$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/392c15e9-05de-39d4-832e-bb708494e16c.roa File: 392c15e9-05de-39d4-832e-bb708494e16c.roa (raw, json) Hash identifier: HAIFzBdzD903XJtCJfTYFMe5eelBgrFehEHX/Mpkjww= Subject key identifier: BB:D7:51:C8:FE:3C:62:39:29:E9:D5:92:44:13:05:C0:1A:41:E0:81 Certificate issuer: /CN=ebff2bbd-fab0-4f48-a625-d53c63f1bbe6 Certificate serial: 010D0C9F4328584D40CA3680B9DE56879102DE00 Authority key identifier: 43:DE:DC:F8:9F:C5:8D:6E:3C:61:F8:80:3F:72:0E:D5:0C:74:A6:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/392c15e9-05de-39d4-832e-bb708494e16c.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 18604 IP address blocks: 65.181.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:36:80:b9:de:56:87:91:02:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebff2bbd-fab0-4f48-a625-d53c63f1bbe6 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=9b0ecf9b-fb3e-4466-b2a5-6314b9022d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2b:49:d4:e7:21:43:c6:9b:57:50:31:6c:87: fe:71:5b:98:c4:e2:b1:04:41:85:44:d0:72:55:8e: 32:20:2c:cf:59:ec:6a:66:dc:30:e9:db:bf:e5:48: ef:95:b8:13:d7:8d:5c:81:29:be:25:50:4d:19:27: 68:93:05:25:46:d9:4e:8b:51:15:97:d7:3c:17:3c: a9:3e:49:1f:72:95:f6:bc:45:bd:11:51:67:dc:75: 5d:54:30:d1:a7:86:3e:c3:38:5c:92:bb:7e:e3:d1: dc:74:ee:f5:f5:93:46:35:b0:4c:78:9e:c4:1c:ef: 8a:64:5e:09:05:4c:15:8e:b6:f1:8b:cf:0a:51:3d: 84:c2:aa:e0:de:bf:e2:aa:be:33:27:56:3d:26:4d: 96:a0:0a:ed:c7:20:e1:65:73:37:cc:38:d5:fc:fe: eb:c1:d1:9b:17:36:8a:61:9c:aa:32:71:d9:d3:84: 8f:83:4b:34:2d:9a:ce:ab:c9:fa:d5:cd:39:d9:b6: 81:77:91:10:93:24:7d:23:98:47:d6:a3:18:c1:41: 49:fd:3f:40:4b:29:e2:95:6e:f7:20:f8:c4:f4:ef: e7:47:c4:b4:65:df:3a:d3:14:b9:71:b0:c4:97:16: cc:e8:08:63:6d:e8:33:90:d2:ca:bb:41:c7:fd:0d: 22:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D7:51:C8:FE:3C:62:39:29:E9:D5:92:44:13:05:C0:1A:41:E0:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/392c15e9-05de-39d4-832e-bb708494e16c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.crl X509v3 Authority Key Identifier: keyid:43:DE:DC:F8:9F:C5:8D:6E:3C:61:F8:80:3F:72:0E:D5:0C:74:A6:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer sbgp-ipAddrBlock: critical IPv4: 65.181.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:3b:ca:cc:fe:be:0a:0a:47:5d:af:52:2e:c3:e0:4d:93:e1: 40:9c:76:ce:ef:6a:df:a6:fc:32:78:cb:87:03:6a:09:44:c8: 2a:89:41:b0:f5:51:47:a8:e4:f0:e7:3c:5e:44:5b:c8:fe:4e: 64:42:66:d0:05:2a:12:fc:9b:f9:7e:ff:d7:fa:0d:89:1b:93: 4a:5c:d2:88:de:27:39:31:d3:13:85:5d:35:e2:3f:bc:c8:09: bd:d8:33:b8:a6:88:35:97:b2:c4:14:1f:95:5d:a7:64:83:00: cf:73:a6:49:f4:6a:dc:de:b9:08:ea:c0:7e:c7:32:55:75:6e: 1c:57:b9:45:8a:3c:8a:6c:ba:3c:5a:60:6c:c1:7c:20:e9:08: a0:71:6a:2f:30:79:25:e9:15:4c:3a:d1:02:e7:0b:77:25:a5: e7:1a:e5:af:bf:5b:ce:7f:00:d6:dd:8b:59:09:5a:ca:98:df: f5:27:fe:5d:24:63:57:ef:d1:de:10:1d:d4:7d:99:b5:24:50: 00:96:c2:1d:21:10:82:d7:fa:54:fd:21:e5:c3:a8:30:66:e7: f3:3b:48:1a:26:ae:e9:c4:14:2f:21:47:8e:4f:37:0f:8d:4b: 09:1e:46:87:38:13:ac:96:80:5f:18:e6:c5:59:91:d0:b1:bb: fb:8d:b8:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AyjaAud5Wh5EC3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJmZjJiYmQtZmFiMC00ZjQ4LWE2MjUtZDUzYzYzZjFi YmU2MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk OWIwZWNmOWItZmIzZS00NDY2LWIyYTUtNjMxNGI5MDIyZDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuytJ1OchQ8abV1AxbIf+cVuYxOKxBEGFRNBy VY4yICzPWexqZtww6du/5UjvlbgT141cgSm+JVBNGSdokwUlRtlOi1EVl9c8Fzyp PkkfcpX2vEW9EVFn3HVdVDDRp4Y+wzhckrt+49HcdO719ZNGNbBMeJ7EHO+KZF4J BUwVjrbxi88KUT2Ewqrg3r/iqr4zJ1Y9Jk2WoArtxyDhZXM3zDjV/P7rwdGbFzaK YZyqMnHZ04SPg0s0LZrOq8n61c052baBd5EQkyR9I5hH1qMYwUFJ/T9ASynilW73 IPjE9O/nR8S0Zd860xS5cbDElxbM6AhjbegzkNLKu0HH/Q0i+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvXUcj+PGI5KenVkkQTBcAaQeCBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lYmZm MmJiZC1mYWIwLTRmNDgtYTYyNS1kNTNjNjNmMWJiZTYvMzkyYzE1ZTktMDVkZS0z OWQ0LTgzMmUtYmI3MDg0OTRlMTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWJmZjJiYmQtZmFiMC00ZjQ4LWE2 MjUtZDUzYzYzZjFiYmU2L2ViZmYyYmJkLWZhYjAtNGY0OC1hNjI1LWQ1M2M2M2Yx YmJlNi5jcmwwHwYDVR0jBBgwFoAUQ97c+J/FjW48YfiAP3IO1Qx0ppMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lYmZmMmJiZC1mYWIwLTRmNDgtYTYyNS1kNTNj NjNmMWJiZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQbVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEc7ysz+vgoKR12vUi7D4E2T4UCcds7vat+m/DJ4y4cDaglEyCqJQbD1 UUeo5PDnPF5EW8j+TmRCZtAFKhL8m/l+/9f6DYkbk0pc0ojeJzkx0xOFXTXiP7zI Cb3YM7imiDWXssQUH5Vdp2SDAM9zpkn0atzeuQjqwH7HMlV1bhxXuUWKPIpsujxa YGzBfCDpCKBxai8weSXpFUw60QLnC3clpeca5a+/W85/ANbdi1kJWsqY3/Un/l0k Y1fv0d4QHdR9mbUkUACWwh0hEILX+lT9IeXDqDBm5/M7SBomrunEFC8hR45PNw+N SwkeRoc4E6yWgF8Y5sVZkdCxu/uNuDI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:31:20 2026 by rpki-client