$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/f099de6a-a338-338c-99f9-d9f7029b4cb9.roa File: f099de6a-a338-338c-99f9-d9f7029b4cb9.roa (raw, json) Hash identifier: 3epv9DbvdwUrA9I6FMpjZbOgitVClt5+lm5VVIB8jHY= Subject key identifier: 2B:00:71:A6:7B:83:AA:AD:78:BF:22:6A:A4:6D:56:21:8B:58:55:B6 Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584D3F64C7944B96C8D37E937B00 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/f099de6a-a338-338c-99f9-d9f7029b4cb9.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 26042 IP address blocks: 216.75.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:c7:94:4b:96:c8:d3:7e:93:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=adffb74f-b678-409d-94d4-b6c1bade0a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5f:d1:28:4b:05:46:7b:fc:00:63:32:51:7b: 2a:f9:58:0b:e1:91:5a:a1:ce:1e:04:de:9d:be:57: 11:28:e0:9d:67:24:3c:e6:3a:81:fb:d2:10:9e:bd: d9:a0:59:74:5b:42:bb:d4:bc:5d:a5:bf:75:c9:b7: 9a:a4:6f:9e:ac:88:10:95:0b:3e:93:bb:a3:b8:7a: 70:cb:ba:3c:80:94:27:45:36:13:1b:17:c0:b5:aa: 23:03:24:aa:56:e5:9f:fb:d5:f6:92:2c:59:fb:82: 50:b8:16:b8:5c:b9:c2:51:fa:e7:6d:2e:9f:d7:ff: 62:e4:4e:09:69:34:01:70:63:73:ae:b1:d2:25:1e: 3a:e1:bd:de:9d:df:d0:7f:79:76:fd:3a:b9:75:07: d6:60:f5:fc:fc:e3:e0:8e:05:2d:ad:6d:d2:1c:80: 32:a9:4c:68:82:eb:3e:be:3b:f0:9d:9f:9c:54:f5: 0a:19:1f:85:79:d1:80:b4:52:48:72:34:10:35:c0: 4c:37:0a:84:c1:b2:21:97:7c:c3:5c:87:a9:e5:7a: dc:65:08:59:42:99:60:fe:d9:05:e6:e4:27:03:a9: d5:91:b4:f8:ce:a0:8f:e1:e4:5e:96:91:de:34:3a: 75:b6:9b:f8:15:82:7c:23:28:e6:b5:5c:2f:50:1d: 04:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:00:71:A6:7B:83:AA:AD:78:BF:22:6A:A4:6D:56:21:8B:58:55:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/f099de6a-a338-338c-99f9-d9f7029b4cb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 216.75.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:bd:b0:e5:46:42:ac:5e:cf:87:84:46:e0:20:d9:6e:1c:b3: f6:dc:d3:2a:a4:c7:69:1a:2a:d9:45:fe:d7:57:cd:c8:17:40: 9c:95:7e:20:38:72:c4:66:67:c7:52:69:41:d8:5c:af:1d:d6: af:67:87:2b:b6:ca:ca:ac:6e:52:15:38:a2:c0:b6:bd:1d:05: 4e:fd:86:85:e0:6f:0f:c4:94:4e:fc:8f:ce:43:55:85:4d:29: bf:9d:07:92:af:6d:76:ea:8c:28:7f:8d:4d:8e:e7:f9:55:8e: b7:67:6b:59:c0:b3:5b:5e:60:ab:cd:af:81:12:ef:d8:91:3f: cf:fd:9f:b9:b4:dd:dc:2f:ec:43:f2:80:0b:0a:79:1b:4e:83: 21:0c:10:60:f3:ee:80:cf:45:13:8f:be:44:69:9d:ba:1d:a3: 4d:bc:f3:f5:c8:56:42:e0:39:b1:bf:a7:bc:91:95:6f:10:5b: 18:31:12:92:a3:49:d1:55:11:f1:ca:68:4f:35:fe:f5:95:56: 4e:46:73:4f:b7:32:5e:01:eb:72:29:9f:51:9f:9f:a2:22:a7: c5:84:7c:88:d9:d8:81:07:a6:55:fa:a3:06:73:e9:85:c5:11: ba:76:d9:fb:3a:37:7a:1c:30:db:dc:f8:d2:1b:e2:68:02:5b: a6:de:e5:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZMeUS5bI036TewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YWRmZmI3NGYtYjY3OC00MDlkLTk0ZDQtYjZjMWJhZGUwYTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl/RKEsFRnv8AGMyUXsq+VgL4ZFaoc4eBN6d vlcRKOCdZyQ85jqB+9IQnr3ZoFl0W0K71Lxdpb91ybeapG+erIgQlQs+k7ujuHpw y7o8gJQnRTYTGxfAtaojAySqVuWf+9X2kixZ+4JQuBa4XLnCUfrnbS6f1/9i5E4J aTQBcGNzrrHSJR464b3end/Qf3l2/Tq5dQfWYPX8/OPgjgUtrW3SHIAyqUxogus+ vjvwnZ+cVPUKGR+FedGAtFJIcjQQNcBMNwqEwbIhl3zDXIep5XrcZQhZQplg/tkF 5uQnA6nVkbT4zqCP4eRelpHeNDp1tpv4FYJ8IyjmtVwvUB0EeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsAcaZ7g6qteL8iaqRtViGLWFW2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvZjA5OWRlNmEtYTMzOC0z MzhjLTk5ZjktZDlmNzAyOWI0Y2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EuaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADK9sOVGQqxez4eERuAg2W4cs/bc0yqkx2kaKtlF/tdXzcgXQJyVfiA4 csRmZ8dSaUHYXK8d1q9nhyu2ysqsblIVOKLAtr0dBU79hoXgbw/ElE78j85DVYVN Kb+dB5KvbXbqjCh/jU2O5/lVjrdna1nAs1teYKvNr4ES79iRP8/9n7m03dwv7EPy gAsKeRtOgyEMEGDz7oDPRROPvkRpnbodo0288/XIVkLgObG/p7yRlW8QWxgxEpKj SdFVEfHKaE81/vWVVk5Gc0+3Ml4B63Ipn1Gfn6Iip8WEfIjZ2IEHplX6owZz6YXF Ebp22fs6N3ocMNvc+NIb4mgCW6be5cI= -----END CERTIFICATE-----Generated at Thu Mar 26 13:33:57 2026 by rpki-client