$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/a9b294af-ddbd-365a-bb3f-75c215c307a2.roa File: a9b294af-ddbd-365a-bb3f-75c215c307a2.roa (raw, json) Hash identifier: BKZsJ73Fr0VTrEzHPAbCvNoeY77TwrQa1RP+ICgdYsI= Subject key identifier: 87:86:A4:3E:06:71:1D:18:12:24:4B:80:93:7B:17:A0:D7:EC:53:6D Certificate issuer: /CN=c3a9f614-c620-42e4-acad-b328d6a97099 Certificate serial: 010D0C9F4328584D0D427042213A7C2D2163B640 Authority key identifier: CC:33:C4:9B:48:E5:B4:6F:57:2F:B3:5D:B4:0F:D0:5C:B1:D2:61:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/a9b294af-ddbd-365a-bb3f-75c215c307a2.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 207.188.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:70:42:21:3a:7c:2d:21:63:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a9f614-c620-42e4-acad-b328d6a97099 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=7f84fa8a-a24d-4861-bc22-a3b8b2b031a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a7:88:02:ff:4f:43:b9:b6:29:3d:f9:83:53: 57:af:13:4a:f2:25:99:94:69:f7:da:cf:c4:54:a5: 46:77:61:25:e4:f7:08:d7:3f:8b:36:db:b0:32:57: 77:7f:1c:66:f1:37:2d:79:6d:d8:52:69:2c:9a:65: e6:60:ea:f1:d6:2f:d5:4c:1f:f8:89:81:e6:83:17: a0:3c:f9:d6:a4:be:9b:ba:a3:8e:22:38:4e:c3:43: 0a:81:0f:45:ec:5c:3c:48:fa:30:bc:66:c3:50:7c: b7:39:9c:ec:a0:05:0b:fd:7e:8a:6d:1f:9f:c8:07: bd:4c:46:1e:7a:3b:15:6e:16:27:3c:1c:a0:ad:44: ba:02:f2:68:cc:61:89:fd:b9:42:51:08:35:6c:6f: 5f:1b:86:56:6b:e7:36:0c:3e:ff:de:55:ef:6f:96: 31:1a:40:2e:f0:f9:96:05:3d:23:2e:a1:38:81:b9: 42:5b:57:ec:7c:38:9f:c8:5f:c2:9c:b9:f0:85:b2: 0a:12:29:d9:7b:9b:73:6a:43:26:06:d2:c9:6e:ec: ca:d6:17:2f:9e:2d:db:76:38:44:1f:72:3d:fd:15: f8:94:49:c8:69:8c:be:0a:c8:8f:28:e9:4e:06:6b: ce:6b:60:f3:1c:96:fb:ac:73:45:84:69:65:c9:75: b6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:86:A4:3E:06:71:1D:18:12:24:4B:80:93:7B:17:A0:D7:EC:53:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/a9b294af-ddbd-365a-bb3f-75c215c307a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.crl X509v3 Authority Key Identifier: keyid:CC:33:C4:9B:48:E5:B4:6F:57:2F:B3:5D:B4:0F:D0:5C:B1:D2:61:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer sbgp-ipAddrBlock: critical IPv4: 207.188.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:3d:2b:44:bd:a2:d3:e4:35:4c:d5:cf:e6:a5:e7:66:cc:e1: a2:29:b3:15:3b:62:b3:47:8f:18:dc:f4:84:a5:3d:72:2e:12: 90:63:ca:a9:3e:97:66:e9:ba:5b:3a:09:c4:5a:74:6e:93:87: f6:3d:da:35:96:bf:d1:2b:b9:ba:c5:7a:2f:d8:b7:24:76:4f: 89:95:f1:4c:9f:36:6f:9d:8d:25:e9:51:7f:00:99:b8:b6:bf: a5:e9:a5:b0:ab:d4:82:e9:8b:b1:44:8b:b8:cc:9f:ee:6a:37: cb:59:48:fd:f4:77:28:60:d5:9a:fb:c1:82:ef:a4:5d:20:04: 4a:9d:d0:16:1f:60:0a:50:f2:31:f9:d8:c8:e5:59:d6:de:e5: 02:32:38:48:29:1d:97:2d:a7:e9:4a:9a:e0:ee:32:e2:b8:6c: 54:f0:ed:53:b6:7b:d4:51:17:3a:10:5c:83:24:94:fd:d0:20: 29:f4:d4:98:83:b1:5a:2c:42:81:f9:03:c2:50:29:8b:cf:63: 86:6c:43:5d:41:1f:2f:0d:3b:a2:82:68:e4:3a:91:c1:bf:55: 4f:38:16:e7:91:2c:ec:39:f6:5d:7d:49:e6:72:2d:5f:6a:91: 9d:63:71:4a:7a:b1:59:a4:6a:ae:2b:42:ec:65:9a:b7:5e:e7: 9c:f3:3e:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQnBCITp8LSFjtkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNhOWY2MTQtYzYyMC00MmU0LWFjYWQtYjMyOGQ2YTk3 MDk5MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk N2Y4NGZhOGEtYTI0ZC00ODYxLWJjMjItYTNiOGIyYjAzMWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKeIAv9PQ7m2KT35g1NXrxNK8iWZlGn32s/E VKVGd2El5PcI1z+LNtuwMld3fxxm8TcteW3YUmksmmXmYOrx1i/VTB/4iYHmgxeg PPnWpL6buqOOIjhOw0MKgQ9F7Fw8SPowvGbDUHy3OZzsoAUL/X6KbR+fyAe9TEYe ejsVbhYnPBygrUS6AvJozGGJ/blCUQg1bG9fG4ZWa+c2DD7/3lXvb5YxGkAu8PmW BT0jLqE4gblCW1fsfDifyF/CnLnwhbIKEinZe5tzakMmBtLJbuzK1hcvni3bdjhE H3I9/RX4lEnIaYy+CsiPKOlOBmvOa2DzHJb7rHNFhGllyXW2cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeGpD4GcR0YEiRLgJN7F6DX7FNtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2E5 ZjYxNC1jNjIwLTQyZTQtYWNhZC1iMzI4ZDZhOTcwOTkvYTliMjk0YWYtZGRiZC0z NjVhLWJiM2YtNzVjMjE1YzMwN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNhOWY2MTQtYzYyMC00MmU0LWFj YWQtYjMyOGQ2YTk3MDk5L2MzYTlmNjE0LWM2MjAtNDJlNC1hY2FkLWIzMjhkNmE5 NzA5OS5jcmwwHwYDVR0jBBgwFoAUzDPEm0jltG9XL7NdtA/QXLHSYUAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2E5ZjYxNC1jNjIwLTQyZTQtYWNhZC1iMzI4 ZDZhOTcwOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7wQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL49K0S9otPkNUzVz+al52bM4aIpsxU7YrNHjxjc9ISlPXIuEpBjyqk+ l2bpuls6CcRadG6Th/Y92jWWv9ErubrFei/YtyR2T4mV8UyfNm+djSXpUX8Ambi2 v6XppbCr1ILpi7FEi7jMn+5qN8tZSP30dyhg1Zr7wYLvpF0gBEqd0BYfYApQ8jH5 2MjlWdbe5QIyOEgpHZctp+lKmuDuMuK4bFTw7VO2e9RRFzoQXIMklP3QICn01JiD sVosQoH5A8JQKYvPY4ZsQ11BHy8NO6KCaOQ6kcG/VU84FueRLOw59l19SeZyLV9q kZ1jcUp6sVmkaq4rQuxlmrde55zzPsI= -----END CERTIFICATE-----Generated at Thu Mar 19 15:32:10 2026 by rpki-client