$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/3dbaf674-ab15-3caf-8acc-3d2c1a71c59e.roa File: 3dbaf674-ab15-3caf-8acc-3d2c1a71c59e.roa (raw, json) Hash identifier: HM9vk4XvlsWt1rDyktMX1ttULdTDPOgS/kEwi3KMIoY= Subject key identifier: E2:08:D3:11:A3:3F:7D:DA:D4:39:F3:F8:52:E8:A0:EF:87:EB:75:B7 Certificate issuer: /CN=87a7a98d-6ed8-48cc-953b-32292e94edde Certificate serial: 010D0C9F4328584D143D5E8EB8129CBBE4A362C0 Authority key identifier: B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/3dbaf674-ab15-3caf-8acc-3d2c1a71c59e.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 11115 IP address blocks: 64.9.194.0/24 maxlen: 24 72.13.0.0/20 maxlen: 24 205.145.128.0/20 maxlen: 24 216.71.161.0/24 maxlen: 24 216.71.164.0/24 maxlen: 24 216.71.186.0/24 maxlen: 24 216.71.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:5e:8e:b8:12:9c:bb:e4:a3:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87a7a98d-6ed8-48cc-953b-32292e94edde Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=2968d88d-3deb-423b-945f-d3d54b3d90ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a0:82:1b:39:05:48:29:a8:ce:ac:bd:2f:27: 7e:1c:38:b0:e0:2a:cc:af:ef:16:c8:d1:cb:a7:69: 67:ee:d5:3d:48:9b:ee:67:dd:61:78:45:1c:0f:e2: 7d:c4:05:dc:64:ff:04:32:6c:82:4b:43:a2:00:79: 11:db:cf:71:33:e9:9f:ae:9c:36:e8:d3:41:04:f6: 45:ac:58:d0:c5:13:fc:20:b7:7e:70:8f:c2:bc:6d: 00:a6:be:23:22:e9:86:46:9a:97:73:25:5e:ad:24: 83:54:a9:78:ab:db:54:3a:5a:1a:02:f3:b4:82:c2: fd:e3:43:b5:df:2f:96:e3:dc:5c:fc:03:25:d6:d6: be:b5:48:8e:96:cd:56:bb:f5:ca:76:43:bb:31:fa: 70:20:c7:c0:ce:73:eb:21:20:78:8a:5e:74:2f:d7: 3e:be:64:29:ee:73:11:6e:98:0b:07:4f:10:d9:c5: c0:ed:37:0d:e2:f9:bb:4f:df:c8:c3:4f:c9:52:b1: 7a:a2:69:73:ec:e2:2a:cb:fe:59:40:e2:9a:c4:2d: aa:84:16:7e:6c:02:1a:da:16:14:a6:44:2d:24:0f: 69:ab:00:1d:2d:c3:28:f7:17:ea:af:38:39:ab:1d: 3b:2f:7f:a3:5a:01:0e:a7:14:6d:cc:e3:b7:93:84: 2d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:08:D3:11:A3:3F:7D:DA:D4:39:F3:F8:52:E8:A0:EF:87:EB:75:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/3dbaf674-ab15-3caf-8acc-3d2c1a71c59e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl X509v3 Authority Key Identifier: keyid:B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer sbgp-ipAddrBlock: critical IPv4: 64.9.194.0/24 72.13.0.0/20 205.145.128.0/20 216.71.161.0/24 216.71.164.0/24 216.71.186.0/24 216.71.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:d9:2a:db:3d:5d:ac:8f:46:04:a0:f6:65:99:2a:27:f2:ba: d4:aa:23:61:00:a5:36:95:6c:83:28:a0:57:4a:9d:64:18:db: 29:a3:3b:24:ef:44:86:88:27:e0:3d:6d:38:e3:7d:6c:03:1d: 36:64:40:9e:ac:02:ba:12:db:36:42:d8:5e:4b:49:0d:51:8d: d9:cf:38:65:93:85:19:38:6a:ff:10:16:a2:38:14:47:66:57: c6:3b:8b:67:da:53:86:20:e0:4f:ef:e8:8a:3f:41:3f:0e:a6: e8:5a:ca:19:de:4f:f3:4f:f2:8e:52:da:6d:f8:49:9e:d0:a8: df:d7:2c:8b:4b:c4:04:34:75:0c:c0:a9:c8:25:28:d9:18:9b: 62:cc:6c:4b:97:89:12:b5:99:66:16:83:77:5a:36:8b:a1:7d: 52:2a:8c:c6:71:77:53:08:b2:fb:69:72:eb:e3:b3:bc:2d:81: 10:3b:99:87:b2:bc:7e:25:00:a2:d9:30:e7:6f:47:98:00:e6: c1:7e:3b:4e:7a:41:d6:13:f8:68:c8:c2:39:c8:cc:e2:4b:89: 6e:84:64:2d:ce:63:8b:a2:38:87:33:ec:7b:65:c0:85:cf:07: 93:bc:1f:e0:8d:ea:0e:b0:19:94:b5:51:d9:2f:3a:58:22:60: f0:9c:fd:9e -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWE0UPV6OuBKcu+SjYsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdhN2E5OGQtNmVkOC00OGNjLTk1M2ItMzIyOTJlOTRl ZGRlMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk Mjk2OGQ4OGQtM2RlYi00MjNiLTk0NWYtZDNkNTRiM2Q5MGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKCCGzkFSCmozqy9Lyd+HDiw4CrMr+8WyNHL p2ln7tU9SJvuZ91heEUcD+J9xAXcZP8EMmyCS0OiAHkR289xM+mfrpw26NNBBPZF rFjQxRP8ILd+cI/CvG0Apr4jIumGRpqXcyVerSSDVKl4q9tUOloaAvO0gsL940O1 3y+W49xc/AMl1ta+tUiOls1Wu/XKdkO7MfpwIMfAznPrISB4il50L9c+vmQp7nMR bpgLB08Q2cXA7TcN4vm7T9/Iw0/JUrF6omlz7OIqy/5ZQOKaxC2qhBZ+bAIa2hYU pkQtJA9pqwAdLcMo9xfqrzg5qx07L3+jWgEOpxRtzOO3k4QtpwIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFOII0xGjP33a1Dnz+FLooO+H63W3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84N2E3 YTk4ZC02ZWQ4LTQ4Y2MtOTUzYi0zMjI5MmU5NGVkZGUvM2RiYWY2NzQtYWIxNS0z Y2FmLThhY2MtM2QyYzFhNzFjNTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODdhN2E5OGQtNmVkOC00OGNjLTk1 M2ItMzIyOTJlOTRlZGRlLzg3YTdhOThkLTZlZDgtNDhjYy05NTNiLTMyMjkyZTk0 ZWRkZS5jcmwwHwYDVR0jBBgwFoAUs0j+Y6H+R1dk/0RTBlXAV0Ul380wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84N2E3YTk4ZC02ZWQ4LTQ4Y2MtOTUzYi0zMjI5 MmU5NGVkZGUuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAQAnCAwQE SA0AAwQEzZGAAwQA2EehAwQA2EekAwQA2Ee6AwQA2Ee8MFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADPZKts9 XayPRgSg9mWZKifyutSqI2EApTaVbIMooFdKnWQY2ymjOyTvRIaIJ+A9bTjjfWwD HTZkQJ6sAroS2zZC2F5LSQ1RjdnPOGWThRk4av8QFqI4FEdmV8Y7i2faU4Yg4E/v 6Io/QT8OpuhayhneT/NP8o5S2m34SZ7QqN/XLItLxAQ0dQzAqcglKNkYm2LMbEuX iRK1mWYWg3daNouhfVIqjMZxd1MIsvtpcuvjs7wtgRA7mYeyvH4lAKLZMOdvR5gA 5sF+O056QdYT+GjIwjnIzOJLiW6EZC3OY4uiOIcz7HtlwIXPB5O8H+CN6g6wGZS1 UdkvOlgiYPCc/Z4= -----END CERTIFICATE-----Generated at Thu Mar 26 13:09:06 2026 by rpki-client