$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/101ecc3e-4162-3505-9f0d-feddd84a1fef.roa File: 101ecc3e-4162-3505-9f0d-feddd84a1fef.roa (raw, json) Hash identifier: pSfjywKrfJSiAWrNUcq5Lo7JGKH3kfYVuJLA+XV0TJ4= Subject key identifier: 02:29:C5:A6:C3:A2:D6:50:10:B8:DF:E8:C7:9B:A0:A2:8C:B4:17:0F Certificate issuer: /CN=604a49f2-58d6-4709-bdaf-e7181b613801 Certificate serial: 010D0C9F4328584D0BDCFFE621EBD35E771CE780 Authority key identifier: 85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/101ecc3e-4162-3505-9f0d-feddd84a1fef.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 57043 IP address blocks: 65.75.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dc:ff:e6:21:eb:d3:5e:77:1c:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604a49f2-58d6-4709-bdaf-e7181b613801 Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=8ad67d38-89b0-4e5a-a40a-deb27611fc20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:89:67:dc:a2:d0:90:e5:94:7a:86:b7:ad:b8: e3:ce:90:92:d4:e3:ef:72:b7:eb:7b:7d:e2:67:7e: 6a:11:2c:32:c6:46:42:5b:80:8e:cc:ff:b8:71:96: e0:12:19:0e:5d:e7:00:a6:4f:d0:f5:fe:16:56:cc: da:cc:a2:24:6d:01:3c:ed:bc:b5:0d:d9:63:e9:6b: f0:02:dd:cc:e5:94:ec:f4:8d:07:a0:d9:4f:1a:ce: bb:cd:89:67:41:c9:87:f3:e2:04:61:63:bb:b6:ce: 84:91:0b:a0:0f:87:46:4e:ef:b0:06:54:06:10:a8: 0d:2c:a8:79:53:4c:c9:56:70:c9:57:b8:4a:3d:09: f5:50:21:2f:f4:e3:52:b7:40:6d:18:4a:3a:8c:ea: fb:b7:38:fd:08:4a:58:f9:a4:ac:24:6f:ae:66:90: 15:8f:84:4d:93:e7:40:f1:8d:15:db:22:d2:9d:bd: 09:26:fe:cc:90:51:27:37:16:03:08:7a:3b:56:cc: 9a:98:bc:d3:7e:9d:2c:ed:03:e2:40:6f:47:27:71: af:7b:70:96:ae:8a:70:b2:24:7b:a4:f2:3a:63:69: 9a:1f:6f:c1:e2:ae:35:92:14:1e:fb:99:78:c6:13: 84:2b:f7:9e:85:84:5c:37:5b:b5:d2:1e:3f:18:71: 85:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:29:C5:A6:C3:A2:D6:50:10:B8:DF:E8:C7:9B:A0:A2:8C:B4:17:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/101ecc3e-4162-3505-9f0d-feddd84a1fef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl X509v3 Authority Key Identifier: keyid:85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer sbgp-ipAddrBlock: critical IPv4: 65.75.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:17:c8:34:e2:e9:46:b6:de:72:b9:aa:b7:96:29:c3:b3:a0: 69:3b:59:da:60:c0:c0:2e:f7:96:09:d4:2f:d6:f2:de:da:ef: d2:a7:23:dd:3c:b2:f5:bd:b6:50:e5:ed:d5:27:db:92:17:6e: e8:75:17:c6:d4:63:08:dd:d1:5b:dd:33:87:1e:69:f3:f0:2f: 5d:5b:96:5f:13:e9:a0:ef:ee:af:e2:86:26:60:9f:02:04:71: db:05:ea:f4:45:08:96:1b:d3:0c:71:1c:d2:a6:00:3a:a2:4c: 0b:b3:af:9f:20:1f:83:49:5e:1f:e4:43:fa:95:44:b3:df:51: 18:0c:72:da:c3:88:6f:45:2d:69:19:b9:85:86:13:75:50:bc: ac:97:c6:c4:bd:28:c6:cd:6d:18:b5:bb:8b:ed:ce:6d:53:c9: 00:2e:2c:a4:aa:01:5f:86:c9:c4:fc:f2:b5:bd:0f:30:cf:a2: 58:38:18:fe:ec:fa:7d:2d:6f:c3:f9:28:f0:09:40:39:92:09: 67:f4:16:9d:08:61:89:6d:22:ce:af:fa:e2:c1:ee:e3:9e:a8: 48:53:12:07:0f:ba:18:44:67:36:6c:03:28:90:45:df:70:7c: 7a:45:7a:b3:e3:43:34:20:7a:41:7d:f6:57:c2:aa:a2:62:cf: 3e:6f:e1:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L3P/mIevTXncc54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0YTQ5ZjItNThkNi00NzA5LWJkYWYtZTcxODFiNjEz ODAxMB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk OGFkNjdkMzgtODliMC00ZTVhLWE0MGEtZGViMjc2MTFmYzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoln3KLQkOWUeoa3rbjjzpCS1OPvcrfre33i Z35qESwyxkZCW4COzP+4cZbgEhkOXecApk/Q9f4WVszazKIkbQE87by1Ddlj6Wvw At3M5ZTs9I0HoNlPGs67zYlnQcmH8+IEYWO7ts6EkQugD4dGTu+wBlQGEKgNLKh5 U0zJVnDJV7hKPQn1UCEv9ONSt0BtGEo6jOr7tzj9CEpY+aSsJG+uZpAVj4RNk+dA 8Y0V2yLSnb0JJv7MkFEnNxYDCHo7VsyamLzTfp0s7QPiQG9HJ3Gve3CWropwsiR7 pPI6Y2maH2/B4q41khQe+5l4xhOEK/eehYRcN1u10h4/GHGF5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIpxabDotZQELjf6MeboKKMtBcPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRh NDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4MWI2MTM4MDEvMTAxZWNjM2UtNDE2Mi0z NTA1LTlmMGQtZmVkZGQ4NGExZmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0YTQ5ZjItNThkNi00NzA5LWJk YWYtZTcxODFiNjEzODAxLzYwNGE0OWYyLTU4ZDYtNDcwOS1iZGFmLWU3MTgxYjYx MzgwMS5jcmwwHwYDVR0jBBgwFoAUhXgilXZb/+aBIDuDsD+ssXR0R3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRhNDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4 MWI2MTM4MDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQUvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0XyDTi6Ua23nK5qreWKcOzoGk7WdpgwMAu95YJ1C/W8t7a79KnI908 svW9tlDl7dUn25IXbuh1F8bUYwjd0VvdM4ceafPwL11bll8T6aDv7q/ihiZgnwIE cdsF6vRFCJYb0wxxHNKmADqiTAuzr58gH4NJXh/kQ/qVRLPfURgMctrDiG9FLWkZ uYWGE3VQvKyXxsS9KMbNbRi1u4vtzm1TyQAuLKSqAV+GycT88rW9DzDPolg4GP7s +n0tb8P5KPAJQDmSCWf0Fp0IYYltIs6v+uLB7uOeqEhTEgcPuhhEZzZsAyiQRd9w fHpFerPjQzQgekF99lfCqqJizz5v4RE= -----END CERTIFICATE-----Generated at Fri Mar 13 09:57:51 2026 by rpki-client