$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/d216a5a1-373b-3c8c-ac74-27d304a60803.roa File: d216a5a1-373b-3c8c-ac74-27d304a60803.roa (raw, json) Hash identifier: iXhG6sLlFUNAlZq1R469SV8GTBztd1b8XqHWNlhVwWc= Subject key identifier: 6C:C7:39:57:22:B1:F3:A1:EF:2F:0A:39:2E:E8:97:E8:35:56:1F:97 Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584D300A2680591B0330E66B0600 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/d216a5a1-373b-3c8c-ac74-27d304a60803.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 29802 IP address blocks: 216.75.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:26:80:59:1b:03:30:e6:6b:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=a30eb5c8-d61e-4d09-b3b9-048c97fafe8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:91:1d:d9:bd:41:46:e3:48:84:f0:51:78:2b: 0a:9e:45:1e:b6:1e:a5:27:4c:e9:f2:e7:4f:4e:0e: c0:99:21:18:29:be:42:86:a2:c6:04:e7:d5:02:71: cc:c6:8c:d1:cc:fb:84:96:4f:19:fd:85:1e:c1:ed: 88:f7:cd:e6:68:76:26:96:ed:9b:e8:e6:75:f7:9c: 13:43:d0:2e:12:ab:5c:39:55:bb:79:e3:c3:67:a2: 4c:7d:25:52:35:36:38:7c:bc:c0:73:bd:22:fa:26: a6:d3:4e:fb:e6:9b:33:33:49:b9:2c:61:0b:ee:98: 57:d0:65:45:d6:8a:dc:e0:e4:cd:eb:2a:c9:36:21: 1f:7f:80:14:2f:6d:8f:07:df:ba:1d:0f:48:84:74: 29:41:6f:e6:6d:d7:c8:10:3f:4c:a0:9f:46:c4:ec: 09:51:e7:93:db:d0:4f:2b:0d:df:26:6d:24:0b:b4: 9a:83:ed:cf:24:51:3e:78:13:9c:23:bf:55:f7:e6: 47:9a:52:e4:2f:d7:60:e3:23:2c:4b:fa:2e:df:0c: 62:42:ea:f6:f4:f0:f4:cf:a9:e1:c1:4c:bd:b9:f7: 5b:7a:c3:66:22:48:a3:58:a4:6f:79:92:d9:eb:50: b5:b5:15:80:8d:e1:3e:d0:9c:14:f2:a0:6e:0f:df: 6c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C7:39:57:22:B1:F3:A1:EF:2F:0A:39:2E:E8:97:E8:35:56:1F:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/d216a5a1-373b-3c8c-ac74-27d304a60803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 216.75.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:43:23:de:88:f8:c8:a1:aa:24:ca:d3:33:f6:8e:e9:b0:41: fb:41:25:75:71:64:42:0f:e4:c1:4c:de:12:5a:7e:3e:0f:48: c8:e4:bf:64:f5:c4:aa:20:3a:ab:2b:cb:f3:e1:f5:f4:6b:45: 0a:13:c3:75:2f:99:36:5f:f0:75:9f:38:7b:06:03:94:28:69: 6d:db:c4:ca:12:16:35:34:d6:99:88:7c:f5:01:3d:ed:16:8f: e6:1d:0e:b7:f3:b8:82:0f:cd:fc:0b:87:e9:2d:f3:55:f9:b6: 58:71:a8:f3:2f:91:73:99:a1:4d:d7:b7:33:ce:30:e1:fd:8c: ee:0c:44:4c:17:4d:2b:cb:0a:ac:72:ec:0f:39:9a:55:4c:61: 86:cb:eb:19:cd:39:66:88:be:62:ae:7f:cd:80:15:98:bb:58: e7:c1:c3:ec:86:c3:8c:0d:d0:11:de:58:93:e8:f2:e8:88:3e: 80:7f:e0:ec:4c:82:f1:45:e5:81:d8:47:e0:f3:12:27:12:b3: a8:07:06:ed:cf:18:c1:d5:cd:3c:81:70:67:4b:36:15:95:94: 09:31:f5:b7:45:83:02:85:83:30:02:2e:0a:3b:2f:ad:df:bd: 31:a2:68:18:db:6f:ef:a9:f7:e0:f2:e9:6c:87:52:c4:26:0c: 34:6d:59:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCiaAWRsDMOZrBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YTMwZWI1YzgtZDYxZS00ZDA5LWIzYjktMDQ4Yzk3ZmFmZThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJEd2b1BRuNIhPBReCsKnkUeth6lJ0zp8udP Tg7AmSEYKb5ChqLGBOfVAnHMxozRzPuElk8Z/YUewe2I983maHYmlu2b6OZ195wT Q9AuEqtcOVW7eePDZ6JMfSVSNTY4fLzAc70i+iam00775pszM0m5LGEL7phX0GVF 1orc4OTN6yrJNiEff4AUL22PB9+6HQ9IhHQpQW/mbdfIED9MoJ9GxOwJUeeT29BP Kw3fJm0kC7Sag+3PJFE+eBOcI79V9+ZHmlLkL9dg4yMsS/ou3wxiQur29PD0z6nh wUy9ufdbesNmIkijWKRveZLZ61C1tRWAjeE+0JwU8qBuD99sywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzHOVcisfOh7y8KOS7ol+g1Vh+XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvZDIxNmE1YTEtMzczYi0z YzhjLWFjNzQtMjdkMzA0YTYwODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EuGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1DI96I+MihqiTK0zP2jumwQftBJXVxZEIP5MFM3hJafj4PSMjkv2T1 xKogOqsry/Ph9fRrRQoTw3UvmTZf8HWfOHsGA5QoaW3bxMoSFjU01pmIfPUBPe0W j+YdDrfzuIIPzfwLh+kt81X5tlhxqPMvkXOZoU3XtzPOMOH9jO4MREwXTSvLCqxy 7A85mlVMYYbL6xnNOWaIvmKuf82AFZi7WOfBw+yGw4wN0BHeWJPo8uiIPoB/4OxM gvFF5YHYR+DzEicSs6gHBu3PGMHVzTyBcGdLNhWVlAkx9bdFgwKFgzACLgo7L63f vTGiaBjbb++p9+Dy6WyHUsQmDDRtWfA= -----END CERTIFICATE-----Generated at Thu Mar 26 16:58:50 2026 by rpki-client