$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/858fa4a0-d36b-3f3e-9f00-bf6774b3245c.roa File: 858fa4a0-d36b-3f3e-9f00-bf6774b3245c.roa (raw, json) Hash identifier: YB74Tq+izmuwQWk8AkFNhqbfaxEd1r/GxMIhiH3Kcro= Subject key identifier: 15:F1:18:76:B2:29:FE:CF:24:77:9B:EA:22:A4:1F:D3:F3:95:30:B6 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CB81C84A99E566C946742BF80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/858fa4a0-d36b-3f3e-9f00-bf6774b3245c.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 13576 IP address blocks: 216.249.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:84:a9:9e:56:6c:94:67:42:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=b90b1bc2-c98e-46d4-a2e4-19bf47157681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1f:f7:4b:fa:10:90:c6:74:85:02:41:74:e1: c8:21:6c:d9:b1:c3:d4:81:89:b6:16:ae:2f:c3:b2: 9d:42:6c:8f:08:92:29:be:8d:8f:ae:dc:c6:9f:01: c3:d5:a6:9b:b5:88:a9:ed:8b:82:00:b3:8a:91:c5: b0:18:1b:f5:8d:1c:2f:62:26:58:6d:28:41:4f:aa: 2c:30:3e:7b:0a:0f:11:fc:9c:21:54:12:f5:88:80: 89:02:26:89:6c:37:7b:ab:18:c5:4d:17:c4:f9:57: 86:50:c2:57:17:4f:74:51:25:e6:48:26:f8:b8:98: b7:6e:18:8f:56:37:0e:ec:a0:ff:92:eb:18:9b:2a: 18:e6:5d:99:e6:54:29:4f:41:fa:50:ee:38:29:c8: ea:fc:74:9c:21:fa:7c:ae:d5:83:84:30:16:53:d7: c1:2a:52:2c:6d:b6:ed:14:d4:62:4f:77:0a:d4:79: 85:1a:90:23:6f:38:f3:d8:c3:f9:f3:0d:7f:84:52: d2:2a:68:10:f9:41:15:00:1b:fc:bc:b0:46:de:24: 2c:ac:e9:a6:e8:d7:f3:0b:d2:0f:1a:1e:49:2f:06: 29:e0:a0:9b:35:37:87:55:89:be:48:c7:a3:e9:14: 6b:9c:a1:c3:0f:c5:65:97:19:d6:d8:bb:b7:95:de: b2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F1:18:76:B2:29:FE:CF:24:77:9B:EA:22:A4:1F:D3:F3:95:30:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/858fa4a0-d36b-3f3e-9f00-bf6774b3245c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:bf:a7:88:e2:bc:33:5c:06:b5:39:d4:03:4e:d9:29:80:72: f5:16:62:16:ed:30:c6:d4:20:f0:45:2e:b0:c5:e3:6d:1d:ec: 8b:f3:35:26:b3:7d:c6:6a:f1:6d:76:7d:02:d1:68:34:03:68: 58:99:36:71:80:c5:11:c0:40:44:32:1a:18:7d:d2:27:03:9d: 17:54:3e:6c:9b:35:9b:73:0a:0d:b4:9e:2b:51:6d:c2:30:30: c5:e0:f9:72:55:a9:1a:d4:0b:9c:06:3c:d6:fb:4b:11:df:39: 00:0e:ce:52:76:de:e4:f8:8d:52:36:5a:15:9e:4a:73:4c:a0: 8c:fe:32:81:5f:7c:de:c8:ac:bd:1d:fa:2d:89:09:71:d0:af: 9c:88:31:f3:33:fe:0f:e1:38:de:26:c4:48:05:b3:f6:6d:36: bd:8d:a8:82:ef:97:31:dc:b3:af:75:d0:28:51:ff:e7:42:e2: ca:31:f3:4f:97:2d:7f:19:42:94:d0:83:32:06:88:b0:6d:e1: d9:eb:8a:f9:c5:77:cb:bc:6c:62:9f:b2:21:6d:ef:2c:44:60: 3a:0f:01:ac:9c:ae:3d:2b:42:95:3c:f0:0e:3f:51:2d:ca:e4: 84:cb:59:4a:00:e2:12:7c:12:4b:ea:31:f7:4a:ed:bb:e4:5b: 66:c2:a5:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HISpnlZslGdCv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk YjkwYjFiYzItYzk4ZS00NmQ0LWEyZTQtMTliZjQ3MTU3NjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth/3S/oQkMZ0hQJBdOHIIWzZscPUgYm2Fq4v w7KdQmyPCJIpvo2PrtzGnwHD1aabtYip7YuCALOKkcWwGBv1jRwvYiZYbShBT6os MD57Cg8R/JwhVBL1iICJAiaJbDd7qxjFTRfE+VeGUMJXF090USXmSCb4uJi3bhiP VjcO7KD/kusYmyoY5l2Z5lQpT0H6UO44Kcjq/HScIfp8rtWDhDAWU9fBKlIsbbbt FNRiT3cK1HmFGpAjbzjz2MP58w1/hFLSKmgQ+UEVABv8vLBG3iQsrOmm6NfzC9IP Gh5JLwYp4KCbNTeHVYm+SMej6RRrnKHDD8VllxnW2Lu3ld6ygwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXxGHayKf7PJHeb6iKkH9PzlTC2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvODU4ZmE0YTAtZDM2Yi0z ZjNlLTlmMDAtYmY2Nzc0YjMyNDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Pn0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACy/p4jivDNcBrU51ANO2SmAcvUWYhbtMMbUIPBFLrDF420d7IvzNSaz fcZq8W12fQLRaDQDaFiZNnGAxRHAQEQyGhh90icDnRdUPmybNZtzCg20nitRbcIw MMXg+XJVqRrUC5wGPNb7SxHfOQAOzlJ23uT4jVI2WhWeSnNMoIz+MoFffN7IrL0d +i2JCXHQr5yIMfMz/g/hON4mxEgFs/ZtNr2NqILvlzHcs6910ChR/+dC4sox80+X LX8ZQpTQgzIGiLBt4dnrivnFd8u8bGKfsiFt7yxEYDoPAaycrj0rQpU88A4/US3K 5ITLWUoA4hJ8EkvqMfdK7bvkW2bCpfY= -----END CERTIFICATE-----Generated at Mon Mar 2 07:15:21 2026 by rpki-client