$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38ef1cae-7a08-4eb2-979b-75ec9b96c2bc/56d3f0be-63dc-3d10-a960-7e5466f962f3.roa File: 56d3f0be-63dc-3d10-a960-7e5466f962f3.roa (raw, json) Hash identifier: c2PMAF+/MEzfOTnlAf3df/EPFFUg2pg1L4hdk4DYSCM= Subject key identifier: 18:C1:8B:6D:6D:75:A2:33:34:CF:2F:37:DB:09:FE:13:D0:F7:6D:AE Certificate issuer: /CN=38ef1cae-7a08-4eb2-979b-75ec9b96c2bc Certificate serial: 010D0C9F4328584D2A74ED45517D284FEF423100 Authority key identifier: 6E:2C:87:F2:9B:91:63:C0:57:49:8F:3B:CD:A6:A8:78:64:D4:7B:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38ef1cae-7a08-4eb2-979b-75ec9b96c2bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38ef1cae-7a08-4eb2-979b-75ec9b96c2bc/56d3f0be-63dc-3d10-a960-7e5466f962f3.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 54945 IP address blocks: 208.94.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38ef1cae-7a08-4eb2-979b-75ec9b96c2bc/38ef1cae-7a08-4eb2-979b-75ec9b96c2bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38ef1cae-7a08-4eb2-979b-75ec9b96c2bc/38ef1cae-7a08-4eb2-979b-75ec9b96c2bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38ef1cae-7a08-4eb2-979b-75ec9b96c2bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:ed:45:51:7d:28:4f:ef:42:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38ef1cae-7a08-4eb2-979b-75ec9b96c2bc Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=d9939f8e-7b12-40cb-a268-fccccfda2fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5b:6f:a0:36:a7:8d:26:da:2a:52:86:5e:7b: 76:ed:62:e2:e0:d8:be:fb:81:55:76:22:97:e7:04: 4f:9b:3d:fc:4f:08:67:fc:e1:ec:cd:a3:22:c0:23: ee:73:5e:29:c3:52:d9:3b:08:ae:67:c1:02:b8:47: f7:dd:67:85:e1:7f:26:9c:53:b2:86:a6:10:ee:2b: 24:f5:20:d2:b4:e7:19:68:09:f5:47:a5:2f:dc:73: 18:3d:af:e1:de:78:4c:97:42:31:bb:19:da:8a:2c: c5:30:ab:f9:10:dc:70:a9:6c:cf:3f:3d:21:93:a0: 14:8e:bc:d0:7d:fc:b6:28:9e:fa:5e:82:5c:4b:04: e6:26:34:45:8f:30:91:7e:e3:1a:85:df:1f:3f:a9: b5:e4:ee:bd:b6:1f:bb:9c:89:3e:d6:cb:35:c5:17: 81:1f:bd:ea:97:b6:cc:6c:f7:3f:ef:6c:8f:c0:33: 97:bb:dd:58:f9:0d:f6:12:d4:4e:e6:c7:42:ff:2c: e7:81:95:42:12:b4:7e:25:a8:0d:00:22:1c:5a:85: aa:40:fe:a4:89:21:9f:62:a1:cf:af:c7:9e:f5:7b: c2:2c:69:48:01:b4:ad:e3:f3:b4:0f:35:c8:26:4f: c3:23:02:4c:fb:31:51:67:d1:39:fb:f5:5c:9e:67: aa:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C1:8B:6D:6D:75:A2:33:34:CF:2F:37:DB:09:FE:13:D0:F7:6D:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38ef1cae-7a08-4eb2-979b-75ec9b96c2bc/56d3f0be-63dc-3d10-a960-7e5466f962f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38ef1cae-7a08-4eb2-979b-75ec9b96c2bc/38ef1cae-7a08-4eb2-979b-75ec9b96c2bc.crl X509v3 Authority Key Identifier: keyid:6E:2C:87:F2:9B:91:63:C0:57:49:8F:3B:CD:A6:A8:78:64:D4:7B:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38ef1cae-7a08-4eb2-979b-75ec9b96c2bc.cer sbgp-ipAddrBlock: critical IPv4: 208.94.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:e3:58:b5:bd:62:7c:53:77:a1:8f:63:c5:49:40:fb:1f:f7: 45:43:03:cb:cc:b6:b1:4e:1c:86:d5:30:ec:1d:50:e6:9c:6a: 74:1a:e7:d2:93:52:ac:9d:6e:f3:9a:b3:fd:ee:62:38:29:6e: ac:d5:aa:23:51:d6:87:0f:4b:c6:11:a1:a1:39:99:88:d5:0a: 18:e3:f7:63:00:23:c1:4a:c8:f5:08:1b:76:ad:22:ef:33:91: 3a:04:d0:e5:04:83:6c:06:e9:ec:ea:c1:7f:8d:6e:e3:f9:25: b6:40:d9:54:72:ee:b1:3d:eb:8d:dc:bc:ac:ac:60:c9:b4:00: 4d:cc:50:ca:21:bc:a9:58:5d:1e:13:4d:9d:8e:3a:2e:8b:fd: 37:56:f7:ea:64:0c:d4:9e:56:d3:38:31:53:ce:65:d5:10:56: a4:1f:e8:26:ec:cc:52:d0:87:df:ea:ff:bb:21:1a:f2:8c:ff: c1:0f:74:fe:7a:70:13:d8:91:71:93:c5:34:29:06:82:79:70: e4:c3:de:63:84:07:fd:26:08:c3:32:82:41:62:7b:a1:89:46: 96:c4:e1:bf:f1:31:ec:b6:9d:35:e5:99:23:13:10:a8:f2:6c: fc:1e:29:07:69:bc:01:b7:0b:ec:ff:9b:03:20:d9:97:df:31: 0b:51:7d:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdO1FUX0oT+9CMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlZjFjYWUtN2EwOC00ZWIyLTk3OWItNzVlYzliOTZj MmJjMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ZDk5MzlmOGUtN2IxMi00MGNiLWEyNjgtZmNjY2NmZGEyZmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFtvoDanjSbaKlKGXnt27WLi4Ni++4FVdiKX 5wRPmz38Twhn/OHszaMiwCPuc14pw1LZOwiuZ8ECuEf33WeF4X8mnFOyhqYQ7isk 9SDStOcZaAn1R6Uv3HMYPa/h3nhMl0IxuxnaiizFMKv5ENxwqWzPPz0hk6AUjrzQ ffy2KJ76XoJcSwTmJjRFjzCRfuMahd8fP6m15O69th+7nIk+1ss1xReBH73ql7bM bPc/72yPwDOXu91Y+Q32EtRO5sdC/yzngZVCErR+JagNACIcWoWqQP6kiSGfYqHP r8ee9XvCLGlIAbSt4/O0DzXIJk/DIwJM+zFRZ9E5+/VcnmeqjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjBi21tdaIzNM8vN9sJ/hPQ922uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zOGVm MWNhZS03YTA4LTRlYjItOTc5Yi03NWVjOWI5NmMyYmMvNTZkM2YwYmUtNjNkYy0z ZDEwLWE5NjAtN2U1NDY2Zjk2MmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzhlZjFjYWUtN2EwOC00ZWIyLTk3 OWItNzVlYzliOTZjMmJjLzM4ZWYxY2FlLTdhMDgtNGViMi05NzliLTc1ZWM5Yjk2 YzJiYy5jcmwwHwYDVR0jBBgwFoAUbiyH8puRY8BXSY87zaaoeGTUe44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zOGVmMWNhZS03YTA4LTRlYjItOTc5Yi03NWVj OWI5NmMyYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0F74MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfjWLW9YnxTd6GPY8VJQPsf90VDA8vMtrFOHIbVMOwdUOacanQa59KT UqydbvOas/3uYjgpbqzVqiNR1ocPS8YRoaE5mYjVChjj92MAI8FKyPUIG3atIu8z kToE0OUEg2wG6ezqwX+NbuP5JbZA2VRy7rE9643cvKysYMm0AE3MUMohvKlYXR4T TZ2OOi6L/TdW9+pkDNSeVtM4MVPOZdUQVqQf6CbszFLQh9/q/7shGvKM/8EPdP56 cBPYkXGTxTQpBoJ5cOTD3mOEB/0mCMMygkFie6GJRpbE4b/xMey2nTXlmSMTEKjy bPweKQdpvAG3C+z/mwMg2ZffMQtRfXA= -----END CERTIFICATE-----Generated at Sat Mar 14 15:53:13 2026 by rpki-client