$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa File: 43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa (raw, json) Hash identifier: A2eetDbdg6IcpKqV1Hi5cHtHTIjeXYv7QsVEXdHu+G0= Subject key identifier: D2:2E:B3:71:B2:0E:5A:54:94:D2:BB:C2:37:94:CF:C9:7B:83:41:03 Certificate issuer: /CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711 Certificate serial: 010D0C9F4328584D07ACEFBA048CD20DE1ABBD40 Authority key identifier: 89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 11377 IP address blocks: 137.22.245.0/24 maxlen: 24 137.22.246.0/24 maxlen: 24 223.165.113.0/24 maxlen: 24 223.165.115.0/24 maxlen: 24 223.165.118.0/24 maxlen: 24 223.165.119.0/24 maxlen: 24 223.165.120.0/24 maxlen: 24 223.165.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:ef:ba:04:8c:d2:0d:e1:ab:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=8e1111f4-7185-4a72-939d-4079cacd93c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:00:e4:e9:53:19:d0:23:ce:ca:22:fc:23:c4: cf:23:79:3c:7c:37:60:8a:90:d2:6a:69:45:09:82: ae:2f:37:03:60:52:5d:ba:f9:d5:c9:2a:dd:ed:88: 15:96:da:1f:d1:4b:e4:6f:ac:6b:e6:97:f8:55:86: 10:32:83:81:95:ff:59:0f:87:44:2e:93:08:65:51: 1c:7a:01:07:58:71:15:90:2b:c4:62:5b:d8:7c:3c: f9:b1:76:b6:43:b3:b7:a0:aa:43:33:e8:81:3f:f3: f5:69:1f:fe:77:6c:87:1f:da:34:ae:57:81:c8:fd: d4:82:27:39:dd:ab:6c:eb:8f:40:72:31:e2:74:54: d3:dc:3c:d8:e8:34:f0:1a:b7:5b:63:69:6f:4c:31: 98:42:cf:df:42:6d:86:fa:bc:b1:47:91:69:c1:75: 58:69:a9:de:d8:5e:5f:5b:72:44:79:95:6c:35:a7: fe:96:f0:32:b9:f8:fc:40:7d:8c:5d:ba:9c:f7:4d: 53:9a:0b:79:c7:90:cd:46:c4:36:e5:da:62:75:f9: 21:35:2e:e8:51:24:f4:1d:22:08:60:9a:f0:92:79: f5:1b:73:0a:9d:9a:12:8b:44:82:62:a5:1d:c5:a4: e5:76:85:3c:79:63:6a:31:46:f6:bc:44:3b:06:c2: 9d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2E:B3:71:B2:0E:5A:54:94:D2:BB:C2:37:94:CF:C9:7B:83:41:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl X509v3 Authority Key Identifier: keyid:89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer sbgp-ipAddrBlock: critical IPv4: 137.22.245.0-137.22.246.255 223.165.113.0/24 223.165.115.0/24 223.165.118.0-223.165.121.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:39:e9:fe:71:f7:d2:c3:af:86:61:3a:58:46:51:72:80:9e: eb:97:5c:72:3b:f1:42:5c:4b:b0:2d:a8:a8:9b:e1:e7:8f:30: 46:c0:6f:4a:b9:b6:64:7e:99:57:03:5a:51:3c:30:1f:15:52: 00:4e:b3:62:fc:e4:3a:0b:37:67:18:30:a3:5a:df:44:bd:04: e3:fa:6f:cf:3e:5f:35:4c:78:47:55:78:e0:0e:49:2c:f5:39: 05:61:6b:74:81:96:d5:c3:5e:14:62:b9:1c:00:a1:82:cb:6e: f9:d3:07:35:93:4f:59:c2:ab:ec:13:0f:c1:36:d1:74:2b:33: 7f:e9:b4:fc:70:a9:a7:2f:35:95:0c:42:87:19:21:2e:a1:fb: 1d:65:a1:bb:ed:20:e3:59:e6:5b:f5:4c:2c:7f:fd:3a:11:8b: f1:7a:56:6f:71:21:3a:5d:06:8e:6c:41:7a:4b:b0:8f:a6:ed: d6:ca:5d:01:06:e8:ff:74:d9:32:8a:28:43:41:af:c9:da:6c: 21:90:fc:2d:d6:bc:08:c0:08:66:cb:47:b3:54:93:7b:96:6f: ef:f2:62:cb:ba:b6:40:f3:43:f9:f2:45:98:74:c6:aa:d8:0f: 07:b7:e6:66:23:09:46:9a:a0:4e:30:cf:6b:90:7c:e0:98:57: e3:90:5b:61 -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWE0HrO+6BIzSDeGrvUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ExMWE4NWYtOGYzNy00YjU0LThmYTItZDZiYzA5Njcz NzExMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk OGUxMTExZjQtNzE4NS00YTcyLTkzOWQtNDA3OWNhY2Q5M2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhADk6VMZ0CPOyiL8I8TPI3k8fDdgipDSamlF CYKuLzcDYFJduvnVySrd7YgVltof0Uvkb6xr5pf4VYYQMoOBlf9ZD4dELpMIZVEc egEHWHEVkCvEYlvYfDz5sXa2Q7O3oKpDM+iBP/P1aR/+d2yHH9o0rleByP3Ugic5 3ats649AcjHidFTT3DzY6DTwGrdbY2lvTDGYQs/fQm2G+ryxR5FpwXVYaane2F5f W3JEeZVsNaf+lvAyufj8QH2MXbqc901Tmgt5x5DNRsQ25dpidfkhNS7oUST0HSII YJrwknn1G3MKnZoSi0SCYqUdxaTldoU8eWNqMUb2vEQ7BsKdDQIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFNIus3GyDlpUlNK7wjeUz8l7g0EDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTEx YTg1Zi04ZjM3LTRiNTQtOGZhMi1kNmJjMDk2NzM3MTEvNDNlYjhhZmItNGVjMC0z YTdmLThjOWEtMmNhMmNiZmY0Y2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExMWE4NWYtOGYzNy00YjU0LThm YTItZDZiYzA5NjczNzExLzNhMTFhODVmLThmMzctNGI1NC04ZmEyLWQ2YmMwOTY3 MzcxMS5jcmwwHwYDVR0jBBgwFoAUifRWhZUJdMbMuDb4v/S192fb/zUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTExYTg1Zi04ZjM3LTRiNTQtOGZhMi1kNmJj MDk2NzM3MTEuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBACJFvUD BACJFvYDBADfpXEDBADfpXMwDAMEAd+ldgMEAd+leDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOOen+cffS w6+GYTpYRlFygJ7rl1xyO/FCXEuwLaiom+HnjzBGwG9KubZkfplXA1pRPDAfFVIA TrNi/OQ6CzdnGDCjWt9EvQTj+m/PPl81THhHVXjgDkks9TkFYWt0gZbVw14UYrkc AKGCy2750wc1k09ZwqvsEw/BNtF0KzN/6bT8cKmnLzWVDEKHGSEuofsdZaG77SDj WeZb9Uwsf/06EYvxelZvcSE6XQaObEF6S7CPpu3Wyl0BBuj/dNkyiihDQa/J2mwh kPwt1rwIwAhmy0ezVJN7lm/v8mLLurZA80P58kWYdMaq2A8Ht+ZmIwlGmqBOMM9r kHzgmFfjkFth -----END CERTIFICATE-----Generated at Mon Mar 2 08:01:19 2026 by rpki-client