$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/0cb34fe9-1cce-3cca-bc49-f58f1b2f3f70.roa File: 0cb34fe9-1cce-3cca-bc49-f58f1b2f3f70.roa (raw, json) Hash identifier: IDmCYwtcFVS3QHIp9SRLdSu8QlWTKkjZstp6D8ZuDMk= Subject key identifier: D0:6C:06:F2:12:4D:F6:DC:A9:28:7F:67:7D:4A:7F:AD:72:29:9C:AD Certificate issuer: /CN=3767dced-4e89-4965-b8de-50e421201b4d Certificate serial: 010D0C9F4328584D1F4A1B40EC84B529B63BE940 Authority key identifier: 49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/0cb34fe9-1cce-3cca-bc49-f58f1b2f3f70.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 33189 IP address blocks: 151.159.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:1b:40:ec:84:b5:29:b6:3b:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3767dced-4e89-4965-b8de-50e421201b4d Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=b584b0a6-15bb-48d0-ad39-572c66c9eea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cc:a7:00:8e:d5:f2:7a:32:83:48:5b:90:67: 35:cf:40:89:a5:41:eb:2e:86:9e:a9:90:24:5e:08: d8:60:3c:da:1c:9a:ff:f6:86:f6:33:93:3d:da:4e: 87:63:89:a8:e3:5e:88:7d:71:b2:b9:88:ec:03:cc: 24:05:eb:8d:ce:1e:31:1a:cd:e3:c3:8a:15:6a:a2: 49:55:e3:d6:53:66:c4:45:fb:86:e9:29:78:2e:fc: 0f:ee:a5:4d:e1:3f:37:1f:e5:2f:1d:e7:32:7d:1c: 39:11:ab:71:23:cf:69:c6:79:6b:f8:2f:41:fc:c2: 54:f5:94:79:92:53:c5:04:ea:de:f8:95:0c:9d:b9: de:35:e9:46:4e:7b:50:14:f5:cc:31:61:be:df:77: ec:9b:6a:c7:c4:a3:d0:89:99:fd:1b:e9:a1:78:33: 63:66:31:bb:ab:14:16:b3:9d:83:5f:17:74:d4:0a: 3c:9c:e0:75:75:f5:c4:0e:b0:7e:81:71:14:3f:11: 05:02:92:9b:14:03:9d:6e:fb:66:d1:d1:3e:14:02: 9b:9e:ed:17:b7:42:cb:3f:e8:f6:3f:2d:92:bb:11: ad:f9:fa:c2:b0:3f:0e:ae:9e:8e:71:3c:7c:2c:e8: 25:5e:af:3d:8d:e2:a8:e3:66:a5:b5:42:22:32:7c: 5b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:6C:06:F2:12:4D:F6:DC:A9:28:7F:67:7D:4A:7F:AD:72:29:9C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/0cb34fe9-1cce-3cca-bc49-f58f1b2f3f70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.crl X509v3 Authority Key Identifier: keyid:49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer sbgp-ipAddrBlock: critical IPv4: 151.159.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:0e:48:91:32:08:10:8b:1d:51:c4:b0:be:5d:df:62:92:04: e9:58:b9:24:68:d0:b2:a5:f3:68:35:65:ac:42:39:44:ec:71: c8:8e:ab:40:98:97:32:60:81:b1:fb:ef:20:6f:68:52:0b:ac: d1:5a:85:8d:bd:9b:31:28:1e:b9:9f:52:90:4b:dc:50:d7:a9: f0:f6:e5:f1:1a:ee:cd:2b:37:20:98:c8:ef:08:7c:fb:2d:95: cb:79:4b:d4:32:e0:38:2a:da:3b:69:13:e6:81:97:06:a1:93: e4:fe:bb:87:ac:be:27:88:13:d8:f9:6d:ae:e3:db:b6:43:f1: 00:c9:bd:37:d6:a8:5a:4a:a9:0b:84:e1:a2:72:ba:e3:5d:4d: ca:2b:e5:60:c1:38:e7:7a:41:6f:81:e8:15:17:8e:c8:29:a3: 95:d0:3e:02:3b:de:83:0d:b5:8f:f7:2a:d1:91:9b:b2:73:38: 99:9a:fd:94:53:60:63:3f:76:6d:3d:de:c0:22:9e:d3:df:75: 7b:44:4b:bf:12:e8:59:f6:8b:46:33:ae:4a:4b:10:18:20:a3: 23:2f:d2:34:10:47:2b:9c:70:62:7b:c6:26:5c:cc:63:da:f5: 1c:bb:2c:85:c0:16:b0:ab:1c:fd:e7:da:2a:66:2b:98:4f:06: 75:58:93:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fShtA7IS1KbY76UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc2N2RjZWQtNGU4OS00OTY1LWI4ZGUtNTBlNDIxMjAx YjRkMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YjU4NGIwYTYtMTViYi00OGQwLWFkMzktNTcyYzY2YzllZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8ynAI7V8noyg0hbkGc1z0CJpUHrLoaeqZAk XgjYYDzaHJr/9ob2M5M92k6HY4mo416IfXGyuYjsA8wkBeuNzh4xGs3jw4oVaqJJ VePWU2bERfuG6Sl4LvwP7qVN4T83H+UvHecyfRw5EatxI89pxnlr+C9B/MJU9ZR5 klPFBOre+JUMnbneNelGTntQFPXMMWG+33fsm2rHxKPQiZn9G+mheDNjZjG7qxQW s52DXxd01Ao8nOB1dfXEDrB+gXEUPxEFApKbFAOdbvtm0dE+FAKbnu0Xt0LLP+j2 Py2SuxGt+frCsD8Orp6OcTx8LOglXq89jeKo42altUIiMnxbMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBsBvISTfbcqSh/Z31Kf61yKZytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNzY3 ZGNlZC00ZTg5LTQ5NjUtYjhkZS01MGU0MjEyMDFiNGQvMGNiMzRmZTktMWNjZS0z Y2NhLWJjNDktZjU4ZjFiMmYzZjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzc2N2RjZWQtNGU4OS00OTY1LWI4 ZGUtNTBlNDIxMjAxYjRkLzM3NjdkY2VkLTRlODktNDk2NS1iOGRlLTUwZTQyMTIw MWI0ZC5jcmwwHwYDVR0jBBgwFoAUSSpaeqWs/SJY9eRGkJ0Fcu2mgMYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNzY3ZGNlZC00ZTg5LTQ5NjUtYjhkZS01MGU0 MjEyMDFiNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl5/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwOSJEyCBCLHVHEsL5d32KSBOlYuSRo0LKl82g1ZaxCOUTscciOq0CY lzJggbH77yBvaFILrNFahY29mzEoHrmfUpBL3FDXqfD25fEa7s0rNyCYyO8IfPst lct5S9Qy4Dgq2jtpE+aBlwahk+T+u4esvieIE9j5ba7j27ZD8QDJvTfWqFpKqQuE 4aJyuuNdTcor5WDBOOd6QW+B6BUXjsgpo5XQPgI73oMNtY/3KtGRm7JzOJma/ZRT YGM/dm093sAintPfdXtES78S6Fn2i0YzrkpLEBggoyMv0jQQRyuccGJ7xiZczGPa 9Ry7LIXAFrCrHP3n2ipmK5hPBnVYkxQ= -----END CERTIFICATE-----Generated at Sun Mar 22 09:30:10 2026 by rpki-client