier: keyid:53:74:2B:1E:7F:79:D2:1A:D0:29:48:45:9A:93:5C:BA:54:EE:73:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380.cer sbgp-ipAddrBlock: critical IPv4: 69.41.192.0/20 97.107.48.0/20 IPv6: 2605:1100::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:e7:bb:95:0d:c2:20:28:37:3b:0d:8a:d4:e5:d2:5c:94:29: b1:7e:2d:98:b7:28:15:f2:d1:28:cd:88:7d:84:3b:7d:69:60: 10:87:42:ad:b7:18:38:14:03:db:a2:27:e3:c4:15:96:a8:7f: d1:fd:3e:5d:7f:84:7c:d7:68:7e:0a:ca:21:c8:88:0d:f3:9c: 0f:ad:2c:7c:00:97:5f:d7:e0:91:96:06:9e:6d:22:36:de:6d: ea:4a:a6:77:00:da:ba:e7:c4:17:ad:44:8e:f8:f3:b6:38:4d: 3c:8e:52:86:88:63:20:21:66:9b:16:ec:d3:ea:b3:b5:66:c0: 77:8b:de:a5:85:14:c8:f6:06:2c:fa:bc:02:80:94:4f:7b:b6: a1:e5:95:f1:ff:69:97:8f:d9:6c:8f:43:fc:c4:f3:40:ea:c4: 05:9c:72:82:ab:74:7c:2a:ce:1d:3a:24:b0:8c:51:26:b4:a1: fb:ab:d8:a3:c6:c6:c3:3d:28:96:02:e6:8c:53:d4:16:78:4f: 7a:b9:fa:c6:aa:66:47:90:20:ae:20:70:98:76:6f:40:60:42: a9:8e:6e:a9:a0:1c:19:0e:12:cf:54:b2:ac:5c:fe:18:9b:21: 64:c3:5a:31:c7:4f:10:35:7a:33:53:fe:03:05:6b:ca:13:32: 8f:a2:43:d2 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE09/7YP3yOuVtbQkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjk4OGE2OGMtZWM1Yy00ZDcyLTllZTEtMjcxMThhZjk4 MzgwMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZWE4Zjg0MWQtMjE2Ny00YWVkLThiYjYtZjE0YTRhY2I0NDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptFuv6cTnPEmnblF1bD3JFXHb8FwcdCBqLjS 7Hzk/kIxsleMhB0fBPeYINehVHbYUogoCr/glf2w+0WogO5to3Yp5qUhqq/lklsQ wcGg8NonrW9xdY2a8SxQmOo/tUPRh8hpbzMmy/KCnPUYoXjNI8DJryJsyOEn9665 H6gV0JTi7w2+30IjLX8P8yjCNpIGbiPXwEDpJBiRbXPXhl0P2Ec8Uj6El6S2AQfK 6YdfJc2EeKf4N1E/SsWkY1igGB3bkm0Oz8aPK6EntDAzzPHJeWC7ARpbDebFsJGb 0CkUcfmXhm1+J/x03x6CQrbMaU3kxUlBEOyDRcbGYruj0WuCwQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFAECIIsMIDmS3M7JXXL8D6ROVRVjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82OTg4 YTY4Yy1lYzVjLTRkNzItOWVlMS0yNzExOGFmOTgzODAvMzIzMTA0MzAtMTU2NC0z NGJhLWE5MTEtNDUzMjVkOGZkYTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjk4OGE2OGMtZWM1Yy00ZDcyLTll ZTEtMjcxMThhZjk4MzgwLzY5ODhhNjhjLWVjNWMtNGQ3Mi05ZWUxLTI3MTE4YWY5 ODM4MC5jcmwwHwYDVR0jBBgwFoAUU3QrHn950hrQKUhFmpNculTuczswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82OTg4YTY4Yy1lYzVjLTRkNzItOWVlMS0yNzEx OGFmOTgzODAuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQERSnAAwQE YWswMA0EAgACMAcDBQAmBREAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFrnu5UNwiAoNzsNitTl0lyUKbF+ LZi3KBXy0SjNiH2EO31pYBCHQq23GDgUA9uiJ+PEFZaof9H9Pl1/hHzXaH4KyiHI iA3znA+tLHwAl1/X4JGWBp5tIjbebepKpncA2rrnxBetRI7487Y4TTyOUoaIYyAh ZpsW7NPqs7VmwHeL3qWFFMj2Biz6vAKAlE97tqHllfH/aZeP2WyPQ/zE80DqxAWc coKrdHwqzh06JLCMUSa0ofur2KPGxsM9KJYC5oxT1BZ4T3q5+saqZkeQIK4gcJh2 b0BgQqmObqmgHBkOEs9Usqxc/hibIWTDWjHHTxA1ejNT/gMFa8oTMo+iQ9I= -----END CERTIFICATE-----Generated at Sat Mar 28 13:44:18 2026 by rpki-client