$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/37a66104-e82a-3377-9446-92c2f4d91b5f.roa File: 37a66104-e82a-3377-9446-92c2f4d91b5f.roa (raw, json) Hash identifier: OFXbUFbc1Q6vgD2Yz5kJBkjko+XosSWhPwmkE/F+V1w= Subject key identifier: 0B:24:86:39:85:24:97:04:9A:C3:F2:60:DF:29:55:16:96:B1:8D:E0 Certificate issuer: /CN=dec54853-8708-4db6-8c16-61e598dd115f Certificate serial: 010D0C9F4328584D492A685140659378AD70FCA8 Authority key identifier: AF:E2:B2:1C:02:76:14:90:C2:EB:AB:19:F8:C2:59:BC:52:73:A5:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/37a66104-e82a-3377-9446-92c2f4d91b5f.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 397795 IP address blocks: 199.233.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/dec54853-8708-4db6-8c16-61e598dd115f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/dec54853-8708-4db6-8c16-61e598dd115f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:68:51:40:65:93:78:ad:70:fc:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dec54853-8708-4db6-8c16-61e598dd115f Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=2a1ba107-93fb-419a-9b5d-2b610d916376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e6:2f:36:de:97:1a:34:29:ad:c6:b9:f7:d5: 1e:01:3d:2a:ab:0c:94:aa:1e:6c:9e:e7:f7:e5:b6: 30:9d:35:d7:26:5f:5a:41:cd:e9:50:c1:1b:23:ae: 77:f3:86:16:46:fd:4a:b5:21:9f:96:23:bb:07:bf: 63:b8:7f:fd:26:33:02:86:71:45:a5:20:c3:f0:01: 36:8a:c2:25:b8:6f:54:96:e0:6e:8a:44:12:65:47: 57:d6:68:c8:2e:45:1d:e9:fd:ef:b0:eb:03:40:09: a7:50:35:b2:84:79:08:87:92:5f:1b:0a:eb:a1:b8: 75:8f:ba:47:a3:92:70:68:83:07:5f:f5:2c:1d:24: f8:29:0e:88:d4:84:47:8e:bb:5b:42:0b:0e:d2:58: af:ea:a6:40:eb:04:0c:10:ae:f5:5c:62:94:b1:ab: 6c:8f:2b:92:3a:18:76:49:50:f4:70:ef:79:0c:4f: 9e:2a:34:8c:84:43:08:28:18:2d:01:e6:b3:0e:c3: 3e:06:ba:17:f0:71:d4:28:92:92:e3:86:b0:8b:25: bc:51:b8:36:57:17:e6:ca:97:33:e8:2a:85:fa:e7: 8f:be:00:d3:c2:35:f1:2c:78:4b:b7:52:35:01:97: 41:7f:4f:3f:45:6e:a6:91:89:25:43:1b:ad:96:eb: ca:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:24:86:39:85:24:97:04:9A:C3:F2:60:DF:29:55:16:96:B1:8D:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/37a66104-e82a-3377-9446-92c2f4d91b5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/dec54853-8708-4db6-8c16-61e598dd115f.crl X509v3 Authority Key Identifier: keyid:AF:E2:B2:1C:02:76:14:90:C2:EB:AB:19:F8:C2:59:BC:52:73:A5:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f.cer sbgp-ipAddrBlock: critical IPv4: 199.233.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:7a:ac:7e:a1:3f:03:53:ad:21:a1:02:47:dd:af:05:7d:f7: 4e:42:af:17:75:c7:a7:66:77:0f:b8:20:ee:4e:0a:da:c5:04: 60:ac:77:1a:45:86:d7:40:48:53:13:4f:df:b4:dc:b4:df:e8: d5:db:87:da:9e:77:0c:95:04:d1:05:00:6f:50:27:b5:63:03: 10:29:99:31:7a:58:8f:2c:f5:7f:05:08:40:3b:12:21:ed:2b: 83:9f:ca:da:18:14:67:99:16:71:16:a2:ef:25:8e:f1:97:6b: ae:cc:f5:98:79:9b:ef:89:df:d6:d8:18:3f:e7:61:d1:ac:aa: 8f:f0:e6:31:1f:a2:c5:e5:ec:3b:82:5b:c1:10:3f:57:ec:74: 05:e0:fe:6c:2e:68:b4:af:56:c3:07:50:5b:85:1b:5d:34:08: 76:ee:4c:c9:a8:c5:f6:b3:c5:6d:38:97:c4:5f:0f:b9:8e:ab: 7e:9c:f1:c5:06:e2:f2:de:a7:27:fa:7c:42:8c:e6:e7:63:43: 09:54:36:c1:84:c2:f0:ce:33:ca:fb:78:c3:b5:d2:9a:1a:4e: fe:0f:43:7e:ce:de:ed:a9:92:8a:37:d6:f9:7c:ba:37:8b:64: 59:40:cc:79:d7:de:73:8f:6e:2e:99:31:aa:e1:d9:1f:a9:46: e2:7c:4d:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKmhRQGWTeK1w/KgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGVjNTQ4NTMtODcwOC00ZGI2LThjMTYtNjFlNTk4ZGQx MTVmMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk MmExYmExMDctOTNmYi00MTlhLTliNWQtMmI2MTBkOTE2Mzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+YvNt6XGjQprca599UeAT0qqwyUqh5snuf3 5bYwnTXXJl9aQc3pUMEbI65384YWRv1KtSGfliO7B79juH/9JjMChnFFpSDD8AE2 isIluG9UluBuikQSZUdX1mjILkUd6f3vsOsDQAmnUDWyhHkIh5JfGwrrobh1j7pH o5JwaIMHX/UsHST4KQ6I1IRHjrtbQgsO0liv6qZA6wQMEK71XGKUsatsjyuSOhh2 SVD0cO95DE+eKjSMhEMIKBgtAeazDsM+BroX8HHUKJKS44awiyW8Ubg2Vxfmypcz 6CqF+uePvgDTwjXxLHhLt1I1AZdBf08/RW6mkYklQxutluvKYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAskhjmFJJcEmsPyYN8pVRaWsY3gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZWM1 NDg1My04NzA4LTRkYjYtOGMxNi02MWU1OThkZDExNWYvMzdhNjYxMDQtZTgyYS0z Mzc3LTk0NDYtOTJjMmY0ZDkxYjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZGVjNTQ4NTMtODcwOC00ZGI2LThj MTYtNjFlNTk4ZGQxMTVmL2RlYzU0ODUzLTg3MDgtNGRiNi04YzE2LTYxZTU5OGRk MTE1Zi5jcmwwHwYDVR0jBBgwFoAUr+KyHAJ2FJDC66sZ+MJZvFJzpZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZWM1NDg1My04NzA4LTRkYjYtOGMxNi02MWU1 OThkZDExNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+mEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHl6rH6hPwNTrSGhAkfdrwV9905Crxd1x6dmdw+4IO5OCtrFBGCsdxpF htdASFMTT9+03LTf6NXbh9qedwyVBNEFAG9QJ7VjAxApmTF6WI8s9X8FCEA7EiHt K4OfytoYFGeZFnEWou8ljvGXa67M9Zh5m++J39bYGD/nYdGsqo/w5jEfosXl7DuC W8EQP1fsdAXg/mwuaLSvVsMHUFuFG100CHbuTMmoxfazxW04l8RfD7mOq36c8cUG 4vLepyf6fEKM5udjQwlUNsGEwvDOM8r7eMO10poaTv4PQ37O3u2pkoo31vl8ujeL ZFlAzHnX3nOPbi6ZMarh2R+pRuJ8TR0= -----END CERTIFICATE-----Generated at Thu Mar 26 23:50:54 2026 by rpki-client