$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2c32e3bd-1200-3988-9a54-ee4a6d275c11.roa File: 2c32e3bd-1200-3988-9a54-ee4a6d275c11.roa (raw, json) Hash identifier: FCdE2Z3qgcpHeoB8Ge0pVAoAIFqAX4J+P/3xDDyLntc= Subject key identifier: 42:3C:1D:E2:1B:F4:4F:53:35:FB:34:D5:31:40:43:3E:F0:0A:9B:5B Certificate issuer: /CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Certificate serial: 010D0C9F4328584D1B1A00CC6061567FED6A4680 Authority key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2c32e3bd-1200-3988-9a54-ee4a6d275c11.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 14464 IP address blocks: 131.109.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:00:cc:60:61:56:7f:ed:6a:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=d8866876-0d30-421d-95d7-d3560592edf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ab:65:ab:b5:61:ec:c6:09:bb:88:b1:3c:96: a5:19:b4:a6:83:9a:c1:9d:d8:36:6b:60:14:09:de: e0:67:90:b6:c8:54:48:0e:70:f3:3b:27:1f:eb:9a: 21:4f:e8:c2:24:e2:d5:bd:78:40:83:4c:bd:c8:99: f3:24:db:30:5c:7f:04:f9:e8:7b:70:12:54:52:9d: a8:3c:50:78:4a:ee:d0:35:fb:db:5a:7f:c0:a3:6c: d2:89:2c:05:36:43:1e:2c:5c:ec:4c:bd:91:89:7e: be:eb:b4:4f:3c:00:a4:27:92:cd:40:ee:9c:2e:c5: 7d:9d:ab:5b:f0:37:88:be:f4:62:c4:df:30:61:79: f6:df:a5:2f:a1:0f:4f:07:0d:1b:26:c6:93:89:e0: 0c:59:49:2c:75:36:6f:23:32:79:ca:a5:60:da:bf: 85:6d:f7:37:94:26:18:04:9f:df:15:d3:36:b5:0e: 6b:94:9f:84:7e:5d:d5:70:14:78:5a:6c:a6:b1:f7: 1d:8b:0c:1f:78:b6:06:99:a4:d8:65:70:e2:ab:13: 8e:73:48:a1:00:a9:3f:0a:07:8c:76:aa:0f:cc:7d: 56:0a:3e:45:d5:3c:b4:34:8f:af:7b:95:63:76:ff: ba:27:f6:14:c6:5c:1e:55:d9:74:d2:64:d9:a0:7b: 53:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3C:1D:E2:1B:F4:4F:53:35:FB:34:D5:31:40:43:3E:F0:0A:9B:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2c32e3bd-1200-3988-9a54-ee4a6d275c11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl X509v3 Authority Key Identifier: keyid:6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer sbgp-ipAddrBlock: critical IPv4: 131.109.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:ee:80:65:79:bc:e3:2a:2c:fd:29:2f:1f:b9:6f:be:42:be: a8:20:0d:7c:c1:8c:46:7e:63:49:1e:f8:8c:3c:8c:1f:fc:51: 21:61:75:ce:b2:67:0f:f9:3d:54:c8:27:b7:64:11:ee:93:25: 48:50:ca:f2:b5:05:c1:03:13:cf:d0:fd:dc:b2:86:57:d0:be: cb:62:1b:de:e3:bc:b5:0d:11:a7:c0:aa:51:b4:46:4a:95:6d: 1e:8c:4a:ab:f2:23:2a:46:3c:7d:ce:af:f6:42:a6:ab:c2:34: 71:85:ff:2e:87:69:57:0a:08:19:b0:a5:2c:6b:3f:d7:76:ca: 69:de:1b:39:11:1e:ac:18:bf:1f:8b:3e:31:73:88:bb:87:e0: 42:6e:d6:bc:22:83:5f:fa:2e:0b:79:eb:39:87:e4:81:10:47: 19:37:5f:e2:19:1a:77:bf:be:10:55:81:d4:a1:1f:55:35:1f: 1f:4d:b3:d3:93:18:e3:6c:92:a0:ba:f6:70:6a:a9:83:1b:30: d2:1a:08:17:fc:d4:47:5e:27:58:51:a4:48:9a:02:aa:89:5c: cb:cd:a6:3a:d3:74:7f:c5:02:2e:cb:bd:0e:a0:f2:95:cf:50: b3:e7:96:db:9a:92:c6:c5:9f:bc:8f:be:24:1a:23:aa:ce:db: cc:df:34:dc -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0bGgDMYGFWf+1qRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNlMDk2NzMtNWM2ZS00MzQwLWFkMTEtNGRhOGRmYjhj Nzc3MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk ZDg4NjY4NzYtMGQzMC00MjFkLTk1ZDctZDM1NjA1OTJlZGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlatlq7Vh7MYJu4ixPJalGbSmg5rBndg2a2AU Cd7gZ5C2yFRIDnDzOycf65ohT+jCJOLVvXhAg0y9yJnzJNswXH8E+eh7cBJUUp2o PFB4Su7QNfvbWn/Ao2zSiSwFNkMeLFzsTL2RiX6+67RPPACkJ5LNQO6cLsV9natb 8DeIvvRixN8wYXn236UvoQ9PBw0bJsaTieAMWUksdTZvIzJ5yqVg2r+Fbfc3lCYY BJ/fFdM2tQ5rlJ+Efl3VcBR4WmymsfcdiwwfeLYGmaTYZXDiqxOOc0ihAKk/CgeM dqoPzH1WCj5F1Ty0NI+ve5Vjdv+6J/YUxlweVdl00mTZoHtTrwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEI8HeIb9E9TNfs01TFAQz7wCptbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mM2Uw OTY3My01YzZlLTQzNDAtYWQxMS00ZGE4ZGZiOGM3NzcvMmMzMmUzYmQtMTIwMC0z OTg4LTlhNTQtZWU0YTZkMjc1YzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjNlMDk2NzMtNWM2ZS00MzQwLWFk MTEtNGRhOGRmYjhjNzc3L2YzZTA5NjczLTVjNmUtNDM0MC1hZDExLTRkYThkZmI4 Yzc3Ny5jcmwwHwYDVR0jBBgwFoAUaz+txng1ZU8YT7uqjnskCN4y2rswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mM2UwOTY3My01YzZlLTQzNDAtYWQxMS00ZGE4 ZGZiOGM3NzcuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg20wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAe+6AZXm84yos/SkvH7lvvkK+qCANfMGMRn5jSR74jDyMH/xRIWF1zrJn D/k9VMgnt2QR7pMlSFDK8rUFwQMTz9D93LKGV9C+y2Ib3uO8tQ0Rp8CqUbRGSpVt HoxKq/IjKkY8fc6v9kKmq8I0cYX/LodpVwoIGbClLGs/13bKad4bOREerBi/H4s+ MXOIu4fgQm7WvCKDX/ouC3nrOYfkgRBHGTdf4hkad7++EFWB1KEfVTUfH02z05MY 42ySoLr2cGqpgxsw0hoIF/zUR14nWFGkSJoCqolcy82mOtN0f8UCLsu9DqDylc9Q s+eW25qSxsWfvI++JBojqs7bzN803A== -----END CERTIFICATE-----Generated at Mon Mar 16 13:55:09 2026 by rpki-client