$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/21a0c58a-4800-3577-9931-045250e849eb.roa File: 21a0c58a-4800-3577-9931-045250e849eb.roa (raw, json) Hash identifier: nfwdW/dD4EXGUesT0z9dFkIn6QdSxwdp5H4UUemwpTI= Subject key identifier: BB:EE:70:EF:D5:31:39:FE:33:53:57:C5:D9:83:3A:67:0F:9C:E1:52 Certificate issuer: /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Certificate serial: 010D0C9F4328584D0912591667861C60322F2D00 Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/21a0c58a-4800-3577-9931-045250e849eb.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 40805 IP address blocks: 208.82.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:59:16:67:86:1c:60:32:2f:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=4139f2be-e14c-447d-8adf-be4c2e461c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:28:22:95:1a:d8:2f:e2:8b:b5:e2:9c:f9:2d: 75:6d:45:0a:bb:10:a3:47:ab:a5:3f:6e:a2:06:77: 09:93:60:b5:f5:2d:ec:be:4d:54:67:5c:28:65:52: 49:e3:32:ad:8c:bb:e4:14:96:3b:5d:35:0d:d3:0a: 16:32:5f:20:83:6b:d7:c6:98:8d:85:fc:7c:d7:27: 54:f9:11:88:73:69:2a:dc:37:98:db:35:0b:22:d2: d9:53:64:29:38:60:c9:e3:6f:b3:13:25:18:97:b5: dd:a0:df:5b:cb:4d:fc:a2:a3:2e:f3:e2:e6:b2:1e: 62:a2:79:52:f6:c1:68:dc:4e:a8:57:f4:c3:14:22: 1a:12:22:c7:b1:1a:41:12:7a:e7:c2:fe:58:a4:ae: 41:e6:80:d2:04:f8:52:97:ac:7b:b2:a7:a3:59:ab: 25:56:f8:30:da:c3:99:1b:56:12:1d:3e:99:5a:49: 21:7e:30:bb:18:6e:0d:5d:53:4f:fb:05:fa:c9:0e: 4a:a7:0c:70:c6:a3:00:1f:49:85:6b:a8:e4:49:e8: 88:74:9d:85:65:61:70:55:e9:a3:a9:6f:01:34:95: 85:0d:26:ad:f5:a2:ff:2c:01:1e:13:3f:3e:0b:b9: 9a:54:e9:d2:b1:30:d1:42:f6:ac:7e:67:6f:65:24: c8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:EE:70:EF:D5:31:39:FE:33:53:57:C5:D9:83:3A:67:0F:9C:E1:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/21a0c58a-4800-3577-9931-045250e849eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl X509v3 Authority Key Identifier: keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer sbgp-ipAddrBlock: critical IPv4: 208.82.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:07:b8:c5:df:5e:53:b7:a3:c8:48:86:26:8d:22:95:0e:5b: 48:14:33:2c:34:e3:24:e2:05:64:77:50:ee:0b:d0:39:d7:c4: 77:18:04:46:29:0b:a4:f0:3e:82:af:c3:1a:0e:c4:f5:89:22: 2c:e4:66:34:d3:34:78:19:b3:f4:db:53:ca:5e:56:c9:e4:13: 40:f6:7c:1b:e0:00:77:9c:e2:60:9d:10:45:f9:d2:9f:51:f4: 5c:8f:7c:d2:6f:f4:a4:39:1b:23:45:fc:34:9b:c1:fa:e3:75: d5:d3:18:83:a4:94:ce:d2:45:5f:db:ac:d3:0b:6e:e5:7d:80: b1:6f:09:18:79:ee:a5:8d:ec:41:3f:03:bf:50:41:98:59:0d: c3:41:d1:01:e4:17:cf:a9:28:58:c7:bf:0f:7a:7a:fb:7e:05: 8e:cc:6c:d4:3d:ad:a9:ce:54:dd:05:aa:5a:e1:aa:e5:f8:cb: 44:a9:06:b9:c4:ea:81:3c:8f:b5:90:b9:ed:d5:30:d7:3f:a4: a2:5d:14:4a:10:de:37:ef:57:b4:e1:ed:3c:1f:c1:d1:12:93: 24:a4:82:c8:3a:e0:64:9c:a4:ab:5d:95:00:9e:36:16:93:32: d6:8b:bd:a5:96:64:13:3d:ce:a7:09:15:83:8f:7b:1b:14:4f: fc:7d:2c:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JElkWZ4YcYDIvLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU2ZDJhMmUtOWFjNy00ZDI5LWJkMTUtNzU4NzRkNDlk ZjY2MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NDEzOWYyYmUtZTE0Yy00NDdkLThhZGYtYmU0YzJlNDYxYzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiygilRrYL+KLteKc+S11bUUKuxCjR6ulP26i BncJk2C19S3svk1UZ1woZVJJ4zKtjLvkFJY7XTUN0woWMl8gg2vXxpiNhfx81ydU +RGIc2kq3DeY2zULItLZU2QpOGDJ42+zEyUYl7XdoN9by038oqMu8+Lmsh5ionlS 9sFo3E6oV/TDFCIaEiLHsRpBEnrnwv5YpK5B5oDSBPhSl6x7sqejWaslVvgw2sOZ G1YSHT6ZWkkhfjC7GG4NXVNP+wX6yQ5KpwxwxqMAH0mFa6jkSeiIdJ2FZWFwVemj qW8BNJWFDSat9aL/LAEeEz8+C7maVOnSsTDRQvasfmdvZSTIVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvucO/VMTn+M1NXxdmDOmcPnOFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNTZk MmEyZS05YWM3LTRkMjktYmQxNS03NTg3NGQ0OWRmNjYvMjFhMGM1OGEtNDgwMC0z NTc3LTk5MzEtMDQ1MjUwZTg0OWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjU2ZDJhMmUtOWFjNy00ZDI5LWJk MTUtNzU4NzRkNDlkZjY2LzI1NmQyYTJlLTlhYzctNGQyOS1iZDE1LTc1ODc0ZDQ5 ZGY2Ni5jcmwwHwYDVR0jBBgwFoAU50wJluiEUMDP1YbVRi9w7tJXlQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNTZkMmEyZS05YWM3LTRkMjktYmQxNS03NTg3 NGQ0OWRmNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAHuMXfXlO3o8hIhiaNIpUOW0gUMyw04yTiBWR3UO4L0DnXxHcYBEYp C6TwPoKvwxoOxPWJIizkZjTTNHgZs/TbU8peVsnkE0D2fBvgAHec4mCdEEX50p9R 9FyPfNJv9KQ5GyNF/DSbwfrjddXTGIOklM7SRV/brNMLbuV9gLFvCRh57qWN7EE/ A79QQZhZDcNB0QHkF8+pKFjHvw96evt+BY7MbNQ9ranOVN0FqlrhquX4y0SpBrnE 6oE8j7WQue3VMNc/pKJdFEoQ3jfvV7Th7TwfwdESkySkgsg64GScpKtdlQCeNhaT MtaLvaWWZBM9zqcJFYOPexsUT/x9LLo= -----END CERTIFICATE-----Generated at Sun Mar 22 09:59:56 2026 by rpki-client