$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/fa861745-00da-3d9c-9262-192bcb50cab0.roa File: fa861745-00da-3d9c-9262-192bcb50cab0.roa (raw, json) Hash identifier: KnaTLTGGNCi7h1QrROX/4Z6dbUDlp4AB5W0+ArC+T1c= Subject key identifier: 96:4F:DD:36:16:03:C9:9D:72:4C:D5:B8:1A:D1:06:E0:B0:A0:1B:2B Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584D143D7FC48161FD170C952480 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/fa861745-00da-3d9c-9262-192bcb50cab0.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 4213 IP address blocks: 209.151.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:7f:c4:81:61:fd:17:0c:95:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=544b5523-6a97-496b-9486-c82e9cafe29f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e2:fe:3e:40:31:8d:0b:a0:be:d5:27:50:09: ee:98:ad:71:e2:bd:ba:28:cb:02:49:93:05:dd:1a: 34:3b:65:2b:e3:26:92:03:6e:ac:de:78:3a:2b:d4: 7e:01:ef:7a:47:ef:4c:52:53:0e:c0:45:ad:8f:cf: 33:e2:0b:f0:4d:20:08:cd:b6:eb:1e:57:29:29:30: ba:5f:1b:48:b6:11:f2:80:d4:f3:ff:d9:c3:d8:30: a2:e2:93:27:2b:d8:c7:31:21:d2:f7:5c:fa:89:d2: 38:5f:e8:2a:e5:c4:de:af:10:a8:f0:51:8b:79:e7: 57:14:5b:97:4f:f5:fa:82:50:90:0e:30:dc:ef:d1: 5c:39:a3:a2:19:76:12:55:24:da:30:c7:0f:1d:d6: d7:33:5a:9d:15:bb:c8:de:f7:ed:3c:66:a9:95:f0: 10:a4:49:39:f6:2d:d0:ea:57:00:0d:2a:0d:c8:1e: c8:33:94:99:72:f4:9e:36:87:5b:95:ec:4c:4e:ee: a7:00:85:3e:65:c4:cc:d8:61:e2:a9:68:4c:60:cf: e0:f0:2f:52:18:df:85:2d:ab:18:c7:8d:58:8c:d6: 17:d0:4d:77:6d:72:44:03:2c:0c:f0:a1:4e:e8:9e: 9e:e1:1c:65:68:ce:d3:d6:60:82:16:82:4c:c8:48: 3d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4F:DD:36:16:03:C9:9D:72:4C:D5:B8:1A:D1:06:E0:B0:A0:1B:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/fa861745-00da-3d9c-9262-192bcb50cab0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv4: 209.151.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:58:c7:16:26:f9:00:89:0b:1d:73:65:69:64:7e:0e:b4:41: 28:7e:be:86:f6:86:d5:80:9e:02:5c:20:d0:2c:e0:c5:fb:13: aa:b1:be:60:52:c1:85:07:0d:f7:a6:a9:39:13:e5:5e:ed:40: e2:e5:73:29:5e:49:27:3b:29:91:31:63:ea:ea:e6:41:62:d1: f0:a2:fb:13:2f:37:0b:59:5c:a9:4d:bb:79:4e:02:32:40:7a: 36:ca:6b:99:51:1a:c0:72:cd:e0:93:1f:92:3b:d3:f8:31:3a: ba:7a:86:52:19:73:f1:3a:59:4b:ae:97:a0:1f:79:5e:c3:2b: 84:55:fe:65:66:8c:8a:d2:8d:0d:b2:e5:8b:1f:a2:84:be:37: 58:b8:c3:cb:95:95:c0:26:cb:d2:cf:c5:62:ea:5e:f0:d8:59: d3:e5:a1:74:4d:3f:76:cb:de:32:b3:6f:98:2a:18:14:13:30: 0e:a7:0b:f5:12:fa:32:38:5b:04:ef:7b:7a:06:03:a2:79:6e: 8d:ac:81:67:fd:2f:b0:c6:b2:c1:e7:5a:73:82:78:3a:13:fe: a8:63:e7:36:57:f6:15:01:d8:68:3a:9f:48:3b:5f:7f:92:3d: 76:5b:5e:5c:3a:ff:68:be:0c:45:66:68:0a:ea:d9:79:d0:f3: ef:14:e8:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPX/EgWH9FwyVJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NTQ0YjU1MjMtNmE5Ny00OTZiLTk0ODYtYzgyZTljYWZlMjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuL+PkAxjQugvtUnUAnumK1x4r26KMsCSZMF 3Ro0O2Ur4yaSA26s3ng6K9R+Ae96R+9MUlMOwEWtj88z4gvwTSAIzbbrHlcpKTC6 XxtIthHygNTz/9nD2DCi4pMnK9jHMSHS91z6idI4X+gq5cTerxCo8FGLeedXFFuX T/X6glCQDjDc79FcOaOiGXYSVSTaMMcPHdbXM1qdFbvI3vftPGaplfAQpEk59i3Q 6lcADSoNyB7IM5SZcvSeNodblexMTu6nAIU+ZcTM2GHiqWhMYM/g8C9SGN+FLasY x41YjNYX0E13bXJEAywM8KFO6J6e4RxlaM7T1mCCFoJMyEg9OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZP3TYWA8mdckzVuBrRBuCwoBsrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvZmE4NjE3NDUtMDBkYS0z ZDljLTkyNjItMTkyYmNiNTBjYWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0ZfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZYxxYm+QCJCx1zZWlkfg60QSh+vob2htWAngJcINAs4MX7E6qxvmBS wYUHDfemqTkT5V7tQOLlcyleSSc7KZExY+rq5kFi0fCi+xMvNwtZXKlNu3lOAjJA ejbKa5lRGsByzeCTH5I70/gxOrp6hlIZc/E6WUuul6AfeV7DK4RV/mVmjIrSjQ2y 5YsfooS+N1i4w8uVlcAmy9LPxWLqXvDYWdPloXRNP3bL3jKzb5gqGBQTMA6nC/US +jI4WwTve3oGA6J5bo2sgWf9L7DGssHnWnOCeDoT/qhj5zZX9hUB2Gg6n0g7X3+S PXZbXlw6/2i+DEVmaArq2XnQ8+8U6Lk= -----END CERTIFICATE-----Generated at Thu Mar 26 22:25:50 2026 by rpki-client