$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/18b36702-a67b-3b1c-9777-2f0e23edf2d2.roa File: 18b36702-a67b-3b1c-9777-2f0e23edf2d2.roa (raw, json) Hash identifier: QYGictFdQCQMhVc5k9b1tDxVmQgxOM1ZgCqzX1k/K1s= Subject key identifier: 99:27:79:91:B5:F8:6D:AC:6F:A5:22:E2:F1:C1:B4:D4:6B:AD:15:60 Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584CC34748764CCC287EECF15FC0 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/18b36702-a67b-3b1c-9777-2f0e23edf2d2.roa Signing time: Thu 05 Feb 2026 14:00:40 +0000 ROA not before: Thu 05 Feb 2026 14:00:40 +0000 ROA not after: Wed 06 May 2026 13:00:40 +0000 asID: 394305 IP address blocks: 216.75.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c3:47:48:76:4c:cc:28:7e:ec:f1:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Feb 5 14:00:40 2026 GMT Not After : May 6 13:00:40 2026 GMT Subject: CN=b8ef5eb0-cee7-42a0-b0b3-b850774c7476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:db:65:c0:9d:e4:76:35:a7:d2:e3:da:29:39: 2b:39:63:39:46:1c:51:70:1d:92:e5:84:ab:1f:0b: aa:e2:90:bc:97:16:7f:ff:fb:da:4f:fb:d8:a7:8d: d3:2b:30:ff:fc:58:a8:d5:14:23:8d:dc:02:71:5f: 91:c7:cd:aa:d0:45:ce:b5:54:d3:20:ef:fe:fe:e5: ea:3a:ee:af:dd:ec:2c:07:14:a9:19:6d:8f:9d:56: 00:03:29:78:1d:3c:f9:f1:d2:25:36:a9:62:7c:91: e6:27:d3:47:1f:0d:02:11:40:af:85:39:43:17:5a: 57:c9:8b:46:2f:2a:48:fc:1f:5c:fc:92:66:76:91: 09:eb:73:a3:a4:0d:10:5c:28:22:ab:3e:06:12:c6: 62:48:95:40:43:b7:cb:2d:34:2b:d9:e6:e7:ea:39: e7:37:0a:07:0c:11:0d:9d:9b:80:d8:f7:84:26:11: 1e:7a:6b:12:5b:97:2b:00:6d:c6:b6:19:97:67:71: 98:fe:47:5b:52:c4:93:78:b1:f1:71:7d:61:d9:9c: 6e:b8:a4:d5:28:94:2a:08:84:55:f0:6a:8a:ad:56: 16:48:f0:fb:93:a2:2b:43:93:43:46:f3:88:99:58: 68:b4:96:bf:af:1d:61:cd:e7:eb:61:4f:47:a6:92: 55:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:27:79:91:B5:F8:6D:AC:6F:A5:22:E2:F1:C1:B4:D4:6B:AD:15:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/18b36702-a67b-3b1c-9777-2f0e23edf2d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 216.75.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:c4:1e:c0:5c:89:44:22:36:d6:63:21:97:b0:b5:8f:ee:ae: 5b:c6:51:58:9b:89:ae:b6:3e:c2:82:37:61:11:24:35:f4:bd: d6:d0:73:f7:87:58:09:d3:31:a2:94:1c:36:d8:a9:db:26:55: 8e:41:91:83:94:d3:bc:45:a3:1a:51:4c:21:09:fa:a0:24:69: 11:f3:cd:89:24:dd:48:23:a4:4c:26:5a:44:47:7c:75:50:5d: 96:50:e9:8c:64:ec:a8:d0:19:e1:4d:6e:9a:88:8c:ee:ec:4b: 1a:91:8a:9c:5f:67:01:22:14:93:b5:c0:51:1f:a9:3f:b0:1a: 27:ab:9e:c4:c8:1c:71:8d:e7:6c:b6:8a:79:fb:17:6d:6f:1a: 7f:28:6e:e6:de:94:b3:7b:4d:24:d9:25:50:2c:a6:9e:a7:08: 28:65:78:c8:aa:da:a0:5b:0f:d0:58:fd:62:9a:b7:7a:6f:d9: c6:32:7d:86:89:e9:d8:90:91:45:c9:26:6a:4b:61:a0:b2:dc: 1b:4d:75:63:4e:0e:e3:d3:e3:82:b3:d0:6f:c3:1a:10:9d:1b: ff:4b:20:e1:89:54:92:8c:86:fd:97:ae:98:e9:7e:f4:44:e5: e0:c2:ab:c8:42:b9:d5:28:37:39:8f:f9:26:ea:52:63:23:76: 2b:64:17:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzDR0h2TMwofuzxX8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI2MDIwNTE0MDA0MFoXDTI2MDUwNjEzMDA0MFowLzEtMCsGA1UEAxMk YjhlZjVlYjAtY2VlNy00MmEwLWIwYjMtYjg1MDc3NGM3NDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNtlwJ3kdjWn0uPaKTkrOWM5RhxRcB2S5YSr Hwuq4pC8lxZ///vaT/vYp43TKzD//Fio1RQjjdwCcV+Rx82q0EXOtVTTIO/+/uXq Ou6v3ewsBxSpGW2PnVYAAyl4HTz58dIlNqlifJHmJ9NHHw0CEUCvhTlDF1pXyYtG LypI/B9c/JJmdpEJ63OjpA0QXCgiqz4GEsZiSJVAQ7fLLTQr2ebn6jnnNwoHDBEN nZuA2PeEJhEeemsSW5crAG3GthmXZ3GY/kdbUsSTeLHxcX1h2ZxuuKTVKJQqCIRV 8GqKrVYWSPD7k6IrQ5NDRvOImVhotJa/rx1hzefrYU9HppJVQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkneZG1+G2sb6Ui4vHBtNRrrRVgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvMThiMzY3MDItYTY3Yi0z YjFjLTk3NzctMmYwZTIzZWRmMmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EuFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHEHsBciUQiNtZjIZewtY/urlvGUVibia62PsKCN2ERJDX0vdbQc/eH WAnTMaKUHDbYqdsmVY5BkYOU07xFoxpRTCEJ+qAkaRHzzYkk3UgjpEwmWkRHfHVQ XZZQ6Yxk7KjQGeFNbpqIjO7sSxqRipxfZwEiFJO1wFEfqT+wGiernsTIHHGN52y2 inn7F21vGn8obubelLN7TSTZJVAspp6nCChleMiq2qBbD9BY/WKat3pv2cYyfYaJ 6diQkUXJJmpLYaCy3BtNdWNODuPT44Kz0G/DGhCdG/9LIOGJVJKMhv2XrpjpfvRE 5eDCq8hCudUoNzmP+SbqUmMjditkF6o= -----END CERTIFICATE-----Generated at Mon Mar 2 04:18:43 2026 by rpki-client