$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/8ef3e70b-bb33-3774-a948-af7270eaef09.roa File: 8ef3e70b-bb33-3774-a948-af7270eaef09.roa (raw, json) Hash identifier: rU77Xft1HHKImiXldqSngGyZcL5K/Ob6+lL4VY+OMlU= Subject key identifier: 15:4B:9D:66:2E:DA:5E:2E:B7:B5:2A:4D:18:16:A9:BD:14:DC:08:98 Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584D46C42CEEBF22CDC6D4998580 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/8ef3e70b-bb33-3774-a948-af7270eaef09.roa Signing time: Tue 24 Mar 2026 16:23:26 +0000 ROA not before: Tue 24 Mar 2026 16:23:26 +0000 ROA not after: Mon 22 Jun 2026 16:23:26 +0000 asID: 834 IP address blocks: 216.75.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:c4:2c:ee:bf:22:cd:c6:d4:99:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Mar 24 16:23:26 2026 GMT Not After : Jun 22 16:23:26 2026 GMT Subject: CN=9a16b554-e9b7-4659-94d5-519f93e2c3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d8:2a:04:b8:3c:d3:f8:16:d0:d1:6b:db:c7: 76:86:89:d0:91:e9:49:72:6c:ab:a6:41:e0:b4:27: a9:36:16:fa:7f:32:aa:be:56:75:fa:a5:42:28:62: 04:0f:ee:43:60:93:68:c3:25:8d:be:92:24:de:fc: 44:2f:65:e0:ca:f6:ed:ec:4f:b9:85:80:c1:a8:70: 3b:0d:72:4f:d1:78:cc:9a:94:3f:bd:80:94:94:03: 5a:0a:06:81:93:25:b9:c0:45:1d:0b:c1:89:22:46: 01:af:3f:48:aa:a2:e1:e3:7a:66:71:38:49:43:8d: f1:c5:99:5a:cd:4f:77:f8:65:e9:2f:92:64:66:69: 8c:f1:c9:72:2b:ba:f4:59:29:11:da:82:86:04:ff: b5:8a:5c:ed:4b:de:e3:db:3f:69:a6:43:19:3e:2a: 8c:da:6a:f2:4b:5a:ec:7a:87:30:cf:4c:7c:de:32: 1e:c0:f3:62:2e:34:dd:b2:5c:a1:4c:89:7f:64:4e: 59:21:59:73:c4:07:95:87:df:a4:ce:70:9f:40:ab: e1:dd:32:e9:73:13:d4:c3:c4:f7:c2:3e:d1:2d:0e: db:5b:69:ac:02:62:27:2c:83:4d:b8:07:15:a8:8e: 3a:e5:f3:02:99:c1:24:f7:55:1e:0f:3b:48:36:f3: 5e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4B:9D:66:2E:DA:5E:2E:B7:B5:2A:4D:18:16:A9:BD:14:DC:08:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/8ef3e70b-bb33-3774-a948-af7270eaef09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 216.75.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:eb:ae:fe:82:24:c9:9a:87:ef:9b:92:34:d9:bc:ff:46:04: c7:d8:59:96:da:a3:c2:3e:b2:f9:2b:8b:ab:cb:66:e5:c8:6d: 7e:06:7e:e9:57:a2:ec:04:4b:1a:22:03:41:48:14:3b:a0:b6: aa:ed:72:ab:f4:ac:ea:e6:22:f5:c9:0f:85:01:8d:47:7f:30: 39:b6:1e:35:a8:31:31:0d:9e:f9:04:44:3e:d5:7d:92:77:7f: 4b:76:61:86:dd:95:d1:ed:31:6e:dd:85:3f:fb:19:ed:8d:13: 73:89:ac:cd:78:8b:34:3e:75:35:a5:92:a8:68:42:3f:42:89: 4c:fe:a1:77:fb:db:1b:a9:34:fe:83:c2:f3:92:d7:99:95:d2: b7:85:d4:af:d7:d3:67:12:eb:5f:a3:45:c4:c7:45:db:87:7b: 99:32:d8:ca:83:da:35:92:04:37:bd:ca:e0:0b:f4:16:6c:d7: ba:34:dc:ef:f7:6e:46:8e:54:4c:5f:9b:43:d4:d2:69:a0:09: 66:51:2d:ce:92:93:33:a7:f6:08:8b:50:0f:4c:0d:c5:32:da: c3:2f:ee:3a:fa:b2:e5:cc:af:b7:65:49:4c:8a:a7:05:54:2b: 1c:84:44:d1:42:d6:32:74:17:93:4b:45:ee:6d:4d:8c:6f:8d: 66:29:a7:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GxCzuvyLNxtSZhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI2MDMyNDE2MjMyNloXDTI2MDYyMjE2MjMyNlowLzEtMCsGA1UEAxMk OWExNmI1NTQtZTliNy00NjU5LTk0ZDUtNTE5ZjkzZTJjM2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptgqBLg80/gW0NFr28d2honQkelJcmyrpkHg tCepNhb6fzKqvlZ1+qVCKGIED+5DYJNowyWNvpIk3vxEL2Xgyvbt7E+5hYDBqHA7 DXJP0XjMmpQ/vYCUlANaCgaBkyW5wEUdC8GJIkYBrz9IqqLh43pmcThJQ43xxZla zU93+GXpL5JkZmmM8clyK7r0WSkR2oKGBP+1ilztS97j2z9ppkMZPiqM2mryS1rs eocwz0x83jIewPNiLjTdslyhTIl/ZE5ZIVlzxAeVh9+kznCfQKvh3TLpcxPUw8T3 wj7RLQ7bW2msAmInLINNuAcVqI465fMCmcEk91UeDztINvNepQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVLnWYu2l4ut7UqTRgWqb0U3AiYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvOGVmM2U3MGItYmIzMy0z Nzc0LWE5NDgtYWY3MjcwZWFlZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EuZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDrrv6CJMmah++bkjTZvP9GBMfYWZbao8I+svkri6vLZuXIbX4GfulX ouwESxoiA0FIFDugtqrtcqv0rOrmIvXJD4UBjUd/MDm2HjWoMTENnvkERD7VfZJ3 f0t2YYbdldHtMW7dhT/7Ge2NE3OJrM14izQ+dTWlkqhoQj9CiUz+oXf72xupNP6D wvOS15mV0reF1K/X02cS61+jRcTHRduHe5ky2MqD2jWSBDe9yuAL9BZs17o03O/3 bkaOVExfm0PU0mmgCWZRLc6SkzOn9giLUA9MDcUy2sMv7jr6suXMr7dlSUyKpwVU KxyERNFC1jJ0F5NLRe5tTYxvjWYpp8I= -----END CERTIFICATE-----Generated at Thu Mar 26 09:36:29 2026 by rpki-client