$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/ba79d054-0f13-3e6e-8f4e-953fd352345d.roa File: ba79d054-0f13-3e6e-8f4e-953fd352345d.roa (raw, json) Hash identifier: WmDHWrPW0f2CJmC7XdCiYp1TILzgv0gPnQ3j+ycF0fk= Subject key identifier: E2:72:EC:7B:66:F8:6C:26:E1:4F:0A:DD:B9:32:59:A3:34:5D:47:CF Certificate issuer: /CN=66610284-035b-4928-833d-55f67bcdadc1 Certificate serial: 010D0C9F4328584D15A261158FB713D0F0EF7D20 Authority key identifier: 32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/ba79d054-0f13-3e6e-8f4e-953fd352345d.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 400587 IP address blocks: 192.197.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:61:15:8f:b7:13:d0:f0:ef:7d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66610284-035b-4928-833d-55f67bcdadc1 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=da2d906c-3dae-4974-b97f-6b49d9c0f477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f8:f9:23:6e:4a:21:3d:45:9f:43:04:b5:ac: ca:8f:d0:37:02:fd:38:ef:af:68:54:f7:b6:0a:61: a7:61:5d:1e:08:9b:d9:17:88:10:3b:3b:15:eb:60: b5:97:4b:a5:76:36:c3:bd:1b:08:95:d9:02:4f:c1: 29:66:d6:d9:2c:e4:74:4b:22:3e:dd:17:5f:e4:3c: a3:e4:c1:ec:40:65:fc:13:d1:01:58:0d:3a:04:f1: c2:1a:70:76:2a:e3:1b:82:24:89:96:39:b5:c9:82: bb:cd:cf:05:25:c7:eb:f0:91:fc:42:24:62:fc:40: be:a9:c0:ae:14:b7:30:79:94:ec:90:c1:fb:94:d3: cf:ca:91:d3:96:b4:62:c2:bf:75:b8:94:b9:87:80: ba:c8:41:a8:3a:f9:b6:f8:e4:6d:da:c0:5d:88:65: c3:20:57:f0:ed:71:ba:f4:00:c6:5a:dd:36:54:26: d8:96:6e:84:63:2a:3c:8d:9b:b4:a2:aa:06:8b:6f: 99:ce:c2:b9:72:ce:70:3f:37:56:8f:4c:d4:5d:3d: b4:94:52:19:75:e8:b5:a2:d4:f1:b5:73:bf:d6:6b: 2a:ac:2b:3d:72:7d:96:60:8f:72:4e:13:ca:cd:72: e6:e1:0e:7d:79:db:7b:39:22:b0:e0:e2:ca:7a:50: 05:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:72:EC:7B:66:F8:6C:26:E1:4F:0A:DD:B9:32:59:A3:34:5D:47:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/ba79d054-0f13-3e6e-8f4e-953fd352345d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl X509v3 Authority Key Identifier: keyid:32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer sbgp-ipAddrBlock: critical IPv4: 192.197.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f2:a3:fe:d3:a5:88:58:56:8d:0a:bc:86:ce:c3:3c:73:a4: 2c:15:75:56:ae:12:56:d2:23:29:3a:cb:d3:26:f3:57:74:01: 03:38:48:e1:a9:62:d5:e4:4c:77:42:f7:40:70:8a:c5:9f:8e: 74:cb:cd:27:20:72:67:f5:f2:1d:f1:d9:78:09:e0:dc:d8:51: 2d:9a:f5:79:9d:d7:f7:49:c5:8b:90:be:c4:f4:09:20:89:ba: ee:26:a4:f7:e5:f6:28:df:b6:a4:65:15:07:99:36:b4:f1:44: 4d:a2:0e:d5:3a:b5:7c:85:de:3e:38:5f:70:5e:f8:38:9d:e9: 28:02:5c:bd:72:13:cd:a5:ab:d8:47:a7:31:3d:1e:14:33:fd: c5:5a:ef:0b:43:06:3b:f8:c0:9c:1a:7c:55:0b:5f:b8:54:b5: f9:b4:6f:7a:cb:12:25:89:30:5a:ce:48:db:ab:19:47:eb:f8: 53:23:93:d0:ef:f2:2d:89:a5:24:90:27:db:95:b8:5d:a0:d9: 4b:48:5d:56:43:2f:df:07:fa:22:ea:84:33:f4:28:50:07:ca: 89:fa:30:63:60:84:e6:7e:01:ba:41:7d:cb:e7:0b:14:2f:8d: ca:04:e3:da:fa:2d:e5:03:db:e7:29:30:4a:85:3f:96:b5:ea: d0:5c:7b:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VomEVj7cT0PDvfSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjY2MTAyODQtMDM1Yi00OTI4LTgzM2QtNTVmNjdiY2Rh ZGMxMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk ZGEyZDkwNmMtM2RhZS00OTc0LWI5N2YtNmI0OWQ5YzBmNDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPj5I25KIT1Fn0MEtazKj9A3Av04769oVPe2 CmGnYV0eCJvZF4gQOzsV62C1l0uldjbDvRsIldkCT8EpZtbZLOR0SyI+3Rdf5Dyj 5MHsQGX8E9EBWA06BPHCGnB2KuMbgiSJljm1yYK7zc8FJcfr8JH8QiRi/EC+qcCu FLcweZTskMH7lNPPypHTlrRiwr91uJS5h4C6yEGoOvm2+ORt2sBdiGXDIFfw7XG6 9ADGWt02VCbYlm6EYyo8jZu0oqoGi2+ZzsK5cs5wPzdWj0zUXT20lFIZdei1otTx tXO/1msqrCs9cn2WYI9yThPKzXLm4Q59edt7OSKw4OLKelAFvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJy7Htm+Gwm4U8K3bkyWaM0XUfPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NjYx MDI4NC0wMzViLTQ5MjgtODMzZC01NWY2N2JjZGFkYzEvYmE3OWQwNTQtMGYxMy0z ZTZlLThmNGUtOTUzZmQzNTIzNDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjY2MTAyODQtMDM1Yi00OTI4LTgz M2QtNTVmNjdiY2RhZGMxLzY2NjEwMjg0LTAzNWItNDkyOC04MzNkLTU1ZjY3YmNk YWRjMS5jcmwwHwYDVR0jBBgwFoAUMq/TrEEGVPQq1jccxXb5OiqqMNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NjYxMDI4NC0wMzViLTQ5MjgtODMzZC01NWY2 N2JjZGFkYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMXJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3yo/7TpYhYVo0KvIbOwzxzpCwVdVauElbSIyk6y9Mm81d0AQM4SOGp YtXkTHdC90BwisWfjnTLzScgcmf18h3x2XgJ4NzYUS2a9Xmd1/dJxYuQvsT0CSCJ uu4mpPfl9ijftqRlFQeZNrTxRE2iDtU6tXyF3j44X3Be+Did6SgCXL1yE82lq9hH pzE9HhQz/cVa7wtDBjv4wJwafFULX7hUtfm0b3rLEiWJMFrOSNurGUfr+FMjk9Dv 8i2JpSSQJ9uVuF2g2UtIXVZDL98H+iLqhDP0KFAHyon6MGNghOZ+AbpBfcvnCxQv jcoE49r6LeUD2+cpMEqFP5a16tBcez8= -----END CERTIFICATE-----Generated at Thu Mar 26 17:25:29 2026 by rpki-client