$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/89e755dd-5037-3fa3-8d6f-7c673dec299d.roa File: 89e755dd-5037-3fa3-8d6f-7c673dec299d.roa (raw, json) Hash identifier: loqzRAIXiWvh+IfXlT6t/J8DHTWJyeKwGe+zMEP9MKo= Subject key identifier: 23:F3:66:2A:AE:58:4A:41:C2:A2:68:3B:F4:EF:AF:EA:C3:71:2B:90 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584D227B6BE9DB25514B95C70900 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/89e755dd-5037-3fa3-8d6f-7c673dec299d.roa Signing time: Wed 11 Mar 2026 16:27:44 +0000 ROA not before: Wed 11 Mar 2026 16:27:44 +0000 ROA not after: Tue 09 Jun 2026 16:27:44 +0000 asID: 399629 IP address blocks: 216.203.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:22:7b:6b:e9:db:25:51:4b:95:c7:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Mar 11 16:27:44 2026 GMT Not After : Jun 9 16:27:44 2026 GMT Subject: CN=671d2577-ee64-47ff-a3d7-846b5d52dd82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fa:50:c3:9c:18:e5:96:19:57:7c:61:1a:82: 7b:44:ea:4e:d9:f6:12:4c:ba:be:76:31:a5:0d:83: b9:e6:4d:04:9e:99:ec:4e:9a:2f:90:d0:bb:ca:df: 3e:a9:25:b2:46:d0:c3:03:7f:69:9c:f2:53:a6:18: 19:8d:a7:b6:03:8a:31:29:14:4c:88:81:0b:6b:b3: 7a:89:62:f3:21:6b:25:ff:64:14:08:fd:16:7c:ec: cb:59:ec:f1:68:a7:17:06:e3:f1:ff:68:fd:6c:12: e8:c3:40:51:54:4b:f8:1d:f0:da:74:7f:ec:ce:a6: 35:a1:b2:22:ff:b4:4e:73:0c:90:af:c6:1c:07:48: 75:b9:9e:d1:09:ae:b9:c3:9d:df:01:9d:77:a6:7c: f6:bf:47:ea:19:34:84:fa:c8:ec:6a:61:40:8a:33: 57:b1:eb:1d:eb:00:e5:dd:4f:5e:a1:d7:a3:d2:1b: fc:13:73:5b:8a:08:ed:46:a9:78:52:5e:66:e3:57: 7d:ae:2f:a1:e3:96:ef:62:bb:af:5a:80:4d:d8:e4: bc:7c:05:74:1c:f4:0b:b5:01:b4:2d:6b:f5:23:61: eb:18:d1:ff:cf:22:96:43:9c:d8:98:ef:99:aa:9a: 05:62:2f:98:81:84:ac:7c:ec:70:d5:79:fc:1c:e3: 25:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F3:66:2A:AE:58:4A:41:C2:A2:68:3B:F4:EF:AF:EA:C3:71:2B:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/89e755dd-5037-3fa3-8d6f-7c673dec299d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 216.203.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:b8:b7:5c:48:00:56:f1:0d:ea:d7:07:bc:3c:00:5c:43:77: 9b:c6:c1:bd:2d:23:e2:ea:17:1e:d2:13:1c:60:2d:ba:67:b7: 10:ee:85:39:7d:de:dd:25:33:06:da:82:cd:76:af:b2:b6:11: 85:12:97:0c:4e:b6:e9:de:11:ea:aa:3e:41:3f:bf:f1:ca:02: 62:af:ff:97:49:5d:15:c1:da:97:59:1a:a9:94:69:61:0b:5c: da:44:67:ce:4e:ed:ab:55:f4:e3:1a:68:eb:5e:cf:da:9a:5c: 56:19:9e:b0:9e:cc:7c:c9:09:8b:64:85:d6:45:35:6b:14:07: 12:39:a5:1a:ca:97:9b:ce:c9:14:4a:45:0d:98:00:f3:75:c6: 84:0e:70:69:a9:90:bf:75:ac:26:2d:c7:ae:c0:fd:d5:20:ed: 82:c1:d5:d2:7c:62:97:c8:4d:f1:75:0b:fb:47:e9:0f:e2:df: 7f:85:49:e9:fe:c8:47:b9:91:a2:45:df:f3:1a:00:17:53:75: 9d:2e:22:da:44:48:fd:9c:08:33:6f:ed:e9:6a:19:b8:c0:34: 86:2b:77:d4:52:b5:0e:58:f5:17:5d:35:37:c2:53:17:73:fc: 7e:6a:8e:06:d7:e8:0e:e6:70:e4:79:13:bf:ae:24:c0:7a:dd: 04:f8:2f:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ie2vp2yVRS5XHCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDMxMTE2Mjc0NFoXDTI2MDYwOTE2Mjc0NFowLzEtMCsGA1UEAxMk NjcxZDI1NzctZWU2NC00N2ZmLWEzZDctODQ2YjVkNTJkZDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifpQw5wY5ZYZV3xhGoJ7ROpO2fYSTLq+djGl DYO55k0EnpnsTpovkNC7yt8+qSWyRtDDA39pnPJTphgZjae2A4oxKRRMiIELa7N6 iWLzIWsl/2QUCP0WfOzLWezxaKcXBuPx/2j9bBLow0BRVEv4HfDadH/szqY1obIi /7ROcwyQr8YcB0h1uZ7RCa65w53fAZ13pnz2v0fqGTSE+sjsamFAijNXsesd6wDl 3U9eodej0hv8E3NbigjtRql4Ul5m41d9ri+h45bvYruvWoBN2OS8fAV0HPQLtQG0 LWv1I2HrGNH/zyKWQ5zYmO+ZqpoFYi+YgYSsfOxw1Xn8HOMl7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPzZiquWEpBwqJoO/Tvr+rDcSuQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvODllNzU1ZGQtNTAzNy0z ZmEzLThkNmYtN2M2NzNkZWMyOTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2MsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi4t1xIAFbxDerXB7w8AFxDd5vGwb0tI+LqFx7SExxgLbpntxDuhTl9 3t0lMwbags12r7K2EYUSlwxOtuneEeqqPkE/v/HKAmKv/5dJXRXB2pdZGqmUaWEL XNpEZ85O7atV9OMaaOtez9qaXFYZnrCezHzJCYtkhdZFNWsUBxI5pRrKl5vOyRRK RQ2YAPN1xoQOcGmpkL91rCYtx67A/dUg7YLB1dJ8YpfITfF1C/tH6Q/i33+FSen+ yEe5kaJF3/MaABdTdZ0uItpESP2cCDNv7elqGbjANIYrd9RStQ5Y9RddNTfCUxdz /H5qjgbX6A7mcOR5E7+uJMB63QT4L2w= -----END CERTIFICATE-----Generated at Tue Mar 24 07:44:07 2026 by rpki-client