$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/f7e7861a-7949-3299-a067-2db09c6ed01c.roa File: f7e7861a-7949-3299-a067-2db09c6ed01c.roa (raw, json) Hash identifier: g1XsVmqEQNBBluUkI94kl9NjnqUt19mtCB/hN2CIhIo= Subject key identifier: C5:01:7E:D3:65:00:BC:F5:65:6A:11:C6:ED:7F:62:DB:84:36:FB:99 Certificate issuer: /CN=ac42ca24-d785-4ab8-81d3-baec3a30b660 Certificate serial: 010D0C9F4328584D44FA3A81ED5B867913553E40 Authority key identifier: F4:B6:F5:EF:0B:83:49:79:6B:50:62:59:F0:36:46:8D:E7:08:1F:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/f7e7861a-7949-3299-a067-2db09c6ed01c.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 18786 IP address blocks: 162.254.112.0/22 maxlen: 24 192.157.20.0/22 maxlen: 24 199.193.180.0/22 maxlen: 24 204.62.56.0/21 maxlen: 24 208.77.8.0/23 maxlen: 24 216.146.224.0/20 maxlen: 24 2607:ffe8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ac42ca24-d785-4ab8-81d3-baec3a30b660.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ac42ca24-d785-4ab8-81d3-baec3a30b660.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:3a:81:ed:5b:86:79:13:55:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac42ca24-d785-4ab8-81d3-baec3a30b660 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=cbdbf5a3-fae9-49d6-b306-656ce43b1d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d3:03:31:b3:35:3c:1f:c7:e7:e7:8c:11:a5: 8d:34:3b:27:1c:fa:f2:28:bf:69:5b:30:c9:a7:1d: 1e:d4:69:56:5d:ca:50:f5:42:ee:a6:09:a7:1e:f8: c4:b8:11:70:aa:4b:b2:93:20:e5:dc:e1:cd:57:ee: c8:d8:6a:da:ec:f5:c9:ed:de:96:6e:25:96:7c:f3: d0:08:3e:5c:b5:e6:94:fc:94:7a:0c:16:5d:9e:3f: f5:ff:20:bc:ac:96:ec:57:9c:cc:49:c6:83:bc:12: f4:80:1f:a1:92:df:b6:00:f4:ce:48:e6:bc:14:d2: d9:68:d6:b5:eb:5f:4f:40:a3:87:3a:cb:5a:98:d9: f0:4e:6a:71:e8:69:11:0a:1d:2d:53:05:36:ff:02: 8e:08:01:45:f9:cd:6b:dc:89:ff:83:23:75:09:39: f9:e3:3b:e5:11:f3:7f:6f:ae:63:21:c4:4b:70:9b: 1e:4d:64:0b:16:08:59:ae:5c:92:99:67:7f:d5:bc: 36:fc:2a:8e:3b:a1:42:94:0a:39:23:3d:41:d1:d7: 82:60:84:c3:78:c7:88:e1:d5:aa:ae:50:c4:6b:55: ef:7f:25:15:13:05:94:1c:f8:a1:42:05:e0:20:69: 8d:63:41:eb:ed:cc:e0:4a:46:55:4a:91:90:12:a1: a9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:01:7E:D3:65:00:BC:F5:65:6A:11:C6:ED:7F:62:DB:84:36:FB:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/f7e7861a-7949-3299-a067-2db09c6ed01c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ac42ca24-d785-4ab8-81d3-baec3a30b660.crl X509v3 Authority Key Identifier: keyid:F4:B6:F5:EF:0B:83:49:79:6B:50:62:59:F0:36:46:8D:E7:08:1F:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660.cer sbgp-ipAddrBlock: critical IPv4: 162.254.112.0/22 192.157.20.0/22 199.193.180.0/22 204.62.56.0/21 208.77.8.0/23 216.146.224.0/20 IPv6: 2607:ffe8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:c1:74:2c:7f:e5:46:9c:82:76:44:7a:b2:22:ad:a7:70:e0: 9f:d1:95:28:ff:bb:14:09:e8:1b:49:93:4d:b8:3a:19:a7:76: 8f:68:98:1b:6d:ee:48:cd:0f:a5:23:2b:18:5b:95:4c:03:84: 9c:1c:d5:ee:1d:d9:46:b0:92:0f:81:df:c7:e1:21:0a:89:2d: 34:55:4c:55:cb:ae:62:48:90:1d:cd:76:ff:4a:e2:aa:4c:dd: ee:5d:46:13:c8:82:b5:9a:30:91:a4:39:de:31:62:db:9a:09: fd:15:6e:62:11:15:d3:81:92:59:1c:be:fc:1e:44:48:0d:16: a5:f4:85:de:ef:ff:2e:aa:d6:d8:23:f5:ba:4d:bf:a0:95:ea: 90:23:e2:20:d2:71:e3:60:7f:3a:5f:14:fe:04:91:77:9a:43: d1:7e:e6:3e:ec:bd:8d:05:0d:de:61:3d:21:1c:b7:ac:00:df: 72:4e:86:13:94:db:b3:5d:8d:ce:0b:07:ea:4e:f5:19:05:b6: f0:43:47:9d:19:86:34:66:01:fa:d9:6c:b3:67:e6:09:29:fb: 14:f1:65:d3:ab:e0:26:11:52:28:72:bd:75:08:d9:1a:db:83: 65:9f:e3:86:ed:7d:b3:cf:60:5b:fb:50:2e:c7:27:69:36:50: 50:b7:b3:4b -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWE1E+jqB7VuGeRNVPkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM0MmNhMjQtZDc4NS00YWI4LTgxZDMtYmFlYzNhMzBi NjYwMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk Y2JkYmY1YTMtZmFlOS00OWQ2LWIzMDYtNjU2Y2U0M2IxZDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdMDMbM1PB/H5+eMEaWNNDsnHPryKL9pWzDJ px0e1GlWXcpQ9ULupgmnHvjEuBFwqkuykyDl3OHNV+7I2Gra7PXJ7d6WbiWWfPPQ CD5cteaU/JR6DBZdnj/1/yC8rJbsV5zMScaDvBL0gB+hkt+2APTOSOa8FNLZaNa1 619PQKOHOstamNnwTmpx6GkRCh0tUwU2/wKOCAFF+c1r3In/gyN1CTn54zvlEfN/ b65jIcRLcJseTWQLFghZrlySmWd/1bw2/CqOO6FClAo5Iz1B0deCYITDeMeI4dWq rlDEa1XvfyUVEwWUHPihQgXgIGmNY0Hr7czgSkZVSpGQEqGptQIDAQABo4IDgjCC A34wHQYDVR0OBBYEFMUBftNlALz1ZWoRxu1/YtuENvuZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYzQy Y2EyNC1kNzg1LTRhYjgtODFkMy1iYWVjM2EzMGI2NjAvZjdlNzg2MWEtNzk0OS0z Mjk5LWEwNjctMmRiMDljNmVkMDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWM0MmNhMjQtZDc4NS00YWI4LTgx ZDMtYmFlYzNhMzBiNjYwL2FjNDJjYTI0LWQ3ODUtNGFiOC04MWQzLWJhZWMzYTMw YjY2MC5jcmwwHwYDVR0jBBgwFoAU9Lb17wuDSXlrUGJZ8DZGjecIH68wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYzQyY2EyNC1kNzg1LTRhYjgtODFkMy1iYWVj M2EzMGI2NjAuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCov5wAwQC wJ0UAwQCx8G0AwQDzD44AwQB0E0IAwQE2JLgMA0EAgACMAcDBQAmB//oMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAK7BdCx/5UacgnZEerIiradw4J/RlSj/uxQJ6BtJk024Ohmndo9omBtt7kjN D6UjKxhblUwDhJwc1e4d2Uawkg+B38fhIQqJLTRVTFXLrmJIkB3Ndv9K4qpM3e5d RhPIgrWaMJGkOd4xYtuaCf0VbmIRFdOBklkcvvweREgNFqX0hd7v/y6q1tgj9bpN v6CV6pAj4iDSceNgfzpfFP4EkXeaQ9F+5j7svY0FDd5hPSEct6wA33JOhhOU27Nd jc4LB+pO9RkFtvBDR50ZhjRmAfrZbLNn5gkp+xTxZdOr4CYRUihyvXUI2Rrbg2Wf 44btfbPPYFv7UC7HJ2k2UFC3s0s= -----END CERTIFICATE-----Generated at Thu Mar 26 16:08:34 2026 by rpki-client