$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/1e3d4f97-753b-354c-81de-02471daecfb2.roa File: 1e3d4f97-753b-354c-81de-02471daecfb2.roa (raw, json) Hash identifier: P81/ucFcETOwXgCnzsxcIfRfvgM4+10yWWC+LRKorR4= Subject key identifier: F9:B9:75:2A:97:B2:FD:A8:57:83:29:21:F5:7F:7D:4A:45:57:C2:15 Certificate issuer: /CN=2e8d8d1c-a3ef-40e2-991a-97642dddd6ac Certificate serial: 010D0C9F4328584CAB8C513FB93752A61806F900 Authority key identifier: B0:DD:65:9F:3B:EB:8A:05:BD:9F:33:1A:52:25:3A:93:F2:3B:12:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/1e3d4f97-753b-354c-81de-02471daecfb2.roa Signing time: Wed 28 Jan 2026 02:00:29 +0000 ROA not before: Wed 28 Jan 2026 02:00:29 +0000 ROA not after: Tue 28 Apr 2026 01:00:29 +0000 asID: 3477 IP address blocks: 137.75.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ab:8c:51:3f:b9:37:52:a6:18:06:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e8d8d1c-a3ef-40e2-991a-97642dddd6ac Validity Not Before: Jan 28 02:00:29 2026 GMT Not After : Apr 28 01:00:29 2026 GMT Subject: CN=9800c9f2-04af-4235-8e50-19ee20ded739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3e:31:c1:2c:7e:db:28:f2:fb:31:9e:b7:5f: f1:e5:0b:3e:d8:20:28:b1:b4:a2:46:e7:b9:78:7c: 86:6e:bd:fc:5a:24:25:be:06:bc:bd:69:07:13:c8: c2:5e:ea:46:e6:54:a6:88:00:9d:d7:d7:ad:e9:1a: f7:a6:10:bb:93:2e:44:63:60:60:47:09:59:e3:2d: 57:7b:db:49:6c:fb:a7:8b:34:be:ef:ff:e5:92:c3: 02:3d:be:35:a3:5d:cb:9e:56:1f:8b:5c:3b:b5:cd: 85:e0:f7:97:52:d4:ad:ba:72:49:66:d7:3d:28:b9: ba:01:cb:20:d2:3e:03:55:35:f6:fb:dc:96:6d:51: 11:e8:e8:a6:62:fc:7b:07:1e:3f:3d:35:89:a1:f7: 08:f6:a0:b0:73:ac:aa:b4:86:5c:21:3b:d2:36:c3: 96:90:47:d8:e4:ff:1f:aa:80:71:ca:3a:88:da:36: f3:df:2b:f8:ec:a4:1f:d7:b6:5e:26:ef:ab:f8:0a: 1c:6a:c9:f1:79:b9:c3:39:37:86:62:e3:4f:3c:03: b9:78:c7:86:01:f5:4e:bd:ca:86:6a:86:64:85:ca: 13:d0:df:55:d9:5d:09:c1:87:51:8b:ab:d7:41:74: fb:54:5a:9f:e7:b3:ed:57:cd:56:82:1d:dc:00:87: 7b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B9:75:2A:97:B2:FD:A8:57:83:29:21:F5:7F:7D:4A:45:57:C2:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/1e3d4f97-753b-354c-81de-02471daecfb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.crl X509v3 Authority Key Identifier: keyid:B0:DD:65:9F:3B:EB:8A:05:BD:9F:33:1A:52:25:3A:93:F2:3B:12:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.cer sbgp-ipAddrBlock: critical IPv4: 137.75.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:d6:fd:d3:1a:f0:82:66:24:42:06:49:29:c1:25:cb:43:da: f5:37:d2:53:6a:18:cd:4c:34:f1:ca:c0:4e:55:47:a6:11:4d: 9c:c2:c3:24:3e:4d:fe:97:d8:f8:1d:7c:69:a2:44:6d:ba:96: 49:bb:85:7a:0f:43:6e:1e:0e:3c:43:88:9e:c6:76:b8:d3:1a: 84:b5:2b:ac:62:cd:2c:c3:10:34:f7:35:6d:46:01:78:f8:3e: 80:40:fe:55:87:dd:d8:61:d3:31:55:a4:f8:8b:2e:c6:5a:70: 5d:02:db:1c:d4:90:6a:58:07:a2:42:af:76:23:f1:69:3e:12: ec:84:40:53:3c:d3:9c:2e:34:dc:fa:e6:ac:4d:4e:dd:93:c7: 65:17:3f:23:83:c6:f1:80:0f:dc:ba:97:55:74:04:6e:6b:30: 83:26:4f:22:2e:85:26:54:26:3a:e3:14:39:e6:46:2f:61:53: e7:03:e3:b8:c7:6c:76:8c:c2:87:23:34:bb:d4:e3:f1:9b:30: 27:b7:b5:21:63:d2:ae:9e:e7:0d:4d:1d:be:5a:09:8e:e0:36: 97:bb:c7:9c:be:15:cf:ec:54:68:f0:74:70:94:0d:e5:30:60: 7d:23:b2:b8:6b:9a:68:52:76:e5:fa:03:e3:bd:06:f0:0c:37: 1a:f9:8c:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyrjFE/uTdSphgG+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU4ZDhkMWMtYTNlZi00MGUyLTk5MWEtOTc2NDJkZGRk NmFjMB4XDTI2MDEyODAyMDAyOVoXDTI2MDQyODAxMDAyOVowLzEtMCsGA1UEAxMk OTgwMGM5ZjItMDRhZi00MjM1LThlNTAtMTllZTIwZGVkNzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz4xwSx+2yjy+zGet1/x5Qs+2CAosbSiRue5 eHyGbr38WiQlvga8vWkHE8jCXupG5lSmiACd19et6Rr3phC7ky5EY2BgRwlZ4y1X e9tJbPunizS+7//lksMCPb41o13LnlYfi1w7tc2F4PeXUtStunJJZtc9KLm6Acsg 0j4DVTX2+9yWbVER6OimYvx7Bx4/PTWJofcI9qCwc6yqtIZcITvSNsOWkEfY5P8f qoBxyjqI2jbz3yv47KQf17ZeJu+r+AocasnxebnDOTeGYuNPPAO5eMeGAfVOvcqG aoZkhcoT0N9V2V0JwYdRi6vXQXT7VFqf57PtV81Wgh3cAId73wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPm5dSqXsv2oV4MpIfV/fUpFV8IVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZThk OGQxYy1hM2VmLTQwZTItOTkxYS05NzY0MmRkZGQ2YWMvMWUzZDRmOTctNzUzYi0z NTRjLTgxZGUtMDI0NzFkYWVjZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmU4ZDhkMWMtYTNlZi00MGUyLTk5 MWEtOTc2NDJkZGRkNmFjLzJlOGQ4ZDFjLWEzZWYtNDBlMi05OTFhLTk3NjQyZGRk ZDZhYy5jcmwwHwYDVR0jBBgwFoAUsN1lnzvrigW9nzMaUiU6k/I7EvcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZThkOGQxYy1hM2VmLTQwZTItOTkxYS05NzY0 MmRkZGQ2YWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiUvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALXW/dMa8IJmJEIGSSnBJctD2vU30lNqGM1MNPHKwE5VR6YRTZzCwyQ+ Tf6X2PgdfGmiRG26lkm7hXoPQ24eDjxDiJ7GdrjTGoS1K6xizSzDEDT3NW1GAXj4 PoBA/lWH3dhh0zFVpPiLLsZacF0C2xzUkGpYB6JCr3Yj8Wk+EuyEQFM805wuNNz6 5qxNTt2Tx2UXPyODxvGAD9y6l1V0BG5rMIMmTyIuhSZUJjrjFDnmRi9hU+cD47jH bHaMwocjNLvU4/GbMCe3tSFj0q6e5w1NHb5aCY7gNpe7x5y+Fc/sVGjwdHCUDeUw YH0jsrhrmmhSduX6A+O9BvAMNxr5jCU= -----END CERTIFICATE-----Generated at Mon Mar 2 12:00:26 2026 by rpki-client