$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/b3ccf0c7-cf0f-3b39-a7f4-852d1385aad7.roa File: b3ccf0c7-cf0f-3b39-a7f4-852d1385aad7.roa (raw, json) Hash identifier: J7gGsJZNo6HaG3hMXjK6r65IXKoQdojuqyQQkvxZZcY= Subject key identifier: 1D:76:80:89:BD:97:C9:0E:CA:9E:F6:16:48:CB:63:48:54:8F:77:76 Certificate issuer: /CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b Certificate serial: 010D0C9F4328584D26A044FA03477766BFC71C80 Authority key identifier: 6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/b3ccf0c7-cf0f-3b39-a7f4-852d1385aad7.roa Signing time: Fri 13 Mar 2026 04:05:13 +0000 ROA not before: Fri 13 Mar 2026 04:05:13 +0000 ROA not after: Thu 11 Jun 2026 04:05:13 +0000 asID: 398951 IP address blocks: 216.181.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:a0:44:fa:03:47:77:66:bf:c7:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b Validity Not Before: Mar 13 04:05:13 2026 GMT Not After : Jun 11 04:05:13 2026 GMT Subject: CN=2e86ffcf-2bc4-4e7f-9bc9-990f8af366ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6c:ca:15:37:a7:7e:55:ce:33:76:35:7d:4c: 8f:09:30:08:30:55:ef:4f:fb:0f:98:aa:b0:97:c8: 63:05:4b:9b:8b:ef:7d:61:e6:5a:56:3e:c0:8d:a3: 8f:85:8e:9e:b3:07:63:29:08:62:96:7f:31:4d:21: 43:c0:85:82:0b:01:92:f3:8d:f5:57:c8:e2:1d:65: 1d:62:6c:4e:0f:76:83:49:19:be:64:08:9f:6b:fb: 79:9c:29:7a:ce:bd:71:8e:91:8e:42:b0:77:7c:bc: 66:7e:23:b2:eb:79:2e:e6:27:65:c7:f7:66:6f:f6: 20:58:91:16:31:bf:2b:97:e1:51:3b:7a:dc:27:a8: 32:76:22:fb:dc:78:8f:6e:37:15:f1:37:1e:08:55: d9:cd:ee:80:73:96:60:4b:e8:38:b6:d5:0a:7a:f9: e3:c3:6c:a0:b5:88:06:b4:15:b9:93:3f:e1:c9:8b: c6:02:5b:21:87:9b:5e:a7:25:3c:c0:b9:89:a0:c7: 08:2f:ba:7f:2b:3d:04:a0:bd:a3:cd:1c:7e:d1:58: b2:9c:55:b7:e9:85:ca:d0:4c:85:f5:a2:d0:0e:40: 37:a5:e3:26:2b:e7:5a:d6:47:45:78:de:0d:58:c2: 23:88:c2:c2:8a:00:5d:bf:ca:ef:c8:b4:26:fd:a4: 41:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:76:80:89:BD:97:C9:0E:CA:9E:F6:16:48:CB:63:48:54:8F:77:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/b3ccf0c7-cf0f-3b39-a7f4-852d1385aad7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl X509v3 Authority Key Identifier: keyid:6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer sbgp-ipAddrBlock: critical IPv4: 216.181.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:87:14:4c:1a:13:b2:42:57:2c:f9:61:3b:96:bb:c5:fb:fc: 58:49:96:a9:d3:92:c5:59:69:de:d2:1a:fe:c0:b1:b0:b1:03: ae:ec:9f:20:32:37:37:8b:4b:86:16:7c:77:03:4a:a1:8a:07: 28:48:15:c8:91:54:ba:21:55:eb:eb:c9:b6:23:da:27:0a:31: 82:0b:cb:88:0f:81:1b:5b:f5:a8:8a:6a:d9:08:6b:fd:1a:cd: c9:d8:3a:a4:27:02:fc:ff:60:74:4d:4b:e6:bd:2e:82:6d:ee: 24:70:71:65:16:18:38:56:6b:c1:fd:0f:f3:17:23:a5:26:aa: 34:87:c5:45:7c:90:7a:69:9c:92:9d:1a:3d:1b:89:ae:02:ae: 23:f8:34:f3:e5:c3:a0:b7:38:15:2b:1f:3b:1c:74:b3:41:f8: df:2c:2f:f5:af:8a:b2:5d:2a:15:1b:bf:ad:1f:78:7a:52:f6: b6:78:95:c3:54:bb:30:98:a5:d5:66:b4:95:f8:68:57:92:37: 89:ad:a2:74:ec:af:d6:99:89:40:a4:3e:1c:63:52:be:e5:3f: a5:13:af:cb:5e:bf:0a:38:d3:53:72:6b:90:45:63:16:7d:f0: 5f:9a:c9:4c:14:d1:12:30:4a:84:74:3e:b6:63:36:de:ea:94: 8f:c0:ec:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0moET6A0d3Zr/HHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmNWNkOGEtZjkwMy00MTc2LTk3YTctNjY3MWU0OWIx YzliMB4XDTI2MDMxMzA0MDUxM1oXDTI2MDYxMTA0MDUxM1owLzEtMCsGA1UEAxMk MmU4NmZmY2YtMmJjNC00ZTdmLTliYzktOTkwZjhhZjM2NmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWzKFTenflXOM3Y1fUyPCTAIMFXvT/sPmKqw l8hjBUubi+99YeZaVj7AjaOPhY6eswdjKQhiln8xTSFDwIWCCwGS8431V8jiHWUd YmxOD3aDSRm+ZAifa/t5nCl6zr1xjpGOQrB3fLxmfiOy63ku5idlx/dmb/YgWJEW Mb8rl+FRO3rcJ6gydiL73HiPbjcV8TceCFXZze6Ac5ZgS+g4ttUKevnjw2ygtYgG tBW5kz/hyYvGAlshh5tepyU8wLmJoMcIL7p/Kz0EoL2jzRx+0ViynFW36YXK0EyF 9aLQDkA3peMmK+da1kdFeN4NWMIjiMLCigBdv8rvyLQm/aRB1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB12gIm9l8kOyp72FkjLY0hUj3d2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84NmY1 Y2Q4YS1mOTAzLTQxNzYtOTdhNy02NjcxZTQ5YjFjOWIvYjNjY2YwYzctY2YwZi0z YjM5LWE3ZjQtODUyZDEzODVhYWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODZmNWNkOGEtZjkwMy00MTc2LTk3 YTctNjY3MWU0OWIxYzliLzg2ZjVjZDhhLWY5MDMtNDE3Ni05N2E3LTY2NzFlNDli MWM5Yi5jcmwwHwYDVR0jBBgwFoAUajTL2XXyS8rb791JQFJ7g8nK5UEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84NmY1Y2Q4YS1mOTAzLTQxNzYtOTdhNy02Njcx ZTQ5YjFjOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKHFEwaE7JCVyz5YTuWu8X7/FhJlqnTksVZad7SGv7AsbCxA67snyAy NzeLS4YWfHcDSqGKByhIFciRVLohVevrybYj2icKMYILy4gPgRtb9aiKatkIa/0a zcnYOqQnAvz/YHRNS+a9LoJt7iRwcWUWGDhWa8H9D/MXI6UmqjSHxUV8kHppnJKd Gj0bia4CriP4NPPlw6C3OBUrHzscdLNB+N8sL/WvirJdKhUbv60feHpS9rZ4lcNU uzCYpdVmtJX4aFeSN4mtonTsr9aZiUCkPhxjUr7lP6UTr8tevwo401Nya5BFYxZ9 8F+ayUwU0RIwSoR0PrZjNt7qlI/A7NI= -----END CERTIFICATE-----Generated at Sat Mar 28 13:37:53 2026 by rpki-client