$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/48e6b9a3-db59-37c1-b335-f338f63ff2ab.roa File: 48e6b9a3-db59-37c1-b335-f338f63ff2ab.roa (raw, json) Hash identifier: nJgm4VK5K5iTD9AwE/7oRN73d0uhVi+MGC7zmBvyE+A= Subject key identifier: 75:D2:03:ED:1D:C4:BB:A4:BC:C8:8F:47:61:A5:1B:F2:91:82:9C:D0 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584D0D426EE958416D03662644E0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/48e6b9a3-db59-37c1-b335-f338f63ff2ab.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 401415 IP address blocks: 216.249.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:6e:e9:58:41:6d:03:66:26:44:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=dfe46b9a-a35e-4682-b01e-d6eaa24921b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a3:4f:e1:57:79:64:37:75:6c:0d:82:c7:8a: 96:a3:bb:c8:23:02:d1:9d:3e:2b:c7:d2:85:e2:1a: df:35:4e:f4:4e:25:f6:61:0d:53:4a:fd:c6:3a:b6: 68:87:fd:00:c9:1d:1a:2e:24:61:3a:a8:33:1f:39: 1a:1a:ea:45:d9:16:eb:fd:bd:9b:01:e8:87:cb:2a: 3e:e4:76:85:6c:30:28:98:0f:fb:82:2e:b5:59:1a: 14:81:c5:99:c4:89:01:b1:ea:e5:5e:65:c1:9e:48: b1:7d:da:16:e2:18:d0:7e:2e:7f:5b:41:73:dc:db: 89:22:f1:b7:a4:3e:45:78:58:3e:35:77:d2:cd:94: e8:eb:5d:ad:a8:ab:40:7d:43:dc:dc:0f:5c:aa:bb: ee:aa:ea:f9:5c:8d:88:1e:6e:94:4e:dc:e3:35:7e: 84:16:2b:16:db:89:fd:f5:86:e5:30:a7:63:87:ea: c5:38:7d:30:1e:29:04:00:d4:4e:97:74:4f:26:04: d0:d8:25:1b:b8:29:5f:74:90:6a:de:34:cb:7c:a4: e3:8c:ef:da:11:d0:40:ee:33:12:74:9b:89:b7:01: 4f:4a:da:28:fa:67:32:c2:ff:3e:c1:92:e6:3a:fd: a9:d2:ba:71:4c:2b:51:64:00:03:aa:a7:72:cd:a0: a0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D2:03:ED:1D:C4:BB:A4:BC:C8:8F:47:61:A5:1B:F2:91:82:9C:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/48e6b9a3-db59-37c1-b335-f338f63ff2ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:0c:56:22:32:05:6b:b4:87:bb:3e:dd:04:6d:8c:66:c2:06: ff:e3:80:c9:0f:a4:c7:21:41:0c:8f:a2:e8:e8:20:8c:28:f5: c3:92:e9:8e:f8:16:59:1b:2a:98:58:d5:cc:1e:82:9a:46:a9: 49:52:32:22:e8:20:05:44:b2:f5:b2:24:28:b3:c7:bd:f8:e3: cf:25:bf:d2:39:62:2b:00:62:91:a2:63:54:ae:9a:d8:b0:e5: 62:23:e1:06:13:a2:13:fb:08:2b:2b:06:0f:70:90:c3:e7:95: 43:bb:7c:43:bc:a2:da:e6:c9:ce:9e:ef:96:3c:47:78:02:d8: d7:ce:a8:c5:c5:0f:43:a5:93:93:65:60:6d:c3:89:e8:c8:08: 1a:11:46:e8:2e:b5:42:03:09:83:ab:57:84:34:f8:48:56:56: 3d:cc:e4:4f:bf:3b:82:2b:b3:cd:3c:87:79:5f:92:d8:01:5e: 22:ba:08:39:20:a4:61:49:0a:99:b8:3e:2e:57:a3:de:b0:41: 33:47:df:28:d6:ee:39:c7:00:ad:ae:cb:4b:6f:44:41:c4:45: fa:c6:b3:c4:d4:6a:e0:c9:b1:1a:af:6c:2f:6b:64:7a:9d:6d: 84:fe:16:ae:25:1c:ad:6a:54:79:66:7e:e9:a3:9b:27:ad:d2: 28:f8:aa:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQm7pWEFtA2YmROAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZGZlNDZiOWEtYTM1ZS00NjgyLWIwMWUtZDZlYWEyNDkyMWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6NP4Vd5ZDd1bA2Cx4qWo7vIIwLRnT4rx9KF 4hrfNU70TiX2YQ1TSv3GOrZoh/0AyR0aLiRhOqgzHzkaGupF2Rbr/b2bAeiHyyo+ 5HaFbDAomA/7gi61WRoUgcWZxIkBserlXmXBnkixfdoW4hjQfi5/W0Fz3NuJIvG3 pD5FeFg+NXfSzZTo612tqKtAfUPc3A9cqrvuqur5XI2IHm6UTtzjNX6EFisW24n9 9YblMKdjh+rFOH0wHikEANROl3RPJgTQ2CUbuClfdJBq3jTLfKTjjO/aEdBA7jMS dJuJtwFPStoo+mcywv8+wZLmOv2p0rpxTCtRZAADqqdyzaCgJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXSA+0dxLukvMiPR2GlG/KRgpzQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNDhlNmI5YTMtZGI1OS0z N2MxLWIzMzUtZjMzOGY2M2ZmMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2PnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALwMViIyBWu0h7s+3QRtjGbCBv/jgMkPpMchQQyPoujoIIwo9cOS6Y74 FlkbKphY1cwegppGqUlSMiLoIAVEsvWyJCizx734488lv9I5YisAYpGiY1Sumtiw 5WIj4QYTohP7CCsrBg9wkMPnlUO7fEO8otrmyc6e75Y8R3gC2NfOqMXFD0Olk5Nl YG3DiejICBoRRugutUIDCYOrV4Q0+EhWVj3M5E+/O4Irs808h3lfktgBXiK6CDkg pGFJCpm4Pi5Xo96wQTNH3yjW7jnHAK2uy0tvREHERfrGs8TUauDJsRqvbC9rZHqd bYT+Fq4lHK1qVHlmfumjmyet0ij4qh4= -----END CERTIFICATE-----Generated at Thu Mar 26 16:45:01 2026 by rpki-client