$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/70158a40-1c67-3cb3-a454-85f651195ef6.roa File: 70158a40-1c67-3cb3-a454-85f651195ef6.roa (raw, json) Hash identifier: ozZABCXnvPY7cKfVPOV1x/3KTWfaL0fhv3dxFnm9OUs= Subject key identifier: B1:F7:62:F7:65:CB:70:7C:22:E3:8B:52:99:69:F1:77:CD:D4:26:72 Certificate issuer: /CN=d67d4a84-9f0e-4408-82e7-81c09b7c592d Certificate serial: 010D0C9F4328584D343A13FA14C489A8E552CD10 Authority key identifier: 92:F3:D0:75:AF:64:30:7C:7B:4F:EF:33:EC:3A:81:7D:57:4A:8D:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/70158a40-1c67-3cb3-a454-85f651195ef6.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 397423 IP address blocks: 216.239.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/d67d4a84-9f0e-4408-82e7-81c09b7c592d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/d67d4a84-9f0e-4408-82e7-81c09b7c592d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:13:fa:14:c4:89:a8:e5:52:cd:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d67d4a84-9f0e-4408-82e7-81c09b7c592d Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=95f555ed-1ae5-4ac9-a5f0-d2c4508f5779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d2:95:1c:ef:2c:27:45:c8:41:d5:51:f6:77: 35:14:3b:73:de:3b:b3:da:c9:ec:4b:d2:31:81:77: 27:1b:63:36:42:6c:62:8d:34:68:d4:79:8e:ae:be: c3:20:bd:dd:dc:10:05:6a:f3:c6:27:ae:db:12:af: 30:91:6b:1b:11:74:73:9f:83:54:3d:96:f9:19:fa: 1f:56:c3:2c:4a:46:13:56:ba:96:44:91:cd:ae:75: a6:c3:67:9e:91:f3:aa:42:96:37:7c:9a:45:21:c1: f0:24:49:d4:a4:9b:59:9b:46:e0:48:67:c8:09:ed: a2:6b:20:e9:96:37:65:a4:cf:a0:14:c9:9e:15:80: 7e:cb:f1:dc:9f:be:5e:a2:a6:bd:d7:3a:a4:b1:dd: 13:ed:42:75:75:c1:e9:82:a0:1c:7d:5a:68:7f:ae: 3c:48:b4:4f:05:3a:22:ce:7b:a0:a1:fc:b8:dc:52: 2b:e3:9b:25:cf:5f:d2:4c:a5:b5:81:90:9d:0a:c3: ef:dc:12:24:ae:17:41:81:5a:cf:c2:ef:e3:c7:2e: 5f:c7:da:44:bc:f7:f0:0f:c7:93:5a:8e:a9:17:09: 17:5b:4e:02:a0:b4:cb:fb:4c:d5:0e:7e:4d:dc:ff: 98:85:dc:e5:47:f5:4b:6a:58:87:05:41:5f:d9:e5: ea:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F7:62:F7:65:CB:70:7C:22:E3:8B:52:99:69:F1:77:CD:D4:26:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/70158a40-1c67-3cb3-a454-85f651195ef6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/d67d4a84-9f0e-4408-82e7-81c09b7c592d.crl X509v3 Authority Key Identifier: keyid:92:F3:D0:75:AF:64:30:7C:7B:4F:EF:33:EC:3A:81:7D:57:4A:8D:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d.cer sbgp-ipAddrBlock: critical IPv4: 216.239.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:68:1e:8f:90:aa:fc:ee:bc:6f:11:de:a3:0a:a0:b4:1d:5a: 5b:74:59:92:77:be:0d:aa:89:86:88:90:5b:04:53:f7:d7:80: 86:42:b9:6b:6c:2d:19:3d:e1:c2:8f:b7:88:eb:a7:71:83:23: f6:f3:65:9c:3b:8a:c4:7c:b7:a1:7b:6b:a3:e1:46:0b:2d:ee: f0:fb:c1:f7:5a:10:ab:cd:14:c6:ee:15:67:5b:34:bf:84:e2: 00:5b:02:d1:a2:0b:ed:d3:c6:08:7a:91:67:f2:a8:f2:68:8a: 3d:10:37:54:f9:00:eb:38:33:53:f5:d0:22:ed:4e:30:3a:ab: d4:27:6d:90:98:ce:5b:a1:11:1c:b3:95:35:10:8c:31:fd:d2: 3f:7d:02:3a:ba:ba:c3:a4:8a:90:97:e5:9e:83:0c:92:09:18: c1:d6:ab:2d:65:dd:01:0f:7d:0b:a4:58:fe:af:55:c6:35:2d: 38:1b:9a:ae:03:f7:e2:2c:f8:ba:60:b0:9a:06:03:04:2f:ff: 8b:16:d6:d1:53:01:fe:c2:e7:72:49:35:0b:f0:fd:2e:78:6d: e0:52:ac:ae:c0:5f:89:b5:0f:5a:ce:87:d0:b6:7b:42:e7:f7: 15:8d:ca:89:f9:07:3a:50:33:88:0d:e3:e4:3f:b8:77:fb:4f: d5:cb:03:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00OhP6FMSJqOVSzRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY3ZDRhODQtOWYwZS00NDA4LTgyZTctODFjMDliN2M1 OTJkMB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk OTVmNTU1ZWQtMWFlNS00YWM5LWE1ZjAtZDJjNDUwOGY1Nzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNKVHO8sJ0XIQdVR9nc1FDtz3juz2snsS9Ix gXcnG2M2QmxijTRo1HmOrr7DIL3d3BAFavPGJ67bEq8wkWsbEXRzn4NUPZb5Gfof VsMsSkYTVrqWRJHNrnWmw2eekfOqQpY3fJpFIcHwJEnUpJtZm0bgSGfICe2iayDp ljdlpM+gFMmeFYB+y/Hcn75eoqa91zqksd0T7UJ1dcHpgqAcfVpof648SLRPBToi znugofy43FIr45slz1/STKW1gZCdCsPv3BIkrhdBgVrPwu/jxy5fx9pEvPfwD8eT Wo6pFwkXW04CoLTL+0zVDn5N3P+YhdzlR/VLaliHBUFf2eXqqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLH3Yvdly3B8IuOLUplp8XfN1CZyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kNjdk NGE4NC05ZjBlLTQ0MDgtODJlNy04MWMwOWI3YzU5MmQvNzAxNThhNDAtMWM2Ny0z Y2IzLWE0NTQtODVmNjUxMTk1ZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDY3ZDRhODQtOWYwZS00NDA4LTgy ZTctODFjMDliN2M1OTJkL2Q2N2Q0YTg0LTlmMGUtNDQwOC04MmU3LTgxYzA5Yjdj NTkyZC5jcmwwHwYDVR0jBBgwFoAUkvPQda9kMHx7T+8z7DqBfVdKjWcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kNjdkNGE4NC05ZjBlLTQ0MDgtODJlNy04MWMw OWI3YzU5MmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2O9sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5oHo+QqvzuvG8R3qMKoLQdWlt0WZJ3vg2qiYaIkFsEU/fXgIZCuWts LRk94cKPt4jrp3GDI/bzZZw7isR8t6F7a6PhRgst7vD7wfdaEKvNFMbuFWdbNL+E 4gBbAtGiC+3Txgh6kWfyqPJoij0QN1T5AOs4M1P10CLtTjA6q9QnbZCYzluhERyz lTUQjDH90j99Ajq6usOkipCX5Z6DDJIJGMHWqy1l3QEPfQukWP6vVcY1LTgbmq4D 9+Is+LpgsJoGAwQv/4sW1tFTAf7C53JJNQvw/S54beBSrK7AX4m1D1rOh9C2e0Ln 9xWNyon5BzpQM4gN4+Q/uHf7T9XLA1k= -----END CERTIFICATE-----Generated at Thu Mar 26 16:26:23 2026 by rpki-client