$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e64e45a5-7569-3712-a2c3-88a39a6b1f39.roa File: e64e45a5-7569-3712-a2c3-88a39a6b1f39.roa (raw, json) Hash identifier: M1Mr0u+GwGqwsiBTsG8w4Cwa4kCGaLmENJlBU3fpIms= Subject key identifier: A7:FA:6D:F4:25:C8:67:FE:9D:55:6B:B0:AE:EA:63:AF:90:47:A6:B7 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584D15A2539A0BBAE43A75672200 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e64e45a5-7569-3712-a2c3-88a39a6b1f39.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 399036 IP address blocks: 216.249.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:53:9a:0b:ba:e4:3a:75:67:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=a953962a-13c6-4902-b798-053d8629ea07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:85:91:c7:0b:bb:fc:ad:3d:8a:bd:25:8a:62: c6:47:af:dc:75:77:bf:9b:f9:74:16:1c:84:2f:15: 0b:26:dc:33:e6:e7:02:33:86:70:6d:90:2a:b2:aa: 57:4b:1b:2d:fa:be:63:95:58:16:a9:5d:1c:b3:f5: 0a:6d:92:a7:cf:f2:03:8e:b0:08:59:d4:1c:d6:7d: 40:1e:75:6b:87:bd:70:34:4b:cb:12:62:16:03:ca: 8b:c0:66:26:df:66:e8:67:d3:10:77:d5:10:e4:82: 48:38:e3:a5:d9:49:09:3c:af:22:28:25:07:14:14: 67:b0:b9:55:50:eb:7d:e2:18:22:77:27:06:30:28: 9a:4d:03:0f:5a:75:2d:f4:e5:33:b0:5d:fe:67:a4: b1:e9:f7:2e:ae:2a:ac:50:52:e7:55:7d:7d:8d:f4: 7c:d5:df:cd:71:59:73:27:e0:74:4b:f7:b6:b0:81: 32:38:e4:06:3a:43:b5:f2:12:49:ef:d7:bd:79:9c: 3a:40:bd:13:c5:c9:e7:34:fb:bb:ae:b5:72:77:05: 3c:64:13:06:25:9e:bd:b0:5e:e9:43:82:55:ea:2a: 53:bb:c0:2a:38:08:a7:ec:af:dc:f8:06:be:97:78: b2:84:dc:55:46:91:e6:66:9c:bb:d3:82:c5:eb:c7: 24:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FA:6D:F4:25:C8:67:FE:9D:55:6B:B0:AE:EA:63:AF:90:47:A6:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e64e45a5-7569-3712-a2c3-88a39a6b1f39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:e9:a7:f7:67:62:37:f0:bc:ce:1a:87:99:15:bf:6a:25:12: 56:04:5b:3a:24:e9:ce:5c:f8:16:57:df:bb:a9:0d:ce:67:69: 42:05:b5:45:3e:b7:6f:e7:44:a9:77:b9:5a:2a:10:b5:b3:39: 61:da:e4:ed:f7:21:aa:2a:75:af:52:eb:ea:b9:af:15:29:d7: a8:39:55:13:d1:16:b1:d7:60:b7:cc:5f:27:25:b7:7a:1c:b5: 8d:42:47:71:e6:26:f5:0e:8f:a6:f3:f8:1d:6e:97:6e:ac:74: 00:e1:e5:1a:95:0c:72:b9:ff:36:4b:62:87:52:18:c7:76:76: f0:26:fa:3f:ef:a5:f6:39:53:e9:95:83:1a:42:69:54:89:f6: 40:d9:f3:fd:40:d2:b8:cb:a2:e2:82:bd:d9:73:8e:5e:24:ba: 2e:77:81:25:41:17:a1:14:66:7d:bf:04:99:d8:ff:07:0c:f0: cd:1f:7d:09:af:d9:0b:32:8f:cd:64:64:68:e7:88:46:45:fe: 19:9e:fe:be:eb:dc:4f:c4:1c:c0:17:0f:e2:cf:76:af:79:4f: 1b:00:9f:5b:94:b4:d2:0f:3e:69:47:eb:9c:91:f0:ca:65:3e: 6f:ee:53:aa:c5:2d:bf:95:3d:f2:b4:25:3f:1c:d4:e7:cc:6a: d3:9d:7e:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VolOaC7rkOnVnIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk YTk1Mzk2MmEtMTNjNi00OTAyLWI3OTgtMDUzZDg2MjllYTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IWRxwu7/K09ir0limLGR6/cdXe/m/l0FhyE LxULJtwz5ucCM4ZwbZAqsqpXSxst+r5jlVgWqV0cs/UKbZKnz/IDjrAIWdQc1n1A HnVrh71wNEvLEmIWA8qLwGYm32boZ9MQd9UQ5IJIOOOl2UkJPK8iKCUHFBRnsLlV UOt94hgidycGMCiaTQMPWnUt9OUzsF3+Z6Sx6fcuriqsUFLnVX19jfR81d/NcVlz J+B0S/e2sIEyOOQGOkO18hJJ79e9eZw6QL0TxcnnNPu7rrVydwU8ZBMGJZ69sF7p Q4JV6ipTu8AqOAin7K/c+Aa+l3iyhNxVRpHmZpy704LF68ckOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKf6bfQlyGf+nVVrsK7qY6+QR6a3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZTY0ZTQ1YTUtNzU2OS0z NzEyLWEyYzMtODhhMzlhNmIxZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PndMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTpp/dnYjfwvM4ah5kVv2olElYEWzok6c5c+BZX37upDc5naUIFtUU+ t2/nRKl3uVoqELWzOWHa5O33Iaoqda9S6+q5rxUp16g5VRPRFrHXYLfMXyclt3oc tY1CR3HmJvUOj6bz+B1ul26sdADh5RqVDHK5/zZLYodSGMd2dvAm+j/vpfY5U+mV gxpCaVSJ9kDZ8/1A0rjLouKCvdlzjl4kui53gSVBF6EUZn2/BJnY/wcM8M0ffQmv 2Qsyj81kZGjniEZF/hme/r7r3E/EHMAXD+LPdq95TxsAn1uUtNIPPmlH65yR8Mpl Pm/uU6rFLb+VPfK0JT8c1OfMatOdfs8= -----END CERTIFICATE-----Generated at Thu Mar 26 16:27:34 2026 by rpki-client