$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/a3b93d87-5667-328e-a14c-5284dd2687a0.roa File: a3b93d87-5667-328e-a14c-5284dd2687a0.roa (raw, json) Hash identifier: he53n//BKZSb6L+KCCiqPaaxOCuUJUW43q+WIiXR7Mo= Subject key identifier: 6A:15:B2:94:08:49:0A:9C:27:DB:C4:8A:E1:12:7F:D8:EA:E5:25:AD Certificate issuer: /CN=4c2a49a3-f083-4bc1-b402-c5d2d237b177 Certificate serial: 010D0C9F4328584D19B4AE9753E20273A18EEEC0 Authority key identifier: EB:54:33:39:59:31:88:1C:FD:96:35:A9:82:F7:FF:F4:31:CB:C9:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/a3b93d87-5667-328e-a14c-5284dd2687a0.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 21922 IP address blocks: 204.197.128.0/20 maxlen: 24 216.37.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:ae:97:53:e2:02:73:a1:8e:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c2a49a3-f083-4bc1-b402-c5d2d237b177 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=4bb02770-f794-4b3b-ab55-a007d8393ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:92:56:22:b2:b9:e3:a2:20:d6:13:f7:c0:1d: d4:ac:78:e5:97:52:d9:48:4b:ff:5c:50:8b:51:79: ba:a0:8d:a2:8f:72:1d:4d:21:9e:eb:c1:64:cf:43: 90:e3:a4:f1:d8:c5:e8:8a:a8:f0:41:9a:73:2b:18: 27:3c:f8:66:80:60:0c:77:02:d0:1b:9f:ce:d8:bc: 2d:b3:19:1b:fd:1d:75:8b:21:18:50:3f:f2:59:ee: b3:9d:99:69:2b:fa:21:28:31:50:e3:ca:9e:27:b3: f8:4d:b1:25:79:1e:2d:c3:a5:73:6f:99:ff:8f:7b: 9c:33:61:c9:31:a6:22:26:fe:0f:54:06:7f:56:c3: 32:dc:c3:c9:83:fd:c1:d5:70:d5:59:86:18:32:c3: 77:a9:32:ac:d8:ea:e0:5f:20:1f:be:e9:35:c8:1e: 80:cf:f9:05:45:8e:8a:1b:4e:f8:d9:cb:b3:9c:8d: 91:d5:7c:d9:02:8d:27:9b:e9:fa:cc:16:aa:0d:7f: 3f:64:b0:13:a1:7c:1e:7c:b9:68:91:64:01:89:b0: 0a:bf:17:bb:f9:df:7a:77:a6:91:06:ba:d8:b7:05: 5c:fe:94:a8:ad:16:04:ee:53:d2:83:bd:81:a4:18: ed:72:7a:1c:8b:6f:82:18:52:ca:58:a6:1c:19:4c: 56:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:15:B2:94:08:49:0A:9C:27:DB:C4:8A:E1:12:7F:D8:EA:E5:25:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/a3b93d87-5667-328e-a14c-5284dd2687a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.crl X509v3 Authority Key Identifier: keyid:EB:54:33:39:59:31:88:1C:FD:96:35:A9:82:F7:FF:F4:31:CB:C9:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer sbgp-ipAddrBlock: critical IPv4: 204.197.128.0/20 216.37.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:f9:d8:60:ec:b7:ed:54:83:cb:53:af:da:ef:79:c6:de:39: 10:04:c5:14:0e:af:23:3e:f2:9a:4f:90:3e:6e:d1:0d:74:5e: a5:38:cd:26:79:b2:1c:fe:cf:b8:7d:00:e7:e9:6d:bb:d2:ee: 73:dd:0d:a5:a3:53:23:d7:20:aa:af:2d:38:93:33:48:ae:58: 25:4d:d0:b3:1a:56:ea:6a:97:01:fa:3d:24:a4:7f:c2:3a:93: 65:d4:ab:9f:fe:4e:6f:d8:a2:2d:b8:a2:7c:91:2e:a7:77:c6: 77:9d:d8:cf:c9:ba:a2:8e:bb:df:a8:b3:b5:5e:61:ed:3b:04: 47:3f:24:e3:e8:9a:04:36:88:3f:be:0a:5f:15:45:bb:57:fe: bc:6f:81:fc:a3:1b:dc:9b:30:bd:e8:a4:c9:3d:7a:07:0f:84: 29:a2:a2:66:03:7d:cc:ee:a2:bd:4b:07:c6:2f:9d:2c:01:1d: da:fb:11:c3:ca:a3:7d:a4:a1:8c:29:e0:f5:5b:77:31:95:59: 73:62:18:6e:9c:e2:a0:19:6a:3a:df:e4:ff:40:3f:d2:ea:8b: 51:b7:ea:af:25:c3:93:9b:be:f2:30:92:39:80:57:d7:af:f5: 49:8d:9b:d9:23:0a:5d:aa:16:db:a0:04:a9:d5:7b:3d:b4:59: f8:bf:24:93 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0ZtK6XU+ICc6GO7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMyYTQ5YTMtZjA4My00YmMxLWI0MDItYzVkMmQyMzdi MTc3MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NGJiMDI3NzAtZjc5NC00YjNiLWFiNTUtYTAwN2Q4MzkzZWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZJWIrK546Ig1hP3wB3UrHjll1LZSEv/XFCL UXm6oI2ij3IdTSGe68Fkz0OQ46Tx2MXoiqjwQZpzKxgnPPhmgGAMdwLQG5/O2Lwt sxkb/R11iyEYUD/yWe6znZlpK/ohKDFQ48qeJ7P4TbEleR4tw6Vzb5n/j3ucM2HJ MaYiJv4PVAZ/VsMy3MPJg/3B1XDVWYYYMsN3qTKs2OrgXyAfvuk1yB6Az/kFRY6K G0742cuznI2R1XzZAo0nm+n6zBaqDX8/ZLAToXwefLlokWQBibAKvxe7+d96d6aR BrrYtwVc/pSorRYE7lPSg72BpBjtcnoci2+CGFLKWKYcGUxWeQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGoVspQISQqcJ9vEiuESf9jq5SWtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YzJh NDlhMy1mMDgzLTRiYzEtYjQwMi1jNWQyZDIzN2IxNzcvYTNiOTNkODctNTY2Ny0z MjhlLWExNGMtNTI4NGRkMjY4N2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGMyYTQ5YTMtZjA4My00YmMxLWI0 MDItYzVkMmQyMzdiMTc3LzRjMmE0OWEzLWYwODMtNGJjMS1iNDAyLWM1ZDJkMjM3 YjE3Ny5jcmwwHwYDVR0jBBgwFoAU61QzOVkxiBz9ljWpgvf/9DHLyeowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YzJhNDlhMy1mMDgzLTRiYzEtYjQwMi1jNWQy ZDIzN2IxNzcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEzMWAAwQF 2CVAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKP52GDst+1Ug8tTr9rvecbeORAExRQOryM+8ppPkD5u0Q10 XqU4zSZ5shz+z7h9AOfpbbvS7nPdDaWjUyPXIKqvLTiTM0iuWCVN0LMaVupqlwH6 PSSkf8I6k2XUq5/+Tm/Yoi24onyRLqd3xned2M/JuqKOu9+os7VeYe07BEc/JOPo mgQ2iD++Cl8VRbtX/rxvgfyjG9ybML3opMk9egcPhCmiomYDfczuor1LB8YvnSwB Hdr7EcPKo32koYwp4PVbdzGVWXNiGG6c4qAZajrf5P9AP9Lqi1G36q8lw5ObvvIw kjmAV9ev9UmNm9kjCl2qFtugBKnVez20Wfi/JJM= -----END CERTIFICATE-----Generated at Sun Mar 22 10:00:02 2026 by rpki-client