$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/0a60cc02-6602-3558-b54d-5d7605932b07.roa File: 0a60cc02-6602-3558-b54d-5d7605932b07.roa (raw, json) Hash identifier: vg6rP+yjnRs1AH2296+eE5eoPYokPbUgAiTMTelLN/I= Subject key identifier: B9:4D:4E:60:65:F1:82:FB:FC:E6:AB:54:1C:DB:16:6E:50:96:13:92 Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584D39CF70CA0B57A2BFBB544740 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/0a60cc02-6602-3558-b54d-5d7605932b07.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 400298 IP address blocks: 216.75.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:70:ca:0b:57:a2:bf:bb:54:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=544eba54-0af7-4720-8e67-4a4be2ddc4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4a:f6:56:71:55:38:9c:cb:a6:f6:4b:bb:40: 1b:df:2f:9f:cc:e4:ca:d0:c1:e0:8b:89:da:02:64: 69:86:bd:5e:19:39:7f:9a:e9:d8:9f:64:0c:64:cd: 26:42:a8:82:42:bf:78:a4:2d:8e:d4:eb:8a:73:a1: 80:1d:69:3b:cb:f9:d0:65:a8:a9:a5:5b:72:fd:ac: c8:ba:ef:bc:be:06:b1:d3:93:26:5b:54:d3:82:e3: 1f:de:45:db:cb:dd:75:5a:42:50:c5:9b:9c:ac:6b: 15:8b:cd:05:91:57:35:51:62:7b:05:77:a4:90:aa: 8d:e7:e3:4f:81:d8:df:c1:98:fa:93:e2:24:80:8e: 44:f9:e9:ad:0b:44:47:54:b0:69:cd:a6:52:f0:11: 3f:83:2b:56:29:31:48:36:94:c3:13:4b:b7:f9:9f: b8:48:36:d1:74:11:4c:57:8c:61:38:a3:cb:ec:27: 36:b1:27:82:00:e2:da:17:08:2e:50:12:c9:a9:8f: 9a:ae:e8:71:c3:cc:4c:68:13:46:40:8b:24:eb:6a: 53:bb:b0:3b:40:cf:3b:33:52:9d:6d:f9:1d:6b:05: a9:fd:8c:a2:01:76:52:ee:51:8a:94:d0:e6:bf:c5: a6:79:6b:3a:1d:35:09:d7:c6:be:f2:bd:e4:cb:dc: 8c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4D:4E:60:65:F1:82:FB:FC:E6:AB:54:1C:DB:16:6E:50:96:13:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/0a60cc02-6602-3558-b54d-5d7605932b07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 216.75.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:89:a2:fe:0c:58:06:18:4e:de:3a:b8:ea:9a:a0:15:82:8d: b1:40:bc:9a:51:33:03:68:53:3e:a2:76:4d:2a:3d:84:5c:9c: e9:8e:5a:03:7a:dd:a0:03:d2:4e:38:cc:21:8c:42:67:1c:ab: 2a:4e:cd:4a:80:3e:3b:e4:c8:b1:35:eb:ec:fc:62:1a:00:6e: 0a:4b:55:bf:ee:96:3b:24:b7:27:08:82:b1:49:b7:e6:70:10: 09:bd:85:39:8e:2e:6b:8e:40:5d:d6:99:e9:4b:f7:7e:ae:d3: 0c:83:85:c9:d5:56:a7:d6:b4:7b:f6:01:a4:8f:ce:b2:9f:15: 6d:0c:01:73:e3:fd:0e:ac:17:b8:88:f6:07:86:8a:1a:3c:f4: 4a:59:c2:32:30:dc:2b:8f:38:11:3f:08:47:8d:27:03:6a:41: 2c:49:89:11:31:01:2e:85:ad:5d:50:43:04:da:5f:96:72:5a: 38:39:93:a9:6b:0e:bb:7f:92:e9:72:78:57:e2:1e:6d:2b:04: 58:b8:8d:de:f0:fd:0c:8b:9b:9e:d0:dc:44:6c:d8:56:15:1c: d9:f4:ea:79:ef:dc:8c:70:17:4b:94:0b:cc:ca:4f:4d:bf:fa: 68:80:53:15:52:c1:c4:97:c9:0a:31:95:84:4e:d1:29:f2:2c: 11:a0:1b:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z3DKC1eiv7tUR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk NTQ0ZWJhNTQtMGFmNy00NzIwLThlNjctNGE0YmUyZGRjNGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEr2VnFVOJzLpvZLu0Ab3y+fzOTK0MHgi4na AmRphr1eGTl/munYn2QMZM0mQqiCQr94pC2O1OuKc6GAHWk7y/nQZaippVty/azI uu+8vgax05MmW1TTguMf3kXby911WkJQxZucrGsVi80FkVc1UWJ7BXekkKqN5+NP gdjfwZj6k+IkgI5E+emtC0RHVLBpzaZS8BE/gytWKTFINpTDE0u3+Z+4SDbRdBFM V4xhOKPL7Cc2sSeCAOLaFwguUBLJqY+aruhxw8xMaBNGQIsk62pTu7A7QM87M1Kd bfkdawWp/YyiAXZS7lGKlNDmv8WmeWs6HTUJ18a+8r3ky9yMowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlNTmBl8YL7/OarVBzbFm5QlhOSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvMGE2MGNjMDItNjYwMi0z NTU4LWI1NGQtNWQ3NjA1OTMyYjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EuBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGJov4MWAYYTt46uOqaoBWCjbFAvJpRMwNoUz6idk0qPYRcnOmOWgN6 3aAD0k44zCGMQmccqypOzUqAPjvkyLE16+z8YhoAbgpLVb/uljsktycIgrFJt+Zw EAm9hTmOLmuOQF3WmelL936u0wyDhcnVVqfWtHv2AaSPzrKfFW0MAXPj/Q6sF7iI 9geGiho89EpZwjIw3CuPOBE/CEeNJwNqQSxJiRExAS6FrV1QQwTaX5ZyWjg5k6lr Drt/kulyeFfiHm0rBFi4jd7w/QyLm57Q3ERs2FYVHNn06nnv3IxwF0uUC8zKT02/ +miAUxVSwcSXyQoxlYRO0SnyLBGgG0g= -----END CERTIFICATE-----Generated at Thu Mar 26 13:06:01 2026 by rpki-client