$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/dd636bfe-abf4-32bf-87a0-eafa6275305f.roa File: dd636bfe-abf4-32bf-87a0-eafa6275305f.roa (raw, json) Hash identifier: yrfPUyYywzBBWSA328qJGcw50sVloLpX4DRh5pulVKg= Subject key identifier: 68:0C:D8:EF:5C:67:AE:85:0D:60:72:8B:B9:46:2A:5B:24:A2:95:49 Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584D1B19F54F7DB199BC0C227380 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/dd636bfe-abf4-32bf-87a0-eafa6275305f.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 154049 IP address blocks: 216.75.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:f5:4f:7d:b1:99:bc:0c:22:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=988bf024-dfe0-427e-991d-12228d6afc01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:56:e1:e7:f1:d6:af:71:95:1a:3d:38:83:74: 9e:6c:c9:ef:21:0c:a8:74:9d:6b:16:4d:8d:37:9a: c2:49:df:b0:2a:87:f1:9c:bc:3a:63:6f:4b:4a:7f: 9e:31:f2:78:be:06:f3:55:8b:f2:4e:25:c2:12:00: 68:bb:94:73:60:59:3f:9a:84:b1:23:1c:12:7a:3c: 95:71:32:93:f7:f2:3f:c4:bd:f8:fc:64:1e:c2:24: 4e:ec:2b:3c:9f:42:a9:e1:aa:54:e1:07:2c:d9:78: d8:b1:1c:40:a5:c4:b9:74:6c:c8:90:09:2a:e0:b1: cd:72:0e:a4:68:7f:cc:c6:2a:71:2b:d9:8b:ca:56: 4a:ae:d9:b6:2c:b4:89:45:d2:d0:c4:1a:8a:2b:7d: d6:77:bc:dc:6b:10:ed:ba:ff:e0:a3:c9:69:80:3d: 87:06:84:f7:95:f8:4d:6a:da:e5:d5:63:fa:7c:d9: 24:ff:7b:fe:52:5a:a5:f4:72:e6:33:ee:a8:71:b9: 68:7d:59:2a:89:5c:fc:f8:fe:ea:29:46:b0:5c:3b: 1c:03:20:a2:fd:c6:e4:37:77:0f:b4:33:20:78:7f: cf:d7:3e:3e:4a:67:df:4c:ef:cb:02:51:3f:46:87: b6:bb:8a:54:3c:01:af:25:49:60:2a:8a:f0:26:2f: 13:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0C:D8:EF:5C:67:AE:85:0D:60:72:8B:B9:46:2A:5B:24:A2:95:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/dd636bfe-abf4-32bf-87a0-eafa6275305f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 216.75.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:b7:d7:7b:bb:ab:f6:ea:36:41:17:d4:08:84:77:a6:c0:3b: c9:e3:3d:43:1f:e8:23:db:d7:f5:98:fc:da:2b:c5:73:bf:97: 82:25:46:4c:9a:5b:0f:fa:9a:58:9d:a5:99:49:0d:2e:a8:94: 31:13:6c:9f:3f:f6:9a:33:2c:bc:ad:ec:3d:ff:1b:aa:ad:c5: 4a:cc:df:62:8c:e4:ed:e9:df:60:c9:3e:42:5e:08:3f:74:bd: a1:0c:80:68:dc:cb:83:83:0d:10:c1:b4:86:aa:b0:74:3d:15: e3:a4:31:cc:3b:d4:66:f6:a2:51:41:05:46:a3:dd:5c:0c:b9: f5:12:86:8e:e2:39:e5:39:0f:87:82:c1:a6:15:40:d0:22:30: b9:98:ba:6e:c4:75:81:77:6f:36:1b:28:2e:49:1d:87:ce:00: dc:85:15:1a:83:fc:7a:76:4d:47:c5:ef:21:95:8a:ae:09:3c: f3:a5:57:9a:91:c9:df:6f:99:fd:e7:6d:cb:3f:f9:ff:f6:cd: f3:53:ef:8d:d4:db:dc:6b:45:69:0c:c3:4d:e2:8d:a4:09:bf: 8b:22:b1:be:03:c6:cd:14:4a:60:99:16:eb:70:74:ea:36:4b: 1c:62:7c:bd:fb:72:32:25:d2:c1:3f:4b:de:cd:8c:5a:59:87: cb:c5:84:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGfVPfbGZvAwic4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk OTg4YmYwMjQtZGZlMC00MjdlLTk5MWQtMTIyMjhkNmFmYzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplbh5/HWr3GVGj04g3SebMnvIQyodJ1rFk2N N5rCSd+wKofxnLw6Y29LSn+eMfJ4vgbzVYvyTiXCEgBou5RzYFk/moSxIxwSejyV cTKT9/I/xL34/GQewiRO7Cs8n0Kp4apU4Qcs2XjYsRxApcS5dGzIkAkq4LHNcg6k aH/MxipxK9mLylZKrtm2LLSJRdLQxBqKK33Wd7zcaxDtuv/go8lpgD2HBoT3lfhN atrl1WP6fNkk/3v+Ulql9HLmM+6ocblofVkqiVz8+P7qKUawXDscAyCi/cbkN3cP tDMgeH/P1z4+SmffTO/LAlE/Roe2u4pUPAGvJUlgKorwJi8TIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgM2O9cZ66FDWByi7lGKlskopVJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvZGQ2MzZiZmUtYWJmNC0z MmJmLTg3YTAtZWFmYTYyNzUzMDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EufMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAW313u7q/bqNkEX1AiEd6bAO8njPUMf6CPb1/WY/NorxXO/l4IlRkya Ww/6mlidpZlJDS6olDETbJ8/9pozLLyt7D3/G6qtxUrM32KM5O3p32DJPkJeCD90 vaEMgGjcy4ODDRDBtIaqsHQ9FeOkMcw71Gb2olFBBUaj3VwMufUSho7iOeU5D4eC waYVQNAiMLmYum7EdYF3bzYbKC5JHYfOANyFFRqD/Hp2TUfF7yGViq4JPPOlV5qR yd9vmf3nbcs/+f/2zfNT743U29xrRWkMw03ijaQJv4sisb4Dxs0USmCZFutwdOo2 SxxifL37cjIl0sE/S97NjFpZh8vFhHU= -----END CERTIFICATE-----Generated at Thu Mar 26 09:22:20 2026 by rpki-client