$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254/f343bc0d-1a47-3448-a18d-34ed64c4539d.roa File: f343bc0d-1a47-3448-a18d-34ed64c4539d.roa (raw, json) Hash identifier: jWzXrScqJwTtKiQed5+95bh8vPFVO8nGmD9ONEyd1h8= Subject key identifier: 23:26:EA:68:BD:5A:90:DD:BB:6C:01:AD:5A:EF:6A:79:7F:11:C1:60 Certificate issuer: /CN=56bd0549-0e1f-4e81-bc69-e368e2e29254 Certificate serial: 010D0C9F4328584D4A8FA27AC641E2158775DD00 Authority key identifier: 16:3C:AE:4F:9C:F9:B9:9D:24:F2:15:17:7C:70:E6:F9:3A:A1:EB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254/f343bc0d-1a47-3448-a18d-34ed64c4539d.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 11362 IP address blocks: 192.150.211.0/24 maxlen: 24 2602:ff72::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254/56bd0549-0e1f-4e81-bc69-e368e2e29254.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254/56bd0549-0e1f-4e81-bc69-e368e2e29254.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:a2:7a:c6:41:e2:15:87:75:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56bd0549-0e1f-4e81-bc69-e368e2e29254 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=1e19a25b-2c10-4f51-b55b-7790664cc8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e8:77:24:72:ab:cc:c2:f1:20:fd:ed:61:e0: 27:43:3e:c5:38:91:4a:03:59:79:6d:8b:bc:cc:c7: 7e:e3:4b:40:28:3c:05:e8:10:97:e2:50:92:cb:5f: ea:67:7b:db:4e:8a:0d:df:96:2d:69:78:eb:50:d9: 9a:22:4b:c0:ce:8d:0a:f3:81:f8:75:cb:e0:70:0d: d7:fa:d4:48:78:ad:2e:cd:5b:b0:7d:2a:7d:79:a4: af:4d:d6:96:a4:41:da:88:e1:01:1b:1a:14:aa:5f: d8:63:0b:67:cc:29:66:e9:2a:c0:7d:01:3b:82:68: 91:56:50:ea:29:dc:ec:cf:36:92:30:5e:e6:1e:2e: dc:08:57:e0:c6:b6:4d:a0:c2:61:46:8d:1e:49:56: c9:02:f0:3c:27:cf:e3:ea:10:be:95:b3:19:df:32: e7:82:06:fe:73:50:7c:7e:70:44:92:ca:7d:c3:37: f7:a7:cd:bb:0f:04:ff:c0:6d:6c:e1:d2:a1:6d:0d: b9:07:ae:c0:92:bb:b3:7c:b8:39:32:38:d5:82:fc: 54:65:d7:17:fc:76:a4:b9:e0:bb:ab:68:a6:6a:4d: d6:73:5b:d3:32:3e:ee:cb:3e:62:9b:29:fb:d7:2d: 24:b8:09:93:c3:7d:22:5c:bc:f8:c2:60:0c:29:e6: bf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:26:EA:68:BD:5A:90:DD:BB:6C:01:AD:5A:EF:6A:79:7F:11:C1:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254/f343bc0d-1a47-3448-a18d-34ed64c4539d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254/56bd0549-0e1f-4e81-bc69-e368e2e29254.crl X509v3 Authority Key Identifier: keyid:16:3C:AE:4F:9C:F9:B9:9D:24:F2:15:17:7C:70:E6:F9:3A:A1:EB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254.cer sbgp-ipAddrBlock: critical IPv4: 192.150.211.0/24 IPv6: 2602:ff72::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:36:c5:83:d7:58:50:4e:78:00:39:35:cc:8c:e7:7e:54:d3: 33:13:45:09:8a:a0:62:9e:22:e0:3a:e0:c9:f2:7b:f8:75:c0: ec:cd:e7:89:11:3f:7f:5b:b7:d2:c4:52:34:c2:67:13:ad:3a: e1:a7:cf:4b:74:c1:44:fc:12:2e:2e:f7:e1:e2:4f:7b:13:fe: 83:14:9d:43:17:aa:de:f4:70:84:13:43:eb:f8:d6:8c:06:0d: 8e:71:8c:55:81:42:cc:00:8d:ac:0c:23:06:96:7a:a9:e0:2c: e2:e1:25:a7:8d:0f:1d:b8:a1:9d:0a:39:21:ea:50:df:3b:b6: f3:06:cd:d4:e7:10:de:ed:f5:32:10:57:9c:e5:83:58:56:2c: a5:2c:62:da:17:21:93:08:59:c1:11:fe:2c:15:58:05:0c:c2: 17:dd:a6:d5:76:08:44:29:b4:9a:70:ba:f2:4a:c7:97:b4:a9: fb:ae:73:ee:fb:9e:a4:63:6c:05:e1:5e:cf:92:74:56:ba:3d: e6:41:ff:96:1d:ca:e3:2b:34:6c:da:54:fb:7e:2e:9c:39:fb: 20:07:14:c9:e3:14:ea:a0:87:3f:2c:38:21:d9:2e:f9:4a:85: 4d:0c:ec:b6:33:ff:27:8f:ac:3b:f6:51:03:3d:2e:bf:07:93: b1:f1:63:72 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE1Kj6J6xkHiFYd13QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZiZDA1NDktMGUxZi00ZTgxLWJjNjktZTM2OGUyZTI5 MjU0MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk MWUxOWEyNWItMmMxMC00ZjUxLWI1NWItNzc5MDY2NGNjOGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseh3JHKrzMLxIP3tYeAnQz7FOJFKA1l5bYu8 zMd+40tAKDwF6BCX4lCSy1/qZ3vbTooN35YtaXjrUNmaIkvAzo0K84H4dcvgcA3X +tRIeK0uzVuwfSp9eaSvTdaWpEHaiOEBGxoUql/YYwtnzClm6SrAfQE7gmiRVlDq KdzszzaSMF7mHi7cCFfgxrZNoMJhRo0eSVbJAvA8J8/j6hC+lbMZ3zLnggb+c1B8 fnBEksp9wzf3p827DwT/wG1s4dKhbQ25B67AkruzfLg5MjjVgvxUZdcX/HakueC7 q2imak3Wc1vTMj7uyz5imyn71y0kuAmTw30iXLz4wmAMKea/ZQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCMm6mi9WpDdu2wBrVrvanl/EcFgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NmJk MDU0OS0wZTFmLTRlODEtYmM2OS1lMzY4ZTJlMjkyNTQvZjM0M2JjMGQtMWE0Ny0z NDQ4LWExOGQtMzRlZDY0YzQ1MzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTZiZDA1NDktMGUxZi00ZTgxLWJj NjktZTM2OGUyZTI5MjU0LzU2YmQwNTQ5LTBlMWYtNGU4MS1iYzY5LWUzNjhlMmUy OTI1NC5jcmwwHwYDVR0jBBgwFoAUFjyuT5z5uZ0k8hUXfHDm+Tqh64UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NmJkMDU0OS0wZTFmLTRlODEtYmM2OS1lMzY4 ZTJlMjkyNTQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAwJbTMA4E AgACMAgDBgQmAv9yADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSNsWD11hQTngAOTXMjOd+VNMzE0UJiqBi niLgOuDJ8nv4dcDszeeJET9/W7fSxFI0wmcTrTrhp89LdMFE/BIuLvfh4k97E/6D FJ1DF6re9HCEE0Pr+NaMBg2OcYxVgULMAI2sDCMGlnqp4Czi4SWnjQ8duKGdCjkh 6lDfO7bzBs3U5xDe7fUyEFec5YNYViylLGLaFyGTCFnBEf4sFVgFDMIX3abVdghE KbSacLrySseXtKn7rnPu+56kY2wF4V7PknRWuj3mQf+WHcrjKzRs2lT7fi6cOfsg BxTJ4xTqoIc/LDgh2S75SoVNDOy2M/8nj6w79lEDPS6/B5Ox8WNy -----END CERTIFICATE-----Generated at Thu Mar 26 08:40:56 2026 by rpki-client