$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/31044689-5617-3cd5-a65d-c714e253e409.roa File: 31044689-5617-3cd5-a65d-c714e253e409.roa (raw, json) Hash identifier: 25F7ryM7o9WHuDDdr8TTWw0SGzZQD11wSQjcMtYtvV8= Subject key identifier: E2:22:55:4B:88:DB:9B:4A:6D:F4:36:5B:75:89:F4:00:23:D5:FA:87 Certificate issuer: /CN=a3fc976b-6294-4c7f-adf9-0a124c38f9a7 Certificate serial: 010D0C9F4328584D0647AC7DA4B70668FF541800 Authority key identifier: BC:48:F4:17:89:7B:A1:47:3A:31:97:75:CD:A6:4D:B8:00:A8:ED:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/31044689-5617-3cd5-a65d-c714e253e409.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 399111 IP address blocks: 216.73.136.0/22 maxlen: 32 2607:3cc0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:ac:7d:a4:b7:06:68:ff:54:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3fc976b-6294-4c7f-adf9-0a124c38f9a7 Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=75d10bfd-f933-41c3-a773-0280a586d01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b5:ab:d8:4d:df:36:61:04:c9:93:1b:2c:64: 09:8b:cd:b9:74:5e:20:eb:8d:bb:d4:8a:37:5a:3f: c8:b9:2a:f1:43:d9:e3:05:1d:80:fc:ae:47:f6:d5: 2b:85:c5:bf:98:e2:13:66:cb:2f:dd:f4:73:7e:fc: 64:ad:eb:63:6a:84:cf:18:65:ef:f1:0a:ea:35:ae: b8:d1:24:49:a4:4e:84:89:1d:a6:3f:b8:95:28:3b: 26:a3:d0:9f:82:cb:c9:02:dc:00:84:cd:14:31:fb: 73:b8:f9:fe:fe:74:38:57:9b:a9:02:af:06:e1:67: a5:f4:0d:ef:c4:7f:7d:0b:54:cb:9a:e9:eb:f8:6e: b6:9e:ca:87:d4:61:68:c9:7f:9f:2b:98:9e:0c:35: 9c:23:e4:dd:85:a6:aa:ef:8f:be:5d:e3:57:29:b7: b4:8d:fd:68:05:04:99:00:17:7d:f2:f6:ce:f3:d3: 8a:97:ea:82:74:67:cd:c4:d4:23:8c:1d:11:b6:2e: 87:79:1b:4b:bc:ef:71:fa:94:be:9e:9c:b2:3f:26: 01:e3:f2:56:6c:6d:d3:ba:dc:76:aa:50:ae:bc:f6: e7:3d:25:bd:b0:21:a6:17:36:fc:e4:dc:4d:46:b6: e5:6d:5a:aa:59:19:04:e0:6a:c8:db:92:84:68:06: 95:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:22:55:4B:88:DB:9B:4A:6D:F4:36:5B:75:89:F4:00:23:D5:FA:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/31044689-5617-3cd5-a65d-c714e253e409.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.crl X509v3 Authority Key Identifier: keyid:BC:48:F4:17:89:7B:A1:47:3A:31:97:75:CD:A6:4D:B8:00:A8:ED:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a3fc976b-6294-4c7f-adf9-0a124c38f9a7.cer sbgp-ipAddrBlock: critical IPv4: 216.73.136.0/22 IPv6: 2607:3cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:44:36:01:d1:80:0b:ea:7e:b3:f5:7f:89:6c:71:c1:c5:6f: b7:f0:25:88:b0:93:b2:ea:21:76:53:29:ae:f0:7a:6c:30:2a: 16:9d:51:59:bf:05:e3:c8:5a:45:35:ae:c6:2c:93:23:a0:83: 8b:da:49:c6:01:58:7f:91:c7:47:fd:f2:66:18:1e:b9:a0:46: 9b:bf:d2:4d:18:85:87:56:e9:ba:dd:59:30:d6:9b:d0:17:74: f9:88:e4:76:d2:84:50:2a:60:7f:97:ba:e2:74:ee:d0:48:86: 0e:80:06:3b:02:23:07:75:6b:0b:f8:01:34:66:a1:1a:4b:69: 09:cb:d5:54:c1:f9:68:3c:a0:3a:e6:da:85:ab:03:06:0e:d4: 74:88:21:02:9d:5a:ce:81:ed:fe:f1:a8:74:3f:61:30:11:89: b2:6e:05:7b:ab:08:33:75:4e:42:b7:a5:e9:a7:4a:0e:09:cf: dd:49:75:4d:3f:96:10:80:22:4d:70:49:41:02:b5:fb:9a:86: 2c:06:d3:a6:f3:a5:7b:af:d0:8e:5b:e3:46:9b:9c:64:89:1e: eb:03:8c:a3:b7:b8:f5:42:2f:9b:a7:0d:36:64:c8:24:11:b8: b2:82:7a:99:ca:43:8a:ae:39:b0:2c:79:2c:5e:ae:01:23:2c: 9e:cc:24:e8 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE0GR6x9pLcGaP9UGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNmYzk3NmItNjI5NC00YzdmLWFkZjktMGExMjRjMzhm OWE3MB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk NzVkMTBiZmQtZjkzMy00MWMzLWE3NzMtMDI4MGE1ODZkMDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bWr2E3fNmEEyZMbLGQJi825dF4g64271Io3 Wj/IuSrxQ9njBR2A/K5H9tUrhcW/mOITZssv3fRzfvxkretjaoTPGGXv8QrqNa64 0SRJpE6EiR2mP7iVKDsmo9CfgsvJAtwAhM0UMftzuPn+/nQ4V5upAq8G4Wel9A3v xH99C1TLmunr+G62nsqH1GFoyX+fK5ieDDWcI+Tdhaaq74++XeNXKbe0jf1oBQSZ ABd98vbO89OKl+qCdGfNxNQjjB0Rti6HeRtLvO9x+pS+npyyPyYB4/JWbG3Tutx2 qlCuvPbnPSW9sCGmFzb85NxNRrblbVqqWRkE4GrI25KEaAaVVQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFOIiVUuI25tKbfQ2W3WJ9AAj1fqHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hM2Zj OTc2Yi02Mjk0LTRjN2YtYWRmOS0wYTEyNGMzOGY5YTcvMzEwNDQ2ODktNTYxNy0z Y2Q1LWE2NWQtYzcxNGUyNTNlNDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTNmYzk3NmItNjI5NC00YzdmLWFk ZjktMGExMjRjMzhmOWE3L2EzZmM5NzZiLTYyOTQtNGM3Zi1hZGY5LTBhMTI0YzM4 ZjlhNy5jcmwwHwYDVR0jBBgwFoAUvEj0F4l7oUc6MZd1zaZNuACo7RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hM2ZjOTc2Yi02Mjk0LTRjN2YtYWRmOS0wYTEy NGMzOGY5YTcuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQC2EmIMA0E AgACMAcDBQAmBzzAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBACxENgHRgAvqfrP1f4lsccHFb7fwJYiwk7Lq IXZTKa7wemwwKhadUVm/BePIWkU1rsYskyOgg4vaScYBWH+Rx0f98mYYHrmgRpu/ 0k0YhYdW6brdWTDWm9AXdPmI5HbShFAqYH+XuuJ07tBIhg6ABjsCIwd1awv4ATRm oRpLaQnL1VTB+Wg8oDrm2oWrAwYO1HSIIQKdWs6B7f7xqHQ/YTARibJuBXurCDN1 TkK3pemnSg4Jz91JdU0/lhCAIk1wSUECtfuahiwG06bzpXuv0I5b40abnGSJHusD jKO3uPVCL5unDTZkyCQRuLKCepnKQ4quObAseSxergEjLJ7MJOg= -----END CERTIFICATE-----Generated at Mon Mar 2 11:07:32 2026 by rpki-client