$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/8b4d44ad-1412-3987-a7c7-dc597cddb92f.roa File: 8b4d44ad-1412-3987-a7c7-dc597cddb92f.roa (raw, json) Hash identifier: a0+oBBfKDZVrHjdFxSz6iVJ/Afa5JkAtvWPKfIcQQOk= Subject key identifier: EA:AA:BF:15:8A:3A:4B:E3:20:C1:3B:10:AD:93:D4:2E:08:BF:4D:73 Certificate issuer: /CN=02e2201b-75a6-4194-9898-6fe2f60eaf78 Certificate serial: 010D0C9F4328584D39CF76A1B876AAD14528F380 Authority key identifier: 33:69:A4:29:2A:74:9E:25:4F:26:0B:F4:5F:44:12:6C:66:73:20:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/8b4d44ad-1412-3987-a7c7-dc597cddb92f.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 32695 IP address blocks: 131.149.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/02e2201b-75a6-4194-9898-6fe2f60eaf78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/02e2201b-75a6-4194-9898-6fe2f60eaf78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:76:a1:b8:76:aa:d1:45:28:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02e2201b-75a6-4194-9898-6fe2f60eaf78 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=97b83764-e3c5-401c-a580-d4b09535b4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3b:85:ee:64:e5:d1:73:a4:d5:de:c6:c1:79: 73:96:f5:4a:26:e4:89:15:5e:c1:56:e8:12:bd:fa: e4:78:af:ee:7b:f9:fc:c3:2d:ff:8d:8b:6a:9b:f3: 01:dc:dc:20:36:d9:45:53:83:84:9e:b6:e7:da:ec: ac:25:54:a1:1a:93:b4:c4:a2:71:91:22:30:e3:93: fd:05:0f:fc:d2:38:cb:f0:e0:59:f1:80:19:7c:9e: e8:58:a6:e4:34:8f:2e:b7:64:8b:06:4a:5f:1a:b0: 5e:9b:2c:b5:dd:16:49:62:c4:bf:12:ec:07:91:b9: 99:d6:91:ea:1b:13:94:cd:3b:4c:38:d8:d7:fc:36: 78:ea:9f:f5:69:66:b0:b1:09:29:e1:30:cc:47:59: 05:82:1b:5e:5a:fa:94:8e:ef:d0:3f:01:31:d8:61: 56:3d:c4:ff:dd:92:5e:8a:fe:1b:1c:3d:b3:fd:40: 1c:9f:c7:28:99:aa:db:c9:fa:eb:72:a3:f9:97:ca: f9:15:e2:3b:77:ae:ed:0a:f3:fc:76:50:5a:e5:f2: 67:e5:28:05:d6:60:55:ae:24:43:c4:f9:ae:11:ba: 21:f7:6d:98:83:e3:ed:30:1e:0e:02:3a:38:2e:9b: 0f:00:a0:b5:ef:e6:30:c0:38:bf:aa:eb:03:0d:7e: 6a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AA:BF:15:8A:3A:4B:E3:20:C1:3B:10:AD:93:D4:2E:08:BF:4D:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/8b4d44ad-1412-3987-a7c7-dc597cddb92f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/02e2201b-75a6-4194-9898-6fe2f60eaf78.crl X509v3 Authority Key Identifier: keyid:33:69:A4:29:2A:74:9E:25:4F:26:0B:F4:5F:44:12:6C:66:73:20:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78.cer sbgp-ipAddrBlock: critical IPv4: 131.149.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:c9:7d:a4:35:af:8f:2d:b7:df:f1:65:df:7a:6d:d1:de:c3: 0b:3d:f2:98:9e:63:cd:5c:37:09:3e:a8:f4:19:98:e4:ee:75: b3:ff:a7:79:56:a4:c3:20:29:1c:83:63:04:14:a3:b2:f7:93: b6:e6:52:db:34:60:05:5e:62:de:58:3a:11:a7:c0:cc:21:6f: cd:fa:87:22:82:db:6f:23:70:e1:54:af:b8:bf:39:f6:bd:4a: 77:6c:74:65:17:d9:df:66:00:1f:4e:94:a3:3c:11:fa:48:f4: e6:5b:4b:30:4b:43:71:78:2c:38:8f:5a:10:1c:43:01:95:71: 97:53:ca:83:34:53:af:91:96:30:05:00:d8:4a:e5:0a:c8:2f: 4c:9b:1a:3d:3f:5b:9a:f7:b0:e0:1a:23:43:9a:82:19:81:61: e3:66:77:49:e1:4d:51:c5:73:73:83:e6:27:5d:50:73:c6:30: b5:0f:a9:32:b1:55:2e:43:bb:56:d8:47:cc:e2:28:1b:6e:07: 32:02:e5:06:f9:f7:d2:1b:7c:98:dd:28:e6:93:9b:73:2e:c3: 29:76:ab:25:c0:d6:37:20:9a:24:1f:c0:5f:c7:20:9d:c1:1b: 6e:c4:47:56:28:0f:88:b3:c7:fe:00:2c:a5:8e:ab:2d:a2:26: a2:ea:42:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z3ahuHaq0UUo84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJlMjIwMWItNzVhNi00MTk0LTk4OTgtNmZlMmY2MGVh Zjc4MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk OTdiODM3NjQtZTNjNS00MDFjLWE1ODAtZDRiMDk1MzViNGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozuF7mTl0XOk1d7GwXlzlvVKJuSJFV7BVugS vfrkeK/ue/n8wy3/jYtqm/MB3NwgNtlFU4OEnrbn2uysJVShGpO0xKJxkSIw45P9 BQ/80jjL8OBZ8YAZfJ7oWKbkNI8ut2SLBkpfGrBemyy13RZJYsS/EuwHkbmZ1pHq GxOUzTtMONjX/DZ46p/1aWawsQkp4TDMR1kFghteWvqUju/QPwEx2GFWPcT/3ZJe iv4bHD2z/UAcn8comarbyfrrcqP5l8r5FeI7d67tCvP8dlBa5fJn5SgF1mBVriRD xPmuEboh922Yg+PtMB4OAjo4LpsPAKC17+YwwDi/qusDDX5qiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqqvxWKOkvjIME7EK2T1C4Iv01zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wMmUy MjAxYi03NWE2LTQxOTQtOTg5OC02ZmUyZjYwZWFmNzgvOGI0ZDQ0YWQtMTQxMi0z OTg3LWE3YzctZGM1OTdjZGRiOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMDJlMjIwMWItNzVhNi00MTk0LTk4 OTgtNmZlMmY2MGVhZjc4LzAyZTIyMDFiLTc1YTYtNDE5NC05ODk4LTZmZTJmNjBl YWY3OC5jcmwwHwYDVR0jBBgwFoAUM2mkKSp0niVPJgv0X0QSbGZzIM4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wMmUyMjAxYi03NWE2LTQxOTQtOTg5OC02ZmUy ZjYwZWFmNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5XgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjJfaQ1r48tt9/xZd96bdHewws98pieY81cNwk+qPQZmOTudbP/p3lW pMMgKRyDYwQUo7L3k7bmUts0YAVeYt5YOhGnwMwhb836hyKC228jcOFUr7i/Ofa9 SndsdGUX2d9mAB9OlKM8EfpI9OZbSzBLQ3F4LDiPWhAcQwGVcZdTyoM0U6+RljAF ANhK5QrIL0ybGj0/W5r3sOAaI0OaghmBYeNmd0nhTVHFc3OD5iddUHPGMLUPqTKx VS5Du1bYR8ziKBtuBzIC5Qb599IbfJjdKOaTm3Muwyl2qyXA1jcgmiQfwF/HIJ3B G27ER1YoD4izx/4ALKWOqy2iJqLqQpo= -----END CERTIFICATE-----Generated at Thu Mar 26 16:43:23 2026 by rpki-client