$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/c38a686c-1237-3b63-8f94-0581beb86b44.roa File: c38a686c-1237-3b63-8f94-0581beb86b44.roa (raw, json) Hash identifier: NQC1anncfG3YSZEno0gyM/g1mKHc+xtcpdBJt4orrEg= Subject key identifier: F7:55:B3:CA:75:E7:86:A4:E2:D1:10:42:10:27:07:F9:8B:C0:82:D8 Certificate issuer: /CN=9281adc0-928e-432b-8a28-e77e9cddfcfe Certificate serial: 010D0C9F4328584D3F64D663B481A2302B8F7420 Authority key identifier: B3:77:E6:CF:59:C6:E8:99:D4:E7:EB:1B:5B:A1:4C:8B:14:10:50:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/c38a686c-1237-3b63-8f94-0581beb86b44.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 13543 IP address blocks: 162.253.96.0/22 maxlen: 24 2620:f4:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/9281adc0-928e-432b-8a28-e77e9cddfcfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/9281adc0-928e-432b-8a28-e77e9cddfcfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d6:63:b4:81:a2:30:2b:8f:74:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9281adc0-928e-432b-8a28-e77e9cddfcfe Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=2a20bd65-b886-4374-abdb-4888927cbbc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:95:70:8f:1b:65:40:03:d5:f2:06:16:c1:db: 6c:83:4d:b3:b3:f6:02:ca:21:87:99:00:35:17:93: b4:48:15:10:ad:c1:de:ab:91:d8:eb:81:05:c8:eb: 45:3b:64:3b:db:ae:1d:8a:f9:c3:c3:3b:ff:57:db: 91:9d:1f:04:45:2a:f6:1e:66:2e:b7:a8:30:a9:c3: 42:20:61:e0:a1:a9:0f:2b:b2:11:53:7f:7f:9e:bd: f2:f3:de:7b:ad:32:66:b4:d8:8f:3e:79:29:ce:55: 96:93:2d:d1:5c:98:d8:3f:ab:00:90:23:bf:05:2c: 35:6d:cd:34:0c:c7:a0:71:be:ea:e2:c8:4e:75:bb: aa:cf:3a:7e:bd:9d:4b:31:35:f7:a2:c5:30:d2:9f: 67:0e:d4:51:d2:d3:49:55:7b:90:c2:ba:f4:04:ff: 92:8e:d1:59:ae:7d:71:e5:ac:b6:61:ff:a7:7f:9b: 03:1a:34:13:4f:e0:af:82:7d:47:df:39:f8:25:f2: 03:51:48:9d:80:c0:be:6c:0f:9e:8e:ae:9c:31:1f: e5:45:3e:b8:a3:82:b6:ef:16:a4:99:eb:cc:91:9f: 2c:db:40:e1:3a:40:d3:bd:0b:8a:02:9a:c5:8d:ee: e5:6f:64:4f:eb:a7:5c:25:cd:02:b4:62:4e:00:a5: ba:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:55:B3:CA:75:E7:86:A4:E2:D1:10:42:10:27:07:F9:8B:C0:82:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/c38a686c-1237-3b63-8f94-0581beb86b44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/9281adc0-928e-432b-8a28-e77e9cddfcfe.crl X509v3 Authority Key Identifier: keyid:B3:77:E6:CF:59:C6:E8:99:D4:E7:EB:1B:5B:A1:4C:8B:14:10:50:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe.cer sbgp-ipAddrBlock: critical IPv4: 162.253.96.0/22 IPv6: 2620:f4:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:12:ea:74:a7:12:fb:28:4f:ac:48:a1:b1:64:f6:af:1c:6f: 1e:2b:33:76:c3:ae:df:68:d8:eb:fa:5d:36:5d:23:2e:5a:cd: fd:0f:5f:8b:df:0c:36:03:64:32:9e:c6:d0:0c:58:8d:4b:e1: 47:60:a7:b9:3c:eb:2e:de:34:5a:ad:7e:42:5f:9e:8f:df:96: d4:e5:c8:42:bb:58:fb:e8:e8:d0:c7:3f:81:f2:d4:f5:47:0e: a7:26:94:e0:07:05:3a:2d:dd:d3:63:b3:80:74:56:d7:3a:d3: 76:ae:1b:ee:ed:2b:da:26:b0:05:5a:be:dc:59:ce:e9:62:fe: f7:9c:c3:45:22:cc:0c:d9:f8:9c:ff:12:4a:6d:14:d6:3d:30: 7f:9d:e1:27:1e:77:b9:ad:2e:29:79:5e:74:f7:5b:c0:93:a8: a5:69:c3:ff:c1:6d:5c:0b:21:4c:b3:64:89:25:a9:78:d9:4f: d7:ab:cf:ce:7f:ae:a5:f9:af:63:4f:a6:bd:10:4a:a3:1c:34: fc:84:fc:42:3a:6f:f2:44:21:1f:e8:e6:50:02:fa:ad:ca:88: 31:d5:c5:0f:0c:80:a4:de:58:e4:87:99:52:70:ce:9e:b2:c1: b2:10:ae:c2:7e:d5:66:03:f3:50:ef:87:2d:18:79:75:bf:38: e5:d4:c8:af -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE0/ZNZjtIGiMCuPdCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI4MWFkYzAtOTI4ZS00MzJiLThhMjgtZTc3ZTljZGRm Y2ZlMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk MmEyMGJkNjUtYjg4Ni00Mzc0LWFiZGItNDg4ODkyN2NiYmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJVwjxtlQAPV8gYWwdtsg02zs/YCyiGHmQA1 F5O0SBUQrcHeq5HY64EFyOtFO2Q7264divnDwzv/V9uRnR8ERSr2HmYut6gwqcNC IGHgoakPK7IRU39/nr3y8957rTJmtNiPPnkpzlWWky3RXJjYP6sAkCO/BSw1bc00 DMegcb7q4shOdbuqzzp+vZ1LMTX3osUw0p9nDtRR0tNJVXuQwrr0BP+SjtFZrn1x 5ay2Yf+nf5sDGjQTT+Cvgn1H3zn4JfIDUUidgMC+bA+ejq6cMR/lRT64o4K27xak mevMkZ8s20DhOkDTvQuKAprFje7lb2RP66dcJc0CtGJOAKW6TwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFPdVs8p154ak4tEQQhAnB/mLwILYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85Mjgx YWRjMC05MjhlLTQzMmItOGEyOC1lNzdlOWNkZGZjZmUvYzM4YTY4NmMtMTIzNy0z YjYzLThmOTQtMDU4MWJlYjg2YjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTI4MWFkYzAtOTI4ZS00MzJiLThh MjgtZTc3ZTljZGRmY2ZlLzkyODFhZGMwLTkyOGUtNDMyYi04YTI4LWU3N2U5Y2Rk ZmNmZS5jcmwwHwYDVR0jBBgwFoAUs3fmz1nG6JnU5+sbW6FMixQQUCswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MjgxYWRjMC05MjhlLTQzMmItOGEyOC1lNzdl OWNkZGZjZmUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCov1gMA8E AgACMAkDBwAmIAD0wAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAwxLqdKcS+yhPrEihsWT2rxxvHiszdsOu 32jY6/pdNl0jLlrN/Q9fi98MNgNkMp7G0AxYjUvhR2CnuTzrLt40Wq1+Ql+ej9+W 1OXIQrtY++jo0Mc/gfLU9UcOpyaU4AcFOi3d02OzgHRW1zrTdq4b7u0r2iawBVq+ 3FnO6WL+95zDRSLMDNn4nP8SSm0U1j0wf53hJx53ua0uKXledPdbwJOopWnD/8Ft XAshTLNkiSWpeNlP16vPzn+upfmvY0+mvRBKoxw0/IT8Qjpv8kQhH+jmUAL6rcqI MdXFDwyApN5Y5IeZUnDOnrLBshCuwn7VZgPzUO+HLRh5db845dTIrw== -----END CERTIFICATE-----Generated at Sun Mar 22 09:56:42 2026 by rpki-client