$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/21c05a3b-e062-3862-8df9-24b08a6621aa.roa File: 21c05a3b-e062-3862-8df9-24b08a6621aa.roa (raw, json) Hash identifier: nDKgw9HdjhddTI7JimrXmxPbTEk7g5K/vf8behbu+Rs= Subject key identifier: D1:D4:66:11:B5:EA:CF:94:99:71:1C:51:CA:F8:D6:DD:A2:DA:A9:65 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584D1F4A216E36B7A87404DBDB88 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/21c05a3b-e062-3862-8df9-24b08a6621aa.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 11090 IP address blocks: 216.152.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:21:6e:36:b7:a8:74:04:db:db:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=45b760e7-ae4a-4aec-97d9-f21dfe6de30a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:59:bc:46:15:fe:99:56:8a:37:8a:14:df:8d: 24:dd:fa:6e:9a:61:8e:5b:4d:86:72:5e:14:b7:cb: d3:32:85:a7:db:e2:29:17:14:2c:5e:eb:a0:1f:a5: 27:54:8a:99:c6:e5:92:f8:ca:b3:53:5d:71:b2:e2: d7:1a:2a:69:6b:c4:4a:bd:a2:3e:29:70:95:ff:ff: f4:bf:b6:d6:6a:72:83:59:c8:b4:61:03:72:4a:8f: aa:d4:2e:1c:8a:46:7e:57:9f:95:40:8e:66:59:73: 55:49:b4:fb:1e:bf:ff:0f:68:0b:b9:33:bb:ba:37: a0:81:ed:40:21:3d:7b:09:86:a1:ac:76:d0:b9:4b: 82:bf:1b:5c:3b:b6:9b:03:6c:eb:14:6a:4d:1d:55: cc:a3:80:2a:da:6e:53:73:46:a7:ae:c8:b1:c5:86: 4f:7f:55:ef:a7:8b:49:19:1d:5b:48:df:26:74:02: 0c:c3:dc:e7:78:0f:5a:1d:98:84:0f:aa:41:64:31: bd:a2:af:86:2d:7f:75:63:06:26:67:3c:a9:b9:16: fa:ee:91:6d:9b:1c:7f:ec:f4:4f:95:c7:62:b0:4b: 63:9b:26:57:a9:77:55:23:94:a6:c1:6c:9c:37:09: 58:4e:31:a6:45:42:07:d3:93:89:cd:b4:87:e2:4b: c1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D4:66:11:B5:EA:CF:94:99:71:1C:51:CA:F8:D6:DD:A2:DA:A9:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/21c05a3b-e062-3862-8df9-24b08a6621aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.152.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:1f:c1:9b:80:1b:84:b0:e5:2c:77:af:84:9e:eb:87:43:91: 1b:f2:23:a5:8f:0c:73:f7:0b:21:8d:95:69:81:59:84:d1:bf: 77:6c:a0:c9:c3:ac:cf:0c:a9:4a:db:e7:fe:2f:93:8b:ec:be: 84:00:8c:17:76:7f:b9:49:84:24:69:fb:68:98:0e:4d:46:b8: c8:c2:4d:3d:77:c0:fa:6a:c8:f6:44:23:60:19:95:52:2c:39: 41:ee:cf:4e:9d:94:4f:d6:da:52:82:d7:c6:b0:1b:3e:88:03: 23:96:b2:0d:82:b5:bf:ab:5f:b4:3b:82:8f:08:80:ff:61:25: 16:ba:c3:e1:02:0a:71:d0:f9:97:a8:d6:c0:95:0a:78:59:aa: 55:80:77:d2:96:7f:ae:d2:f2:4d:3c:61:28:bf:6b:07:3f:0d: ae:67:3f:1e:2e:a9:6f:cd:4e:3a:3f:5e:af:f3:ea:2e:b3:a7: df:e1:f4:d3:18:51:3c:9a:61:88:b4:a4:96:fc:d7:bb:fd:af: 6e:c8:59:da:a1:a3:43:f3:b0:75:a6:32:af:23:88:98:55:cc: 2c:b3:b5:89:9e:10:ce:d0:58:26:0c:07:42:48:cf:1e:7e:bc: 1e:4a:4f:19:ff:7e:4a:1b:92:c8:80:de:76:47:f7:3a:15:dc: 4f:a0:7c:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSiFuNreodATb24gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NDViNzYwZTctYWU0YS00YWVjLTk3ZDktZjIxZGZlNmRlMzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlm8RhX+mVaKN4oU340k3fpummGOW02Gcl4U t8vTMoWn2+IpFxQsXuugH6UnVIqZxuWS+MqzU11xsuLXGippa8RKvaI+KXCV///0 v7bWanKDWci0YQNySo+q1C4cikZ+V5+VQI5mWXNVSbT7Hr//D2gLuTO7ujegge1A IT17CYahrHbQuUuCvxtcO7abA2zrFGpNHVXMo4Aq2m5Tc0anrsixxYZPf1Xvp4tJ GR1bSN8mdAIMw9zneA9aHZiED6pBZDG9oq+GLX91YwYmZzypuRb67pFtmxx/7PRP lcdisEtjmyZXqXdVI5SmwWycNwlYTjGmRUIH05OJzbSH4kvB3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHUZhG16s+UmXEcUcr41t2i2qllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMjFjMDVhM2ItZTA2Mi0z ODYyLThkZjktMjRiMDhhNjYyMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2JiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkfwZuAG4Sw5Sx3r4Se64dDkRvyI6WPDHP3CyGNlWmBWYTRv3dsoMnD rM8MqUrb5/4vk4vsvoQAjBd2f7lJhCRp+2iYDk1GuMjCTT13wPpqyPZEI2AZlVIs OUHuz06dlE/W2lKC18awGz6IAyOWsg2Ctb+rX7Q7go8IgP9hJRa6w+ECCnHQ+Zeo 1sCVCnhZqlWAd9KWf67S8k08YSi/awc/Da5nPx4uqW/NTjo/Xq/z6i6zp9/h9NMY UTyaYYi0pJb817v9r27IWdqho0PzsHWmMq8jiJhVzCyztYmeEM7QWCYMB0JIzx5+ vB5KTxn/fkobksiA3nZH9zoV3E+gfE0= -----END CERTIFICATE-----Generated at Fri Mar 13 10:55:50 2026 by rpki-client