$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/28342c55-d78a-3afd-bfe9-9f053e4b4116.roa File: 28342c55-d78a-3afd-bfe9-9f053e4b4116.roa (raw, json) Hash identifier: 48sJieBDKCnDJGUAqiVWhH2DsgDhWxdXXOfh7TtoWHQ= Subject key identifier: 9F:9D:2B:4A:C7:BA:19:BF:45:B5:DB:B0:52:75:27:E0:F5:5B:34:B9 Certificate issuer: /CN=d90d18d1-dead-4d11-bed3-243759e40831 Certificate serial: 010D0C9F4328584D343A29F7D65EA07CC6BEF400 Authority key identifier: 61:32:55:2F:11:F0:26:05:2B:F5:5F:AE:CA:CA:C4:A7:9A:70:59:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/28342c55-d78a-3afd-bfe9-9f053e4b4116.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 16668 IP address blocks: 168.245.132.0/23 maxlen: 24 168.245.232.0/23 maxlen: 24 208.72.84.0/22 maxlen: 24 2610:178::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/d90d18d1-dead-4d11-bed3-243759e40831.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/d90d18d1-dead-4d11-bed3-243759e40831.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:29:f7:d6:5e:a0:7c:c6:be:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90d18d1-dead-4d11-bed3-243759e40831 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=8801c720-009b-47b1-b34b-4b6001b6f623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:de:f3:c1:a2:52:98:7c:c3:07:cb:48:48:db: 76:94:4a:fc:db:44:ac:91:85:5c:4d:69:41:55:bf: 63:73:4a:26:0f:96:78:4c:f4:6f:f6:b0:f7:5c:a1: 2b:7c:ca:eb:3d:62:0a:93:c6:10:74:87:a2:25:f6: 69:1f:50:ac:32:29:c6:44:d0:c7:29:35:86:eb:e9: f3:e4:e4:6c:d2:7f:63:ed:2e:f5:6b:a9:f4:60:ce: 4f:bc:6d:a7:a1:9a:eb:71:0d:cf:02:e2:8d:ef:8a: ee:54:e2:71:23:ed:07:76:05:05:55:55:ff:ec:bd: 7a:2d:82:27:cb:64:24:7c:c5:07:e6:15:c0:1d:4f: a8:ec:d6:c5:d2:da:ce:f7:64:52:28:d4:ff:a7:ba: 97:6c:9a:da:c4:ea:f3:f4:9b:84:0e:9e:da:1d:b8: 9b:24:1a:89:d0:3d:a9:a2:45:9f:98:68:65:16:fb: 68:39:62:9c:9c:68:5b:a6:d8:53:e2:37:b3:68:fa: 21:e0:42:72:19:6d:03:92:ab:80:8e:2f:f2:66:9e: c9:9a:89:c7:dc:d2:99:68:80:49:63:be:b0:1f:2c: 6d:8b:8c:dd:36:99:a1:c8:7f:59:0d:bc:a0:ab:ae: d4:7a:2d:8e:ea:44:c7:23:48:d6:9a:be:1f:54:74: 08:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9D:2B:4A:C7:BA:19:BF:45:B5:DB:B0:52:75:27:E0:F5:5B:34:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/28342c55-d78a-3afd-bfe9-9f053e4b4116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/d90d18d1-dead-4d11-bed3-243759e40831.crl X509v3 Authority Key Identifier: keyid:61:32:55:2F:11:F0:26:05:2B:F5:5F:AE:CA:CA:C4:A7:9A:70:59:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831.cer sbgp-ipAddrBlock: critical IPv4: 168.245.132.0/23 168.245.232.0/23 208.72.84.0/22 IPv6: 2610:178::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:b9:12:ce:8e:6f:d2:7a:da:d0:39:d6:08:23:b1:a1:6d:76: b6:3f:eb:23:13:cd:e7:26:08:e1:47:1e:55:11:80:2d:6a:fb: 19:87:18:78:15:05:23:60:29:75:02:2b:4b:97:fd:77:01:39: ae:6c:94:48:2a:43:3c:a6:ea:1a:90:16:fc:7e:97:d3:87:9b: ef:1c:a8:b0:6e:20:68:29:97:0b:58:d8:af:31:a4:8c:e1:a5: 46:cb:55:01:13:52:e2:a3:8e:84:7c:6f:0c:db:bb:4d:35:82: 5c:95:b0:c8:0a:16:d6:05:2f:fa:45:7b:e9:95:a3:53:66:01: 5e:9d:cb:9e:8c:99:91:28:c3:63:5b:2f:a7:69:72:27:59:d2: 24:da:69:26:91:03:a9:e5:c7:67:ef:f2:b9:8b:f3:cd:1f:c9: 57:ab:4b:34:9c:e8:0c:b3:0b:6f:0a:23:53:83:d5:b2:2d:e5: 64:6f:32:98:c2:49:eb:ef:c9:bd:a9:32:34:02:50:10:bf:7d: 52:71:e2:53:fb:1b:52:92:58:38:01:71:7e:7d:45:ba:63:c8: 21:69:33:60:35:dc:d7:91:0a:5a:42:d8:c3:07:9c:42:ef:86: e1:29:6b:62:8f:8f:6f:7d:17:4f:fe:4a:1a:05:df:98:96:85: ee:30:59:b4 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE00Oin31l6gfMa+9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDkwZDE4ZDEtZGVhZC00ZDExLWJlZDMtMjQzNzU5ZTQw ODMxMB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk ODgwMWM3MjAtMDA5Yi00N2IxLWIzNGItNGI2MDAxYjZmNjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN7zwaJSmHzDB8tISNt2lEr820SskYVcTWlB Vb9jc0omD5Z4TPRv9rD3XKErfMrrPWIKk8YQdIeiJfZpH1CsMinGRNDHKTWG6+nz 5ORs0n9j7S71a6n0YM5PvG2noZrrcQ3PAuKN74ruVOJxI+0HdgUFVVX/7L16LYIn y2QkfMUH5hXAHU+o7NbF0trO92RSKNT/p7qXbJraxOrz9JuEDp7aHbibJBqJ0D2p okWfmGhlFvtoOWKcnGhbpthT4jezaPoh4EJyGW0DkquAji/yZp7JmonH3NKZaIBJ Y76wHyxti4zdNpmhyH9ZDbygq67Uei2O6kTHI0jWmr4fVHQIIwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFJ+dK0rHuhm/RbXbsFJ1J+D1WzS5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kOTBk MThkMS1kZWFkLTRkMTEtYmVkMy0yNDM3NTllNDA4MzEvMjgzNDJjNTUtZDc4YS0z YWZkLWJmZTktOWYwNTNlNGI0MTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDkwZDE4ZDEtZGVhZC00ZDExLWJl ZDMtMjQzNzU5ZTQwODMxL2Q5MGQxOGQxLWRlYWQtNGQxMS1iZWQzLTI0Mzc1OWU0 MDgzMS5jcmwwHwYDVR0jBBgwFoAUYTJVLxHwJgUr9V+uysrEp5pwWbgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kOTBkMThkMS1kZWFkLTRkMTEtYmVkMy0yNDM3 NTllNDA4MzEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBqPWEAwQB qPXoAwQC0EhUMA0EAgACMAcDBQAmEAF4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJi5Es6Ob9J62tA51ggj saFtdrY/6yMTzecmCOFHHlURgC1q+xmHGHgVBSNgKXUCK0uX/XcBOa5slEgqQzym 6hqQFvx+l9OHm+8cqLBuIGgplwtY2K8xpIzhpUbLVQETUuKjjoR8bwzbu001glyV sMgKFtYFL/pFe+mVo1NmAV6dy56MmZEow2NbL6dpcidZ0iTaaSaRA6nlx2fv8rmL 880fyVerSzSc6AyzC28KI1OD1bIt5WRvMpjCSevvyb2pMjQCUBC/fVJx4lP7G1KS WDgBcX59RbpjyCFpM2A13NeRClpC2MMHnELvhuEpa2KPj299F0/+ShoF35iWhe4w WbQ= -----END CERTIFICATE-----Generated at Mon Mar 23 17:40:08 2026 by rpki-client