$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/378569c9-d696-3fef-8aac-cd7b7915a9fd.roa File: 378569c9-d696-3fef-8aac-cd7b7915a9fd.roa (raw, json) Hash identifier: 5sq6bpIjHW7toXXsFyGbEP5vOXfnysbhWZfaX6BSqK8= Subject key identifier: 25:7D:40:C6:D7:54:23:BD:E2:0D:21:3C:9F:58:A4:99:5E:72:E3:B3 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584D1F4A21847DA24E7EA604ED80 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/378569c9-d696-3fef-8aac-cd7b7915a9fd.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 11090 IP address blocks: 216.152.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:21:84:7d:a2:4e:7e:a6:04:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=fb5af76a-f15e-4f70-ab49-6102405240d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8a:c5:a8:3e:4d:c5:2a:b8:7f:24:23:21:46: 87:1b:e6:2a:2f:65:c2:76:13:77:4e:fb:6a:ab:02: b0:5f:b0:73:99:7a:9d:47:cf:b9:7f:7f:c3:11:f1: 0c:c3:b5:b3:2f:23:52:60:af:56:b4:ed:f1:42:51: be:a6:27:c8:a3:57:9a:9e:8d:d2:6a:e3:3a:e5:0b: 83:cf:bd:12:77:5d:8f:11:ef:e8:98:c0:0a:5c:db: eb:25:49:18:79:12:f6:b7:b5:90:f1:e8:f6:2f:d4: 8e:36:24:c7:c8:0c:b9:79:86:35:ee:56:6f:6f:df: 0f:53:74:a2:a9:2d:22:c6:72:be:a1:ea:8d:69:02: f4:b7:d5:82:1e:11:3f:8c:b1:a5:06:21:92:9e:a1: 47:8b:42:b9:21:75:a6:e2:54:fb:6c:92:01:8a:8f: 7f:74:9c:af:57:f6:1b:01:f9:1e:6d:b8:78:30:e4: d1:b2:fc:e0:31:18:c3:1d:d4:91:4c:e9:05:75:cc: a9:f9:a1:41:09:4c:e2:6a:b9:9a:59:9c:42:1c:1f: 2c:72:21:12:68:e5:6f:32:7d:a5:ae:8d:e2:ba:56: 82:e6:2b:b5:93:72:64:ac:a3:9e:dd:e3:ab:94:91: 4f:56:0a:b2:82:97:a7:3b:4c:a4:15:11:0d:a3:f8: 48:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7D:40:C6:D7:54:23:BD:E2:0D:21:3C:9F:58:A4:99:5E:72:E3:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/378569c9-d696-3fef-8aac-cd7b7915a9fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.152.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:56:87:78:c8:87:4a:d3:bd:34:24:61:c3:b0:b1:7b:7a:77: 51:92:c3:cc:38:ae:f4:ea:8a:78:1d:ae:d1:a7:8d:9f:17:5a: c2:4d:a6:2e:57:9a:f6:62:ee:df:5b:82:bc:0d:22:9a:fb:a4: 9e:43:de:de:10:ae:25:b1:0c:04:c7:4b:fb:02:ce:fb:d7:6a: b4:b7:17:da:0c:18:e8:16:d2:86:90:76:eb:ad:d0:71:e2:57: a1:28:6f:01:20:56:db:33:21:de:4c:d3:66:2e:9a:36:58:c9: 2c:3e:95:74:4a:b9:29:fa:73:8b:d1:c6:0f:84:ac:54:64:22: 63:15:2a:bc:fd:16:67:f0:6f:fd:de:b0:27:21:9e:7b:30:51: 8f:d7:25:06:39:70:99:f8:34:01:39:f0:db:32:8b:46:18:db: 53:82:50:ca:de:19:b2:59:96:04:d3:8e:8a:f0:8e:e1:81:a8: ba:81:63:fe:90:9f:64:ad:c5:d2:95:28:40:5f:32:c2:37:f3: ad:3a:26:31:f6:6a:86:6c:8c:3e:b5:20:16:1c:dd:18:a1:20: ec:2c:bd:5a:d7:c2:bc:93:8d:ca:41:09:92:64:83:f8:f4:17: 22:64:ab:8c:14:ba:60:67:35:20:d5:9e:2c:64:b6:ab:ad:92: a9:4e:88:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSiGEfaJOfqYE7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZmI1YWY3NmEtZjE1ZS00ZjcwLWFiNDktNjEwMjQwNTI0MGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIrFqD5NxSq4fyQjIUaHG+YqL2XCdhN3Tvtq qwKwX7BzmXqdR8+5f3/DEfEMw7WzLyNSYK9WtO3xQlG+pifIo1eano3SauM65QuD z70Sd12PEe/omMAKXNvrJUkYeRL2t7WQ8ej2L9SONiTHyAy5eYY17lZvb98PU3Si qS0ixnK+oeqNaQL0t9WCHhE/jLGlBiGSnqFHi0K5IXWm4lT7bJIBio9/dJyvV/Yb Afkebbh4MOTRsvzgMRjDHdSRTOkFdcyp+aFBCUziarmaWZxCHB8sciESaOVvMn2l ro3iulaC5iu1k3JkrKOe3eOrlJFPVgqygpenO0ykFRENo/hIBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCV9QMbXVCO94g0hPJ9YpJlecuOzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMzc4NTY5YzktZDY5Ni0z ZmVmLThhYWMtY2Q3Yjc5MTVhOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2JiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1Wh3jIh0rTvTQkYcOwsXt6d1GSw8w4rvTqingdrtGnjZ8XWsJNpi5X mvZi7t9bgrwNIpr7pJ5D3t4QriWxDATHS/sCzvvXarS3F9oMGOgW0oaQduut0HHi V6EobwEgVtszId5M02YumjZYySw+lXRKuSn6c4vRxg+ErFRkImMVKrz9Fmfwb/3e sCchnnswUY/XJQY5cJn4NAE58Nsyi0YY21OCUMreGbJZlgTTjorwjuGBqLqBY/6Q n2StxdKVKEBfMsI38606JjH2aoZsjD61IBYc3RihIOwsvVrXwryTjcpBCZJkg/j0 FyJkq4wUumBnNSDVnixktqutkqlOiCk= -----END CERTIFICATE-----Generated at Fri Mar 13 10:55:45 2026 by rpki-client