$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/fb70b41f-bc77-3c74-8d1c-0dac0f2c1a79.roa File: fb70b41f-bc77-3c74-8d1c-0dac0f2c1a79.roa (raw, json) Hash identifier: eEwB8YWyxxxWyyYW90WI/rh7pBECpLN0LUF5Xi7U0Jw= Subject key identifier: 11:4A:71:9B:8C:75:56:E1:A0:74:7A:41:B1:66:67:79:86:8A:FA:31 Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F4328584CFDEAA6941648962A038E1B00 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/fb70b41f-bc77-3c74-8d1c-0dac0f2c1a79.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 40509 IP address blocks: 37.16.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:ea:a6:94:16:48:96:2a:03:8e:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=971c5043-7bf6-4e37-b2ba-12499bbf6cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:95:ec:1d:1d:3b:bd:e2:ba:19:b3:04:e3:c0: 2d:0b:64:6a:1c:50:6d:95:3c:4f:a9:5e:42:1e:ee: cf:2c:61:57:26:3e:0f:c0:26:49:02:33:2b:83:03: d3:bf:35:41:80:c7:0c:da:62:00:c4:50:ce:29:2f: 40:e6:96:b4:75:35:e0:91:e9:9f:7b:34:a9:56:fa: 2a:31:1b:5a:03:a7:81:ad:b7:1b:2b:f3:73:2a:39: 55:73:85:3f:94:bc:1b:a3:b4:4b:99:2f:a2:c6:74: 2b:1f:70:7f:f4:db:d9:09:20:67:a7:a9:36:d4:42: fc:f2:87:b8:88:1e:6b:9c:3d:27:df:93:9c:d1:71: 65:b5:98:9f:d0:76:95:bf:2f:53:47:7a:12:d1:35: 2a:82:ed:a6:0f:d9:67:06:c2:14:e6:b0:ba:01:a9: a1:0e:a7:1b:4f:d5:81:23:f0:92:2f:5e:46:30:b3: ec:95:95:c1:07:4c:a7:b4:ca:14:1e:e4:21:69:ea: 7c:d2:5b:e4:f8:2f:9f:31:1b:76:4d:63:b3:e6:94: 0c:ca:6c:63:e7:23:2b:01:a5:17:3c:b6:bb:d0:b9: e3:b9:40:e7:08:bf:82:4b:65:20:fa:c9:92:a9:4d: c4:b4:b6:93:da:9e:27:84:2e:40:95:ad:86:c7:3f: 71:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4A:71:9B:8C:75:56:E1:A0:74:7A:41:B1:66:67:79:86:8A:FA:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/fb70b41f-bc77-3c74-8d1c-0dac0f2c1a79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 37.16.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:c7:35:fe:1c:6a:6f:28:3f:00:e9:0b:ae:cc:76:44:cc:f9: db:7a:fc:25:b0:be:e4:70:d2:17:5e:8a:88:22:ed:4d:d9:96: e2:70:ad:08:4f:9b:38:35:6a:f7:88:ac:b0:bb:c1:b3:e8:83: f0:e9:9f:92:6c:66:ec:68:8a:50:66:db:68:b8:3d:99:fd:22: f7:f9:9c:f4:3a:3d:8b:de:0b:b0:c3:c1:59:c4:eb:c8:82:7d: 15:54:0f:b2:ad:96:6c:0c:08:83:e7:49:8f:c2:8f:74:c1:50: 0b:f3:bb:eb:01:71:6d:a5:7e:cb:18:92:3f:48:8a:14:06:b2: a6:15:dc:2a:28:cd:7a:21:60:68:b8:05:43:91:ef:5b:96:2a: ce:0f:af:c3:88:7f:8b:77:55:8a:d2:57:e7:39:31:85:7b:94: e2:97:ca:af:b2:23:88:9a:30:39:1f:c6:4d:e9:5d:b6:1d:da: 5e:ef:a7:6d:92:00:01:40:05:1b:ed:81:92:c1:f3:2b:61:f4: 0d:66:7c:8e:b7:49:b6:a8:b0:d5:fa:73:90:ac:9b:a0:58:dd: 24:a9:72:fe:37:7d:4e:81:c9:c1:34:45:ea:a2:9b:3d:79:1d: fc:1e:ab:ba:09:3c:63:69:c5:76:de:c4:8c:18:8a:40:cc:75: c0:69:f3:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96qaUFkiWKgOOGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk OTcxYzUwNDMtN2JmNi00ZTM3LWIyYmEtMTI0OTliYmY2Y2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJXsHR07veK6GbME48AtC2RqHFBtlTxPqV5C Hu7PLGFXJj4PwCZJAjMrgwPTvzVBgMcM2mIAxFDOKS9A5pa0dTXgkemfezSpVvoq MRtaA6eBrbcbK/NzKjlVc4U/lLwbo7RLmS+ixnQrH3B/9NvZCSBnp6k21EL88oe4 iB5rnD0n35Oc0XFltZif0HaVvy9TR3oS0TUqgu2mD9lnBsIU5rC6AamhDqcbT9WB I/CSL15GMLPslZXBB0yntMoUHuQhaep80lvk+C+fMRt2TWOz5pQMymxj5yMrAaUX PLa70LnjuUDnCL+CS2Ug+smSqU3EtLaT2p4nhC5Ala2Gxz9xEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFKcZuMdVbhoHR6QbFmZ3mGivoxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvZmI3MGI0MWYtYmM3Ny0z Yzc0LThkMWMtMGRhYzBmMmMxYTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFJRAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArHNf4cam8oPwDpC67MdkTM+dt6/CWwvuRw0hdeiogi7U3ZluJwrQhP mzg1aveIrLC7wbPog/Dpn5JsZuxoilBm22i4PZn9Ivf5nPQ6PYveC7DDwVnE68iC fRVUD7KtlmwMCIPnSY/Cj3TBUAvzu+sBcW2lfssYkj9IihQGsqYV3CoozXohYGi4 BUOR71uWKs4Pr8OIf4t3VYrSV+c5MYV7lOKXyq+yI4iaMDkfxk3pXbYd2l7vp22S AAFABRvtgZLB8yth9A1mfI63SbaosNX6c5Csm6BY3SSpcv43fU6BycE0Reqimz15 Hfweq7oJPGNpxXbexIwYikDMdcBp804= -----END CERTIFICATE-----Generated at Mon Mar 2 20:02:35 2026 by rpki-client