$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2/5966a349-3140-3452-86aa-0f856b56ecb9.roa File: 5966a349-3140-3452-86aa-0f856b56ecb9.roa (raw, json) Hash identifier: wARD99XIUzG1jz2LjtUzCB/mM+3ttcUpSnuGY0AgCE4= Subject key identifier: 67:1F:A7:49:A2:4B:96:3D:71:DD:E1:C0:69:23:C0:FB:F7:1B:B0:47 Certificate issuer: /CN=eb5678a9-924a-4464-90ce-3a9ac84c49b2 Certificate serial: 010D0C9F4328584D1CEF9FDE7FEEE916C7580400 Authority key identifier: 8B:85:BF:40:09:BF:59:EB:0B:7B:0E:60:C0:46:31:1B:F4:6A:99:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2/5966a349-3140-3452-86aa-0f856b56ecb9.roa Signing time: Mon 09 Mar 2026 16:47:01 +0000 ROA not before: Mon 09 Mar 2026 16:47:01 +0000 ROA not after: Sun 07 Jun 2026 16:47:01 +0000 asID: 11580 IP address blocks: 162.254.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2/eb5678a9-924a-4464-90ce-3a9ac84c49b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2/eb5678a9-924a-4464-90ce-3a9ac84c49b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1c:ef:9f:de:7f:ee:e9:16:c7:58:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5678a9-924a-4464-90ce-3a9ac84c49b2 Validity Not Before: Mar 9 16:47:01 2026 GMT Not After : Jun 7 16:47:01 2026 GMT Subject: CN=65ca4f67-1d68-4ccf-b53b-9ae4df8a34a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:85:f8:43:fe:46:6c:ab:41:05:94:82:e8:7f: 92:14:9c:bf:fc:97:f4:a6:63:81:78:12:16:31:49: f5:74:d6:b6:e1:aa:4b:c8:ac:c9:31:2a:b3:db:8a: 1b:ed:c4:22:5e:6c:9c:ac:48:90:54:fb:6d:4c:4b: 42:be:8a:f1:c0:19:79:c8:0a:53:33:c6:f6:10:4d: 72:71:7d:9f:b0:30:2c:82:f0:c6:28:fe:d8:2f:a6: e1:b6:fd:ef:09:29:b9:72:f4:74:05:ef:17:22:b6: 87:9d:6d:dc:4a:c0:84:45:9e:0e:f4:86:27:48:04: f3:34:e6:07:5f:52:51:7a:aa:cd:d7:00:3d:fe:7b: fc:6a:f8:2d:db:5c:aa:06:43:c1:6e:1e:ff:b3:5a: 90:45:13:e9:01:cd:ef:5b:c4:36:8b:42:7c:45:b6: 12:6c:ae:a9:a7:7a:09:ee:c6:96:2d:c9:a6:0b:bd: a9:01:92:43:61:6e:fe:23:bd:b8:17:0c:56:cc:9c: d8:79:70:1a:66:e0:33:09:13:7d:2e:85:64:bc:58: 94:cd:08:7f:5a:bd:69:44:2f:19:8d:5f:5a:16:98: 32:93:ec:cc:5c:15:e5:37:ba:00:f0:04:a6:1d:86: 7e:fc:21:2b:39:32:71:61:ef:78:b5:76:9f:65:b0: 39:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1F:A7:49:A2:4B:96:3D:71:DD:E1:C0:69:23:C0:FB:F7:1B:B0:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2/5966a349-3140-3452-86aa-0f856b56ecb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2/eb5678a9-924a-4464-90ce-3a9ac84c49b2.crl X509v3 Authority Key Identifier: keyid:8B:85:BF:40:09:BF:59:EB:0B:7B:0E:60:C0:46:31:1B:F4:6A:99:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2.cer sbgp-ipAddrBlock: critical IPv4: 162.254.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:9d:1a:02:66:ed:1d:17:91:d7:bc:16:ca:f7:4c:f4:c7:55: 17:49:25:3a:fd:29:5d:a2:30:53:4e:b5:54:e9:d2:54:d3:a7: 7f:65:fb:f0:2c:33:ce:c8:de:1b:9f:40:76:fb:09:8d:73:ea: 73:72:12:c0:d2:a3:0b:7b:b2:93:69:f1:11:2b:b0:40:3b:33: 7c:fb:56:f9:f8:b4:ff:e7:8e:d9:a2:ce:35:fd:25:00:96:84: 84:38:89:3a:3e:fb:bb:45:ab:84:62:10:1c:e0:ba:00:c1:c2: ef:f2:d5:7c:10:c1:b0:34:ad:74:47:1b:24:14:be:c9:fb:f2: ff:d4:df:40:0a:5a:e9:6d:7a:1f:bd:c5:1c:99:3a:20:43:65: 00:f5:44:00:31:a6:0f:6d:b8:ad:1e:42:ef:2c:d3:b7:a0:54: f9:88:44:a6:ac:af:95:d9:7c:48:61:35:49:6d:cc:48:79:0a: 65:08:90:be:41:e7:c6:38:39:a2:95:58:b9:44:b3:1d:0b:5a: 76:c9:43:c4:c9:2e:dd:6f:a3:c1:0c:ab:a9:0d:ae:58:6b:b8: 9d:14:7f:19:95:08:8a:59:ef:8a:8e:c6:d6:12:80:57:c2:d7: ac:1a:b6:26:ad:e1:38:6a:c5:88:35:e2:d7:b1:6c:ef:7a:7d: 17:ed:57:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0c75/ef+7pFsdYBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1Njc4YTktOTI0YS00NDY0LTkwY2UtM2E5YWM4NGM0 OWIyMB4XDTI2MDMwOTE2NDcwMVoXDTI2MDYwNzE2NDcwMVowLzEtMCsGA1UEAxMk NjVjYTRmNjctMWQ2OC00Y2NmLWI1M2ItOWFlNGRmOGEzNGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloX4Q/5GbKtBBZSC6H+SFJy//Jf0pmOBeBIW MUn1dNa24apLyKzJMSqz24ob7cQiXmycrEiQVPttTEtCvorxwBl5yApTM8b2EE1y cX2fsDAsgvDGKP7YL6bhtv3vCSm5cvR0Be8XIraHnW3cSsCERZ4O9IYnSATzNOYH X1JReqrN1wA9/nv8avgt21yqBkPBbh7/s1qQRRPpAc3vW8Q2i0J8RbYSbK6pp3oJ 7saWLcmmC72pAZJDYW7+I724FwxWzJzYeXAaZuAzCRN9LoVkvFiUzQh/Wr1pRC8Z jV9aFpgyk+zMXBXlN7oA8ASmHYZ+/CErOTJxYe94tXafZbA5UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcfp0miS5Y9cd3hwGkjwPv3G7BHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lYjU2 NzhhOS05MjRhLTQ0NjQtOTBjZS0zYTlhYzg0YzQ5YjIvNTk2NmEzNDktMzE0MC0z NDUyLTg2YWEtMGY4NTZiNTZlY2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWI1Njc4YTktOTI0YS00NDY0LTkw Y2UtM2E5YWM4NGM0OWIyL2ViNTY3OGE5LTkyNGEtNDQ2NC05MGNlLTNhOWFjODRj NDliMi5jcmwwHwYDVR0jBBgwFoAUi4W/QAm/WesLew5gwEYxG/Rqmb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lYjU2NzhhOS05MjRhLTQ0NjQtOTBjZS0zYTlh Yzg0YzQ5YjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov7zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABydGgJm7R0Xkde8Fsr3TPTHVRdJJTr9KV2iMFNOtVTp0lTTp39l+/As M87I3hufQHb7CY1z6nNyEsDSowt7spNp8RErsEA7M3z7Vvn4tP/njtmizjX9JQCW hIQ4iTo++7tFq4RiEBzgugDBwu/y1XwQwbA0rXRHGyQUvsn78v/U30AKWulteh+9 xRyZOiBDZQD1RAAxpg9tuK0eQu8s07egVPmIRKasr5XZfEhhNUltzEh5CmUIkL5B 58Y4OaKVWLlEsx0LWnbJQ8TJLt1vo8EMq6kNrlhruJ0UfxmVCIpZ74qOxtYSgFfC 16watiat4ThqxYg14texbO96fRftV4k= -----END CERTIFICATE-----Generated at Thu Mar 26 14:23:35 2026 by rpki-client