$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/3b9384bd-5385-384e-95c7-0cd9faa340a3.roa File: 3b9384bd-5385-384e-95c7-0cd9faa340a3.roa (raw, json) Hash identifier: Wk8OJ25hWviLgUXCuRrPsCMYGNP+fL4NFouiz19BBwY= Subject key identifier: 3C:48:7D:AB:41:A5:59:86:5F:01:AC:71:F4:12:51:62:23:DE:79:5F Certificate issuer: /CN=d51196d1-75e6-431b-8514-1f946ae21089 Certificate serial: 010D0C9F4328584D44FA3B73B5B27B24AECC3100 Authority key identifier: B4:12:66:9F:66:09:97:D7:DF:43:A0:F6:F3:96:5D:F8:A3:DE:0D:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/3b9384bd-5385-384e-95c7-0cd9faa340a3.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 6140 IP address blocks: 107.161.208.0/20 maxlen: 20 2602:ffd3::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/d51196d1-75e6-431b-8514-1f946ae21089.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/d51196d1-75e6-431b-8514-1f946ae21089.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:3b:73:b5:b2:7b:24:ae:cc:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d51196d1-75e6-431b-8514-1f946ae21089 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=d08f4933-1266-43b8-b414-dc5db3fd83b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b4:0b:57:56:d1:39:d3:b8:92:f0:19:c4:ff: ca:16:2f:26:6e:9d:c0:d2:19:d9:d0:1b:17:05:5b: f6:23:62:f8:8e:0b:57:3d:3d:9c:d6:34:80:49:6b: ca:68:08:3b:e4:6e:6e:65:34:59:24:b9:ad:64:e8: af:40:be:26:19:8a:5a:bf:5f:d7:3c:1a:23:6b:4f: 1e:81:18:9c:80:5d:92:03:23:cd:4c:cf:aa:0f:53: a1:2f:44:76:f8:4f:e7:6c:92:98:8e:ec:43:1a:7b: a2:7e:ed:dc:41:87:4b:28:bc:a3:b5:de:c2:76:68: 7a:95:84:e4:73:e6:3d:96:3f:60:c2:ff:f5:70:0a: ec:a7:be:45:77:75:ec:23:13:b0:5c:6d:04:b6:84: 7d:e4:eb:b1:3a:b8:f5:3b:de:61:61:7e:f7:52:ae: df:81:69:7e:40:8f:4f:35:7e:8c:b0:fb:3d:52:71: 70:2e:bc:84:4d:ed:00:d9:32:51:1a:36:08:ce:41: dc:07:68:d2:ff:5f:e6:ef:c9:45:cd:25:13:4f:ac: 90:b2:fd:53:e0:5c:28:50:a6:aa:42:2b:80:56:a6: 39:00:d4:a0:3c:55:53:74:b5:64:52:3a:c8:34:70: a0:d2:b0:82:d6:d8:69:dd:41:ed:3c:9a:3a:2e:16: d2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:48:7D:AB:41:A5:59:86:5F:01:AC:71:F4:12:51:62:23:DE:79:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/3b9384bd-5385-384e-95c7-0cd9faa340a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/d51196d1-75e6-431b-8514-1f946ae21089.crl X509v3 Authority Key Identifier: keyid:B4:12:66:9F:66:09:97:D7:DF:43:A0:F6:F3:96:5D:F8:A3:DE:0D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089.cer sbgp-ipAddrBlock: critical IPv4: 107.161.208.0/20 IPv6: 2602:ffd3::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:e9:e0:17:08:b1:4f:11:a1:3d:82:95:33:aa:7c:67:32:4e: d4:ab:38:51:6d:cc:9d:95:db:26:e9:21:e8:b4:b8:88:c7:a6: db:66:68:1d:fb:c0:ba:b7:f1:3b:e7:aa:4f:ce:91:28:ae:b8: ac:a1:19:86:66:d1:72:68:1b:a2:f1:9f:6f:24:d2:3f:f0:73: e3:ef:45:48:1e:8c:62:5e:f4:9f:04:80:8e:96:7b:5d:20:0b: a1:a5:bf:6d:7a:8e:48:30:da:db:a4:3c:f9:b9:84:04:68:27: 82:25:0c:ef:e5:51:11:8e:72:d1:5f:68:52:9f:7c:df:6d:2c: 8a:d5:cb:e9:b6:91:a6:bc:be:55:fd:60:0d:f6:99:c7:1d:b2: 46:7c:5a:57:ba:db:cf:7f:56:e8:66:96:61:a0:eb:5a:1c:a5: f9:ea:6e:23:16:38:72:d5:92:2b:6a:a8:1a:a1:41:59:73:f1: 76:74:d5:15:dc:a1:bc:ad:a7:f0:ea:6f:ca:3f:34:b3:c3:a3: 14:1a:45:b4:51:46:52:08:47:f7:7e:4d:62:ec:2e:e1:b3:f4: 1b:92:fa:35:68:0a:57:b5:7f:4c:c7:8c:1f:97:30:ac:d3:c0: c2:c4:50:84:d8:51:1a:cc:f4:76:1e:dc:96:01:9b:b4:e8:20: b1:78:83:86 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE1E+jtztbJ7JK7MMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDUxMTk2ZDEtNzVlNi00MzFiLTg1MTQtMWY5NDZhZTIx MDg5MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZDA4ZjQ5MzMtMTI2Ni00M2I4LWI0MTQtZGM1ZGIzZmQ4M2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7QLV1bROdO4kvAZxP/KFi8mbp3A0hnZ0BsX BVv2I2L4jgtXPT2c1jSASWvKaAg75G5uZTRZJLmtZOivQL4mGYpav1/XPBoja08e gRicgF2SAyPNTM+qD1OhL0R2+E/nbJKYjuxDGnuifu3cQYdLKLyjtd7Cdmh6lYTk c+Y9lj9gwv/1cArsp75Fd3XsIxOwXG0EtoR95OuxOrj1O95hYX73Uq7fgWl+QI9P NX6MsPs9UnFwLryETe0A2TJRGjYIzkHcB2jS/1/m78lFzSUTT6yQsv1T4FwoUKaq QiuAVqY5ANSgPFVTdLVkUjrINHCg0rCC1thp3UHtPJo6LhbS1wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDxIfatBpVmGXwGscfQSUWIj3nlfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNTEx OTZkMS03NWU2LTQzMWItODUxNC0xZjk0NmFlMjEwODkvM2I5Mzg0YmQtNTM4NS0z ODRlLTk1YzctMGNkOWZhYTM0MGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDUxMTk2ZDEtNzVlNi00MzFiLTg1 MTQtMWY5NDZhZTIxMDg5L2Q1MTE5NmQxLTc1ZTYtNDMxYi04NTE0LTFmOTQ2YWUy MTA4OS5jcmwwHwYDVR0jBBgwFoAUtBJmn2YJl9ffQ6D285Zd+KPeDbIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNTExOTZkMS03NWU2LTQzMWItODUxNC0xZjk0 NmFlMjEwODkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQEa6HQMA4E AgACMAgDBgQmAv/TADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCK6eAXCLFPEaE9gpUzqnxnMk7UqzhRbcyd ldsm6SHotLiIx6bbZmgd+8C6t/E756pPzpEorrisoRmGZtFyaBui8Z9vJNI/8HPj 70VIHoxiXvSfBICOlntdIAuhpb9teo5IMNrbpDz5uYQEaCeCJQzv5VERjnLRX2hS n3zfbSyK1cvptpGmvL5V/WAN9pnHHbJGfFpXutvPf1boZpZhoOtaHKX56m4jFjhy 1ZIraqgaoUFZc/F2dNUV3KG8rafw6m/KPzSzw6MUGkW0UUZSCEf3fk1i7C7hs/Qb kvo1aApXtX9Mx4wflzCs08DCxFCE2FEazPR2HtyWAZu06CCxeIOG -----END CERTIFICATE-----Generated at Wed Mar 25 21:30:12 2026 by rpki-client