$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/c324eff2-6a88-33d0-a4c0-ec5cb379908e.roa File: c324eff2-6a88-33d0-a4c0-ec5cb379908e.roa (raw, json) Hash identifier: Pb130velwx8rYiA4+SwIrLbXkzstibAs2ijqJj/aBjE= Subject key identifier: 57:A5:42:12:FA:8E:D3:4E:1B:9E:98:69:30:75:B4:8B:A9:EC:DE:04 Certificate issuer: /CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Certificate serial: 010D0C9F4328584D33383D60CA85BD7E98964840 Authority key identifier: CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/c324eff2-6a88-33d0-a4c0-ec5cb379908e.roa Signing time: Tue 17 Mar 2026 16:21:07 +0000 ROA not before: Tue 17 Mar 2026 16:21:07 +0000 ROA not after: Mon 15 Jun 2026 16:21:07 +0000 asID: 6079 IP address blocks: 208.87.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:33:38:3d:60:ca:85:bd:7e:98:96:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Validity Not Before: Mar 17 16:21:07 2026 GMT Not After : Jun 15 16:21:07 2026 GMT Subject: CN=1f5692d4-d9ef-43a2-8d3e-68f73387245f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:23:14:6a:76:ff:72:06:6f:49:d4:92:50:e3: ad:9b:b1:54:9f:2c:f6:1d:fa:39:ed:87:4e:b5:33: 64:73:8d:12:f4:e5:1a:1d:77:e9:25:61:79:62:b4: f9:63:74:99:4f:5e:5b:36:ba:80:85:53:3b:80:8c: ea:d4:2f:2f:5f:1c:da:13:a2:f1:0b:92:9e:1b:0b: 9f:f7:e0:33:5e:30:02:f8:57:57:0d:0f:93:68:26: 0b:75:77:7a:34:0e:c8:54:47:22:2a:56:6f:05:15: a2:6a:07:34:ee:5e:0e:8b:60:6e:ce:eb:fb:04:1d: 12:4d:e6:d9:0e:43:d9:a9:af:e1:1e:b7:8e:e5:6d: 38:9f:3d:53:68:23:ea:43:60:7e:d0:3c:eb:2c:40: 7b:ce:1a:2c:da:40:bf:76:26:f7:21:a8:ff:c1:4b: a9:73:df:d3:48:b8:76:06:bf:61:4b:9f:9d:2f:30: e4:03:7f:b4:b4:a6:a6:06:c9:7b:a4:de:4c:39:f4: 90:18:03:67:e6:d1:1f:89:e4:3c:59:17:ca:6e:14: 76:be:82:7e:85:56:62:b6:15:f2:92:84:a1:ab:cc: 31:7e:86:73:be:47:30:62:6f:e8:62:d8:24:bd:15: 09:8b:6e:5a:49:49:cd:5c:51:e2:c2:09:f8:59:ba: 5c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A5:42:12:FA:8E:D3:4E:1B:9E:98:69:30:75:B4:8B:A9:EC:DE:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/c324eff2-6a88-33d0-a4c0-ec5cb379908e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl X509v3 Authority Key Identifier: keyid:CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer sbgp-ipAddrBlock: critical IPv4: 208.87.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:c8:e1:d8:fd:87:7f:3d:01:9c:03:1b:22:36:6b:51:cd:39: 6f:bd:f4:10:c6:76:d1:77:3a:14:c8:09:2d:cb:40:ca:b5:09: b9:6e:c4:08:bd:1e:1f:98:73:b4:36:f1:5a:0c:72:cd:4a:e4: 4e:89:33:b4:27:4d:2e:80:07:26:ed:a8:2b:0c:cc:09:52:87: d4:d5:06:b4:ff:f9:7f:8d:80:5e:46:d7:e3:28:9b:0f:d7:d2: 28:b5:82:88:00:79:8c:11:01:08:9c:8b:9f:15:f8:97:ba:83: 76:73:11:5f:92:5c:62:02:21:f2:3b:1e:f4:4f:78:76:d5:73: e5:5b:d8:78:4c:17:3c:2a:f7:00:96:c6:b4:29:83:68:80:f8: 24:e4:7b:88:2e:5b:a9:aa:20:fe:7c:c9:18:63:50:f2:7c:b0: af:ef:b3:55:d1:73:2c:16:f0:20:cb:13:2a:fc:37:f1:ef:41: 2a:e9:d7:20:4b:a4:78:ae:88:bd:67:e6:1f:b0:91:f3:2a:2f: 35:88:88:d2:bb:61:5a:4c:f9:95:b3:32:11:52:28:a7:47:36: 41:d1:5b:b6:a8:cd:2e:85:1e:9a:ef:c0:42:a4:e9:a8:1c:54: a1:4c:01:94:ca:d5:6c:b1:ba:95:70:93:ef:86:e9:51:37:00: 53:f5:12:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0zOD1gyoW9fpiWSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmJiOTAzYTItNGM4My00YmZhLTk1NzItMzZmYmFmYjg0 YTIzMB4XDTI2MDMxNzE2MjEwN1oXDTI2MDYxNTE2MjEwN1owLzEtMCsGA1UEAxMk MWY1NjkyZDQtZDllZi00M2EyLThkM2UtNjhmNzMzODcyNDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCMUanb/cgZvSdSSUOOtm7FUnyz2Hfo57YdO tTNkc40S9OUaHXfpJWF5YrT5Y3SZT15bNrqAhVM7gIzq1C8vXxzaE6LxC5KeGwuf 9+AzXjAC+FdXDQ+TaCYLdXd6NA7IVEciKlZvBRWiagc07l4Oi2Buzuv7BB0STebZ DkPZqa/hHreO5W04nz1TaCPqQ2B+0DzrLEB7zhos2kC/dib3Iaj/wUupc9/TSLh2 Br9hS5+dLzDkA3+0tKamBsl7pN5MOfSQGANn5tEfieQ8WRfKbhR2voJ+hVZithXy koShq8wxfoZzvkcwYm/oYtgkvRUJi25aSUnNXFHiwgn4WbpcsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFelQhL6jtNOG56YaTB1tIup7N4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5 MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZiYWZiODRhMjMvYzMyNGVmZjItNmE4OC0z M2QwLWE0YzAtZWM1Y2IzNzk5MDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZmJiOTAzYTItNGM4My00YmZhLTk1 NzItMzZmYmFmYjg0YTIzL2ZiYjkwM2EyLTRjODMtNGJmYS05NTcyLTM2ZmJhZmI4 NGEyMy5jcmwwHwYDVR0jBBgwFoAUzusqfornrD1acybne0mkRJaEkYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZi YWZiODRhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMnI4dj9h389AZwDGyI2a1HNOW+99BDGdtF3OhTICS3LQMq1CbluxAi9 Hh+Yc7Q28VoMcs1K5E6JM7QnTS6ABybtqCsMzAlSh9TVBrT/+X+NgF5G1+Momw/X 0ii1gogAeYwRAQici58V+Je6g3ZzEV+SXGICIfI7HvRPeHbVc+Vb2HhMFzwq9wCW xrQpg2iA+CTke4guW6mqIP58yRhjUPJ8sK/vs1XRcywW8CDLEyr8N/HvQSrp1yBL pHiuiL1n5h+wkfMqLzWIiNK7YVpM+ZWzMhFSKKdHNkHRW7aozS6FHprvwEKk6agc VKFMAZTK1WyxupVwk++G6VE3AFP1ElQ= -----END CERTIFICATE-----Generated at Thu Mar 26 04:07:26 2026 by rpki-client