$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a7f2cd2-4197-3d75-9f6f-8b3e2e637991.roa File: 3a7f2cd2-4197-3d75-9f6f-8b3e2e637991.roa (raw, json) Hash identifier: 157vYbZkQIYSRR9TWTSuVfrea7Wp4q0KQA3qLbHdCfg= Subject key identifier: 57:52:E7:72:E1:87:19:9E:57:D2:A2:78:62:68:E2:06:98:C1:E8:50 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584C40111E2471EA116DC02F18A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a7f2cd2-4197-3d75-9f6f-8b3e2e637991.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 396982 IP address blocks: 104.196.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:1e:24:71:ea:11:6d:c0:2f:18:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=bb7c4c95-ddda-4870-bf74-81b4b1430865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:38:e1:64:48:c2:8d:04:56:ed:de:30:e8:c1: 6e:47:25:23:b1:36:c5:3c:3d:c2:f0:59:5f:91:7a: 5a:1a:a9:36:31:e3:d9:3c:25:a4:7a:97:bd:dd:b6: 80:84:99:49:66:ec:2b:92:42:02:27:70:2f:11:20: 4b:66:d9:a7:ce:c8:d5:a9:d7:1e:fc:9b:b5:8b:3e: 85:3e:94:53:4a:4a:eb:5c:23:c3:32:06:ee:b2:ff: 3b:f0:4c:aa:4a:8e:a0:7e:78:6b:ac:ce:6a:29:27: a7:09:8e:d2:92:32:27:ea:5c:cd:17:30:f6:9c:6b: cf:3f:ae:73:a1:a1:bb:1e:18:a0:99:f9:42:b8:c0: e4:cb:23:20:96:20:5c:49:ba:d0:a0:57:20:2a:5e: b0:4e:0d:86:bc:60:1d:2f:15:5f:51:b2:76:d8:43: 8b:bf:55:e7:39:b0:9a:7e:bb:3f:9d:3a:eb:e7:44: 94:8f:2d:a6:6d:89:15:a9:c1:2f:00:cd:82:29:33: 1c:85:da:37:3a:98:84:12:68:5e:db:60:41:36:ef: 35:ab:55:7b:86:3f:ca:37:bf:a4:e1:ce:97:71:a3: e2:49:33:d3:16:f6:63:6d:aa:d2:b2:d3:2b:92:27: 61:5d:49:4b:55:e5:ba:86:6a:0a:db:a7:30:04:64: 1c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:52:E7:72:E1:87:19:9E:57:D2:A2:78:62:68:E2:06:98:C1:E8:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a7f2cd2-4197-3d75-9f6f-8b3e2e637991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:cc:8e:ee:4f:df:f2:c5:89:1d:df:ea:bd:90:d9:47:89:26: 12:50:b0:b7:07:a5:8d:88:8c:6c:34:df:82:f6:95:57:7a:f4: 3d:d6:22:33:0b:15:5e:26:dd:0e:67:18:76:a5:7a:99:cf:99: b6:30:be:1e:3e:b3:d3:4e:d8:1c:ef:95:c5:7a:e2:0b:ba:49: c1:f5:d0:af:6e:93:88:cf:b8:9a:3b:89:00:f7:24:d3:08:de: 05:29:ff:05:95:33:f7:70:15:13:0c:bb:81:bc:73:6f:28:75: 1b:e0:17:56:1a:4a:f4:4e:e4:44:43:41:06:1c:c3:a6:9f:90: ca:72:4f:ee:74:9c:e1:b7:8d:8c:d8:f3:d8:d1:a8:7b:ba:a4: ad:94:9e:eb:d6:40:23:c5:22:d9:dd:7e:5e:38:3c:cd:cd:0f: 77:c6:07:6d:10:a5:3f:f5:02:52:fb:79:e8:e0:0b:e4:87:9e: aa:b6:7e:36:a8:f4:27:d7:19:b5:65:9e:9b:f3:cc:99:dd:cf: fe:6e:8b:b5:db:e1:c1:19:50:46:81:e9:1b:01:c4:2a:52:4e: 58:39:f4:ee:cb:bd:bf:ed:bd:62:61:9c:13:95:85:5a:f6:33: 2d:1f:73:57:16:ba:71:0d:6f:80:19:b1:ad:26:23:1c:81:ec: 8c:52:0a:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAER4kceoRbcAvGKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk YmI3YzRjOTUtZGRkYS00ODcwLWJmNzQtODFiNGIxNDMwODY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTjhZEjCjQRW7d4w6MFuRyUjsTbFPD3C8Flf kXpaGqk2MePZPCWkepe93baAhJlJZuwrkkICJ3AvESBLZtmnzsjVqdce/Ju1iz6F PpRTSkrrXCPDMgbusv878EyqSo6gfnhrrM5qKSenCY7SkjIn6lzNFzD2nGvPP65z oaG7HhigmflCuMDkyyMgliBcSbrQoFcgKl6wTg2GvGAdLxVfUbJ22EOLv1XnObCa frs/nTrr50SUjy2mbYkVqcEvAM2CKTMchdo3OpiEEmhe22BBNu81q1V7hj/KN7+k 4c6XcaPiSTPTFvZjbarSstMrkidhXUlLVeW6hmoK26cwBGQcJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdS53LhhxmeV9KieGJo4gaYwehQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2E3ZjJjZDItNDE5Ny0z ZDc1LTlmNmYtOGIzZTJlNjM3OTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPMju5P3/LFiR3f6r2Q2UeJJhJQsLcHpY2IjGw034L2lVd69D3WIjML FV4m3Q5nGHalepnPmbYwvh4+s9NO2BzvlcV64gu6ScH10K9uk4jPuJo7iQD3JNMI 3gUp/wWVM/dwFRMMu4G8c28odRvgF1YaSvRO5ERDQQYcw6afkMpyT+50nOG3jYzY 89jRqHu6pK2UnuvWQCPFItndfl44PM3ND3fGB20QpT/1AlL7eejgC+SHnqq2fjao 9CfXGbVlnpvzzJndz/5ui7Xb4cEZUEaB6RsBxCpSTlg59O7Lvb/tvWJhnBOVhVr2 My0fc1cWunENb4AZsa0mIxyB7IxSCi0= -----END CERTIFICATE-----Generated at Mon Mar 2 06:41:19 2026 by rpki-client