$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/d11c1cd0-2f14-3290-b454-ae651e07470e.roa File: d11c1cd0-2f14-3290-b454-ae651e07470e.roa (raw, json) Hash identifier: V9Ai1S86SF8TuNjLGnKicmMhCFfOwWlACt+mSl6Y2Yc= Subject key identifier: 30:8B:FF:C0:67:9C:38:9D:F5:71:37:DF:F0:B5:F9:B6:52:9D:4D:F4 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584D091266E005665CD49C7A6980 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/d11c1cd0-2f14-3290-b454-ae651e07470e.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 395381 IP address blocks: 216.59.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:66:e0:05:66:5c:d4:9c:7a:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=d8a12262-25f5-4437-956a-b5560f94234a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3d:b9:12:be:3f:ad:6e:8b:ef:48:82:e1:d8: 0a:5a:43:d9:69:5a:b1:c3:a0:ca:f3:85:c7:cc:cd: cd:ba:d2:25:75:1d:4f:7e:58:57:fc:0b:4d:a9:8c: 09:a1:56:9a:95:0c:1b:e9:a0:94:93:ac:e1:44:f6: f1:3d:15:25:50:dd:79:90:1c:04:a4:b6:9f:ac:78: af:64:b4:f5:58:35:3b:0c:76:ca:c3:6d:7c:36:d2: 2b:91:3a:46:6a:24:7c:aa:2b:47:e9:ab:d2:95:54: 20:8d:ed:a1:fc:dd:8b:b5:02:af:cc:55:ca:df:98: bf:cb:f2:55:4d:69:24:73:4f:eb:60:f2:8f:d8:82: 06:6e:02:35:94:14:d0:f4:f5:71:ae:67:bd:3d:79: 33:ec:88:ef:20:f0:c5:8e:83:5e:f3:d6:64:f0:0e: fb:d7:64:ff:dc:21:89:62:04:d8:fa:f3:78:e4:f2: 6c:47:5d:d3:2d:94:db:2b:07:2e:78:50:6b:52:6b: 8c:4b:87:32:d2:66:dd:30:bf:d9:78:ed:12:7e:80: 0f:12:1a:41:37:e1:60:fa:41:2d:30:9a:fd:b0:ad: 64:4a:76:55:d9:5e:de:a6:56:e5:9c:82:51:5f:06: 52:7e:74:f9:46:fa:9c:d5:ef:0e:a6:fe:fa:67:84: f6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8B:FF:C0:67:9C:38:9D:F5:71:37:DF:F0:B5:F9:B6:52:9D:4D:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/d11c1cd0-2f14-3290-b454-ae651e07470e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.59.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:79:a2:4c:e2:b3:0b:1a:00:dd:a2:4c:a1:00:c7:8d:08:2f: c7:68:85:06:3c:f4:d5:8f:3f:1a:1a:bc:79:92:4a:8b:71:a9: f9:af:1f:cb:80:98:7c:4e:c5:12:8c:0d:cb:31:e6:39:db:90: 3b:eb:1a:f1:f3:85:ce:98:41:6f:33:3d:b8:1e:a2:02:ef:c6: 67:34:15:a3:32:63:e4:b5:93:ae:4f:87:48:3e:74:71:2f:4e: a3:ae:3f:d9:db:a5:43:53:66:14:f1:72:6a:01:db:00:b1:a0: fe:59:84:4b:52:60:bf:5a:8f:cb:6f:3a:8d:7f:b7:06:bd:30: 68:07:f0:fd:c5:23:cb:62:fd:03:09:ef:5a:1b:7f:ad:cd:99: 12:12:bf:0a:74:38:27:2c:6e:d1:07:72:1e:10:ca:43:0f:b8: 4a:68:ed:12:9e:94:7c:c7:9d:41:32:63:7c:db:fb:8c:42:da: e8:ea:53:a8:7a:e1:fd:c0:a0:5f:f2:90:58:bd:10:d0:53:94: 8f:22:93:49:10:ca:51:45:8c:ea:a7:fe:43:b7:31:4d:38:88: 3d:07:1f:ee:0d:2b:1f:00:dc:1b:d6:e9:51:a7:03:d4:7f:0a: 21:18:50:1e:f9:2b:34:6f:0b:3b:cf:14:77:d6:83:03:c1:74: 27:fb:46:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEmbgBWZc1Jx6aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZDhhMTIyNjItMjVmNS00NDM3LTk1NmEtYjU1NjBmOTQyMzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD25Er4/rW6L70iC4dgKWkPZaVqxw6DK84XH zM3NutIldR1PflhX/AtNqYwJoVaalQwb6aCUk6zhRPbxPRUlUN15kBwEpLafrHiv ZLT1WDU7DHbKw218NtIrkTpGaiR8qitH6avSlVQgje2h/N2LtQKvzFXK35i/y/JV TWkkc0/rYPKP2IIGbgI1lBTQ9PVxrme9PXkz7IjvIPDFjoNe89Zk8A7712T/3CGJ YgTY+vN45PJsR13TLZTbKwcueFBrUmuMS4cy0mbdML/ZeO0SfoAPEhpBN+Fg+kEt MJr9sK1kSnZV2V7eplblnIJRXwZSfnT5Rvqc1e8Opv76Z4T2hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCL/8BnnDid9XE33/C1+bZSnU30MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvZDExYzFjZDAtMmYxNC0z MjkwLWI0NTQtYWU2NTFlMDc0NzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2DtQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAV5okziswsaAN2iTKEAx40IL8dohQY89NWPPxoavHmSSotxqfmvH8uA mHxOxRKMDcsx5jnbkDvrGvHzhc6YQW8zPbgeogLvxmc0FaMyY+S1k65Ph0g+dHEv TqOuP9nbpUNTZhTxcmoB2wCxoP5ZhEtSYL9aj8tvOo1/twa9MGgH8P3FI8ti/QMJ 71obf63NmRISvwp0OCcsbtEHch4QykMPuEpo7RKelHzHnUEyY3zb+4xC2ujqU6h6 4f3AoF/ykFi9ENBTlI8ik0kQylFFjOqn/kO3MU04iD0HH+4NKx8A3BvW6VGnA9R/ CiEYUB75KzRvCzvPFHfWgwPBdCf7RrI= -----END CERTIFICATE-----Generated at Mon Mar 2 17:40:52 2026 by rpki-client