$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/e8618f4f-7894-3379-ba43-706d25d57bf7.roa File: e8618f4f-7894-3379-ba43-706d25d57bf7.roa (raw, json) Hash identifier: qLSsqDB4Wz7Z5NuVC7RVSuQsRJ6SyiL7XwPjb6+IMyo= Subject key identifier: 43:0C:E4:5C:9E:C5:E1:BA:8B:8D:7D:E0:91:4C:D2:21:FF:47:06:E7 Certificate issuer: /CN=9696ca72-0d62-4fc3-b383-c596c4f11958 Certificate serial: 010D0C9F4328584D44FA38F9FDD3524F310C8280 Authority key identifier: 2E:55:FC:91:1D:44:AE:0E:73:86:AC:69:79:14:3C:D7:CD:4A:C4:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/e8618f4f-7894-3379-ba43-706d25d57bf7.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 3562 IP address blocks: 134.252.0.0/16 maxlen: 32 146.246.0.0/16 maxlen: 32 192.73.208.0/24 maxlen: 32 192.160.228.0/24 maxlen: 32 198.206.219.0/24 maxlen: 32 198.206.221.0/24 maxlen: 32 204.238.65.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/9696ca72-0d62-4fc3-b383-c596c4f11958.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/9696ca72-0d62-4fc3-b383-c596c4f11958.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:38:f9:fd:d3:52:4f:31:0c:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9696ca72-0d62-4fc3-b383-c596c4f11958 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=678a71ca-0c41-4f41-987b-4714bf393aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ba:76:8c:72:ed:f4:c8:2d:96:88:d3:7d:0d: 59:d2:7d:8b:2d:d1:c1:7f:6d:08:dc:87:27:13:7e: b5:81:12:a5:43:3f:fc:28:62:60:5d:4d:26:96:0a: 90:12:c9:17:1f:83:1d:74:73:26:94:3c:22:5a:09: 6c:49:83:04:03:e0:a5:d6:16:a4:47:d1:b5:3b:9f: a4:a6:94:d2:88:b2:4e:ac:58:36:f0:69:2d:72:0d: 60:52:25:e3:51:10:eb:ea:c1:84:f0:da:eb:ef:b3: 05:f8:9d:8e:02:4b:c1:7a:c5:a2:2a:4e:6e:33:1c: 0a:51:70:ac:bd:73:1a:9a:a2:fe:94:4f:ae:e2:d7: 7a:fc:a2:be:82:33:95:52:03:e0:ab:63:62:f9:62: 1b:64:16:8b:d2:72:8a:07:e6:0c:13:73:6a:fb:da: 9f:df:29:63:35:4f:fd:1c:4a:93:c9:b2:07:00:63: 08:f8:62:26:af:52:66:c0:50:55:7d:82:6b:fd:e4: b7:4c:a1:ee:b8:a6:e6:85:f0:d0:c8:54:1b:4c:6f: 68:03:ae:cc:79:27:c2:86:08:89:3c:f6:4c:a6:63: e1:e0:10:d1:6d:f0:5b:bb:c3:21:e7:13:f5:25:0d: f6:5b:12:a5:3f:a6:52:9f:7e:88:d8:22:ba:d6:bb: ff:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0C:E4:5C:9E:C5:E1:BA:8B:8D:7D:E0:91:4C:D2:21:FF:47:06:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/e8618f4f-7894-3379-ba43-706d25d57bf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/9696ca72-0d62-4fc3-b383-c596c4f11958.crl X509v3 Authority Key Identifier: keyid:2E:55:FC:91:1D:44:AE:0E:73:86:AC:69:79:14:3C:D7:CD:4A:C4:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958.cer sbgp-ipAddrBlock: critical IPv4: 134.252.0.0/16 146.246.0.0/16 192.73.208.0/24 192.160.228.0/24 198.206.219.0/24 198.206.221.0/24 204.238.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:19:1d:13:0a:68:90:bd:74:4b:c2:bc:82:ef:98:28:37:12: 42:72:1d:d1:86:85:e4:0c:de:b3:69:61:c1:28:fc:59:ea:78: b5:22:39:3a:4a:96:79:5b:50:e1:4f:14:af:b4:b0:1b:33:25: 24:65:69:b6:c0:e1:48:7d:13:b2:5a:c6:e1:d1:24:ab:f1:07: 1c:c3:a8:80:c1:d5:a0:98:14:a0:f8:a2:99:dd:e9:e1:d5:70: 87:64:b7:d9:b4:0a:30:b4:45:ef:43:9d:8d:5c:d0:b4:58:5b: 93:38:6c:2e:e6:dd:35:ab:66:18:9e:3c:54:4c:e8:f7:83:b4: 54:d8:7b:76:76:72:d5:2f:b5:f7:ca:39:68:5c:d0:0f:5b:1a: 9b:98:a4:ba:52:9c:d8:4b:16:6c:e9:48:e1:96:1a:7e:ae:a5: 34:3f:9b:29:26:48:95:66:c6:10:d0:e3:a5:f1:5a:91:49:10: 96:d9:eb:ee:95:1e:1e:0c:85:57:b5:e1:c8:07:b3:d6:f4:81: fb:dc:cf:e6:0c:3b:5f:03:57:a0:74:dd:b7:96:27:8c:17:f9: eb:7a:20:66:72:6a:b7:5e:34:66:a9:9a:d7:59:1a:92:d7:05: 5b:6b:27:6c:8c:ab:8b:cc:0f:82:9a:ab:ca:d7:fa:19:42:78: 00:1f:fa:c5 -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWE1E+jj5/dNSTzEMgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY5NmNhNzItMGQ2Mi00ZmMzLWIzODMtYzU5NmM0ZjEx OTU4MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk Njc4YTcxY2EtMGM0MS00ZjQxLTk4N2ItNDcxNGJmMzkzYWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbp2jHLt9MgtlojTfQ1Z0n2LLdHBf20I3Icn E361gRKlQz/8KGJgXU0mlgqQEskXH4MddHMmlDwiWglsSYMEA+Cl1hakR9G1O5+k ppTSiLJOrFg28Gktcg1gUiXjURDr6sGE8Nrr77MF+J2OAkvBesWiKk5uMxwKUXCs vXMamqL+lE+u4td6/KK+gjOVUgPgq2Ni+WIbZBaL0nKKB+YME3Nq+9qf3yljNU/9 HEqTybIHAGMI+GImr1JmwFBVfYJr/eS3TKHuuKbmhfDQyFQbTG9oA67MeSfChgiJ PPZMpmPh4BDRbfBbu8Mh5xP1JQ32WxKlP6ZSn36I2CK61rv/IwIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFEMM5FyexeG6i4194JFM0iH/RwbnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85Njk2 Y2E3Mi0wZDYyLTRmYzMtYjM4My1jNTk2YzRmMTE5NTgvZTg2MThmNGYtNzg5NC0z Mzc5LWJhNDMtNzA2ZDI1ZDU3YmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTY5NmNhNzItMGQ2Mi00ZmMzLWIz ODMtYzU5NmM0ZjExOTU4Lzk2OTZjYTcyLTBkNjItNGZjMy1iMzgzLWM1OTZjNGYx MTk1OC5jcmwwHwYDVR0jBBgwFoAULlX8kR1Erg5zhqxpeRQ8181KxAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85Njk2Y2E3Mi0wZDYyLTRmYzMtYjM4My1jNTk2 YzRmMTE5NTguY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwMAhvwDAwCS 9gMEAMBJ0AMEAMCg5AMEAMbO2wMEAMbO3QMEAMzuQTBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYGR0TCmiQ vXRLwryC75goNxJCch3RhoXkDN6zaWHBKPxZ6ni1Ijk6SpZ5W1DhTxSvtLAbMyUk ZWm2wOFIfROyWsbh0SSr8Qccw6iAwdWgmBSg+KKZ3enh1XCHZLfZtAowtEXvQ52N XNC0WFuTOGwu5t01q2YYnjxUTOj3g7RU2Ht2dnLVL7X3yjloXNAPWxqbmKS6UpzY SxZs6Ujhlhp+rqU0P5spJkiVZsYQ0OOl8VqRSRCW2evulR4eDIVXteHIB7PW9IH7 3M/mDDtfA1egdN23lieMF/nreiBmcmq3XjRmqZrXWRqS1wVbaydsjKuLzA+CmqvK 1/oZQngAH/rF -----END CERTIFICATE-----Generated at Thu Mar 26 17:01:28 2026 by rpki-client