$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e3efcc8d-473c-3337-a7b3-91ccf2cbd2e6.roa File: e3efcc8d-473c-3337-a7b3-91ccf2cbd2e6.roa (raw, json) Hash identifier: wyXic5m8UAJ0oH/3Lj+xAXCltl+QALLvdSYu6Uy8mNc= Subject key identifier: B3:8F:48:77:4B:3F:54:60:B9:68:82:79:65:32:DC:CE:B7:FC:1F:10 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584D20AF56ACF4FFC6AF8B758C00 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e3efcc8d-473c-3337-a7b3-91ccf2cbd2e6.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 931 IP address blocks: 170.39.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:56:ac:f4:ff:c6:af:8b:75:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=2965ee21-2ddc-4347-aac9-ab3cc4ad3b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:48:88:c8:89:01:37:87:9e:d7:55:34:f8:d7: a4:d2:91:4c:fe:dc:29:41:29:f2:73:0a:0f:d2:92: 94:5c:85:eb:4f:a4:d6:ec:d1:a8:0d:4d:bd:43:8d: 66:37:eb:9a:16:55:f6:ed:06:f5:b6:81:39:d6:01: cf:d2:fc:9c:4b:b4:ff:31:69:e8:4c:c5:7a:cf:ad: 86:35:eb:70:20:d8:8d:6e:b4:5a:6e:01:d0:34:db: d0:09:f4:dd:92:d8:1c:0e:58:d2:ec:2d:d4:80:2e: c3:ce:fe:b6:d7:95:c1:6d:13:05:28:db:b0:69:47: 6e:b2:93:1e:e3:d4:38:cb:26:f9:4a:96:11:4f:ac: 72:f0:0b:9f:36:d9:a3:11:53:fa:a7:13:bc:7b:f9: 58:38:a2:17:30:e7:f1:69:82:24:13:57:69:2a:6f: 38:b6:c4:e6:16:db:f7:cd:89:6e:68:34:ef:88:82: 34:42:4c:1a:f6:6e:a4:26:74:78:65:01:57:42:32: f8:d9:aa:f8:2e:28:de:53:6d:5d:a0:77:f1:cf:a4: 06:d3:f6:e1:8c:7d:48:90:45:82:51:85:5d:17:33: 82:93:05:66:47:8d:51:5f:a6:b8:44:6f:b2:b2:c7: 8c:4c:55:3e:02:6d:fd:97:91:eb:28:97:23:0c:91: 41:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8F:48:77:4B:3F:54:60:B9:68:82:79:65:32:DC:CE:B7:FC:1F:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e3efcc8d-473c-3337-a7b3-91ccf2cbd2e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:25:02:3a:83:53:1b:02:66:65:6f:42:af:c9:b1:39:cb:a9: 52:5c:0f:14:5c:1e:60:88:04:8e:52:af:e1:3e:11:6d:da:ec: 75:96:65:6e:df:35:ac:0f:b8:7a:a1:ad:be:5d:9b:d5:ab:d9: b2:02:6c:ac:e9:f4:15:1a:17:e5:6f:4d:c2:65:f8:49:d2:57: e1:0d:66:49:72:31:ae:82:04:98:0d:4b:85:56:0b:4a:fa:33: 82:a6:71:b8:2a:9d:6c:b0:1e:2f:2b:2d:cd:10:a2:e6:c1:9a: 30:60:7a:d3:d3:2a:df:9e:8f:48:ec:e2:93:1e:7c:aa:b8:30: bd:21:bd:8d:34:23:54:2e:98:6d:ca:d5:21:5b:1d:51:20:8f: 7c:1f:80:92:7e:86:f8:0a:5e:a4:83:54:7e:9a:f2:61:7e:e6: 28:25:fe:cb:5c:a1:2d:e5:5b:21:fb:e6:89:57:39:91:c6:a8: b9:9a:2c:14:30:ea:62:a4:b4:51:f8:7c:98:86:3c:33:c5:8f: 82:fe:bd:4d:8a:a9:cf:3d:cc:75:72:95:6a:7b:fb:50:2a:1f: 62:5b:af:dc:d0:bb:ce:a2:16:e6:a3:8b:ae:83:6d:8f:39:b6: 5f:5a:bd:e1:f7:02:80:79:a6:25:ff:fe:f4:d7:43:ef:86:b5: ff:e6:26:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1as9P/Gr4t1jAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk Mjk2NWVlMjEtMmRkYy00MzQ3LWFhYzktYWIzY2M0YWQzYjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kiIyIkBN4ee11U0+Nek0pFM/twpQSnycwoP 0pKUXIXrT6TW7NGoDU29Q41mN+uaFlX27Qb1toE51gHP0vycS7T/MWnoTMV6z62G NetwINiNbrRabgHQNNvQCfTdktgcDljS7C3UgC7Dzv6215XBbRMFKNuwaUduspMe 49Q4yyb5SpYRT6xy8AufNtmjEVP6pxO8e/lYOKIXMOfxaYIkE1dpKm84tsTmFtv3 zYluaDTviII0Qkwa9m6kJnR4ZQFXQjL42ar4LijeU21doHfxz6QG0/bhjH1IkEWC UYVdFzOCkwVmR41RX6a4RG+ysseMTFU+Am39l5HrKJcjDJFBCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOPSHdLP1RguWiCeWUy3M63/B8QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvZTNlZmNjOGQtNDczYy0z MzM3LWE3YjMtOTFjY2YyY2JkMmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIlAjqDUxsCZmVvQq/JsTnLqVJcDxRcHmCIBI5Sr+E+EW3a7HWWZW7f NawPuHqhrb5dm9Wr2bICbKzp9BUaF+VvTcJl+EnSV+ENZklyMa6CBJgNS4VWC0r6 M4KmcbgqnWywHi8rLc0QoubBmjBgetPTKt+ej0js4pMefKq4ML0hvY00I1QumG3K 1SFbHVEgj3wfgJJ+hvgKXqSDVH6a8mF+5igl/stcoS3lWyH75olXOZHGqLmaLBQw 6mKktFH4fJiGPDPFj4L+vU2Kqc89zHVylWp7+1AqH2Jbr9zQu86iFuaji66DbY85 tl9aveH3AoB5piX//vTXQ++Gtf/mJso= -----END CERTIFICATE-----Generated at Fri Mar 13 10:57:54 2026 by rpki-client