$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa File: 12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa (raw, json) Hash identifier: rMrsTPj8mctuPY0w1fE9x3xv0TnmqkRegRrObLVka4E= Subject key identifier: C6:3F:2E:FA:56:75:AD:2A:70:48:F8:53:90:FB:DA:FF:1A:AE:44:D9 Certificate issuer: /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Certificate serial: 010D0C9F4328584D2BDA0A5650BA98A391DF4900 Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 40805 IP address blocks: 208.96.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:0a:56:50:ba:98:a3:91:df:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=a9d9a1d3-cbe9-4e2e-9feb-e1aec563d627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:27:31:d7:9a:4b:73:a3:65:cd:03:ec:ce:ba: 70:28:fc:07:d0:9a:27:5a:31:ba:ea:0f:58:94:b9: e9:b1:38:e8:bc:cc:7f:ba:c9:13:f8:67:29:9f:7e: 54:54:94:ef:d3:f7:37:9c:58:f3:9f:02:c8:47:cd: 00:5c:81:79:1d:03:85:01:01:1d:64:eb:a7:c7:06: 48:d8:68:64:53:92:af:5e:2a:91:5f:d6:36:f5:2a: 34:d1:90:a7:eb:bf:17:73:5f:26:c3:04:11:ca:ad: 1a:45:68:0b:90:15:34:d8:b3:67:56:5a:08:14:18: 78:27:7e:c1:1c:0f:eb:84:b6:5e:8b:52:45:dd:e7: cf:98:b8:c7:65:f5:2a:d0:30:83:f5:59:09:53:38: df:f5:d7:5c:bd:c5:64:81:c7:e2:58:6c:d3:59:b2: cb:b4:07:3e:6e:87:76:1d:fa:af:71:b8:9c:38:18: 84:35:44:15:88:e6:3d:ad:af:53:52:06:36:b8:7f: 01:64:80:08:24:9c:40:01:14:cf:79:60:37:27:e1: e7:1b:ef:27:ee:8f:8f:d2:3f:9c:6c:68:73:d6:29: 87:9f:f8:76:3c:68:d1:91:c2:8e:2f:0f:c0:a1:01: 29:3e:9e:a5:b3:fb:5f:c0:f1:0c:c2:7c:c3:4c:68: bb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3F:2E:FA:56:75:AD:2A:70:48:F8:53:90:FB:DA:FF:1A:AE:44:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl X509v3 Authority Key Identifier: keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer sbgp-ipAddrBlock: critical IPv4: 208.96.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:9e:d1:3e:32:dc:7c:df:15:a6:fa:7e:db:96:4b:eb:bf:8f: 09:f9:2a:80:ff:fb:98:3c:a6:31:7e:e5:a7:bb:67:7c:d4:48: de:ce:6c:99:20:0d:9b:bc:17:25:0e:b4:ca:b2:41:c6:b7:f5: 6f:29:69:fc:38:c9:a8:6f:9a:60:26:30:a0:fa:db:8d:0f:5b: be:22:41:c4:9b:8e:7d:50:30:f2:81:11:a3:65:4a:af:4d:0f: 6f:30:ae:44:d3:f1:e4:15:c2:d2:72:93:18:e9:ca:a1:4f:76: d5:1e:e9:87:7a:ce:9d:fe:50:61:21:99:c7:22:23:83:47:62: 31:80:34:6a:d3:02:17:a4:3c:3c:5d:98:29:8b:f4:9a:ed:7f: 11:db:f4:ba:4b:df:c3:8c:f8:cf:5a:0d:f3:e3:40:48:ba:62: 9e:08:12:7a:1b:92:e2:04:25:d1:3f:ce:a0:7f:7c:c6:e9:5f: b3:9c:96:72:a8:ba:e8:11:fb:03:2f:31:ec:b2:08:83:9f:09: 04:f6:05:c8:82:55:98:32:3f:5c:d5:c3:f2:dd:c7:f7:b9:b5: 31:eb:5e:4f:31:fe:68:bd:35:67:05:df:b1:b8:36:4b:51:7d: 98:58:5f:e0:05:2d:d7:4a:21:26:01:0c:f2:0a:fd:52:7a:68: f5:1d:bd:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2gpWULqYo5HfSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU2ZDJhMmUtOWFjNy00ZDI5LWJkMTUtNzU4NzRkNDlk ZjY2MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk YTlkOWExZDMtY2JlOS00ZTJlLTlmZWItZTFhZWM1NjNkNjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzScx15pLc6NlzQPszrpwKPwH0JonWjG66g9Y lLnpsTjovMx/uskT+Gcpn35UVJTv0/c3nFjznwLIR80AXIF5HQOFAQEdZOunxwZI 2GhkU5KvXiqRX9Y29So00ZCn678Xc18mwwQRyq0aRWgLkBU02LNnVloIFBh4J37B HA/rhLZei1JF3efPmLjHZfUq0DCD9VkJUzjf9ddcvcVkgcfiWGzTWbLLtAc+bod2 HfqvcbicOBiENUQViOY9ra9TUgY2uH8BZIAIJJxAARTPeWA3J+HnG+8n7o+P0j+c bGhz1imHn/h2PGjRkcKOLw/AoQEpPp6ls/tfwPEMwnzDTGi7FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMY/LvpWda0qcEj4U5D72v8arkTZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNTZk MmEyZS05YWM3LTRkMjktYmQxNS03NTg3NGQ0OWRmNjYvMTJkOGUyZWUtYWY4OS0z Yjg0LTg3MDUtZjM2ZjdmOGM5N2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjU2ZDJhMmUtOWFjNy00ZDI5LWJk MTUtNzU4NzRkNDlkZjY2LzI1NmQyYTJlLTlhYzctNGQyOS1iZDE1LTc1ODc0ZDQ5 ZGY2Ni5jcmwwHwYDVR0jBBgwFoAU50wJluiEUMDP1YbVRi9w7tJXlQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNTZkMmEyZS05YWM3LTRkMjktYmQxNS03NTg3 NGQ0OWRmNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0GCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+e0T4y3HzfFab6ftuWS+u/jwn5KoD/+5g8pjF+5ae7Z3zUSN7ObJkg DZu8FyUOtMqyQca39W8pafw4yahvmmAmMKD6240PW74iQcSbjn1QMPKBEaNlSq9N D28wrkTT8eQVwtJykxjpyqFPdtUe6Yd6zp3+UGEhmcciI4NHYjGANGrTAhekPDxd mCmL9JrtfxHb9LpL38OM+M9aDfPjQEi6Yp4IEnobkuIEJdE/zqB/fMbpX7OclnKo uugR+wMvMeyyCIOfCQT2BciCVZgyP1zVw/Ldx/e5tTHrXk8x/mi9NWcF37G4NktR fZhYX+AFLddKISYBDPIK/VJ6aPUdvSQ= -----END CERTIFICATE-----Generated at Sun Mar 22 09:59:18 2026 by rpki-client