$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/8a468e47-8a6e-3f96-b02e-a3434f12468a.roa File: 8a468e47-8a6e-3f96-b02e-a3434f12468a.roa (raw, json) Hash identifier: WnS89KQHtVSliMBKPcGOSXgAJYAdXGEy+Bkq0SOZ4vU= Subject key identifier: 89:13:EB:EF:6D:FF:26:63:AD:EB:2E:62:1A:28:A6:9A:AF:3C:A5:E4 Certificate issuer: /CN=3bb72fa3-359e-464d-be35-978a12d62998 Certificate serial: 010D0C9F4328584D7CCFD116C1597E6EDB331580 Authority key identifier: E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/8a468e47-8a6e-3f96-b02e-a3434f12468a.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 18855 IP address blocks: 160.223.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:d1:16:c1:59:7e:6e:db:33:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb72fa3-359e-464d-be35-978a12d62998 Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=600ca3d8-dcc9-4f31-a0b1-fca79dcee684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6f:5b:ec:3e:04:b7:f5:c4:08:dd:d2:5b:fc: ce:db:8b:83:ce:3f:81:32:50:6f:96:17:ea:e4:2d: e8:cc:0d:14:c3:bc:cf:29:1a:ac:7b:d8:b0:9b:1c: e8:40:b2:c2:b2:e5:fa:c9:2b:62:90:2e:cc:e1:c4: 07:7f:2f:8a:2b:c4:06:62:96:6f:31:35:2b:be:37: 8b:d1:eb:6e:f9:63:e1:ec:b9:9a:d7:8d:7f:f8:b6: 5c:67:d2:d7:c2:bf:49:0a:e2:7e:fe:18:c2:86:0e: 35:59:bf:d5:71:39:98:34:82:67:72:93:01:b9:fa: 1a:a2:d3:88:35:46:33:27:ea:9f:da:35:9f:2b:0c: 83:ac:a3:b6:4c:04:dd:4c:d5:2f:6c:6b:a0:c7:3b: a3:99:7e:59:89:ca:15:8e:a4:bb:3b:23:a7:5d:c2: fd:8b:8b:ab:19:4b:0d:42:fe:05:d4:87:d7:42:8e: 0c:68:79:35:e3:36:21:22:90:27:44:cd:3d:e4:a8: b3:c7:d6:9c:c7:6c:24:36:f9:a4:0e:ee:75:d1:b5: a2:88:3b:ec:a7:6a:04:68:93:ac:4b:63:72:f2:d5: 99:a8:f8:ca:55:1f:57:34:da:79:45:0b:05:85:d6: 8a:1e:eb:fe:4c:05:be:40:6e:70:39:3f:cd:a0:d7: 70:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:13:EB:EF:6D:FF:26:63:AD:EB:2E:62:1A:28:A6:9A:AF:3C:A5:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/8a468e47-8a6e-3f96-b02e-a3434f12468a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl X509v3 Authority Key Identifier: keyid:E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer sbgp-ipAddrBlock: critical IPv4: 160.223.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:bd:36:c8:59:08:b1:f5:79:3b:80:b0:33:57:de:66:48:e6: c1:fb:d0:1e:30:30:16:d8:5d:c5:e0:81:3f:c0:1c:15:c2:39: b3:8b:95:93:32:f9:72:ff:4a:f6:3c:d9:12:7f:05:1b:70:81: 53:0c:b0:ef:f6:1c:7c:a7:c2:4b:6e:68:bd:3a:58:d2:32:41: 75:d8:cc:ff:c5:19:cd:6b:49:69:84:9b:3b:ff:57:f3:84:8e: e9:e5:2d:e5:1a:6c:a1:fd:78:ae:0d:81:0c:f2:9c:a1:51:ff: 41:ec:9a:14:e4:3f:ba:78:af:65:d8:93:d8:81:be:69:62:54: 2b:45:c8:cd:de:07:1e:de:ee:df:55:0b:67:de:5b:88:93:cd: 42:62:f7:e9:16:b5:03:92:1e:d7:e6:ae:0a:ed:c8:e1:25:25: 8d:e4:d0:c7:29:4b:9d:6f:51:55:18:90:2c:28:7b:df:7e:63: 8e:8f:d5:9a:6d:e5:98:a3:3b:e0:b8:a9:c9:d7:14:f1:7e:b8: 57:90:b8:ba:b2:d0:8f:44:72:a1:89:5d:45:f7:13:45:51:5d: cc:a2:7f:ca:c5:d6:fc:7b:6c:d1:5e:cd:92:57:cf:c2:31:ee: f1:8a:ab:fc:d9:29:a9:61:22:ad:ce:f6:04:d5:92:7a:ac:e4: d2:bc:c0:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z9EWwVl+btszFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNzJmYTMtMzU5ZS00NjRkLWJlMzUtOTc4YTEyZDYy OTk4MB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk NjAwY2EzZDgtZGNjOS00ZjMxLWEwYjEtZmNhNzlkY2VlNjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG9b7D4Et/XECN3SW/zO24uDzj+BMlBvlhfq 5C3ozA0Uw7zPKRqse9iwmxzoQLLCsuX6yStikC7M4cQHfy+KK8QGYpZvMTUrvjeL 0etu+WPh7Lma141/+LZcZ9LXwr9JCuJ+/hjChg41Wb/VcTmYNIJncpMBufoaotOI NUYzJ+qf2jWfKwyDrKO2TATdTNUvbGugxzujmX5ZicoVjqS7OyOnXcL9i4urGUsN Qv4F1IfXQo4MaHk14zYhIpAnRM095Kizx9acx2wkNvmkDu510bWiiDvsp2oEaJOs S2Ny8tWZqPjKVR9XNNp5RQsFhdaKHuv+TAW+QG5wOT/NoNdwzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkT6+9t/yZjresuYhooppqvPKXkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3 MmZhMy0zNTllLTQ2NGQtYmUzNS05NzhhMTJkNjI5OTgvOGE0NjhlNDctOGE2ZS0z Zjk2LWIwMmUtYTM0MzRmMTI0NjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2JiNzJmYTMtMzU5ZS00NjRkLWJl MzUtOTc4YTEyZDYyOTk4LzNiYjcyZmEzLTM1OWUtNDY0ZC1iZTM1LTk3OGExMmQ2 Mjk5OC5jcmwwHwYDVR0jBBgwFoAU6KpNDavZkpnzD6D/MKvaA2ZFkPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3MmZhMy0zNTllLTQ2NGQtYmUzNS05Nzhh MTJkNjI5OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoN/VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACK9NshZCLH1eTuAsDNX3mZI5sH70B4wMBbYXcXggT/AHBXCObOLlZMy +XL/SvY82RJ/BRtwgVMMsO/2HHynwktuaL06WNIyQXXYzP/FGc1rSWmEmzv/V/OE junlLeUabKH9eK4NgQzynKFR/0HsmhTkP7p4r2XYk9iBvmliVCtFyM3eBx7e7t9V C2feW4iTzUJi9+kWtQOSHtfmrgrtyOElJY3k0McpS51vUVUYkCwoe99+Y46P1Zpt 5ZijO+C4qcnXFPF+uFeQuLqy0I9EcqGJXUX3E0VRXcyif8rF1vx7bNFezZJXz8Ix 7vGKq/zZKalhIq3O9gTVknqs5NK8wFY= -----END CERTIFICATE-----Generated at Fri Apr 17 18:59:01 2026 by rpki-client