$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2b1d68df-e230-3886-a252-60ba65a8c808.roa File: 2b1d68df-e230-3886-a252-60ba65a8c808.roa (raw, json) Hash identifier: eVbChjfHDSflPRGJYna0sd38yDI/r7orol1VOiX1FgM= Subject key identifier: DB:2C:2F:97:61:40:8B:48:CF:74:BB:CE:10:9D:92:25:48:0A:B1:30 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584D620A309BB807B207BA4760C0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2b1d68df-e230-3886-a252-60ba65a8c808.roa Signing time: Fri 03 Apr 2026 10:51:19 +0000 ROA not before: Fri 03 Apr 2026 10:51:19 +0000 ROA not after: Thu 02 Jul 2026 10:51:19 +0000 asID: 198087 IP address blocks: 173.232.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:62:0a:30:9b:b8:07:b2:07:ba:47:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 3 10:51:19 2026 GMT Not After : Jul 2 10:51:19 2026 GMT Subject: CN=c00290eb-76f1-4631-b0cd-45cf4390d5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5c:e6:37:f8:a3:25:9e:b9:eb:df:5b:21:53: 86:ca:04:ef:9b:33:54:2a:3e:2d:8c:78:c8:fd:06: 94:32:fc:58:8f:62:ca:50:fe:22:a2:26:83:eb:7f: f2:03:76:20:4a:51:07:d9:5e:7d:25:1f:73:62:45: 97:76:35:8a:b0:fa:9b:aa:8b:87:76:03:08:81:de: 88:d4:6c:a9:aa:93:20:97:e1:7b:3a:50:f3:6c:0e: ee:3f:f5:b5:5c:3d:d6:f9:13:41:14:26:08:10:e6: 0f:04:bd:ad:a7:dd:5c:fe:2d:9e:0c:77:62:4e:53: 16:e0:32:88:47:62:78:ee:e8:aa:50:0d:3b:c8:a8: 87:7a:74:c1:e3:65:8f:4d:41:94:57:85:29:23:6e: bc:53:3f:6c:30:66:07:5c:7d:0a:78:f4:0b:d0:c3: 5c:cc:07:3c:fe:00:43:95:99:88:bc:4e:b9:e9:b6: d7:66:2a:21:38:b7:a4:e1:6b:43:94:46:ca:d9:71: 22:68:51:d4:0c:3f:ca:ee:24:eb:e0:87:1c:b6:c1: cf:83:aa:24:ac:75:47:36:16:52:10:f2:13:c3:4e: 26:ff:c4:42:94:41:06:27:f2:10:82:2e:e3:6c:bf: b8:b0:1f:dc:8c:60:a2:4a:40:d6:3b:23:b8:c3:92: 7b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2C:2F:97:61:40:8B:48:CF:74:BB:CE:10:9D:92:25:48:0A:B1:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2b1d68df-e230-3886-a252-60ba65a8c808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:39:4a:d7:fe:31:0f:be:93:69:21:26:b0:92:0f:53:f5:af: ec:14:2e:c8:5e:24:d8:66:ce:59:aa:55:49:18:33:f5:49:6a: 11:77:dd:59:7e:b8:d4:f8:83:69:92:48:a5:30:d3:f7:40:03: 24:48:32:d6:b8:60:53:6c:1c:3d:7f:12:80:df:64:af:9b:9d: d9:94:95:4e:65:ee:26:24:16:f5:43:d1:c5:d3:7f:22:40:6c: 90:6d:4a:a1:19:29:ba:50:08:3c:ea:d2:00:f0:c1:ac:67:4e: 31:bb:ac:9a:3a:dd:0e:9c:b3:d0:62:8f:2a:c6:3a:7f:0d:f4: 59:0c:8f:f8:0e:3f:dd:6b:59:72:06:5c:44:cc:11:3d:05:06: 97:89:38:cc:21:22:3f:ad:d3:4f:cd:63:8a:84:2f:c9:25:c9: 30:12:4f:64:72:b0:1f:8d:03:e2:67:f1:ad:30:89:d0:d0:e5: 63:30:e8:3b:90:21:08:c4:98:2c:14:6e:3d:59:7a:4d:d3:69: 68:d0:83:e9:d1:23:6e:a5:2c:82:93:52:83:7c:c0:7d:6e:b1: fc:6e:68:d5:17:c2:d8:ff:b9:d5:d0:1a:b9:09:88:3a:2f:82: f5:93:d5:37:b1:e4:8a:a4:59:d8:1d:98:b4:bb:30:1c:18:a6: 81:35:14:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1iCjCbuAeyB7pHYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDQwMzEwNTExOVoXDTI2MDcwMjEwNTExOVowLzEtMCsGA1UEAxMk YzAwMjkwZWItNzZmMS00NjMxLWIwY2QtNDVjZjQzOTBkNWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVzmN/ijJZ65699bIVOGygTvmzNUKj4tjHjI /QaUMvxYj2LKUP4ioiaD63/yA3YgSlEH2V59JR9zYkWXdjWKsPqbqouHdgMIgd6I 1GypqpMgl+F7OlDzbA7uP/W1XD3W+RNBFCYIEOYPBL2tp91c/i2eDHdiTlMW4DKI R2J47uiqUA07yKiHenTB42WPTUGUV4UpI268Uz9sMGYHXH0KePQL0MNczAc8/gBD lZmIvE656bbXZiohOLek4WtDlEbK2XEiaFHUDD/K7iTr4IcctsHPg6okrHVHNhZS EPITw04m/8RClEEGJ/IQgi7jbL+4sB/cjGCiSkDWOyO4w5J7HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNssL5dhQItIz3S7zhCdkiVICrEwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMmIxZDY4ZGYtZTIzMC0z ODg2LWEyNTItNjBiYTY1YThjODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreiyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAg5Stf+MQ++k2khJrCSD1P1r+wULsheJNhmzlmqVUkYM/VJahF33Vl+ uNT4g2mSSKUw0/dAAyRIMta4YFNsHD1/EoDfZK+bndmUlU5l7iYkFvVD0cXTfyJA bJBtSqEZKbpQCDzq0gDwwaxnTjG7rJo63Q6cs9BijyrGOn8N9FkMj/gOP91rWXIG XETMET0FBpeJOMwhIj+t00/NY4qEL8klyTAST2RysB+NA+Jn8a0widDQ5WMw6DuQ IQjEmCwUbj1Zek3TaWjQg+nRI26lLIKTUoN8wH1usfxuaNUXwtj/udXQGrkJiDov gvWT1Tex5IqkWdgdmLS7MBwYpoE1FFg= -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:10 2026 by rpki-client