$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/211726d9-186c-32fa-9269-934166f8a1be.roa File: 211726d9-186c-32fa-9269-934166f8a1be.roa (raw, json) Hash identifier: MQXNWWEmRq3MVgcp2EHkw33DJP20AwCLZemLX91mRJc= Subject key identifier: 08:EB:27:5A:00:95:8D:7E:AF:1F:72:A3:38:19:7B:AD:3E:6A:0F:67 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584C4CA125CE03547B18A6364500 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/211726d9-186c-32fa-9269-934166f8a1be.roa Signing time: Thu 25 Dec 2025 02:00:31 +0000 ROA not before: Thu 25 Dec 2025 02:00:31 +0000 ROA not after: Wed 25 Mar 2026 01:00:31 +0000 asID: 11090 IP address blocks: 216.137.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:a1:25:ce:03:54:7b:18:a6:36:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Dec 25 02:00:31 2025 GMT Not After : Mar 25 01:00:31 2026 GMT Subject: CN=7756146c-5c43-47f6-8411-1aa0ff66d9ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:77:a9:b2:68:4a:d7:4e:2e:80:04:57:99:7b: d3:54:d7:df:90:d9:fc:48:2c:0b:62:5c:19:0a:d7: 51:8b:de:bb:3b:75:84:32:85:93:32:96:56:c7:5d: 95:cc:92:f6:cf:31:7f:85:65:01:d7:01:25:75:ac: 48:f9:60:37:1a:3a:c4:d3:d4:e0:f3:f8:64:ef:77: 08:57:0a:18:b0:a6:3c:91:b7:8a:2f:a9:ea:e3:2e: d1:1d:b0:b2:ee:d3:56:f5:de:2a:af:f2:c8:87:70: e6:25:60:12:29:8f:bf:c3:d8:48:67:e7:48:8a:59: 44:28:a8:bd:a3:bd:29:ee:ef:2a:ec:0f:06:f4:23: 5d:32:df:54:d6:59:94:d8:7b:a0:2c:f4:92:fb:79: 10:c5:7f:87:8f:5e:f0:f6:1e:bc:b1:91:65:66:45: 7a:7e:76:7e:92:3a:a8:26:d8:81:77:b9:b2:19:58: 72:76:7b:70:0c:3f:a2:92:5c:6c:fa:77:8c:57:c1: 7d:cc:19:3c:e7:35:37:c2:c0:33:ad:27:c8:de:f7: 71:92:d0:87:63:25:a4:62:c7:73:5d:9f:56:84:a2: 05:25:6e:86:eb:b1:d1:37:82:99:15:7d:d8:3f:c4: ec:ea:32:97:65:33:e0:38:e4:4f:fe:9e:6e:ac:d2: 91:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:EB:27:5A:00:95:8D:7E:AF:1F:72:A3:38:19:7B:AD:3E:6A:0F:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/211726d9-186c-32fa-9269-934166f8a1be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:d7:9b:21:44:15:50:a2:02:12:1d:a1:f8:4f:17:6f:90:e1: 05:bc:27:dc:34:d1:0a:c8:d2:e3:3a:96:b1:d8:d9:04:b7:e8: 45:0d:d8:b0:28:aa:3b:f7:b7:9f:ce:3f:39:a5:34:e0:13:40: 91:92:59:b2:68:d5:38:36:d6:c0:ab:c3:1f:38:be:1e:f8:71: 19:dc:b5:85:f0:a7:b4:9a:73:76:a8:a7:ae:29:ca:95:ed:8f: a7:31:87:0f:2b:12:06:6a:bf:be:cf:e7:ad:2c:e0:d2:7b:2e: 3e:c7:75:5a:1f:7a:b9:83:f7:44:18:11:7f:e3:df:a9:c8:fe: 68:a8:a7:cd:fe:0f:45:28:44:b2:80:a3:a4:9e:09:5c:c9:f2: e3:13:92:e4:1d:f4:1e:d5:f3:65:06:31:07:58:44:09:85:78: 37:ad:b7:0d:02:fb:12:f4:f6:12:cf:5f:1c:5f:9a:f1:85:0f: 4d:cc:ca:d1:7b:98:55:3a:1d:c7:b3:19:c0:5a:e2:d0:6f:51: 57:a4:fb:45:f5:7f:c6:97:81:a9:20:37:b4:d6:c0:cd:77:cf: e3:c9:4d:4d:67:a1:67:44:08:3e:d8:d3:f4:18:bc:51:c9:d1: d8:e7:3a:61:60:d2:9c:86:d9:e6:b6:ad:8e:fe:6c:c9:fa:ba: 46:a9:de:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExMoSXOA1R7GKY2RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk Nzc1NjE0NmMtNWM0My00N2Y2LTg0MTEtMWFhMGZmNjZkOWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHepsmhK104ugARXmXvTVNffkNn8SCwLYlwZ CtdRi967O3WEMoWTMpZWx12VzJL2zzF/hWUB1wEldaxI+WA3GjrE09Tg8/hk73cI VwoYsKY8kbeKL6nq4y7RHbCy7tNW9d4qr/LIh3DmJWASKY+/w9hIZ+dIillEKKi9 o70p7u8q7A8G9CNdMt9U1lmU2HugLPSS+3kQxX+Hj17w9h68sZFlZkV6fnZ+kjqo JtiBd7myGVhydntwDD+iklxs+neMV8F9zBk85zU3wsAzrSfI3vdxktCHYyWkYsdz XZ9WhKIFJW6G67HRN4KZFX3YP8Ts6jKXZTPgOORP/p5urNKRnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjrJ1oAlY1+rx9yozgZe60+ag9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMjExNzI2ZDktMTg2Yy0z MmZhLTkyNjktOTM0MTY2ZjhhMWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2IngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALzXmyFEFVCiAhIdofhPF2+Q4QW8J9w00QrI0uM6lrHY2QS36EUN2LAo qjv3t5/OPzmlNOATQJGSWbJo1Tg21sCrwx84vh74cRnctYXwp7Sac3aop64pypXt j6cxhw8rEgZqv77P560s4NJ7Lj7HdVofermD90QYEX/j36nI/miop83+D0UoRLKA o6SeCVzJ8uMTkuQd9B7V82UGMQdYRAmFeDettw0C+xL09hLPXxxfmvGFD03MytF7 mFU6HcezGcBa4tBvUVek+0X1f8aXgakgN7TWwM13z+PJTU1noWdECD7Y0/QYvFHJ 0djnOmFg0pyG2ea2rY7+bMn6ukap3lY= -----END CERTIFICATE-----Generated at Mon Mar 2 18:06:38 2026 by rpki-client