$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b2d05f9c-e9b2-3bb3-8683-d72eba233e39.roa File: b2d05f9c-e9b2-3bb3-8683-d72eba233e39.roa (raw, json) Hash identifier: 1cTVNLH08yNgdUQvNalWWLrF0ctunuIJIRzErt2dUEY= Subject key identifier: 52:7D:2E:9F:02:3D:1B:00:6A:76:5D:63:A6:53:FE:05:B4:06:FA:A8 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CAE573C7B3D9151558C002730 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b2d05f9c-e9b2-3bb3-8683-d72eba233e39.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 46623 IP address blocks: 216.249.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:3c:7b:3d:91:51:55:8c:00:27:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=7e07b878-4611-4736-abf5-f7eefcfab8fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fd:4a:33:9b:49:d0:91:f9:98:63:97:df:f7: e6:e0:1e:8d:d8:a1:0e:3f:b0:77:1d:14:db:4d:c9: 63:1c:20:56:21:be:12:6a:83:ae:c5:dc:01:64:4b: b6:8b:41:41:34:71:09:3d:44:e8:c3:af:fb:a1:a2: 44:7a:dc:8a:32:d1:e3:6c:f5:7f:f1:34:47:43:0a: 78:5a:44:2a:2a:ea:24:a2:8b:32:41:d7:02:18:f8: f4:fe:ed:6d:bb:dc:de:e1:48:b3:0e:cd:7a:cf:40: 7d:51:2f:a0:81:d3:c1:4c:fa:12:36:d1:4b:9a:e4: d4:b1:0c:63:e7:46:85:90:75:fc:43:4c:c4:32:d5: 04:0b:f7:5b:a5:ff:bf:08:ec:57:b5:b2:d6:85:e6: 7e:b2:d8:99:11:f7:9d:e1:cc:5c:7a:2a:e3:91:5e: e1:7b:3d:a7:9c:48:26:d2:71:eb:a3:6f:da:2c:4d: fc:73:7b:1b:65:9f:99:15:87:01:bb:ed:c4:78:c7: 8a:77:b8:43:d0:14:19:3a:08:f0:3f:e3:ee:63:26: 1a:91:67:a4:8f:d4:a3:15:22:3e:a4:51:6a:38:cc: f8:1f:66:a4:54:7d:72:66:f6:3b:98:a9:44:89:ea: 63:cd:fb:74:fa:e5:35:39:91:bb:3a:83:6e:9c:b1: 51:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7D:2E:9F:02:3D:1B:00:6A:76:5D:63:A6:53:FE:05:B4:06:FA:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b2d05f9c-e9b2-3bb3-8683-d72eba233e39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:c5:61:da:5e:4b:13:2b:fb:5a:15:d0:82:55:fe:f5:1c:16: 4c:b1:2a:21:34:04:36:43:23:35:18:4d:a8:5a:d3:45:21:f6: 2c:2c:e0:aa:69:aa:ab:9c:35:a9:b5:17:8b:54:1e:b6:8e:42: 49:09:e4:ac:a6:fc:87:0d:c4:bf:95:a0:77:00:d1:cc:4f:47: 23:18:84:d0:f1:78:12:4e:1f:0c:6d:05:99:8a:f5:65:0d:43: e1:76:1f:d4:8a:2e:5a:c0:e6:23:0e:ff:0a:78:ba:ca:d9:37: 6d:aa:25:9f:11:ef:73:b8:26:a6:fb:4f:69:a7:c4:61:85:41: 6c:8e:dd:4e:46:10:8b:fd:c2:81:bf:92:85:05:c5:48:4b:75: de:04:01:8b:14:c3:b7:8b:f1:21:82:48:89:f0:c2:66:d7:42: f4:7e:8b:3e:45:8d:85:d4:fa:b9:00:97:7f:bb:df:e9:34:f7: f5:5e:48:bb:2c:e2:be:e2:6f:66:35:66:d4:ef:14:f7:84:d5: a0:bb:30:ee:7f:0a:5f:5d:ec:53:cf:f3:9c:f7:d6:3a:3b:37: 82:ad:e4:80:57:7d:b4:41:de:f3:7a:12:2f:20:08:bb:d9:0b: fa:38:45:de:16:6a:9a:cd:b6:d3:50:e9:3a:b9:e5:79:71:97: af:c1:a5:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVzx7PZFRVYwAJzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk N2UwN2I4NzgtNDYxMS00NzM2LWFiZjUtZjdlZWZjZmFiOGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/1KM5tJ0JH5mGOX3/fm4B6N2KEOP7B3HRTb TcljHCBWIb4SaoOuxdwBZEu2i0FBNHEJPUTow6/7oaJEetyKMtHjbPV/8TRHQwp4 WkQqKuokoosyQdcCGPj0/u1tu9ze4UizDs16z0B9US+ggdPBTPoSNtFLmuTUsQxj 50aFkHX8Q0zEMtUEC/dbpf+/COxXtbLWheZ+stiZEfed4cxceirjkV7hez2nnEgm 0nHro2/aLE38c3sbZZ+ZFYcBu+3EeMeKd7hD0BQZOgjwP+PuYyYakWekj9SjFSI+ pFFqOMz4H2akVH1yZvY7mKlEiepjzft0+uU1OZG7OoNunLFRBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJ9Lp8CPRsAanZdY6ZT/gW0BvqoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYjJkMDVmOWMtZTliMi0z YmIzLTg2ODMtZDcyZWJhMjMzZTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PnZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbFYdpeSxMr+1oV0IJV/vUcFkyxKiE0BDZDIzUYTaha00Uh9iws4Kpp qqucNam1F4tUHraOQkkJ5Kym/IcNxL+VoHcA0cxPRyMYhNDxeBJOHwxtBZmK9WUN Q+F2H9SKLlrA5iMO/wp4usrZN22qJZ8R73O4Jqb7T2mnxGGFQWyO3U5GEIv9woG/ koUFxUhLdd4EAYsUw7eL8SGCSInwwmbXQvR+iz5FjYXU+rkAl3+73+k09/VeSLss 4r7ib2Y1ZtTvFPeE1aC7MO5/Cl9d7FPP85z31jo7N4Kt5IBXfbRB3vN6Ei8gCLvZ C/o4Rd4WaprNttNQ6Tq55Xlxl6/BpXk= -----END CERTIFICATE-----Generated at Mon Mar 2 15:52:33 2026 by rpki-client