$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/15d150b3-8c08-34dc-a8bf-1a103575837f.roa File: 15d150b3-8c08-34dc-a8bf-1a103575837f.roa (raw, json) Hash identifier: WMGqmqigVax5QGvv+GX06jVcUXi8xPHbGcR5ZPcnxxY= Subject key identifier: AE:53:98:CF:FE:98:38:CB:F0:06:ED:5D:2C:7D:FE:2A:7A:3F:E3:6B Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584D1DE48E6E84E677CFBE060080 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/15d150b3-8c08-34dc-a8bf-1a103575837f.roa Signing time: Tue 10 Mar 2026 01:00:31 +0000 ROA not before: Tue 10 Mar 2026 01:00:31 +0000 ROA not after: Mon 08 Jun 2026 01:00:31 +0000 asID: 16740 IP address blocks: 167.254.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:e4:8e:6e:84:e6:77:cf:be:06:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Mar 10 01:00:31 2026 GMT Not After : Jun 8 01:00:31 2026 GMT Subject: CN=5b7fb986-1184-469c-afc2-8e22479efa06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bd:f7:0b:bd:09:65:64:df:a2:bf:d1:f1:5a: ea:40:62:7a:68:56:fc:78:e2:8b:73:a5:a8:e6:0a: 01:6b:66:ca:9a:48:71:54:45:af:b5:6b:10:7d:4f: 08:51:ec:28:9b:43:a2:9d:83:f6:31:77:5f:65:a3: b4:78:eb:17:3c:05:92:a6:b9:51:2c:d4:91:21:a4: 85:2e:bc:ee:f6:37:06:00:83:19:b4:35:48:67:dd: b7:59:ea:16:02:72:f5:52:d4:70:b0:ac:44:5f:1a: 4d:0d:22:f8:5b:34:a5:1c:e7:48:f9:75:97:70:16: 89:dc:c0:b9:57:17:d8:46:7d:43:33:b4:0b:ea:91: 25:66:86:70:85:e4:19:a7:f7:de:60:ac:1f:82:63: 45:fd:bb:a1:ab:2f:92:a0:b3:46:c4:fb:53:31:6c: 31:ce:ba:31:23:a2:ed:f7:13:9a:45:fb:b5:7d:10: d0:bf:0b:11:e8:0f:80:c9:00:ed:f4:f4:6c:da:2a: 40:27:9c:37:bd:0f:1a:f4:de:d5:56:cb:42:4b:e3: 06:fd:1b:e4:94:f6:a6:6f:34:57:67:17:76:7c:b6: ad:bf:75:64:65:b7:50:c6:80:9b:a5:d5:08:5f:c7: 05:70:c3:76:a2:6f:4b:1c:22:d1:a4:e6:1e:a5:c4: 03:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:53:98:CF:FE:98:38:CB:F0:06:ED:5D:2C:7D:FE:2A:7A:3F:E3:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/15d150b3-8c08-34dc-a8bf-1a103575837f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 167.254.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:34:5e:a3:09:0b:9d:8f:1f:65:aa:59:6d:e3:a8:f3:19:f1: 16:db:65:d7:39:58:9a:0b:f2:8e:d3:32:9e:51:9b:0f:93:87: 3a:4b:3b:3f:74:88:ff:fa:f0:8f:2b:d1:3d:55:42:a4:4a:c1: a4:f1:64:e3:5a:cf:00:0f:98:7b:4f:e8:0a:1f:73:c0:08:95: 66:dc:b6:01:da:8e:ec:c8:f9:b0:e0:05:d1:b9:6a:d8:e4:64: d4:45:0d:af:26:b8:52:4a:81:56:d1:32:89:a9:a2:d4:29:ef: 88:81:b4:22:2e:ac:7b:f8:27:ce:aa:a6:cf:9e:46:d5:a1:b2: 93:56:9f:eb:68:e8:7b:15:03:41:f8:93:74:f5:27:a9:63:d7: 34:4e:00:03:12:51:42:4e:9d:9b:ce:9c:d7:97:d9:cf:14:df: e6:55:59:3e:50:d2:71:85:2a:1d:0e:dc:6e:ad:e2:f6:58:24: 17:3c:e2:ad:07:c4:ee:11:7c:2a:b2:cb:de:50:ca:ec:0c:09: d7:70:84:0b:5c:83:f1:f7:06:09:fe:c1:98:fa:c0:62:d8:6c: aa:56:f3:af:4c:09:cd:0a:21:17:7c:66:d1:84:2e:ba:d8:d1: 4d:4c:ea:b8:3f:d5:ab:42:74:a3:3c:a6:ad:17:4a:72:cc:49: df:f5:53:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0d5I5uhOZ3z74GAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDMxMDAxMDAzMVoXDTI2MDYwODAxMDAzMVowLzEtMCsGA1UEAxMk NWI3ZmI5ODYtMTE4NC00NjljLWFmYzItOGUyMjQ3OWVmYTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL33C70JZWTfor/R8VrqQGJ6aFb8eOKLc6Wo 5goBa2bKmkhxVEWvtWsQfU8IUewom0OinYP2MXdfZaO0eOsXPAWSprlRLNSRIaSF Lrzu9jcGAIMZtDVIZ923WeoWAnL1UtRwsKxEXxpNDSL4WzSlHOdI+XWXcBaJ3MC5 VxfYRn1DM7QL6pElZoZwheQZp/feYKwfgmNF/buhqy+SoLNGxPtTMWwxzroxI6Lt 9xOaRfu1fRDQvwsR6A+AyQDt9PRs2ipAJ5w3vQ8a9N7VVstCS+MG/RvklPambzRX Zxd2fLatv3VkZbdQxoCbpdUIX8cFcMN2om9LHCLRpOYepcQDMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5TmM/+mDjL8AbtXSx9/ip6P+NrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvMTVkMTUwYjMtOGMwOC0z NGRjLWE4YmYtMWExMDM1NzU4MzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/7dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJE0XqMJC52PH2WqWW3jqPMZ8RbbZdc5WJoL8o7TMp5Rmw+ThzpLOz90 iP/68I8r0T1VQqRKwaTxZONazwAPmHtP6Aofc8AIlWbctgHajuzI+bDgBdG5atjk ZNRFDa8muFJKgVbRMompotQp74iBtCIurHv4J86qps+eRtWhspNWn+to6HsVA0H4 k3T1J6lj1zROAAMSUUJOnZvOnNeX2c8U3+ZVWT5Q0nGFKh0O3G6t4vZYJBc84q0H xO4RfCqyy95QyuwMCddwhAtcg/H3Bgn+wZj6wGLYbKpW869MCc0KIRd8ZtGELrrY 0U1M6rg/1atCdKM8pq0XSnLMSd/1U3k= -----END CERTIFICATE-----Generated at Wed Mar 11 19:05:32 2026 by rpki-client