$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/a8472b68-cb56-34fd-b329-455d887033e9.roa File: a8472b68-cb56-34fd-b329-455d887033e9.roa (raw, json) Hash identifier: N9j5PxXqVJQQw4o54AUdoekplAdwZaDSBcnoKvfQwfs= Subject key identifier: B5:3B:57:4F:B8:B5:99:BD:AD:4E:B0:60:04:59:BD:E5:C7:CD:4F:29 Certificate issuer: /CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882 Certificate serial: 010D0C9F4328584D1F4A1EA1063ACE9D5400F560 Authority key identifier: 21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/a8472b68-cb56-34fd-b329-455d887033e9.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 1100 IP address blocks: 185.216.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:1e:a1:06:3a:ce:9d:54:00:f5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=67dc184f-ce67-4ee7-840e-27146b5032e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:98:06:f4:7b:e9:49:7c:36:cd:58:73:39:2e: 4c:2a:74:3a:18:f0:b8:2f:73:56:d0:17:60:25:ee: f9:2a:f6:bd:31:4f:58:3d:24:31:d6:d7:c9:98:7f: b0:ff:5a:94:cf:a2:d4:87:18:3f:fa:4d:41:5e:d9: c8:9d:89:09:2a:0f:c1:49:20:35:66:45:b9:24:0e: 7b:41:43:0c:c0:ad:69:32:83:74:82:73:1f:90:bb: 46:21:4b:32:ef:94:a3:71:2d:69:16:fd:ad:76:84: 4f:c7:73:32:48:ec:6a:1f:97:73:23:f2:e8:f8:3b: b5:18:3e:fe:81:58:6f:4f:df:54:a3:1b:4c:1b:e8: 37:62:e9:b4:6e:78:c3:ef:ee:5b:8b:a2:07:2e:d7: 11:af:c5:f6:92:59:de:8f:5d:11:9d:b8:13:61:ec: 41:97:33:2f:ed:65:0e:34:b8:09:2f:03:c2:8c:c8: 52:17:02:f5:7e:79:25:d1:a4:23:22:fd:6f:bd:05: 79:b4:ad:ca:67:27:ee:83:81:c1:5b:bd:f5:28:a2: 90:bd:b9:c5:a7:d3:bf:1b:4c:ab:ad:be:38:82:4e: 69:b7:fe:03:4d:db:68:22:75:eb:1c:56:6b:cd:86: ee:d8:d4:de:22:ae:ee:0f:35:92:66:4e:ef:2f:52: ab:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3B:57:4F:B8:B5:99:BD:AD:4E:B0:60:04:59:BD:E5:C7:CD:4F:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/a8472b68-cb56-34fd-b329-455d887033e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.crl X509v3 Authority Key Identifier: keyid:21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer sbgp-ipAddrBlock: critical IPv4: 185.216.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:6a:74:c3:ac:a8:3d:9e:57:43:16:c0:d0:e6:70:4e:69:a8: c5:e3:87:fa:2d:cf:4d:a0:83:e9:ca:1f:23:50:97:8e:9f:0b: 1b:78:e7:ce:b0:38:99:c5:d9:ee:87:f9:11:3f:05:d5:a7:86: de:56:75:c1:c8:01:b3:4b:8f:3e:df:fa:32:ae:14:26:89:70: 42:41:cf:8b:41:6c:71:b7:9d:38:13:44:b0:c8:81:22:8e:39: a4:66:1d:ce:bd:d4:73:53:31:3b:28:dd:2a:9b:3f:ed:3b:fd: 15:72:2f:54:1e:25:ec:e1:f1:91:01:42:20:99:9d:61:8f:a7: 32:2b:6f:0f:cc:62:cd:03:dd:12:89:e4:ec:c2:36:90:cc:61: db:1d:93:04:d6:39:ee:e3:7c:57:ff:5f:a1:28:69:6f:f8:43: fe:c1:eb:c3:a5:26:d5:06:96:85:45:af:b7:2e:30:a1:bb:de: 4b:ea:e9:02:4e:7b:74:0f:44:7b:38:d7:2e:ad:4b:98:fb:88: e9:86:b5:2a:b7:72:0b:e1:41:21:3e:1d:f2:8e:ee:c0:d9:7b: f5:0c:c6:f5:cd:73:3e:0b:87:6b:7f:5c:10:e4:3f:ad:02:03: 76:4d:dc:a2:c5:48:62:d0:ab:da:ae:69:d2:f1:1a:4f:07:b1: 78:27:e3:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSh6hBjrOnVQA9WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVmYTg4MjktNTZmNS00YWMxLTk4YzYtZTRiZjExOWJk ODgyMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NjdkYzE4NGYtY2U2Ny00ZWU3LTg0MGUtMjcxNDZiNTAzMmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppgG9HvpSXw2zVhzOS5MKnQ6GPC4L3NW0Bdg Je75Kva9MU9YPSQx1tfJmH+w/1qUz6LUhxg/+k1BXtnInYkJKg/BSSA1ZkW5JA57 QUMMwK1pMoN0gnMfkLtGIUsy75SjcS1pFv2tdoRPx3MySOxqH5dzI/Lo+Du1GD7+ gVhvT99UoxtMG+g3Yum0bnjD7+5bi6IHLtcRr8X2klnej10RnbgTYexBlzMv7WUO NLgJLwPCjMhSFwL1fnkl0aQjIv1vvQV5tK3KZyfug4HBW731KKKQvbnFp9O/G0yr rb44gk5pt/4DTdtoInXrHFZrzYbu2NTeIq7uDzWSZk7vL1KrwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLU7V0+4tZm9rU6wYARZveXHzU8pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ZWZh ODgyOS01NmY1LTRhYzEtOThjNi1lNGJmMTE5YmQ4ODIvYTg0NzJiNjgtY2I1Ni0z NGZkLWIzMjktNDU1ZDg4NzAzM2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmVmYTg4MjktNTZmNS00YWMxLTk4 YzYtZTRiZjExOWJkODgyLzZlZmE4ODI5LTU2ZjUtNGFjMS05OGM2LWU0YmYxMTli ZDg4Mi5jcmwwHwYDVR0jBBgwFoAUIQdQimQNva+rxX/XYBlsUIFiUdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82ZWZhODgyOS01NmY1LTRhYzEtOThjNi1lNGJm MTE5YmQ4ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudh9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJqdMOsqD2eV0MWwNDmcE5pqMXjh/otz02gg+nKHyNQl46fCxt4586w OJnF2e6H+RE/BdWnht5WdcHIAbNLjz7f+jKuFCaJcEJBz4tBbHG3nTgTRLDIgSKO OaRmHc691HNTMTso3SqbP+07/RVyL1QeJezh8ZEBQiCZnWGPpzIrbw/MYs0D3RKJ 5OzCNpDMYdsdkwTWOe7jfFf/X6EoaW/4Q/7B68OlJtUGloVFr7cuMKG73kvq6QJO e3QPRHs41y6tS5j7iOmGtSq3cgvhQSE+HfKO7sDZe/UMxvXNcz4Lh2t/XBDkP60C A3ZN3KLFSGLQq9quadLxGk8HsXgn4xo= -----END CERTIFICATE-----Generated at Sat Mar 14 16:53:31 2026 by rpki-client